Edit tour

Windows Analysis Report
https://www.giselabravo.com/lblogin/logins

Overview

General Information

Sample URL:	https://www.giselabravo.com/lblogin/logins
Analysis ID:	1591417
Infos:

Detection

Score:	68
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

HTML page contains obfuscated javascript

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML page contains string obfuscation

HTML title does not match URL

Stores files to the Windows start menu directory

Submit button contains javascript call

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2788 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3364 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2016 --field-trial-handle=1944,i,2642613565630590889,9283772032916600276,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4444 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.giselabravo.com/lblogin/logins" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://www.giselabravo.com/lblogin/logins

Avira URL Cloud: detection malicious, Label: phishing

Antivirus detection for URL or domain

Source: https://www.giselabravo.com/javax.faces.resource/spacer/dot_clear.gif.xhtml?ln=primefaces&v=8.0	Avira URL Cloud: Label: malware
Source: https://www.giselabravo.com/lblogin/login_advisory.jpg	Avira URL Cloud: Label: malware

Phishing

AI detected phishing page

Source: https://www.giselabravo.com/lblogin/logins	Joe Sandbox AI: Score: 9 Reasons: The brand 'Landbank' is a known financial institution., The URL 'www.giselabravo.com' does not match the legitimate domain for Landbank, which is 'landbank.com'., The URL does not contain any recognizable elements related to Landbank., The presence of input fields for 'Username' and 'Password' on an unrelated domain is suspicious and indicative of phishing. DOM: 0.0.pages.csv
Source: https://www.giselabravo.com/lblogin/logins	Joe Sandbox AI: Score: 9 Reasons: The brand 'Landbank' is a known financial institution., The URL 'www.giselabravo.com' does not match the legitimate domain for Landbank., The URL does not contain any recognizable elements related to 'Landbank'., The presence of input fields for 'Username' and 'Password' on an unrelated domain is suspicious., The domain 'giselabravo.com' does not have any known association with 'Landbank'. DOM: 0.1.pages.csv
Source: https://www.giselabravo.com/lblogin/otp-entry	Joe Sandbox AI: Score: 9 Reasons: The brand 'Landbank' is a known financial institution., The URL 'www.giselabravo.com' does not match the legitimate domain for Landbank, which is 'landbank.com'., The URL does not contain any recognizable elements related to Landbank., The presence of a One-Time PIN input field is common in phishing attempts targeting financial institutions., The domain 'giselabravo.com' does not appear to be associated with Landbank in any known capacity. DOM: 2.2.pages.csv

HTML page contains obfuscated javascript

Source: https://www.lbpiaccess.com/javax.faces.resource/app/clienthash.min.js.xhtml?ln=scripts	HTTP Parser: var _0x1cf3=['enc','toString','length','Base64','parse','encrypt','substr','SHA256','AES'];(function
Source: https://www.lbpiaccess.com/javax.faces.resource/app/login.min.js.xhtml?ln=scripts	HTTP Parser: var _0x2094=['val','#password','#pi','#ki'];(function(_0x698c30,_0x209403){var _0x37db10=function(_0

Source: https://www.giselabravo.com/lblogin/otp-entry

HTTP Parser: Number of links: 0

Source: https://www.giselabravo.com/lblogin/logins	HTTP Parser: <input type="password" .../> found but no <form action="...
Source: https://www.giselabravo.com/lblogin/otp-entry	HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://www.giselabravo.com/lblogin/logins

HTTP Parser: Base64 decoded: rhirqj2X294xmNsx

Source: https://seal.globalsign.com/SiteSeal/gmogs_image_125-50_en_dblue.js

HTTP Parser: Found new string: script <!--..ss_ua = navigator.userAgent.toLowerCase();.ss_opera = window.opera;.ss_msie = (!ss_opera) && (ss_ua.indexOf("msie") != -1);.ss_msie4 = (!ss_opera) && (ss_ua.indexOf("msie 4") != -1);.ss_ns4 = (!ss_opera) && (ss_ua.indexOf("mozilla/4") != -1) && (ss_ua.indexOf("compatible") == -1);.ss_ns6 = (!ss_opera) && (ss_ua.indexOf("netscape6/6.0") != -1);..ss_opera6lower = (ss_opera) && parseFloat(ss_ua.substr(ss_ua.indexOf("opera")+6)) < 7;.ss_no_dyna_script = ss_opera6lower;..ss_fqdn = window.location.host;.ss_size = "SZ125-50";.ss_type = "image";.ss_lang = "en";.ss_ver = "V0023";.ss_service = "S001";.ss_protocol = window.location.protocol.substring(0, window.location.protocol.indexOf(":"));..ss_jspUrl = "//ssif1.globalsign.com/SiteSeal/siteSeal/siteSeal/siteSeal.do?p1=" + ss_fqdn + "&p2=" + ss_size + "&p3=" + ss_type + "&p4=" + ss_lang + "&p5=" + ss_ver + "&p6=" + ss_service + "&p7=" + ss_protocol;..function ss_js_sealTagStr(){. var str = "<...

Source: https://www.giselabravo.com/lblogin/logins	HTTP Parser: Title: LANDBANK iAccess Retail Internet Banking - Login does not match URL
Source: https://www.giselabravo.com/lblogin/otp-entry	HTTP Parser: Title: LANDBANK iAccess Retail Internet Banking - Login does not match URL

Source: https://www.giselabravo.com/lblogin/logins	HTTP Parser: On click: window.open('https://www.landbank.com/', '_blank'); return false;window.location.href='/login.xhtml'; return false;
Source: https://www.giselabravo.com/lblogin/logins	HTTP Parser: On click: window.open('https://www.landbank.com/', '_blank'); return false;window.location.href='/login.xhtml'; return false;

Source: https://www.giselabravo.com/lblogin/logins	HTTP Parser: <input type="password" .../> found
Source: https://www.giselabravo.com/lblogin/otp-entry	HTTP Parser: <input type="password" .../> found

Source: https://www.giselabravo.com/lblogin/logins	HTTP Parser: No <meta name="author".. found
Source: https://www.giselabravo.com/lblogin/logins	HTTP Parser: No <meta name="author".. found
Source: https://www.giselabravo.com/lblogin/otp-entry	HTTP Parser: No <meta name="author".. found

Source: https://www.giselabravo.com/lblogin/logins	HTTP Parser: No <meta name="copyright".. found
Source: https://www.giselabravo.com/lblogin/logins	HTTP Parser: No <meta name="copyright".. found
Source: https://www.giselabravo.com/lblogin/otp-entry	HTTP Parser: No <meta name="copyright".. found

Source: global traffic

TCP traffic: 192.168.2.5:51323 -> 162.159.36.2:53

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /lblogin/logins HTTP/1.1Host: www.giselabravo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lblogin/login_advisory.jpg HTTP/1.1Host: www.giselabravo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.giselabravo.com/lblogin/loginsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ombc6d1oenbcoel3kf6276ivqq
Source: global traffic	HTTP traffic detected: GET /javax.faces.resource/theme.css.xhtml?ln=primefaces-frontoffice HTTP/1.1Host: www.lbpiaccess.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.giselabravo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /javax.faces.resource/fa/font-awesome.css.xhtml?ln=primefaces&v=8.0 HTTP/1.1Host: www.lbpiaccess.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.giselabravo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /javax.faces.resource/style.css.xhtml?ln=css HTTP/1.1Host: www.lbpiaccess.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.giselabravo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /javax.faces.resource/components.css.xhtml?ln=primefaces&v=8.0 HTTP/1.1Host: www.lbpiaccess.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.giselabravo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /javax.faces.resource/jquery/jquery.js.xhtml?ln=primefaces&v=8.0 HTTP/1.1Host: www.lbpiaccess.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.giselabravo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /javax.faces.resource/jquery/jquery-plugins.js.xhtml?ln=primefaces&v=8.0 HTTP/1.1Host: www.lbpiaccess.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.giselabravo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lblogin/login_advisory.jpg HTTP/1.1Host: www.giselabravo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ombc6d1oenbcoel3kf6276ivqq
Source: global traffic	HTTP traffic detected: GET /javax.faces.resource/core.js.xhtml?ln=primefaces&v=8.0 HTTP/1.1Host: www.lbpiaccess.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.giselabravo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /javax.faces.resource/components.js.xhtml?ln=primefaces&v=8.0 HTTP/1.1Host: www.lbpiaccess.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.giselabravo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /javax.faces.resource/cryptojs/core-min.js.xhtml?ln=scripts HTTP/1.1Host: www.lbpiaccess.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.giselabravo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /javax.faces.resource/cryptojs/aes.js.xhtml?ln=scripts HTTP/1.1Host: www.lbpiaccess.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.giselabravo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /javax.faces.resource/jquery/jquery.js.xhtml?ln=primefaces&v=8.0 HTTP/1.1Host: www.lbpiaccess.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /javax.faces.resource/cryptojs/enc-base64-min.js.xhtml?ln=scripts HTTP/1.1Host: www.lbpiaccess.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.giselabravo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /javax.faces.resource/cryptojs/sha256-min.js.xhtml?ln=scripts HTTP/1.1Host: www.lbpiaccess.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.giselabravo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /javax.faces.resource/jquery/jquery-plugins.js.xhtml?ln=primefaces&v=8.0 HTTP/1.1Host: www.lbpiaccess.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /javax.faces.resource/app/clienthash.min.js.xhtml?ln=scripts HTTP/1.1Host: www.lbpiaccess.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.giselabravo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /javax.faces.resource/cryptojs/core-min.js.xhtml?ln=scripts HTTP/1.1Host: www.lbpiaccess.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /javax.faces.resource/app/login.min.js.xhtml?ln=scripts HTTP/1.1Host: www.lbpiaccess.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.giselabravo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /javax.faces.resource/validation/validation.js.xhtml?ln=primefaces&v=8.0 HTTP/1.1Host: www.lbpiaccess.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.giselabravo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /javax.faces.resource/cryptojs/aes.js.xhtml?ln=scripts HTTP/1.1Host: www.lbpiaccess.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /javax.faces.resource/core.js.xhtml?ln=primefaces&v=8.0 HTTP/1.1Host: www.lbpiaccess.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /javax.faces.resource/validation/beanvalidation.js.xhtml?ln=primefaces&v=8.0 HTTP/1.1Host: www.lbpiaccess.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.giselabravo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /javax.faces.resource/cryptojs/enc-base64-min.js.xhtml?ln=scripts HTTP/1.1Host: www.lbpiaccess.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /javax.faces.resource/components.js.xhtml?ln=primefaces&v=8.0 HTTP/1.1Host: www.lbpiaccess.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /javax.faces.resource/cryptojs/sha256-min.js.xhtml?ln=scripts HTTP/1.1Host: www.lbpiaccess.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resources/images/iAccess_Header.png HTTP/1.1Host: www.lbpiaccess.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.giselabravo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /javax.faces.resource/app/clienthash.min.js.xhtml?ln=scripts HTTP/1.1Host: www.lbpiaccess.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resources/images/bancnet_logo.png HTTP/1.1Host: www.lbpiaccess.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.giselabravo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /javax.faces.resource/messages/messages.png.xhtml?ln=primefaces&v=8.0 HTTP/1.1Host: www.lbpiaccess.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.lbpiaccess.com/javax.faces.resource/components.css.xhtml?ln=primefaces&v=8.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resources/images/loginlogo.png HTTP/1.1Host: www.lbpiaccess.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.lbpiaccess.com/javax.faces.resource/style.css.xhtml?ln=cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /javax.faces.resource/app/login.min.js.xhtml?ln=scripts HTTP/1.1Host: www.lbpiaccess.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /javax.faces.resource/validation/validation.js.xhtml?ln=primefaces&v=8.0 HTTP/1.1Host: www.lbpiaccess.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /javax.faces.resource/validation/beanvalidation.js.xhtml?ln=primefaces&v=8.0 HTTP/1.1Host: www.lbpiaccess.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resources/images/bancnet_logo.png HTTP/1.1Host: www.lbpiaccess.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resources/images/iAccess_Header.png HTTP/1.1Host: www.lbpiaccess.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resources/images/loginlogo.png HTTP/1.1Host: www.lbpiaccess.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /javax.faces.resource/messages/messages.png.xhtml?ln=primefaces&v=8.0 HTTP/1.1Host: www.lbpiaccess.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resources/images/favicon.ico HTTP/1.1Host: www.lbpiaccess.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.giselabravo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resources/images/favicon.ico HTTP/1.1Host: www.lbpiaccess.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lblogin/otp-entry HTTP/1.1Host: www.giselabravo.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.giselabravo.com/lblogin/loginsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ombc6d1oenbcoel3kf6276ivqq
Source: global traffic	HTTP traffic detected: GET /javax.faces.resource/spacer/dot_clear.gif.xhtml?ln=primefaces&v=8.0 HTTP/1.1Host: www.giselabravo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.giselabravo.com/lblogin/otp-entryAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ombc6d1oenbcoel3kf6276ivqq

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.giselabravo.com
Source: global traffic	DNS traffic detected: DNS query: www.lbpiaccess.com
Source: global traffic	DNS traffic detected: DNS query: 241.42.69.40.in-addr.arpa

Source: unknown

HTTP traffic detected: POST /lblogin/logins HTTP/1.1Host: www.giselabravo.comConnection: keep-aliveContent-Length: 183Cache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1Origin: https://www.giselabravo.comContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://www.giselabravo.com/lblogin/loginsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ombc6d1oenbcoel3kf6276ivqq

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 14 Jan 2025 23:26:47 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingX-Powered-By: PHP/8.0.30Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.giselabravo.com/wp-json/>; rel="https://api.w.org/"Strict-Transport-Security: max-age=31536000

Source: chromecache_102.2.dr, chromecache_143.2.dr	String found in binary or memory: http://api.jqueryui.com/category/theming/
Source: chromecache_134.2.dr, chromecache_129.2.dr	String found in binary or memory: http://api.jqueryui.com/position/
Source: chromecache_112.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_112.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_108.2.dr, chromecache_134.2.dr, chromecache_102.2.dr, chromecache_123.2.dr, chromecache_143.2.dr, chromecache_129.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_129.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_143.2.dr	String found in binary or memory: http://jqueryui.com/themeroller/?scope=&folderName=custom-theme&bgImgOpacityHeader=&bgImgOpacityCont
Source: chromecache_134.2.dr, chromecache_129.2.dr	String found in binary or memory: http://trentrichardson.com/examples/timepicker
Source: chromecache_122.2.dr	String found in binary or memory: http://www.cssportal.com
Source: chromecache_134.2.dr, chromecache_129.2.dr	String found in binary or memory: http://www.jacklmoore.com/autosize
Source: chromecache_127.2.dr, chromecache_110.2.dr	String found in binary or memory: https://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6
Source: chromecache_134.2.dr, chromecache_129.2.dr	String found in binary or memory: https://github.com/RWAP/jquery-ui-touch-punch
Source: chromecache_134.2.dr, chromecache_129.2.dr	String found in binary or memory: https://github.com/carhartl/jquery-cookie
Source: chromecache_134.2.dr, chromecache_129.2.dr	String found in binary or memory: https://github.com/furf/jquery-ui-touch-punch
Source: chromecache_108.2.dr, chromecache_123.2.dr	String found in binary or memory: https://github.com/gabceb
Source: chromecache_108.2.dr, chromecache_123.2.dr	String found in binary or memory: https://github.com/gabceb/jquery-browser-plugin
Source: chromecache_134.2.dr, chromecache_129.2.dr	String found in binary or memory: https://github.com/jquery/jquery-color
Source: chromecache_127.2.dr, chromecache_110.2.dr	String found in binary or memory: https://www.macromedia.com/go/getflashplayer

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 51399 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51399
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746

Source: classification engine

Classification label: mal68.phis.win@16/87@13/7

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2016 --field-trial-handle=1944,i,2642613565630590889,9283772032916600276,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.giselabravo.com/lblogin/logins"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2016 --field-trial-handle=1944,i,2642613565630590889,9283772032916600276,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Scripting	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://www.giselabravo.com/lblogin/logins	100%	Avira URL Cloud	phishing

Source	Detection	Scanner	Label
https://www.lbpiaccess.com/javax.faces.resource/jquery/jquery.js.xhtml?ln=primefaces&v=8.0	0%	Avira URL Cloud	safe
https://www.lbpiaccess.com/javax.faces.resource/messages/messages.png.xhtml?ln=primefaces&v=8.0	0%	Avira URL Cloud	safe
https://www.lbpiaccess.com/javax.faces.resource/cryptojs/aes.js.xhtml?ln=scripts	0%	Avira URL Cloud	safe
https://www.lbpiaccess.com/resources/images/loginlogo.png	0%	Avira URL Cloud	safe
https://www.lbpiaccess.com/javax.faces.resource/components.css.xhtml?ln=primefaces&v=8.0	0%	Avira URL Cloud	safe
https://www.lbpiaccess.com/javax.faces.resource/style.css.xhtml?ln=css	0%	Avira URL Cloud	safe
https://www.lbpiaccess.com/javax.faces.resource/validation/beanvalidation.js.xhtml?ln=primefaces&v=8.0	0%	Avira URL Cloud	safe
https://www.lbpiaccess.com/javax.faces.resource/app/login.min.js.xhtml?ln=scripts	0%	Avira URL Cloud	safe
https://www.lbpiaccess.com/javax.faces.resource/fa/font-awesome.css.xhtml?ln=primefaces&v=8.0	0%	Avira URL Cloud	safe
https://www.lbpiaccess.com/javax.faces.resource/cryptojs/core-min.js.xhtml?ln=scripts	0%	Avira URL Cloud	safe
https://www.lbpiaccess.com/javax.faces.resource/jquery/jquery-plugins.js.xhtml?ln=primefaces&v=8.0	0%	Avira URL Cloud	safe
https://www.giselabravo.com/javax.faces.resource/spacer/dot_clear.gif.xhtml?ln=primefaces&v=8.0	100%	Avira URL Cloud	malware
https://www.lbpiaccess.com/javax.faces.resource/components.js.xhtml?ln=primefaces&v=8.0	0%	Avira URL Cloud	safe
https://www.lbpiaccess.com/javax.faces.resource/cryptojs/enc-base64-min.js.xhtml?ln=scripts	0%	Avira URL Cloud	safe
https://www.lbpiaccess.com/resources/images/bancnet_logo.png	0%	Avira URL Cloud	safe
https://www.lbpiaccess.com/resources/images/iAccess_Header.png	0%	Avira URL Cloud	safe
https://www.lbpiaccess.com/javax.faces.resource/cryptojs/sha256-min.js.xhtml?ln=scripts	0%	Avira URL Cloud	safe
https://www.lbpiaccess.com/javax.faces.resource/validation/validation.js.xhtml?ln=primefaces&v=8.0	0%	Avira URL Cloud	safe
https://www.lbpiaccess.com/javax.faces.resource/theme.css.xhtml?ln=primefaces-frontoffice	0%	Avira URL Cloud	safe
https://www.lbpiaccess.com/javax.faces.resource/core.js.xhtml?ln=primefaces&v=8.0	0%	Avira URL Cloud	safe
https://www.lbpiaccess.com/javax.faces.resource/app/clienthash.min.js.xhtml?ln=scripts	0%	Avira URL Cloud	safe
http://www.cssportal.com	0%	Avira URL Cloud	safe
https://www.giselabravo.com/lblogin/login_advisory.jpg	100%	Avira URL Cloud	malware
https://www.lbpiaccess.com/resources/images/favicon.ico	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
www.lbpiaccess.com	104.102.53.18	true	false	unknown
www.google.com	142.250.185.196	true	false	high
prod.globalsign.map.fastly.net	151.101.2.133	true	false	high
www.giselabravo.com	201.46.113.120	true	true	unknown
241.42.69.40.in-addr.arpa	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.lbpiaccess.com/javax.faces.resource/style.css.xhtml?ln=css	false	Avira URL Cloud: safe	unknown
https://www.lbpiaccess.com/javax.faces.resource/jquery/jquery.js.xhtml?ln=primefaces&v=8.0	false	Avira URL Cloud: safe	unknown
https://www.lbpiaccess.com/javax.faces.resource/app/login.min.js.xhtml?ln=scripts	true	Avira URL Cloud: safe	unknown
https://www.lbpiaccess.com/javax.faces.resource/messages/messages.png.xhtml?ln=primefaces&v=8.0	false	Avira URL Cloud: safe	unknown
https://www.lbpiaccess.com/resources/images/loginlogo.png	false	Avira URL Cloud: safe	unknown
https://www.lbpiaccess.com/javax.faces.resource/fa/font-awesome.css.xhtml?ln=primefaces&v=8.0	false	Avira URL Cloud: safe	unknown
https://www.lbpiaccess.com/javax.faces.resource/components.css.xhtml?ln=primefaces&v=8.0	false	Avira URL Cloud: safe	unknown
https://www.lbpiaccess.com/javax.faces.resource/cryptojs/core-min.js.xhtml?ln=scripts	false	Avira URL Cloud: safe	unknown
https://www.lbpiaccess.com/javax.faces.resource/cryptojs/aes.js.xhtml?ln=scripts	false	Avira URL Cloud: safe	unknown
https://www.lbpiaccess.com/javax.faces.resource/validation/beanvalidation.js.xhtml?ln=primefaces&v=8.0	false	Avira URL Cloud: safe	unknown
https://www.lbpiaccess.com/javax.faces.resource/jquery/jquery-plugins.js.xhtml?ln=primefaces&v=8.0	false	Avira URL Cloud: safe	unknown
https://www.giselabravo.com/javax.faces.resource/spacer/dot_clear.gif.xhtml?ln=primefaces&v=8.0	false	Avira URL Cloud: malware	unknown
https://www.lbpiaccess.com/resources/images/bancnet_logo.png	false	Avira URL Cloud: safe	unknown
https://www.lbpiaccess.com/javax.faces.resource/components.js.xhtml?ln=primefaces&v=8.0	false	Avira URL Cloud: safe	unknown
https://www.lbpiaccess.com/javax.faces.resource/cryptojs/enc-base64-min.js.xhtml?ln=scripts	false	Avira URL Cloud: safe	unknown
https://www.giselabravo.com/lblogin/logins	true		unknown
https://www.lbpiaccess.com/resources/images/iAccess_Header.png	false	Avira URL Cloud: safe	unknown
https://www.lbpiaccess.com/javax.faces.resource/cryptojs/sha256-min.js.xhtml?ln=scripts	false	Avira URL Cloud: safe	unknown
https://www.lbpiaccess.com/javax.faces.resource/theme.css.xhtml?ln=primefaces-frontoffice	false	Avira URL Cloud: safe	unknown
https://www.lbpiaccess.com/javax.faces.resource/validation/validation.js.xhtml?ln=primefaces&v=8.0	false	Avira URL Cloud: safe	unknown
https://www.lbpiaccess.com/javax.faces.resource/core.js.xhtml?ln=primefaces&v=8.0	false	Avira URL Cloud: safe	unknown
https://www.lbpiaccess.com/javax.faces.resource/app/clienthash.min.js.xhtml?ln=scripts	true	Avira URL Cloud: safe	unknown
https://www.giselabravo.com/lblogin/otp-entry	true		unknown
https://www.giselabravo.com/lblogin/login_advisory.jpg	false	Avira URL Cloud: malware	unknown
https://www.lbpiaccess.com/resources/images/favicon.ico	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/RWAP/jquery-ui-touch-punch	chromecache_134.2.dr, chromecache_129.2.dr	false		high
http://fontawesome.io	chromecache_112.2.dr	false		high
http://jquery.org/license	chromecache_108.2.dr, chromecache_134.2.dr, chromecache_102.2.dr, chromecache_123.2.dr, chromecache_143.2.dr, chromecache_129.2.dr	false		high
https://github.com/carhartl/jquery-cookie	chromecache_134.2.dr, chromecache_129.2.dr	false		high
https://www.macromedia.com/go/getflashplayer	chromecache_127.2.dr, chromecache_110.2.dr	false		high
http://jqueryui.com	chromecache_129.2.dr	false		high
http://api.jqueryui.com/category/theming/	chromecache_102.2.dr, chromecache_143.2.dr	false		high
http://api.jqueryui.com/position/	chromecache_134.2.dr, chromecache_129.2.dr	false		high
https://github.com/jquery/jquery-color	chromecache_134.2.dr, chromecache_129.2.dr	false		high
http://fontawesome.io/license	chromecache_112.2.dr	false		high
http://jqueryui.com/themeroller/?scope=&folderName=custom-theme&bgImgOpacityHeader=&bgImgOpacityCont	chromecache_143.2.dr	false		high
https://github.com/gabceb/jquery-browser-plugin	chromecache_108.2.dr, chromecache_123.2.dr	false		high
https://github.com/furf/jquery-ui-touch-punch	chromecache_134.2.dr, chromecache_129.2.dr	false		high
https://github.com/gabceb	chromecache_108.2.dr, chromecache_123.2.dr	false		high
http://www.jacklmoore.com/autosize	chromecache_134.2.dr, chromecache_129.2.dr	false		high
https://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6	chromecache_127.2.dr, chromecache_110.2.dr	false		high
http://www.cssportal.com	chromecache_122.2.dr	false	Avira URL Cloud: safe	unknown
http://trentrichardson.com/examples/timepicker	chromecache_134.2.dr, chromecache_129.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.196	www.google.com	United States	15169	GOOGLEUS	false
104.102.53.18	www.lbpiaccess.com	United States	16625	AKAMAI-ASUS	false
142.250.186.100	unknown	United States	15169	GOOGLEUS	false
201.46.113.120	www.giselabravo.com	Brazil	40311	VIASAT-3US	true

Private

IP
192.168.2.6
192.168.2.5

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1591417
Start date and time:	2025-01-15 00:25:20 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 38s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.giselabravo.com/lblogin/logins
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal68.phis.win@16/87@13/7
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.99, 142.250.186.174, 66.102.1.84, 142.250.185.142, 216.58.206.78, 216.58.212.174, 104.18.20.226, 104.18.21.226, 142.250.186.42, 216.58.206.74, 216.58.212.138, 172.217.18.10, 142.250.185.138, 142.250.186.170, 142.250.185.202, 142.250.184.234, 142.250.186.74, 142.250.185.74, 142.250.185.106, 142.250.74.202, 142.250.185.170, 216.58.212.170, 142.250.185.234, 172.217.16.202, 217.20.57.18, 216.58.206.46, 142.250.185.110, 142.250.185.206, 172.217.18.106, 2.17.190.73, 199.232.210.172, 142.250.74.206, 142.250.184.238, 2.23.242.162, 151.101.2.133, 13.107.246.45, 4.175.87.197, 40.69.42.241, 20.109.210.53
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, slscr.update.microsoft.com, cdn.globalsigncdn.com.cdn.cloudflare.net, ajax.googleapis.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, global.prd.cdn.globalsign.com, ssif1.globalsign.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, seal.globalsign.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://www.giselabravo.com/lblogin/logins

Input	Output
URL: https://www.giselabravo.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://www.giselabravo.com
URL: https://www.lbpiaccess.com/javax.faces.resource/cr... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The provided JavaScript snippet appears to be a legitimate implementation of the SHA-256 cryptographic hash function from the CryptoJS library. It does not exhibit any high-risk or suspicious behaviors, and the code is well-structured and transparent. The script is likely used for legitimate purposes such as secure data hashing or authentication, and does not pose a significant security risk." }
/* CryptoJS v3.1.2 code.google.com/p/crypto-js (c) 2009-2013 by Jeff Mott. All rights reserved. code.google.com/p/crypto-js/wiki/License / (function(k){for(var g=CryptoJS,h=g.lib,v=h.WordArray,j=h.Hasher,h=g.algo,s=[],t=[],u=function(q){return 4294967296(q-(q\|0))\|0},l=2,b=0;64>b;){var d;a:{d=l;for(var w=k.sqrt(d),r=2;r<=w;r++)if(!(d%r)){d=!1;break a}d=!0}d&&(8>b&&(s[b]=u(k.pow(l,0.5))),t[b]=u(k.pow(l,1/3)),b++);l++}var n=[],h=h.SHA256=j.extend({_doReset:function(){this._hash=new v.init(s.slice(0))},_doProcessBlock:function(q,h){for(var a=this._hash.words,c=a[0],d=a[1],b=a[2],k=a[3],f=a[4],g=a[5],j=a[6],l=a[7],e=0;64>e;e++){if(16>e)n[e]= q[h+e]\|0;else{var m=n[e-15],p=n[e-2];n[e]=((m<<25\|m>>>7)^(m<<14\|m>>>18)^m>>>3)+n[e-7]+((p<<15\|p>>>17)^(p<<13\|p>>>19)^p>>>10)+n[e-16]}m=l+((f<<26\|f>>>6)^(f<<21\|f>>>11)^(f<<7\|f>>>25))+(f&g^~f&j)+t[e]+n[e];p=((c<<30\|c>>>2)^(c<<19\|c>>>13)^(c<<10\|c>>>22))+(c&d^c&b^d&b);l=j;j=g;g=f;f=k+m\|0;k=b;b=d;d=c;c=m+p\|0}a[0]=a[0]+c\|0;a[1]=a[1]+d\|0;a[2]=a[2]+b\|0;a[3]=a[3]+k\|0;a[4]=a[4]+f\|0;a[5]=a[5]+g\|0;a[6]=a[6]+j\|0;a[7]=a[7]+l\|0},_doFinalize:function(){var d=this._data,b=d.words,a=8this._nDataBytes,c=8d.sigBytes; b[c>>>5]\|=128<<24-c%32;b[(c+64>>>9<<4)+14]=k.floor(a/4294967296);b[(c+64>>>9<<4)+15]=a;d.sigBytes=4*b.length;this._process();return this._hash},clone:function(){var b=j.clone.call(this);b._hash=this._hash.clone();return b}});g.SHA256=j._createHelper(h);g.HmacSHA256=j._createHmacHelper(h)})(Math);
URL: https://www.lbpiaccess.com/javax.faces.resource/cr... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "The provided code appears to be a legitimate implementation of the Base64 encoding and decoding functionality from the CryptoJS library. It does not contain any high-risk indicators, such as dynamic code execution, data exfiltration, or suspicious redirects. The code is well-structured and does not exhibit any behaviors that would suggest malicious intent. Therefore, this script is considered low risk." }
/* CryptoJS v3.1.2 code.google.com/p/crypto-js (c) 2009-2013 by Jeff Mott. All rights reserved. code.google.com/p/crypto-js/wiki/License / (function(){var h=CryptoJS,j=h.lib.WordArray;h.enc.Base64={stringify:function(b){var e=b.words,f=b.sigBytes,c=this._map;b.clamp();b=[];for(var a=0;a<f;a+=3)for(var d=(e[a>>>2]>>>24-8(a%4)&255)<<16\|(e[a+1>>>2]>>>24-8((a+1)%4)&255)<<8\|e[a+2>>>2]>>>24-8((a+2)%4)&255,g=0;4>g&&a+0.75g<f;g++)b.push(c.charAt(d>>>6(3-g)&63));if(e=c.charAt(64))for(;b.length%4;)b.push(e);return b.join("")},parse:function(b){var e=b.length,f=this._map,c=f.charAt(64);c&&(c=b.indexOf(c),-1!=c&&(e=c));for(var c=[],a=0,d=0;d< e;d++)if(d%4){var g=f.indexOf(b.charAt(d-1))<<2(d%4),h=f.indexOf(b.charAt(d))>>>6-2(d%4);c[a>>>2]\|=(g\|h)<<24-8*(a%4);a++}return j.create(c,a)},_map:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="}})();
URL: https://www.lbpiaccess.com/javax.faces.resource/ap... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "This script exhibits several moderate-risk indicators, including the use of obfuscated code, external data transmission, and aggressive DOM manipulation. While the script appears to be implementing some cryptographic functions, the heavy obfuscation and lack of transparency raise concerns. Further review is recommended to determine the script's true purpose and potential risks." }
var _0x1cf3=['enc','toString','length','Base64','parse','encrypt','substr','SHA256','AES'];(function(_0x20bbe6,_0x1cf3e6){var _0x3104fc=function(_0x316c32){while(--_0x316c32){_0x20bbe6['push'](_0x20bbe6['shift']());}};_0x3104fc(++_0x1cf3e6);}(_0x1cf3,0x18d));var _0x3104=function(_0x20bbe6,_0x1cf3e6){_0x20bbe6=_0x20bbe6-0x0;var _0x3104fc=_0x1cf3[_0x20bbe6];return _0x3104fc;};var ClientHash=function(){var _0x316c32=function(_0x58d950,_0x3d7dd9,_0x28d149){var _0x5ea972=_0x3104,_0x56aa1=_0x58d950,_0x4bbd87=_0x3d7dd9,_0x3fe201=_0x28d149,_0x3989b4=_0x56aa1['substr'](0x0,_0x58d950[_0x5ea972('0x1')]/0x2),_0x3fc7fe=_0x56aa1[_0x5ea972('0x5')](_0x3989b4[_0x5ea972('0x1')]),_0x484176=_0x4bbd87[_0x5ea972('0x5')](0x0,_0x3d7dd9[_0x5ea972('0x1')]/0x2),_0x365f65=_0x4bbd87[_0x5ea972('0x5')](_0x484176['length']);return _0x56aa1=_0x3fc7fe+_0x365f65+_0x3989b4+_0x484176,_0x56aa1=CryptoJS[_0x5ea972('0x6')](_0x56aa1)[_0x5ea972('0x0')](),_0x28d149['length']>0x0&&(_0x484176=_0x3fe201[_0x5ea972('0x5')](0x0,_0x3fe201[_0x5ea972('0x1')]/0x2),_0x365f65=_0x3fe201[_0x5ea972('0x5')](_0x484176[_0x5ea972('0x1')]),_0x3989b4=_0x56aa1[_0x5ea972('0x5')](0x0,_0x56aa1['length']/0x2),_0x3fc7fe=_0x56aa1['substr'](_0x3989b4[_0x5ea972('0x1')]),_0x56aa1=_0x484176+_0x3989b4+_0x365f65+_0x3fc7fe),_0x56aa1;},_0x42d678=function(_0x1ad980,_0x53c6a9){var _0x3d24e0=_0x3104,_0xe8aa1e=CryptoJS[_0x3d24e0('0x8')][_0x3d24e0('0x2')]['parse'](_0x53c6a9),_0x58b34b=CryptoJS[_0x3d24e0('0x8')][_0x3d24e0('0x2')][_0x3d24e0('0x3')](_0x53c6a9);return CryptoJS[_0x3d24e0('0x7')][_0x3d24e0('0x4')](_0x1ad980,_0xe8aa1e,{'iv':_0x58b34b});};return{'hash':function(_0x3b31a0,_0x46ef85,_0x141678){return _0x316c32(_0x3b31a0,_0x46ef85,_0x141678);},'enc':function(_0x80a821,_0x3b8c58){return _0x42d678(_0x80a821,_0x3b8c58);}};}();
URL: https://www.lbpiaccess.com/javax.faces.resource/va... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "This script appears to be a legitimate extension of the PrimeFaces library, which is a popular Java Server Faces (JSF) framework. It is simply defining localized messages for various input validation errors, which is a common practice in web development frameworks. There are no high-risk indicators like dynamic code execution, data exfiltration, or suspicious redirects. The script is focused on providing a better user experience by displaying localized error messages, which is a benign and expected behavior." }
if(window.PrimeFaces){$.extend(PrimeFaces.locales.en_US,{decimalSeparator:".",groupingSeparator:",",messages:{"javax.faces.component.UIInput.REQUIRED":"{0}: Validation Error: Value is required.","javax.faces.converter.IntegerConverter.INTEGER":"{2}: '{0}' must be a number consisting of one or more digits.","javax.faces.converter.IntegerConverter.INTEGER_detail":"{2}: '{0}' must be a number between -2147483648 and 2147483647 Example: {1}","javax.faces.converter.LongConverter.LONG":"{2}: '{0}' must be a number consisting of one or more digits.","javax.faces.converter.LongConverter.LONG_detail":"{2}: '{0}' must be a number between -9223372036854775808 to 9223372036854775807 Example: {1}","javax.faces.converter.DoubleConverter.DOUBLE":"{2}: '{0}' must be a number consisting of one or more digits.","javax.faces.converter.DoubleConverter.DOUBLE_detail":"{2}: '{0}' must be a number between 4.9E-324 and 1.7976931348623157E308 Example: {1}","javax.faces.converter.BigDecimalConverter.DECIMAL":"{2}: '{0}' must be a signed decimal number.","javax.faces.converter.BigDecimalConverter.DECIMAL_detail":"{2}: '{0}' must be a signed decimal number consisting of zero or more digits, that may be followed by a decimal point and fraction. Example: {1}","javax.faces.converter.BigIntegerConverter.BIGINTEGER":"{2}: '{0}' must be a number consisting of one or more digits.","javax.faces.converter.BigIntegerConverter.BIGINTEGER_detail":"{2}: '{0}' must be a number consisting of one or more digits. Example: {1}","javax.faces.converter.ByteConverter.BYTE":"{2}: '{0}' must be a number between -128 and 127.","javax.faces.converter.ByteConverter.BYTE_detail":"{2}: '{0}' must be a number between -128 and 127. Example: {1}","javax.faces.converter.CharacterConverter.CHARACTER":"{1}: '{0}' must be a valid character.","javax.faces.converter.CharacterConverter.CHARACTER_detail":"{1}: '{0}' must be a valid ASCII character.","javax.faces.converter.ShortConverter.SHORT":"{2}: '{0}' must be a number consisting of one or more digits.","javax.faces.converter.ShortConverter.SHORT_detail":"{2}: '{0}' must be a number between -32768 and 32767 Example: {1}","javax.faces.converter.BooleanConverter.BOOLEAN":"{1}: '{0}' must be 'true' or 'false'","javax.faces.converter.BooleanConverter.BOOLEAN_detail":"{1}: '{0}' must be 'true' or 'false'. Any value other than 'true' will evaluate to 'false'.","javax.faces.validator.LongRangeValidator.MAXIMUM":"{1}: Validation Error: Value is greater than allowable maximum of '{0}'","javax.faces.validator.LongRangeValidator.MINIMUM":"{1}: Validation Error: Value is less than allowable minimum of '{0}'","javax.faces.validator.LongRangeValidator.NOT_IN_RANGE":"{2}: Validation Error: Specified attribute is not between the expected values of {0} and {1}.","javax.faces.validator.LongRangeValidator.TYPE={0}":"Validation Error: Value is not of the correct type.","javax.faces.validator.DoubleRangeValidator.MAXIMUM":"{1}: Validation Error: Value is greater than allowable maximum of '{0}'","javax.faces.validator.DoubleRangeValidator.MINIMUM":"{1}: Validation Error: Value is less than allowable minimum of '{0}'","javax.faces.validator.DoubleRangeValidator.NOT_IN_RANGE":"{2}: Validation Error: Specified attribute is not between the expected values of {0} and {1}","javax.faces.validator.DoubleRangeValidator.TYPE={0}":"Validation Error: Value is not of the correct type","javax.faces.converter.FloatConverter.FLOAT":"{2}: '{0}' must be a number consisting of one or more digits.","javax.faces.converter.FloatConverter.FLOAT_detail":"{2}: '{0}' must be a number between 1.4E-45 and 3.4028235E38 Example: {1}","javax.faces.converter.DateTimeConverter.DATE":"{2}: '{0}' could not be understood as a date.","javax.faces.converter.DateTimeConverter.DATE_detail":"{2}: '{0}' could not be understood as a date. Example: {1}","javax.faces.converter.DateTimeConverter.TIME":"{2}: '{0}' could not be understood as a time.","javax.faces.converter.DateTimeConverter.TIME_detail":"{2
URL: https://www.lbpiaccess.com/javax.faces.resource/co... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "This appears to be a legitimate jQuery browser plugin that provides browser detection functionality. It does not exhibit any high-risk behaviors like dynamic code execution, data exfiltration, or suspicious redirects. The code is well-structured and does not contain any obfuscation. While it uses some legacy APIs like `XDomainRequest`, these are not inherently malicious and are used for typical browser detection purposes. Overall, this script poses a low risk and is likely a benign utility." }
/! jQuery Browser Plugin 0.1.0 * https://github.com/gabceb/jquery-browser-plugin * * Original jquery-browser code Copyright 2005, 2015 jQuery Foundation, Inc. and other contributors * http://jquery.org/license * * Modifications Copyright 2015 Gabriel Cebrian * https://github.com/gabceb * * Released under the MIT license * * Date: 05-07-2015 / (function(a){if(typeof define==="function"&&define.amd){define(["jquery"],function(b){return a(b)})}else{if(typeof module==="object"&&typeof module.exports==="object"){module.exports=a(require("jquery"))}else{a(window.jQuery)}}}(function(b){function a(d){if(d===undefined){d=window.navigator.userAgent}d=d.toLowerCase();var j=/(edge)\/([\w.]+)/.exec(d)\|\|/(opr)[\/]([\w.]+)/.exec(d)\|\|/(chrome)[ \/]([\w.]+)/.exec(d)\|\|/(iemobile)[\/]([\w.]+)/.exec(d)\|\|/(version)(applewebkit)[ \/]([\w.]+).(safari)[ \/]([\w.]+)/.exec(d)\|\|/(webkit)[ \/]([\w.]+).(version)[ \/]([\w.]+).(safari)[ \/]([\w.]+)/.exec(d)\|\|/(webkit)[ \/]([\w.]+)/.exec(d)\|\|/(opera)(?:.version\|)[ \/]([\w.]+)/.exec(d)\|\|/(msie) ([\w.]+)/.exec(d)\|\|d.indexOf("trident")>=0&&/(rv)(?::\| )([\w.]+)/.exec(d)\|\|d.indexOf("compatible")<0&&/(mozilla)(?:.? rv:([\w.]+)\|)/.exec(d)\|\|[];var i=/(ipad)/.exec(d)\|\|/(ipod)/.exec(d)\|\|/(windows phone)/.exec(d)\|\|/(iphone)/.exec(d)\|\|/(kindle)/.exec(d)\|\|/(silk)/.exec(d)\|\|/(android)/.exec(d)\|\|/(win)/.exec(d)\|\|/(mac)/.exec(d)\|\|/(linux)/.exec(d)\|\|/(cros)/.exec(d)\|\|/(playbook)/.exec(d)\|\|/(bb)/.exec(d)\|\|/(blackberry)/.exec(d)\|\|[];var k={},e={browser:j[5]\|\|j[3]\|\|j[1]\|\|"",version:j[2]\|\|j[4]\|\|"0",versionNumber:j[4]\|\|j[2]\|\|"0",platform:i[0]\|\|""};if(e.browser){k[e.browser]=true;k.version=e.version;k.versionNumber=parseInt(e.versionNumber,10)}if(e.platform){k[e.platform]=true}if(k.android\|\|k.bb\|\|k.blackberry\|\|k.ipad\|\|k.iphone\|\|k.ipod\|\|k.kindle\|\|k.playbook\|\|k.silk\|\|k["windows phone"]){k.mobile=true}if(k.cros\|\|k.mac\|\|k.linux\|\|k.win){k.desktop=true}if(k.chrome\|\|k.opr\|\|k.safari){k.webkit=true}if(k.rv\|\|k.iemobile){var c="msie";e.browser=c;k[c]=true}if(k.edge){delete k.edge;var m="msedge";e.browser=m;k[m]=true}if(k.safari&&k.blackberry){var g="blackberry";e.browser=g;k[g]=true}if(k.safari&&k.playbook){var p="playbook";e.browser=p;k[p]=true}if(k.bb){var n="blackberry";e.browser=n;k[n]=true}if(k.opr){var h="opera";e.browser=h;k[h]=true}if(k.safari&&k.android){var f="android";e.browser=f;k[f]=true}if(k.safari&&k.kindle){var o="kindle";e.browser=o;k[o]=true}if(k.safari&&k.silk){var l="silk";e.browser=l;k[l]=true}k.name=e.browser;k.platform=e.platform;return k}window.jQBrowser=a(window.navigator.userAgent);window.jQBrowser.uaMatch=a;if(b){b.browser=window.jQBrowser}return window.jQBrowser})); (function(a){if(a.PrimeFaces){a.PrimeFaces.debug("PrimeFaces already loaded, ignoring duplicate execution.");return}var b={escapeClientId:function(c){return"#"+c.replace(/:/g,"\\:")},onElementLoad:function(c,d){if(c.prop("complete")){d()}else{c.on("load",d)}},getWidgetById:function(e){for(var d in b.widgets){var c=b.widgets[d];if(c&&c.id===e){return c}}return null},addSubmitParam:function(d,f){var e=$(this.escapeClientId(d));for(var c in f){e.append('<input type="hidden" name="'+b.escapeHTML(c)+'" value="'+b.escapeHTML(f[c])+'" class="ui-submit-param"/>')}return this},submit:function(f,e){var c=$(this.escapeClientId(f));var d;if(e){d=c.attr("target");c.attr("target",e)}c.submit();c.children("input.ui-submit-param").remove();if(e){if(d!==undefined){c.attr("target",d)}else{c.removeAttr("target")}}},onPost:function(){this.nonAjaxPosted=true;this.abortXHRs()},abortXHRs:function(){b.ajax.Queue.abortAll()},attachBehaviors:function(d,c){$.each(c,function(f,e){d.on(f,function(g){e.call(d,g)})})},getCookie:function(c){return $.cookie(c)},setCookie:function(d,e,c){$.cookie(d,e,c)},deleteCookie:function(d,c){$.removeCookie(d,c)},cookiesEnabled:function(){var c=(navigator.cookieEnabled)?true:false;if(typeof navigator.cookieEnabled==="undefined"&&!c){document.cookie="testcookie";c=(document.cookie.indexOf("testcookie")!==-1)?true:false}return(c)},
URL: https://www.lbpiaccess.com/javax.faces.resource/cr... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The provided JavaScript snippet appears to be a legitimate implementation of the CryptoJS library, which is a well-known and widely used cryptography library. The code does not contain any high-risk indicators, such as dynamic code execution, data exfiltration, or redirects to malicious domains. The behaviors observed are primarily related to cryptographic operations and data encoding/decoding, which are common in legitimate applications. While the code uses some legacy practices like the `XDomainRequest` API, these pose only minor risks and are not inherently malicious. Overall, this script is likely benign and used for legitimate purposes." }
/* CryptoJS v3.1.2 code.google.com/p/crypto-js (c) 2009-2013 by Jeff Mott. All rights reserved. code.google.com/p/crypto-js/wiki/License / var CryptoJS=CryptoJS\|\|function(h,r){var k={},l=k.lib={},n=function(){},f=l.Base={extend:function(a){n.prototype=this;var b=new n;a&&b.mixIn(a);b.hasOwnProperty("init")\|\|(b.init=function(){b.$super.init.apply(this,arguments)});b.init.prototype=b;b.$super=this;return b},create:function(){var a=this.extend();a.init.apply(a,arguments);return a},init:function(){},mixIn:function(a){for(var b in a)a.hasOwnProperty(b)&&(this[b]=a[b]);a.hasOwnProperty("toString")&&(this.toString=a.toString)},clone:function(){return this.init.prototype.extend(this)}}, j=l.WordArray=f.extend({init:function(a,b){a=this.words=a\|\|[];this.sigBytes=b!=r?b:4a.length},toString:function(a){return(a\|\|s).stringify(this)},concat:function(a){var b=this.words,d=a.words,c=this.sigBytes;a=a.sigBytes;this.clamp();if(c%4)for(var e=0;e<a;e++)b[c+e>>>2]\|=(d[e>>>2]>>>24-8(e%4)&255)<<24-8((c+e)%4);else if(65535<d.length)for(e=0;e<a;e+=4)b[c+e>>>2]=d[e>>>2];else b.push.apply(b,d);this.sigBytes+=a;return this},clamp:function(){var a=this.words,b=this.sigBytes;a[b>>>2]&=4294967295<< 32-8(b%4);a.length=h.ceil(b/4)},clone:function(){var a=f.clone.call(this);a.words=this.words.slice(0);return a},random:function(a){for(var b=[],d=0;d<a;d+=4)b.push(4294967296h.random()\|0);return new j.init(b,a)}}),m=k.enc={},s=m.Hex={stringify:function(a){var b=a.words;a=a.sigBytes;for(var d=[],c=0;c<a;c++){var e=b[c>>>2]>>>24-8(c%4)&255;d.push((e>>>4).toString(16));d.push((e&15).toString(16))}return d.join("")},parse:function(a){for(var b=a.length,d=[],c=0;c<b;c+=2)d[c>>>3]\|=parseInt(a.substr(c, 2),16)<<24-4(c%8);return new j.init(d,b/2)}},p=m.Latin1={stringify:function(a){var b=a.words;a=a.sigBytes;for(var d=[],c=0;c<a;c++)d.push(String.fromCharCode(b[c>>>2]>>>24-8(c%4)&255));return d.join("")},parse:function(a){for(var b=a.length,d=[],c=0;c<b;c++)d[c>>>2]\|=(a.charCodeAt(c)&255)<<24-8(c%4);return new j.init(d,b)}},t=m.Utf8={stringify:function(a){try{return decodeURIComponent(escape(p.stringify(a)))}catch(b){throw Error("Malformed UTF-8 data");}},parse:function(a){return p.parse(unescape(encodeURIComponent(a)))}}, q=l.BufferedBlockAlgorithm=f.extend({reset:function(){this._data=new j.init;this._nDataBytes=0},_append:function(a){"string"==typeof a&&(a=t.parse(a));this._data.concat(a);this._nDataBytes+=a.sigBytes},_process:function(a){var b=this._data,d=b.words,c=b.sigBytes,e=this.blockSize,f=c/(4e),f=a?h.ceil(f):h.max((f\|0)-this._minBufferSize,0);a=fe;c=h.min(4*a,c);if(a){for(var g=0;g<a;g+=e)this._doProcessBlock(d,g);g=d.splice(0,a);b.sigBytes-=c}return new j.init(g,c)},clone:function(){var a=f.clone.call(this); a._data=this._data.clone();return a},_minBufferSize:0});l.Hasher=q.extend({cfg:f.extend(),init:function(a){this.cfg=this.cfg.extend(a);this.reset()},reset:function(){q.reset.call(this);this._doReset()},update:function(a){this._append(a);this._process();return this},finalize:function(a){a&&this._append(a);return this._doFinalize()},blockSize:16,_createHelper:function(a){return function(b,d){return(new a.init(d)).finalize(b)}},_createHmacHelper:function(a){return function(b,d){return(new u.HMAC.init(a, d)).finalize(b)}}});var u=k.algo={};return k}(Math);
URL: https://www.lbpiaccess.com/javax.faces.resource/co... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The provided JavaScript snippet appears to be a part of the PrimeFaces library, which is a popular open-source UI framework for Java Server Faces (JSF) applications. The code is responsible for handling the opening and closing of dialog windows in a PrimeFaces-based application. While the code uses some dynamic techniques, such as manipulating the DOM and interacting with external resources, it does not exhibit any high-risk behaviors like dynamic code execution or data exfiltration. The code seems to be focused on providing a standard dialog functionality, which is a common and legitimate use case for a UI framework. Therefore, the overall risk score is low." }
if(!PrimeFaces.dialog){PrimeFaces.dialog={};PrimeFaces.dialog.DialogHandler={openDialog:function(f){var h=this.findRootWindow(),l=f.sourceComponentId+"_dlg";if(h.document.getElementById(l)){return}var k=function(){var v=window;var x=[];while(v.frameElement){var u=v.parent;if(u.PF===undefined){break}var t=v.frameElement;var o=[];for(;t&&t.tagName!==undefined;t=t.parentNode){if(t.id&&!/\s/.test(t.id)){o.unshift(t.id);o.unshift("#");o.unshift(" > ");break}else{if(t.className){var p=t.className.split(" ");var q=[];for(var r in p){if(p.hasOwnProperty(r)&&p[r]){q.unshift(p[r]);q.unshift(".")}}q.unshift(t.tagName);var n=q.join("");var m=$(t.parentNode).find(n);if(m.length>1){o.unshift(":eq("+m.index(t)+")")}o.unshift(n)}else{var m=$(t.parentNode).find(t.tagName);if(m.length>1){o.unshift(":eq("+m.index(t)+")")}o.unshift(t.tagName)}}o.unshift(" > ")}var y=o.slice(1).join("");x.unshift(y);v=u}return x}();var j=f.options.widgetVar;if(!j){j=f.sourceComponentId.replace(/:/g,"_")+"_dlgwidget"}var d=f.options.styleClass\|\|"",e=$('<div id="'+l+'" class="ui-dialog ui-widget ui-widget-content ui-corner-all ui-shadow ui-hidden-container ui-overlay-hidden '+d+'" data-pfdlgcid="'+PrimeFaces.escapeHTML(f.pfdlgcid)+'" data-widget="'+j+'"></div>').append('<div class="ui-dialog-titlebar ui-widget-header ui-helper-clearfix ui-corner-top"><span id="'+l+'_title" class="ui-dialog-title"></span></div>');var g=e.children(".ui-dialog-titlebar");if(f.options.closable!==false){g.append('<a class="ui-dialog-titlebar-icon ui-dialog-titlebar-close ui-corner-all" href="#" role="button"><span class="ui-icon ui-icon-closethick"></span></a>')}if(f.options.minimizable){g.append('<a class="ui-dialog-titlebar-icon ui-dialog-titlebar-minimize ui-corner-all" href="#" role="button"><span class="ui-icon ui-icon-minus"></span></a>')}if(f.options.maximizable){g.append('<a class="ui-dialog-titlebar-icon ui-dialog-titlebar-maximize ui-corner-all" href="#" role="button"><span class="ui-icon ui-icon-extlink"></span></a>')}e.append('<div class="ui-dialog-content ui-widget-content ui-df-content" style="height: auto;"><iframe style="border:0 none" frameborder="0"/></div>');e.appendTo(h.document.body);var c=e.find("iframe"),b=f.url.indexOf("?")===-1?"?":"&",a=f.url.indexOf("pfdlgcid")===-1?f.url+b+"pfdlgcid="+f.pfdlgcid:f.url,i=f.options.contentWidth\|\|640;c.width(i);if(f.options.iframeTitle){c.attr("title",f.options.iframeTitle)}c.on("load",function(){var r=$(this),n=r.contents().find("title"),q=false;if(f.options.headerElement){var p=PrimeFaces.escapeClientId(f.options.headerElement),m=c.contents().find(p);if(m.length){n=m;q=true}}if(!r.data("initialized")){PrimeFaces.cw.call(h.PrimeFaces,"DynamicDialog",j,{id:l,position:f.options.position\|\|"center",sourceFrames:k,sourceComponentId:f.sourceComponentId,sourceWidgetVar:f.sourceWidgetVar,onHide:function(){var u=this,t=this.content.children("iframe");if(t.get(0).contentWindow.PrimeFaces){this.destroyIntervalId=setInterval(function(){if(t.get(0).contentWindow.PrimeFaces.ajax.Queue.isEmpty()){clearInterval(u.destroyIntervalId);t.attr("src","about:blank");u.jq.remove()}},10)}else{t.attr("src","about:blank");u.jq.remove()}h.PrimeFaces.widgets[j]=undefined},modal:f.options.modal,blockScroll:f.options.blockScroll,resizable:f.options.resizable,hasIframe:true,draggable:f.options.draggable,width:f.options.width,height:f.options.height,minimizable:f.options.minimizable,maximizable:f.options.maximizable,headerElement:f.options.headerElement,responsive:f.options.responsive,closeOnEscape:f.options.closeOnEscape,focus:f.options.focus})}var s=h.PF(j).titlebar.children("span.ui-dialog-title");if(n.length>0){if(q){s.append(n);n.show()}else{s.text(n.text())}c.attr("title",s.text())}var o=null;if(f.options.contentHeight){o=f.options.contentHeight}else{o=r.get(0).contentWindow.document.body.scrollHeight+(PrimeFaces.env.browser.webkit?5:25)}r.css("height",o);c.data("initialized",true);h.PF(j).show()}).attr("src",a)},closeDialog:function(cfg){var rootWindow=this.
URL: https://www.lbpiaccess.com/javax.faces.resource/cr... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a legitimate implementation of the CryptoJS library, which is a well-known and widely used cryptography library. The code does not contain any high-risk indicators such as dynamic code execution, data exfiltration, or redirects to malicious domains. The behaviors observed are primarily related to encoding and decoding data using various encoding schemes (Hex, Latin1, UTF-8, and Base64), which are common operations in cryptographic applications. While the code uses some legacy APIs like `XDomainRequest`, these pose only minor risks and are not inherently malicious. Overall, the script seems to be a benign implementation of the CryptoJS library, and the risk score is assessed as low." }
/* CryptoJS v3.1.2 code.google.com/p/crypto-js (c) 2009-2013 by Jeff Mott. All rights reserved. code.google.com/p/crypto-js/wiki/License / var CryptoJS=CryptoJS\|\|function(u,p){var d={},l=d.lib={},s=function(){},t=l.Base={extend:function(a){s.prototype=this;var c=new s;a&&c.mixIn(a);c.hasOwnProperty("init")\|\|(c.init=function(){c.$super.init.apply(this,arguments)});c.init.prototype=c;c.$super=this;return c},create:function(){var a=this.extend();a.init.apply(a,arguments);return a},init:function(){},mixIn:function(a){for(var c in a)a.hasOwnProperty(c)&&(this[c]=a[c]);a.hasOwnProperty("toString")&&(this.toString=a.toString)},clone:function(){return this.init.prototype.extend(this)}}, r=l.WordArray=t.extend({init:function(a,c){a=this.words=a\|\|[];this.sigBytes=c!=p?c:4a.length},toString:function(a){return(a\|\|v).stringify(this)},concat:function(a){var c=this.words,e=a.words,j=this.sigBytes;a=a.sigBytes;this.clamp();if(j%4)for(var k=0;k<a;k++)c[j+k>>>2]\|=(e[k>>>2]>>>24-8(k%4)&255)<<24-8((j+k)%4);else if(65535<e.length)for(k=0;k<a;k+=4)c[j+k>>>2]=e[k>>>2];else c.push.apply(c,e);this.sigBytes+=a;return this},clamp:function(){var a=this.words,c=this.sigBytes;a[c>>>2]&=4294967295<< 32-8(c%4);a.length=u.ceil(c/4)},clone:function(){var a=t.clone.call(this);a.words=this.words.slice(0);return a},random:function(a){for(var c=[],e=0;e<a;e+=4)c.push(4294967296u.random()\|0);return new r.init(c,a)}}),w=d.enc={},v=w.Hex={stringify:function(a){var c=a.words;a=a.sigBytes;for(var e=[],j=0;j<a;j++){var k=c[j>>>2]>>>24-8(j%4)&255;e.push((k>>>4).toString(16));e.push((k&15).toString(16))}return e.join("")},parse:function(a){for(var c=a.length,e=[],j=0;j<c;j+=2)e[j>>>3]\|=parseInt(a.substr(j, 2),16)<<24-4(j%8);return new r.init(e,c/2)}},b=w.Latin1={stringify:function(a){var c=a.words;a=a.sigBytes;for(var e=[],j=0;j<a;j++)e.push(String.fromCharCode(c[j>>>2]>>>24-8(j%4)&255));return e.join("")},parse:function(a){for(var c=a.length,e=[],j=0;j<c;j++)e[j>>>2]\|=(a.charCodeAt(j)&255)<<24-8(j%4);return new r.init(e,c)}},x=w.Utf8={stringify:function(a){try{return decodeURIComponent(escape(b.stringify(a)))}catch(c){throw Error("Malformed UTF-8 data");}},parse:function(a){return b.parse(unescape(encodeURIComponent(a)))}}, q=l.BufferedBlockAlgorithm=t.extend({reset:function(){this._data=new r.init;this._nDataBytes=0},_append:function(a){"string"==typeof a&&(a=x.parse(a));this._data.concat(a);this._nDataBytes+=a.sigBytes},_process:function(a){var c=this._data,e=c.words,j=c.sigBytes,k=this.blockSize,b=j/(4k),b=a?u.ceil(b):u.max((b\|0)-this._minBufferSize,0);a=bk;j=u.min(4a,j);if(a){for(var q=0;q<a;q+=k)this._doProcessBlock(e,q);q=e.splice(0,a);c.sigBytes-=j}return new r.init(q,j)},clone:function(){var a=t.clone.call(this); a._data=this._data.clone();return a},_minBufferSize:0});l.Hasher=q.extend({cfg:t.extend(),init:function(a){this.cfg=this.cfg.extend(a);this.reset()},reset:function(){q.reset.call(this);this._doReset()},update:function(a){this._append(a);this._process();return this},finalize:function(a){a&&this._append(a);return this._doFinalize()},blockSize:16,_createHelper:function(a){return function(b,e){return(new a.init(e)).finalize(b)}},_createHmacHelper:function(a){return function(b,e){return(new n.HMAC.init(a, e)).finalize(b)}}});var n=d.algo={};return d}(Math); (function(){var u=CryptoJS,p=u.lib.WordArray;u.enc.Base64={stringify:function(d){var l=d.words,p=d.sigBytes,t=this._map;d.clamp();d=[];for(var r=0;r<p;r+=3)for(var w=(l[r>>>2]>>>24-8(r%4)&255)<<16\|(l[r+1>>>2]>>>24-8((r+1)%4)&255)<<8\|l[r+2>>>2]>>>24-8((r+2)%4)&255,v=0;4>v&&r+0.75v<p;v++)d.push(t.charAt(w>>>6(3-v)&63));if(l=t.charAt(64))for(;d.length%4;)d.push(l);return d.join("")},parse:function(d){var l=d.length,s=this._map,t=s.charAt(64);t&&(t=d.indexOf(t),-1!=t&&(l=t));for(var t=[],r=0,w=0;w< l;w++)if(w%4){var v=s.indexOf(d.charAt(w-1))<<2(w%4),b=s.indexOf(d.charAt(w))>>>6-2(w%4);t[r>>>2]\|=(v\|b)<<24-8*(r%4);r++}return p.create(t,r)},_map:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghij
URL: https://www.giselabravo.com/lblogin/logins Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Financial Stability: Foundation for Prosperity", "prominent_button_name": "LOGIN", "text_input_field_labels": [ "Username", "Password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://www.lbpiaccess.com/javax.faces.resource/jq... Model: Joe Sandbox AI	```json { "risk_score": 1, "reasoning": "The provided JavaScript snippet is a portion of the jQuery library, which is a widely used and reputable open-source library for DOM manipulation and event handling. There are no high-risk indicators such as dynamic code execution or data exfiltration. The script does not interact with external domains or perform suspicious activities. It uses standard JavaScript practices and is intended for legitimate use, thus posing low risk." }
/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],E=C.document,r=Object.getPrototypeOf,s=t.slice,g=t.concat,u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?n[o.call(e)]\|\|"object":typeof e}var f="3.4.1",k=function(e,t){return new k.fn.init(e,t)},p=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g;function d(e){var t=!!e&&"length"in e&&e.length,n=w(e);return!m(e)&&!x(e)&&("array"===n\|\|0===t\|\|"number"==typeof t&&0<t&&t-1 in e)}k.fn=k.prototype={jquery:f,constructor:k,length:0,toArray:function(){return s.call(this)},get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=k.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return k.each(this,e)},map:function(n){return this.pushStack(k.map(this,function(e,t){return n.call(e,t,e)}))},slice:function(){return this.pushStack(s.apply(this,arguments))},first:function(){return this.eq(0)},last:function(){return this.eq(-1)},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return this.pushStack(0<=n&&n<t?[this[n]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:u,sort:t.sort,splice:t.splice},k.extend=k.fn.extend=function(){var e,t,n,r,i,o,a=arguments[0]\|\|{},s=1,u=arguments.length,l=!1;for("boolean"==typeof a&&(l=a,a=arguments[s]\|\|{},s++),"object"==typeof a\|\|m(a)\|\|(a={}),s===u&&(a=this,s--);s<u;s++)if(null!=(e=arguments[s]))for(t in e)r=e[t],"__proto__"!==t&&a!==r&&(l&&r&&(k.isPlainObject(r)\|\|(i=Array.isArray(r)))?(n=a[t],o=i&&!Array.isArray(n)?[]:i\|\|k.isPlainObject(n)?n:{},i=!1,a[t]=k.extend(l,o,r)):void 0!==r&&(a[t]=r));return a},k.extend({expando:"jQuery"+(f+Math.random()).replace(/\D/g,""),isReady:!0,error:function(e){throw new Error(e)},noop:function(){},isPlainObject:function(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t){b(e,{nonce:t&&t.nonce})},each:function(e,t){var n,r=0;if(d(e)){for(n=e.length;r<n;r++)if(!1===t.call(e[r],r,e[r]))break}else for(r in e)if(!1===t.call(e[r],r,e[r]))break;return e},trim:function(e){return null==e?"":(e+"").replace(p,"")},makeArray:function(e,t){var n=t\|\|[];return null!=e&&(d(Object(e))?k.merge(n,"string"==typeof e?[e]:e):u.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:i.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=e.length;r<n;r++)e[i++]=t[r];return e.length=i,e},grep:function(e,t,n){for(var r=[],i=0,o=e.length,a=!n;i<o;i++)!t(e[i],i)!==a&&r.push(e[i]);return r},map:function(e,t,n){var r,i,o=0,a=[];if(d(e))for(r=e.length;o<r;o++)null!=(i=t(e[o],o,n))&&a.push(i);else for(o in e)null!=(i=t(e[o],o,n))&&a.push(i);return g.apply([],a)},guid:1,support:y}),"function"==typeof Symbol&&(k.fn[Symbol.iterator]=t[Symbol.iterator]),k.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(e,t){n["[object "+t+"]"]=t.toLowerCase()});var h=function(n){var e,d,b,o,i,h,f,g,w,u,l,T,C,a,E,v,s,c,y,k="sizzle"+1*new Date,m=n.document,S=0,r=0,p=ue(),x=ue(),N=ue(),A=ue(),D=function(e,t){return e===t&&(l=!0),0},j={}.hasOwnProperty,t=[],q=t.pop,L=t.push,H=t.push,O=t.sl
URL: https://www.giselabravo.com/lblogin/logins Model: Joe Sandbox AI	{ "brands": [ "Landbank", "Overseas Filipino Bank" ] }
	{ "brands": [ "Landbank", "Overseas Filipino Bank" ] }
URL: https://www.giselabravo.com/lblogin/logins Model: Joe Sandbox AI	```json{ "legit_domain": "landbank.com", "classification": "known", "reasons": [ "The brand 'Landbank' is a known financial institution.", "The URL 'www.giselabravo.com' does not match the legitimate domain for Landbank, which is 'landbank.com'.", "The URL does not contain any recognizable elements related to Landbank.", "The presence of input fields for 'Username' and 'Password' on an unrelated domain is suspicious and indicative of phishing." ], "riskscore": 9} Google indexed: False
URL: www.giselabravo.com Brands: Landbank Input Fields: Username, Password
URL: https://www.giselabravo.com/lblogin/logins Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Financial Stability: Foundation for Prosperity", "prominent_button_name": "LOGIN", "text_input_field_labels": [ "Username", "Password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://www.giselabravo.com/lblogin/logins Model: Joe Sandbox AI	{ "brands": [ "Landbank", "Overseas Filipino Bank" ] }
	{ "brands": [ "Landbank", "Overseas Filipino Bank" ] }
URL: https://www.giselabravo.com/lblogin/logins Model: Joe Sandbox AI	```json{ "legit_domain": "landbank.com", "classification": "known", "reasons": [ "The brand 'Landbank' is a known financial institution.", "The URL 'www.giselabravo.com' does not match the legitimate domain for Landbank.", "The URL does not contain any recognizable elements related to 'Landbank'.", "The presence of input fields for 'Username' and 'Password' on an unrelated domain is suspicious.", "The domain 'giselabravo.com' does not have any known association with 'Landbank'." ], "riskscore": 9} Google indexed: False
URL: www.giselabravo.com Brands: Landbank Input Fields: Username, Password
URL: https://www.giselabravo.com/lblogin/otp-entry Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "For added security, please enter the One-Time PIN sent to your mobile.", "prominent_button_name": "Submit", "text_input_field_labels": "One-Time PIN", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://www.giselabravo.com/lblogin/otp-entry Model: Joe Sandbox AI	{ "brands": [ "Landbank", "Overseas Filipino Bank" ] }
	{ "brands": [ "Landbank", "Overseas Filipino Bank" ] }
URL: https://www.giselabravo.com/lblogin/otp-entry Model: Joe Sandbox AI	```json{ "legit_domain": "landbank.com", "classification": "known", "reasons": [ "The brand 'Landbank' is a known financial institution.", "The URL 'www.giselabravo.com' does not match the legitimate domain for Landbank, which is 'landbank.com'.", "The URL does not contain any recognizable elements related to Landbank.", "The presence of a One-Time PIN input field is common in phishing attempts targeting financial institutions.", "The domain 'giselabravo.com' does not appear to be associated with Landbank in any known capacity." ], "riskscore": 9} Google indexed: False
URL: www.giselabravo.com Brands: Landbank Input Fields: One-Time PIN

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Jan 14 22:26:23 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9707767367731517
Encrypted:	false
SSDEEP:	48:8AdfTXLi7HqidAKZdA19ehwiZUklqehVy+3:8gHiEay
MD5:	8CFFE74EAB3FA609427DCD1CE8AA3AC7
SHA1:	9E5628BB4AABBC1C14B9C9A4571BF0526E57A1C4
SHA-256:	9DC00B5501879C67696D61C291BA5A436DDB2D36785828C56130314EBBEB6CBA
SHA-512:	BEEBF25888F408C574327C8BACF8E29DD5B68651FD37A59FDA17CD6702BE63A8AA6E09DE5C5D6A52B82BCDF89567785DA97BD6A03E92B4ADF69491DF140E816D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....i.s..f..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.ZI.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.ZI.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.ZI.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.ZI............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.ZL............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........%F:......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Jan 14 22:26:23 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9876221364766584
Encrypted:	false
SSDEEP:	48:85dfTXLi7HqidAKZdA1weh/iZUkAQkqehKy+2:8zHi29Q/y
MD5:	60042C3C6B10427EE537CAADF9B89C0B
SHA1:	437A27DB1768A7CF319D3AE61129FC73EFEB23EC
SHA-256:	93318EC16AB26E309BAD8E785FA0C02E5CA7BE23F430ED9AD3772E16279FEDF4
SHA-512:	024A83C3264B2BFECB85C1EF46FA2086ABE6C3006C970AE5B89962DCDCEE1C966939212DC4AE82103E219493E568AE67517579EC4A40D9A72A95E4229730BB80
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......g..f..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.ZI.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.ZI.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.ZI.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.ZI............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.ZL............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........%F:......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.0024042473536605
Encrypted:	false
SSDEEP:	48:8xUdfTXLsHqidAKZdA14tseh7sFiZUkmgqeh7sEy+BX:8xMH3ney
MD5:	F720037866F2A02752B555DF37E76768
SHA1:	0250D3F441205DE3D96A15841C8F47F7A37F311B
SHA-256:	EBBAFF2F205C3ECB86820204D7754343648A71D7C81F28C29649B4CA645D2C0D
SHA-512:	1BB2FE2EF2853222AF3F46435EE87EC4F9FD387EC47163FE40D79DDEDD5782DA582CB3A9C3E7DA172A1870E3D30BDA2B1C95A1263C82D567B4B2FA91FCF376C3
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.ZI.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.ZI.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.ZI.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.ZI............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........%F:......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Jan 14 22:26:23 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9849878049725653
Encrypted:	false
SSDEEP:	48:8gdfTXLi7HqidAKZdA1vehDiZUkwqehmy+R:8AHidMy
MD5:	DC5C31716C7943D0285BF6132A81C407
SHA1:	A69BDFE72E496F1389EF122A71FF8B4039FB7B85
SHA-256:	2E04CDE5BFAA205D6EE5B5D2D8088BAB8A19775B505339D29C9B50E99CE5BDA8
SHA-512:	F25A22A112D3BDDD59EC030B7D8B1F6CF327CAC5FD42E72143A6A99243EE90A5582A9762365CA77267D72B6011B9945C15AB4FE33AF556E4D422EA4AD1D4CBAF
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....S.`..f..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.ZI.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.ZI.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.ZI.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.ZI............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.ZL............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........%F:......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Jan 14 22:26:23 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9726112190711884
Encrypted:	false
SSDEEP:	48:8rdfTXLi7HqidAKZdA1hehBiZUk1W1qeh4y+C:8RHi99Yy
MD5:	5265D219416C08EA7216C9505FD2FCE4
SHA1:	6BC4A3A59F5D90E1868071B8D9C2D7FBB32787FC
SHA-256:	7B27E42F72F6915E7A3EB3616B0221CD89120F22F5533F16BC94B206FEE8A21D
SHA-512:	1D7C8A737BEAABA233A6BC179B9D0B58202A133B9E3D8DCB97EB39CC558EE9C853FE3EE5B0970B251E76FE7EC299573747F61215C28CBB11332056C4CCAF391B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....f.l..f..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.ZI.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.ZI.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.ZI.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.ZI............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.ZL............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........%F:......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Jan 14 22:26:23 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.984812513844939
Encrypted:	false
SSDEEP:	48:8ZdfTXLi7HqidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbey+yT+:8THiBT/TbxWOvTbey7T
MD5:	9E2D6A5DBE6FF24F2D5DE861DC95A009
SHA1:	254E1906F97C4CB0FEA9734186C19EFEF8D7947C
SHA-256:	5E3CA6C6D64AF3CE5E4BAC527C2329DC30066013AC63D300916B36DC31321608
SHA-512:	1D4352DBDE14B453677F4B6B167C5A55EAB2A6575825D62C46CB15EDABBF8FE9E6DA93265838B632C05B82E4B66D95DA8E68203E575B889D7CFFAE6BA51AB700
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....DW..f..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.ZI.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.ZI.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.ZI.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.ZI............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.ZL............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........%F:......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (604), with no line terminators
Category:	downloaded
Size (bytes):	604
Entropy (8bit):	5.149156930869804
Encrypted:	false
SSDEEP:	12:dXgXq4yvf9M66Vx/AdWyWeGlxxInF5B4MdBdy4IzVe:dXsbzBAd7WeGfeF5BBdBc4IzVe
MD5:	3AF1FE0D407F89E1E3ABE531DE78CFF2
SHA1:	62024C21A573889A2B39E0354E0B877A1137B124
SHA-256:	D88DB257247405B2EF627ABB593E4D6C77E2F6105E4AA5407D476CC46072AF86
SHA-512:	2D17414111DF24FC5A277EEFB9FCDC58C7A2233CEAAAE0DA3E19FAE42FF4ADE4AB8EBD1C5E58AE5D8559FDCB596DD02495E81626EFAD169E5ACA3602975CD711
Malicious:	false
Reputation:	low
URL:	https://www.lbpiaccess.com/javax.faces.resource/app/login.min.js.xhtml?ln=scripts
Preview:	var _0x2094=['val','#password','#pi','#ki'];(function(_0x698c30,_0x209403){var _0x37db10=function(_0x5c67fc){while(--_0x5c67fc){_0x698c30['push'](_0x698c30['shift']());}};_0x37db10(++_0x209403);}(_0x2094,0x19c));var _0x37db=function(_0x698c30,_0x209403){_0x698c30=_0x698c30-0x0;var _0x37db10=_0x2094[_0x698c30];return _0x37db10;};var Login=function(){var _0x5c67fc=function(){var _0x5522e6=_0x37db;$(_0x5522e6('0x2'))['val'](ClientHash['enc']($(_0x5522e6('0x1'))[_0x5522e6('0x0')](),$(_0x5522e6('0x3'))['val']())),$(_0x5522e6('0x1'))[_0x5522e6('0x0')]('');};return{'submit':function(){_0x5c67fc();}};}();

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	88144
Entropy (8bit):	5.290986223370378
Encrypted:	false
SSDEEP:	1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPmw:ygZm0H5HO5+gCKWZyPmHQ47GKc
MD5:	F832E36068AB203A3F89B1795480D0D7
SHA1:	2115753CA5FB7032AEC498DB7BB5DCA624DBE6BE
SHA-256:	4C24DFD28784AD2BEFB3DAFAAC6BF1ED4E7CD58CCE713D9A0B228D426E812BAF
SHA-512:	B9DBC08C984AE3C7FD44822EC2E9A22CB8CF7DA55FA3975DBBDC3F18FD7E7A7793E8D93604826574E3DD6A4F982D7AF4F96C1AF5E10D847B8394A34A82C398BA
Malicious:	false
Reputation:	low
URL:	https://www.lbpiaccess.com/javax.faces.resource/jquery/jquery.js.xhtml?ln=primefaces&v=8.0
Preview:	/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],E=C.document,r=Object.getPrototypeOf,s=t.slice,g=t.concat,u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?n[o.call(e)]\|\|"object":typeof e}var

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17009)
Category:	downloaded
Size (bytes):	96056
Entropy (8bit):	4.875213763880142
Encrypted:	false
SSDEEP:	1536:s57HrxQLjy9HyXNoNiNTN/hQtBQIYOH9iveVnHQO:GJQgQO
MD5:	4E625093B5D2BFF09F416FB9DB0409D9
SHA1:	70E66B922D701B4AFBFD6101306D047379408DE6
SHA-256:	EA45AE10D0E966BD5B1714FE28621DD23FA3769F63BF03FFBED0E66D2A6F1D05
SHA-512:	6C0AFBC9323BA71B8ED2075AB64642F1A239C5E8BD910BE83B32334F011B2812E5659FF1436FA4A9A542865E0058C0C058EA701131BFE5724BF76AD1A6C2E3C3
Malicious:	false
Reputation:	low
URL:	https://www.lbpiaccess.com/javax.faces.resource/components.css.xhtml?ln=primefaces&v=8.0
Preview:	.ui-helper-hidden-accessible input,.ui-helper-hidden-accessible select{-webkit-transform:scale(0);-moz-transform:scale(0);-ms-transform:scale(0);transform:scale(0)}.ui-shadow{-moz-box-shadow:0 5px 10px rgba(0,0,0,0.8);-webkit-box-shadow:0 5px 10px rgba(0,0,0,0.8);box-shadow:0 5px 10px rgba(0,0,0,0.8)}.ui-overlay-visible{visibility:visible}ui-overlay-visible {visibility:visible!important}.ui-overlay-hidden{visibility:hidden}.ui-overlay-hidden {visibility:hidden!important}.ui-overflow-hidden{overflow:hidden}.ui-datepicker .ui-datepicker-current.ui-priority-secondary{opacity:1}.ui-icon-blank{background-position:16px 16px}@media only all{th.ui-column-p-6,td.ui-column-p-6,th.ui-column-p-5,td.ui-column-p-5,th.ui-column-p-4,td.ui-column-p-4,th.ui-column-p-3,td.ui-column-p-3,th.ui-column-p-2,td.ui-column-p-2,th.ui-column-p-1,td.ui-column-p-1{display:none}}@media screen and (min-width:20em){th.ui-column-p-1,td.ui-column-p-1{display:table-cell}}@media screen and (min-width:30em){th.ui-column-p

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1776), with no line terminators
Category:	dropped
Size (bytes):	1776
Entropy (8bit):	5.063248990547699
Encrypted:	false
SSDEEP:	48:+JWwbvZAVscbFd05gADnly238ENAzZz6hQUNbBCKe:+JW4vZAVsASSenlyEN8p62UtQKe
MD5:	04345F2E4A8F7DB3E5C31DF14459234D
SHA1:	3E9EB80725E53BD8CFF5708B9E1793AC63FA3621
SHA-256:	1B975A25337A9445C1F797A5057D1DA9AA82BEB8EB0AB0882CA283BD139AF4F0
SHA-512:	E4446F21A2C5EE38102F05B7B92859BAF0B1EA654797F88AE7EB630E2E1AEE8F0470E66732EE5266FBEB6E726F00132FBD7498BC0746809F05B6096C4991E306
Malicious:	false
Reputation:	low
Preview:	var _0x1cf3=['enc','toString','length','Base64','parse','encrypt','substr','SHA256','AES'];(function(_0x20bbe6,_0x1cf3e6){var _0x3104fc=function(_0x316c32){while(--_0x316c32){_0x20bbe6['push'](_0x20bbe6['shift']());}};_0x3104fc(++_0x1cf3e6);}(_0x1cf3,0x18d));var _0x3104=function(_0x20bbe6,_0x1cf3e6){_0x20bbe6=_0x20bbe6-0x0;var _0x3104fc=_0x1cf3[_0x20bbe6];return _0x3104fc;};var ClientHash=function(){var _0x316c32=function(_0x58d950,_0x3d7dd9,_0x28d149){var _0x5ea972=_0x3104,_0x56aa1=_0x58d950,_0x4bbd87=_0x3d7dd9,_0x3fe201=_0x28d149,_0x3989b4=_0x56aa1['substr'](0x0,_0x58d950[_0x5ea972('0x1')]/0x2),_0x3fc7fe=_0x56aa1[_0x5ea972('0x5')](_0x3989b4[_0x5ea972('0x1')]),_0x484176=_0x4bbd87[_0x5ea972('0x5')](0x0,_0x3d7dd9[_0x5ea972('0x1')]/0x2),_0x365f65=_0x4bbd87[_0x5ea972('0x5')](_0x484176['length']);return _0x56aa1=_0x3fc7fe+_0x365f65+_0x3989b4+_0x484176,_0x56aa1=CryptoJS[_0x5ea972('0x6')](_0x56aa1)[_0x5ea972('0x0')](),_0x28d149['length']>0x0&&(_0x484176=_0x3fe201[_0x5ea972('0x5')](0x0,_0x3fe

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.2359263506290326
Encrypted:	false
SSDEEP:	3:VB/LiF0NY:VB/Lu
MD5:	0C83448A0082305D71AEBE5807FF54EE
SHA1:	8D1E4DF95EE4DEF051A5A7028D28D99943C7F7B5
SHA-256:	E177E5A5DE28D9FFD3A98F528D74F2ADE9889A2341D678FB8B3DCC325D4897D0
SHA-512:	357DE8BD4069B32F7356984ABB962CAC67E122D02C29E4F9767F1DE5F2D01FE6631382D8EB6116F97F914EE1F4C14FC0046C91052512A928CBFA57567EA782B1
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwklMjIv0CV67hIFDWp1l1cSBQ3Fk8Qk?alt=proto
Preview:	ChIKBw1qdZdXGgAKBw3Fk8QkGgA=

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 1280x720, components 3
Category:	dropped
Size (bytes):	195728
Entropy (8bit):	7.95965563946083
Encrypted:	false
SSDEEP:	3072:a9fshGsO1FIIKjW4Zfz41KyKeOsZLOJSphcvVd1633Bs1ZgpXCRNs6JriEcUrTPK:a9wTI5Uz4ZTCJ2hOVb63WZsXCs6JriEG
MD5:	6F741F4104BD3611B93A0374CC68E62F
SHA1:	E71E6CE44811A17C0C5682117494179F22488ABD
SHA-256:	59877905222848D7432553C370F460F3A238A0E7731CB2044CB6F7173CA55783
SHA-512:	51362CAA77C4AB71674FAEF066CBA752DD8A1485ACD688C1A2108DAF4B36712BD6A7E139BA476A6FC157774D8E6653488536025B11427BE157E0645679FDF5EB
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:cf647c0b-b40e-456a-94b9-ca19d9e730c5" xmpMM:DocumentID="xmp.did:EF7AE0BDA9F111EEA20CE209F2C7E485" xmpMM:InstanceID="xmp.iid:EF7AE0BCA9F111EEA20CE209F2C7E485" xmp:CreatorTool="Adobe Photoshop 21.0 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:51687cf8-2d99-df47-9937-6d15cea6f867" stRef:documentID="adobe:docid:photoshop:e34c3004-8bba-ea4d-aa51-5c4acdf45f75"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...&Adobe.d................{..Q........

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	dropped
Size (bytes):	88144
Entropy (8bit):	5.290986223370378
Encrypted:	false
SSDEEP:	1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPmw:ygZm0H5HO5+gCKWZyPmHQ47GKc
MD5:	F832E36068AB203A3F89B1795480D0D7
SHA1:	2115753CA5FB7032AEC498DB7BB5DCA624DBE6BE
SHA-256:	4C24DFD28784AD2BEFB3DAFAAC6BF1ED4E7CD58CCE713D9A0B228D426E812BAF
SHA-512:	B9DBC08C984AE3C7FD44822EC2E9A22CB8CF7DA55FA3975DBBDC3F18FD7E7A7793E8D93604826574E3DD6A4F982D7AF4F96C1AF5E10D847B8394A34A82C398BA
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],E=C.document,r=Object.getPrototypeOf,s=t.slice,g=t.concat,u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?n[o.call(e)]\|\|"object":typeof e}var

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (604), with no line terminators
Category:	dropped
Size (bytes):	604
Entropy (8bit):	5.149156930869804
Encrypted:	false
SSDEEP:	12:dXgXq4yvf9M66Vx/AdWyWeGlxxInF5B4MdBdy4IzVe:dXsbzBAd7WeGfeF5BBdBc4IzVe
MD5:	3AF1FE0D407F89E1E3ABE531DE78CFF2
SHA1:	62024C21A573889A2B39E0354E0B877A1137B124
SHA-256:	D88DB257247405B2EF627ABB593E4D6C77E2F6105E4AA5407D476CC46072AF86
SHA-512:	2D17414111DF24FC5A277EEFB9FCDC58C7A2233CEAAAE0DA3E19FAE42FF4ADE4AB8EBD1C5E58AE5D8559FDCB596DD02495E81626EFAD169E5ACA3602975CD711
Malicious:	false
Reputation:	low
Preview:	var _0x2094=['val','#password','#pi','#ki'];(function(_0x698c30,_0x209403){var _0x37db10=function(_0x5c67fc){while(--_0x5c67fc){_0x698c30['push'](_0x698c30['shift']());}};_0x37db10(++_0x209403);}(_0x2094,0x19c));var _0x37db=function(_0x698c30,_0x209403){_0x698c30=_0x698c30-0x0;var _0x37db10=_0x2094[_0x698c30];return _0x37db10;};var Login=function(){var _0x5c67fc=function(){var _0x5522e6=_0x37db;$(_0x5522e6('0x2'))['val'](ClientHash['enc']($(_0x5522e6('0x1'))[_0x5522e6('0x0')](),$(_0x5522e6('0x3'))['val']())),$(_0x5522e6('0x1'))[_0x5522e6('0x0')]('');};return{'submit':function(){_0x5c67fc();}};}();

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13741)
Category:	dropped
Size (bytes):	43094
Entropy (8bit):	5.380851481103599
Encrypted:	false
SSDEEP:	768:gAsfkoI+hTE8fnWX7d6wk9A4UEGLjXN5UFeKbq3XQHnR4bgeMSHhNO1E:gAe9I8fnWX7d6woFUEGLLNceKKI+
MD5:	772AF05D930A17F2BFCC009444CCF398
SHA1:	6F54B72F507381FF3691412DACA9A0F1B3787D59
SHA-256:	40509D57086C720AA07557E34AE53097BD9CDD44A362DA9D523FF00893D49537
SHA-512:	A6A27E874C37D7DC4D3C217A93FD28166C1B16D5EC6311C7EB1B8A05C55E040E44DA13B23176882B43AE7084FAA742A4C2F8A1DDA18C703303A76C68251D1293
Malicious:	false
Reputation:	low
Preview:	/!. jQuery Browser Plugin 0.1.0. * https://github.com/gabceb/jquery-browser-plugin. . Original jquery-browser code Copyright 2005, 2015 jQuery Foundation, Inc. and other contributors. * http://jquery.org/license. . Modifications Copyright 2015 Gabriel Cebrian. * https://github.com/gabceb. . Released under the MIT license. . Date: 05-07-2015. /.(function(a){if(typeof define==="function"&&define.amd){define(["jquery"],function(b){return a(b)})}else{if(typeof module==="object"&&typeof module.exports==="object"){module.exports=a(require("jquery"))}else{a(window.jQuery)}}}(function(b){function a(d){if(d===undefined){d=window.navigator.userAgent}d=d.toLowerCase();var j=/(edge)\/([\w.]+)/.exec(d)\|\|/(opr)[\/]([\w.]+)/.exec(d)\|\|/(chrome)[ \/]([\w.]+)/.exec(d)\|\|/(iemobile)[\/]([\w.]+)/.exec(d)\|\|/(version)(applewebkit)[ \/]([\w.]+).(safari)[ \/]([\w.]+)/.exec(d)\|\|/(webkit)[ \/]([\w.]+).(version)[ \/]([\w.]+).(safari)[ \/]([\w.]+)/.exec(d)\|\|/(webkit)[ \/]([\w.]+)/.exec(d)\|\|/(ope

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25236), with no line terminators
Category:	downloaded
Size (bytes):	25236
Entropy (8bit):	5.415358051384796
Encrypted:	false
SSDEEP:	768:km+f1voM2OjUgEujc4Ksng+z8gq5tNOI2bIqMY9Q0J:kf1voM2OjU5sJT
MD5:	23890911881B913B518FE813362E4093
SHA1:	83E873F9560C3435B287312ADE1A746D5D520661
SHA-256:	8C49A11B7B5A7B51D2982AB6D7FF931A7F09AD5FCC319723F26168EA97E610EF
SHA-512:	80F5835E987D1B55A40FE00FCE2064BD3754A7CDE96F9670D5B3AE4D8475F9720F336C55D7EA43B57AA6B2BDEC8759A9051852488F4D3D7FF3655DE06134A647
Malicious:	false
Reputation:	low
URL:	https://www.lbpiaccess.com/javax.faces.resource/validation/validation.js.xhtml?ln=primefaces&v=8.0
Preview:	if(window.PrimeFaces){$.extend(PrimeFaces.locales.en_US,{decimalSeparator:".",groupingSeparator:",",messages:{"javax.faces.component.UIInput.REQUIRED":"{0}: Validation Error: Value is required.","javax.faces.converter.IntegerConverter.INTEGER":"{2}: '{0}' must be a number consisting of one or more digits.","javax.faces.converter.IntegerConverter.INTEGER_detail":"{2}: '{0}' must be a number between -2147483648 and 2147483647 Example: {1}","javax.faces.converter.LongConverter.LONG":"{2}: '{0}' must be a number consisting of one or more digits.","javax.faces.converter.LongConverter.LONG_detail":"{2}: '{0}' must be a number between -9223372036854775808 to 9223372036854775807 Example: {1}","javax.faces.converter.DoubleConverter.DOUBLE":"{2}: '{0}' must be a number consisting of one or more digits.","javax.faces.converter.DoubleConverter.DOUBLE_detail":"{2}: '{0}' must be a number between 4.9E-324 and 1.7976931348623157E308 Example: {1}","javax.faces.converter.BigDecimalConverter.DECIMAL":"

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	6989
Entropy (8bit):	5.158258978256946
Encrypted:	false
SSDEEP:	96:IM1VqXUQv83je3KWO6Di8SgdYt88koZA8/srH+qE3HB9Ebx5qomuGB2+WF+GlfZP:I6jellSgdYtvZhrsG2GB2+SdNbSBA
MD5:	8A4B9B415EAD807E45D3D3075A161672
SHA1:	C5C83F11DA437C07D9EDC7449111CCDAB92F9F99
SHA-256:	D5C1E4CFFF176A6B91FB8BCDF9244C70008B38371B40BE255D5545ED3546E0EB
SHA-512:	A445D78FF3B5DC9394300C5BBD2231514CDDBAEC3CBEAED413FF41DE082929C1CAC329257A6F4A30032BDAD8EEFEF0127C7B7BEB68957CEF0CC001DB39672E1A
Malicious:	false
Reputation:	low
Preview:	...................... ........ss_ua = navigator.userAgent.toLowerCase();..ss_opera = window.opera;..ss_msie = (!ss_opera) && (ss_ua.indexOf("msie") != -1);..ss_msie4 = (!ss_opera) && (ss_ua.indexOf("msie 4") != -1);..ss_ns4 = (!ss_opera) && (ss_ua.indexOf("mozilla/4") != -1) && (ss_ua.indexOf("compatible") == -1);..ss_ns6 = (!ss_opera) && (ss_ua.indexOf("netscape6/6.0") != -1);........ss_opera6lower = (ss_opera) && parseFloat(ss_ua.substr(ss_ua.indexOf("opera")+6)) < 7;..ss_no_dyna_script = ss_opera6lower;....ss_domain = "ssif1.globalsign.com"..ss_fqdn = "www.giselabravo.com"..ss_size = "SZ125-50"..ss_type = "image"..ss_lang = "en"..ss_ver = "V0023"..ss_service = "S001"..ss_protocol = "https"..ss_width = ""..ss_height = ""..ss_deter_dn = ""..ss_imageLocation = "//" + ss_domain + "/SiteSeal/siteSeal/siteSeal/siteSealImage.do?p1=" + ss_fqdn +

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	6.101444055410562
Encrypted:	false
SSDEEP:	24:NsaFR2+28jO3IHlfPuB12vyKFapJb7O1aXmuZEpE5ePx9RE1vw:Nsa32+2o+LiJgt8DpGw
MD5:	A3E5B50FA24DC39773107EB827604FBF
SHA1:	D290EE2B5110FE454F01F217F0E69CF8FF2A2CAD
SHA-256:	06C9AD91CF91E1E3FDB85AF3CBEC9A90D19FFC103FF4C35E4B0079A3A0B16A73
SHA-512:	B4FDC739ECC74870412C6624240E3C4CB8BA7EA81F6114F3122BA9B6B795E04E5838962AC0F040FCFBBEC19B1B8B0610AB70836C913F076223A1AE75BF289629
Malicious:	false
Reputation:	low
URL:	https://www.lbpiaccess.com/resources/images/favicon.ico
Preview:	............ .h.......(....... ..... ...................................O...T.f.MIW.g.U...N.e.N.h.U...Z.`.j.1I..0...2.............E...w.F.X.(.N.E.K...J...K...J...J...J.g.M.7.X.X.v.K.H.......n.0.~...T.T.K...J.w.J.a.J.v.K.u.K.j.J.Q.K.N.K.y.K.k.S.&.\|.8.m.....V.Z.<.J.=.J.r.J...K...L.w.K.h.K.`.L.[.K.r.K...K...K...Z.^...?.n.HGN...K...K...K.x.K.f.J.].K.w.J.m.K.5.K..J.:.K.W.J...N.b.q.?IY.(.J.N.J.l.K.Q.J.8.J.s.L...K...K...L...K.f.J...K...J...I...Y.".a.+.M...J...J...K...K...K...K.[.K.[.K...K...K...J...J...M...a.,._.(.O...J...K.>.K...K...K...I.;.J.;.K...K...L...K.>.J...O..._.'.P...L...J...J.u.K...L...K...K...K...K...L...K...K.v.J...L...Q...q.@KS...I...K.u.K...J.c.J.e.L...L...K.g.K.c.K...K.u.I...S...o.<K^.&.N...K...J...I...J...K...K...K...K...J...I...I...J...N...^.&.x.F l.8nL...J...J...J...K...K...K...K...J...J...J...L...l.8nw.F ....`.+mP...O...J...J...J.U.K...L...K.W.J...J...O...P...a.m....V.....^.x.G9U...J...K...J...K...K...I...J...J...U...x.H9..].U.......u.C...W.\.%ze./yR...O...N...O...O...R.

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31098)
Category:	downloaded
Size (bytes):	31260
Entropy (8bit):	4.754719437714521
Encrypted:	false
SSDEEP:	384:EoK5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaUX:ETlr+Klk3Yi+fwYUf2l8yQ/e9vX
MD5:	E24A71588C36C473AAE042E8257E2B9A
SHA1:	148C5CC3ED4FE0AE696CA57027850E492E731454
SHA-256:	543217779BAD7D72145FE9E17624F068F3870BD5BB347E822339BA26F4C8F64A
SHA-512:	1C61203600B3B3419178091CBF621E21DEA28519E15B53461A32402D01641982F7506C4960B21B6250F66948E88939BD36A91EC22209510F2428688B29617FB3
Malicious:	false
Reputation:	low
URL:	https://www.lbpiaccess.com/javax.faces.resource/fa/font-awesome.css.xhtml?ln=primefaces&v=8.0
Preview:	/!. Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). */@font-face{font-family:'FontAwesome';font-display:auto;src:url("/javax.faces.resource/fa/fontawesome-webfont.eot.xhtml?ln=primefaces&v=8.0?v=4.7.0");src:url("/javax.faces.resource/fa/fontawesome-webfont.eot.xhtml?ln=primefaces&v=8.0&#iefix&v=4.7.0") format('embedded-opentype'),url("/javax.faces.resource/fa/fontawesome-webfont.woff2.xhtml?ln=primefaces&v=8.0?v=4.7.0") format('woff2'),url("/javax.faces.resource/fa/fontawesome-webfont.woff.xhtml?ln=primefaces&v=8.0?v=4.7.0") format('woff'),url("/javax.faces.resource/fa/fontawesome-webfont.ttf.xhtml?ln=primefaces&v=8.0?v=4.7.0") format('truetype'),url("/javax.faces.resource/fa/fontawesome-webfont.svg.xhtml?ln=primefaces&v=8.0?v=4.7.0#fontawesomeregular") format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 508, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	16755
Entropy (8bit):	7.9757414204084
Encrypted:	false
SSDEEP:	384:Tdgk731LaMW7NKnbxHIQCb7m8YPc5qEJZU2pWxSml1F4SOZP:51LadN6NCbS8YPafJZbsxSqb45ZP
MD5:	93D46004C954437039DB089DD097EB38
SHA1:	61BED313EE1EFA40DA3E9C18FBFA7CA214190DE7
SHA-256:	4C5C882C57946ED56E325D16C508BE939D9B46936B958DF23EE8B42BAB1F1BAC
SHA-512:	3FA7402F517CC9944DE5C46441E3755FFDC1F6408812AE3BB2685953AF0944586D35BAECC1F44037BD65EC0AFC18A6B51E0485BA99A21059E1DE5158BA4B1BAE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ..............A:IDATx..W..$K.=.==...{...m.m.m....w..;w...dEw..y.}..Q.U.'3OeW.A.......{...2...{..D"f.......ObY.6...y...................5j..x4..(...}..?..J.X.noo.5k....;.Q.?S...D..?.#N...+/.3f.P.r..j.V..8.Q..5.9P...e.Rn..y..>}..o..3g..k....W^y.I..aI....:P.\|..n.;v.P....y.P..e.p\.tK.9..q..}...L6.AgG.Z.\|...Zk...{...'.X$....{..8.....`.R.X&s._....Np.\|..j@...b]..V..r...V"'..=....+W"...6.pC..W_}..8K8.s..F...6[..!a[......GQ..`....~.....V_0....%:4^..r.....~..n......X.b..b..0.k.......}.q.D..x...wb..z#y./Y...(e3(.3.9n.[..9..V...".\.E.TBz.\.x.%..H .4Vrm2........@<N............M..i...`...Gb.....DU.%G<...X.`".t.~...(U...PX....Ku$...`.G....Jn."...C'./....M.8..........i........#.wJ....qh.e..{..l...y.../..Km.G..mz........1..n..=...F..L..ou.i....D..DJ.k.u..........T..;.M....#...I....h{.....D......~.5...O.`...p.^..s....\|......X..a1U.LF.4......(1bE._N.D..z.P'.RD...d.$zPb.w..*..2..R.1..m.....Tmt.I:...4\|.@.....Sh..U.D.........f^A.0U...L..

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 1280x720, components 3
Category:	downloaded
Size (bytes):	195728
Entropy (8bit):	7.95965563946083
Encrypted:	false
SSDEEP:	3072:a9fshGsO1FIIKjW4Zfz41KyKeOsZLOJSphcvVd1633Bs1ZgpXCRNs6JriEcUrTPK:a9wTI5Uz4ZTCJ2hOVb63WZsXCs6JriEG
MD5:	6F741F4104BD3611B93A0374CC68E62F
SHA1:	E71E6CE44811A17C0C5682117494179F22488ABD
SHA-256:	59877905222848D7432553C370F460F3A238A0E7731CB2044CB6F7173CA55783
SHA-512:	51362CAA77C4AB71674FAEF066CBA752DD8A1485ACD688C1A2108DAF4B36712BD6A7E139BA476A6FC157774D8E6653488536025B11427BE157E0645679FDF5EB
Malicious:	false
Reputation:	low
URL:	https://www.giselabravo.com/lblogin/login_advisory.jpg
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:cf647c0b-b40e-456a-94b9-ca19d9e730c5" xmpMM:DocumentID="xmp.did:EF7AE0BDA9F111EEA20CE209F2C7E485" xmpMM:InstanceID="xmp.iid:EF7AE0BCA9F111EEA20CE209F2C7E485" xmp:CreatorTool="Adobe Photoshop 21.0 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:51687cf8-2d99-df47-9937-6d15cea6f867" stRef:documentID="adobe:docid:photoshop:e34c3004-8bba-ea4d-aa51-5c4acdf45f75"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...&Adobe.d................{..Q........

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 125 x 50
Category:	downloaded
Size (bytes):	2212
Entropy (8bit):	7.7139032594157655
Encrypted:	false
SSDEEP:	48:w0l0D+7fTXSXST+tTCwako+S692isOX3r5Ae46k1xz1nU:dlrf7SXST+tCwaC9QOrqEk1VC
MD5:	10118E88DE5721448EA066AB013CDD16
SHA1:	E65C34557655FCD80E0DAC881733E25E8FA0CB27
SHA-256:	002D436D5DD4334F54512EE7484A44FFBCBB9A5047ADD9890789BD5379DF195C
SHA-512:	27A86174D2B66E3945A1A8F1ADD23BE07E134C094ADCA801F60AF14ED223B6293474DB0AAC83F8AE6FC95552D6C10C773F14093103EAC7875550C9501D99B2AF
Malicious:	false
Reputation:	low
URL:	https://seal.globalsign.com/SiteSeal/images/gs_noscript_125-50_en.gif
Preview:	GIF89a}.2..?........f.......DDD..............333.............@..www......fff........."""...............{{{VVV............0.........p.`....... y.p....P..===........BBB.................................!...,.?.,....}.2...j..pH,...r.l:..tJ.Z..v..z..xL....z.n...\|N.....~....................................................bA.!.....?.,....r.-......X4..I.I.\(...9x6.$)1$1..oX.`....I.Pi...p.`7....1h(..F:.HRP..Y......!.......!.9..V..,F....DL!.6<....F..82#rK..#{)-9._ZJ\.\d<.6...,0P...G.W(.,P-^.X.$.L...y_J..H".#:+....Z".0."..#........Vl. .Z..V$9.J..Eo8........ .(...*.G"..I...d.N.<.-.uJB.........&$.!...0z..&I...P! ..]1{.x.O.....)J..&;4.j.8Vi.....f@HR........:6d.=.P..HGc.3...A_.C.)..W....._.e.--.r......P.C\,R....(8..'.....T.Kp.+=..g....j..i5.%.......y.JDh!2).@;.v........'..O33V.B6..-......84*..PT{.PC.6L(I..TPA....A'.8p....`.....kB!L.....&...".Xa..08......."..k.eh..-..I......BJC......""&...%.0!.......... ......@E&...........Q.?..Y........N............$.8 ............

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 508, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	16755
Entropy (8bit):	7.9757414204084
Encrypted:	false
SSDEEP:	384:Tdgk731LaMW7NKnbxHIQCb7m8YPc5qEJZU2pWxSml1F4SOZP:51LadN6NCbS8YPafJZbsxSqb45ZP
MD5:	93D46004C954437039DB089DD097EB38
SHA1:	61BED313EE1EFA40DA3E9C18FBFA7CA214190DE7
SHA-256:	4C5C882C57946ED56E325D16C508BE939D9B46936B958DF23EE8B42BAB1F1BAC
SHA-512:	3FA7402F517CC9944DE5C46441E3755FFDC1F6408812AE3BB2685953AF0944586D35BAECC1F44037BD65EC0AFC18A6B51E0485BA99A21059E1DE5158BA4B1BAE
Malicious:	false
Reputation:	low
URL:	https://www.lbpiaccess.com/javax.faces.resource/messages/messages.png.xhtml?ln=primefaces&v=8.0
Preview:	.PNG........IHDR... ..............A:IDATx..W..$K.=.==...{...m.m.m....w..;w...dEw..y.}..Q.U.'3OeW.A.......{...2...{..D"f.......ObY.6...y...................5j..x4..(...}..?..J.X.noo.5k....;.Q.?S...D..?.#N...+/.3f.P.r..j.V..8.Q..5.9P...e.Rn..y..>}..o..3g..k....W^y.I..aI....:P.\|..n.;v.P....y.P..e.p\.tK.9..q..}...L6.AgG.Z.\|...Zk...{...'.X$....{..8.....`.R.X&s._....Np.\|..j@...b]..V..r...V"'..=....+W"...6.pC..W_}..8K8.s..F...6[..!a[......GQ..`....~.....V_0....%:4^..r.....~..n......X.b..b..0.k.......}.q.D..x...wb..z#y./Y...(e3(.3.9n.[..9..V...".\.E.TBz.\.x.%..H .4Vrm2........@<N............M..i...`...Gb.....DU.%G<...X.`".t.~...(U...PX....Ku$...`.G....Jn."...C'./....M.8..........i........#.wJ....qh.e..{..l...y.../..Km.G..mz........1..n..=...F..L..ou.i....D..DJ.k.u..........T..;.M....#...I....h{.....D......~.5...O.`...p.^..s....\|......X..a1U.LF.4......(1bE._N.D..z.P'.RD...d.$zPb.w..*..2..R.1..m.....Tmt.I:...4\|.@.....Sh..U.D.........f^A.0U...L..

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (548), with CRLF line terminators
Category:	downloaded
Size (bytes):	13395
Entropy (8bit):	5.646518755777253
Encrypted:	false
SSDEEP:	192:IixCtGD7DT90dPtz8Ui0m5qI1I5QIlTrz6h8oGmHV+mOKIfyAgCYf1nNVYTUUFJG:R6ix03z8UiF/1SQODgXJHaKI1XxZ6A6
MD5:	11C5114E2A1FACE42DE239B2B17943FB
SHA1:	A56FF0CB2CAFAA41BC5A892CC780BBBFD5D8452A
SHA-256:	A0A28D71883D6791D7FEB6C8BA3CA3FB089994F4CF111A34ED78AE803A638C3B
SHA-512:	52F9342EE4B90909498F9C52E9CA90C3AF09C8B277086159150ADC6580BC91E1EE3F42E185E733D1DD2425F65765769AF32F32227D587185EBDFB3F73D70E8E8
Malicious:	false
Reputation:	low
URL:	https://www.lbpiaccess.com/javax.faces.resource/cryptojs/aes.js.xhtml?ln=scripts
Preview:	/..CryptoJS v3.1.2..code.google.com/p/crypto-js..(c) 2009-2013 by Jeff Mott. All rights reserved...code.google.com/p/crypto-js/wiki/License../..var CryptoJS=CryptoJS\|\|function(u,p){var d={},l=d.lib={},s=function(){},t=l.Base={extend:function(a){s.prototype=this;var c=new s;a&&c.mixIn(a);c.hasOwnProperty("init")\|\|(c.init=function(){c.$super.init.apply(this,arguments)});c.init.prototype=c;c.$super=this;return c},create:function(){var a=this.extend();a.init.apply(a,arguments);return a},init:function(){},mixIn:function(a){for(var c in a)a.hasOwnProperty(c)&&(this[c]=a[c]);a.hasOwnProperty("toString")&&(this.toString=a.toString)},clone:function(){return this.init.prototype.extend(this)}},..r=l.WordArray=t.extend({init:function(a,c){a=this.words=a\|\|[];this.sigBytes=c!=p?c:4a.length},toString:function(a){return(a\|\|v).stringify(this)},concat:function(a){var c=this.words,e=a.words,j=this.sigBytes;a=a.sigBytes;this.clamp();if(j%4)for(var k=0;k<a;k++)c[j+k>>>2]\|=(e[k>>>2]>>>24-8(k%4)&255)<<24

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9675), with no line terminators
Category:	dropped
Size (bytes):	9675
Entropy (8bit):	5.260993822745958
Encrypted:	false
SSDEEP:	192:PQt99+tIYu52SWSe0cicIQ384D/Dj2fXWWf01nKJ3Vnfvaxqiyb5Y:PQT9+tIYu5O0cicIQ384D/Dj2/Rf012Y
MD5:	9639F266399257B0F97AB7514F9C7E8D
SHA1:	3E67463BCD123AA30D456EB08595CD0EAD3FDB85
SHA-256:	AFEE7E1CFC21ACDA9D86BA14539D0F20C276D2DF3F7D65A5B04D79FBC6FF3D35
SHA-512:	4EE4CE0A21A123658BFDF168A2D672EA4FE41ACA15BD994345047B5CB217C517F5E8C5A0858ED75647E5CEE9723E6165D8EFCDF1FC6828D1953D4E57468195AD
Malicious:	false
Reputation:	low
Preview:	if(window.PrimeFaces){PrimeFaces.locales.en_US.messages["javax.faces.validator.BeanValidator.MESSAGE"]="{0}";PrimeFaces.locales.en_US.messages["javax.validation.constraints.AssertFalse.message"]="must be false";PrimeFaces.locales.en_US.messages["javax.validation.constraints.AssertTrue.message"]="must be true";PrimeFaces.locales.en_US.messages["javax.validation.constraints.DecimalMax.message"]="must be less than or equal to {0}";PrimeFaces.locales.en_US.messages["javax.validation.constraints.DecimalMin.message"]="must be greater than or equal to {0}";PrimeFaces.locales.en_US.messages["javax.validation.constraints.Digits.message"]="numeric value out of bounds (<{0} digits>.<{1} digits> expected)";PrimeFaces.locales.en_US.messages["javax.validation.constraints.Email.message"]="must be a well-formed email address";PrimeFaces.locales.en_US.messages["javax.validation.constraints.Future.message"]="must be a future date";PrimeFaces.locales.en_US.messages["javax.validation.constraints.FutureOrP

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 615 x 406, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	61738
Entropy (8bit):	7.9819764145125145
Encrypted:	false
SSDEEP:	1536:Fir3KUP+n58dZKyw1AoGlChtPoSntWzuijoaj:FmaUPrdQyw15+ChtPoYtFijoaj
MD5:	D5BD1850FD3B969916FE57F634722C88
SHA1:	70E07E861F25D74D5F2D7FB4D61068BEB15D66E9
SHA-256:	5245B35E6311A00E585E6E97CFE9ED8271DF02E6A0AF07E0AF900B6CF7F19973
SHA-512:	3EB3577F8E3CB8B763F58148A300664C12268ED02CFFEE9170F81A30984062AF26E5B766B7BF29B2950C3B995B87DDD2D21B39E715BF31B52CFECDC2A2160816
Malicious:	false
Reputation:	low
URL:	https://www.lbpiaccess.com/resources/images/loginlogo.png
Preview:	.PNG........IHDR...g.........=.$0....sRGB....... .IDATx^...U........7f.........K.F...1..Wz1...5.X...("." "....e....+..._..cH~I.a.7..]k.r.9{..7...9.E.... .D....".2......!.D...."@......3..D...."@....H!.$.Rh0.."@.... .D...8.9@.... .D....."@.,...L!.D...."@....3..D...."@....H!.$.Rh0.."@.... .D...8.9@.... .D....."@.,...L!.D...."@....3..D...."@....H!.$.Rh0.."@.... .D...8.9@.... .D....."@.,...L!.D...."@....3..D...."@....H!.$.Rh0.."@.... .D...8.9@.... .D....."@.,...L!.D...."@....3..D...."@....H!.$.Rh0.."@.... .D...8.9@.... .D....."@.,...L!.D...."@....3..D...."@....H!.$.Rh0.."@.... .D...8.9@.... .D....."@.,...L!.D...."@....3..D...."@....H!.$.Rh0.."@.... .D...8.9@.... .D....."@.,...L!.D...."@....3..D...."@....H!.$.Rh0.."..........*.h..d.P.U.%QR.........8[.l....q.Z..]..\.q.....r...dK..X...~..3C...sr.Q..q...x..D.....!@..D(.=D ...p].....1`..\_];....W..C..tK.z..L.j...iZ..G..[1.S.lK.m[...w.Gv..s]....h}u<...9.q........}.<.1.fH....hH.h...EI.9...K..;.....`."....BA5.....>.(.u1..S9.J.!

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 50, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4926
Entropy (8bit):	7.928186499761594
Encrypted:	false
SSDEEP:	96:Rhd54tdlWAUpGclxq9smhmU94ThM2Le0IzMG9nBAMvm5Llp:RhIjfUMclUnmFMOPw9n/uh
MD5:	42B59135522DE0941948F23D94B4E213
SHA1:	8F175DB2108FD993194DF55F5B26F57DE2F472BA
SHA-256:	CA087C45509B633FCF2970A31573505C49537E91F5A62E2E2901DA88BE1F472C
SHA-512:	211602E34538CCE59710AEEDE65A15C4337149352AC72FE8F0DE021023E28E845913285EF2DCDAC982D39C059CB2A4FD5B6E68831CD026757C523E720567F495
Malicious:	false
Reputation:	low
URL:	https://www.lbpiaccess.com/resources/images/bancnet_logo.png
Preview:	.PNG........IHDR.......2......Q......sRGB.........gAMA......a.....pHYs...%...%.IR$.....IDATx^..+.-...3.F "......D....@ ..D...@ ....q...@ ..+".....@ .#....D."........[...N.9.{.X._....]U.]...?~....c.)...;v.`7..;N`7..;N`7..;N`7..;N`7..;N`7..;N`7..;N...P...~...K......];....9~...K}.o..cA.W...@>..px........F..Y.g.........W.............B...o.;x...._..4../.....!nFz.O....>...+..b..L.$....)`......?..>8.^.....k.3x.^..l)+...C.....w!.o..b..v..0.?<.o....V..}.S.......y....:.g..+K&W.g.....p........\|......6.V.z.R.OB...6..Q>...~..C.[..C.8".;....c.?=..3.../.........\|..........r...V.....=...o....~..!....g.e..k.F.v..C.. ".sa.....:..?...B....6^..k <...y.dl.3.~.s].x....f...z-.7`.o._.3..F.e}.k..t..C..DTz. .B.....E........c.....w..m.....y........#<....E......._..s..h3........<..-..}........o....6..O{.@......u.B..h..s},.>....P..>a,G.s^......Jc?..4.J'..\|_za.......{../.3.4.F?...9$..Q..:G.^..O]..A...?.1o...y....`.........S.P......7".&0.qQ.%.y..1Lnn.R..l.....O..y*J...V.

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	11786
Entropy (8bit):	4.9174055610491685
Encrypted:	false
SSDEEP:	192:WwVesxo3YK2IsKyl0fwpfzlobzbFl5J8skfYP/MUvpsbQ5LZRd3UMhTB5k9N7+Jq:rVeTpCBefNPkUx8QtNqNV
MD5:	194CD9718867844648DB7E79D8FF5A53
SHA1:	802D36B029F036C2BAD7B86ACB614894A3D9D4A8
SHA-256:	0804B7E900E2F2A7673AF787E8EECEBF1C0787C1367716A8B5F9A63A0CE27359
SHA-512:	5F082A495A420A4FE76D5B9A7A1A554008A872BDD61CE84FE91ABD8A57158AD5188E57322B26724A6BAF756EFE94FC8B5553BEC990A2D86AA61AB7C3A8DEBD8E
Malicious:	false
Reputation:	low
URL:	https://www.lbpiaccess.com/javax.faces.resource/style.css.xhtml?ln=css
Preview:	/..To change this license header, choose License Headers in Project Properties...To change this template file, choose Tools \| Templates..and open the template in the editor.../../* .. Author : NSYS../..../ Panel /...ui-panel-titlebar {.. background-color: white;.. border: none;.. border-bottom: 1px solid #d7df23;.. margin-bottom: 5px;.. padding-bottom: 10px;.. border-bottom-right-radius: 0px;.. border-bottom-left-radius: 0px;.. border-top-right-radius: 0px;.. border-top-left-radius: 0px;..}.....ui-panel .ui-panel-titlebar {.. padding-bottom: 12px;..}.....ui-panel-title {.. color: #0c4221;.. margin-bottom: 10px;..}../ Panel /..../ Data Table */...ui-datatable {.. background-color: white;..}.....ui-datatable .ui-datatable-tablewrapper table thead tr th {.. background-color: rgba(114, 191, 68, 0.4);.. color: #0c4221;.. padding-top: 10px;.. padding-bottom: 10px;..}.....ui-datatable table tr, .ui-datatable table t

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13741)
Category:	downloaded
Size (bytes):	43094
Entropy (8bit):	5.380851481103599
Encrypted:	false
SSDEEP:	768:gAsfkoI+hTE8fnWX7d6wk9A4UEGLjXN5UFeKbq3XQHnR4bgeMSHhNO1E:gAe9I8fnWX7d6woFUEGLLNceKKI+
MD5:	772AF05D930A17F2BFCC009444CCF398
SHA1:	6F54B72F507381FF3691412DACA9A0F1B3787D59
SHA-256:	40509D57086C720AA07557E34AE53097BD9CDD44A362DA9D523FF00893D49537
SHA-512:	A6A27E874C37D7DC4D3C217A93FD28166C1B16D5EC6311C7EB1B8A05C55E040E44DA13B23176882B43AE7084FAA742A4C2F8A1DDA18C703303A76C68251D1293
Malicious:	false
Reputation:	low
URL:	https://www.lbpiaccess.com/javax.faces.resource/core.js.xhtml?ln=primefaces&v=8.0
Preview:	/!. jQuery Browser Plugin 0.1.0. * https://github.com/gabceb/jquery-browser-plugin. . Original jquery-browser code Copyright 2005, 2015 jQuery Foundation, Inc. and other contributors. * http://jquery.org/license. . Modifications Copyright 2015 Gabriel Cebrian. * https://github.com/gabceb. . Released under the MIT license. . Date: 05-07-2015. /.(function(a){if(typeof define==="function"&&define.amd){define(["jquery"],function(b){return a(b)})}else{if(typeof module==="object"&&typeof module.exports==="object"){module.exports=a(require("jquery"))}else{a(window.jQuery)}}}(function(b){function a(d){if(d===undefined){d=window.navigator.userAgent}d=d.toLowerCase();var j=/(edge)\/([\w.]+)/.exec(d)\|\|/(opr)[\/]([\w.]+)/.exec(d)\|\|/(chrome)[ \/]([\w.]+)/.exec(d)\|\|/(iemobile)[\/]([\w.]+)/.exec(d)\|\|/(version)(applewebkit)[ \/]([\w.]+).(safari)[ \/]([\w.]+)/.exec(d)\|\|/(webkit)[ \/]([\w.]+).(version)[ \/]([\w.]+).(safari)[ \/]([\w.]+)/.exec(d)\|\|/(webkit)[ \/]([\w.]+)/.exec(d)\|\|/(ope

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 125 x 50
Category:	downloaded
Size (bytes):	128
Entropy (8bit):	6.008005583891261
Encrypted:	false
SSDEEP:	3:Crl3atwltxlglY1C9cr3pv9byYlS0ZYlpn:K4Y1HXdIHlp
MD5:	600B7D77C94AB7FC1D978F1E3874F324
SHA1:	B1DFAE8190C5683CED3B2C73E3FE0E6C87326733
SHA-256:	6C7D5E851044C65CF9F8E1573525F9FDA8CE05E8EED600718165C7A2E890D2F0
SHA-512:	50781A3E350F8DDBDA041AC02AD3514EE1E2C22E89FF686C824F8DD07FF88ECAB35BD39BC7F48CA15A008466B9AB49EA478F44F4BFDD2109BBA4F5BD137946B6
Malicious:	false
Reputation:	low
URL:	https://ssif1.globalsign.com/SiteSeal/siteSeal/siteSeal/siteSealImage.do?p1=www.giselabravo.com&p2=SZ125-50&p3=image&p4=en&p5=V0023&p6=S001&p7=https&deterDn=
Preview:	GIF89a}.2..........!.......,....}.2...W................H........L..............L*.....J.....j..........N..........;

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (548), with CRLF line terminators
Category:	dropped
Size (bytes):	13395
Entropy (8bit):	5.646518755777253
Encrypted:	false
SSDEEP:	192:IixCtGD7DT90dPtz8Ui0m5qI1I5QIlTrz6h8oGmHV+mOKIfyAgCYf1nNVYTUUFJG:R6ix03z8UiF/1SQODgXJHaKI1XxZ6A6
MD5:	11C5114E2A1FACE42DE239B2B17943FB
SHA1:	A56FF0CB2CAFAA41BC5A892CC780BBBFD5D8452A
SHA-256:	A0A28D71883D6791D7FEB6C8BA3CA3FB089994F4CF111A34ED78AE803A638C3B
SHA-512:	52F9342EE4B90909498F9C52E9CA90C3AF09C8B277086159150ADC6580BC91E1EE3F42E185E733D1DD2425F65765769AF32F32227D587185EBDFB3F73D70E8E8
Malicious:	false
Reputation:	low
Preview:	/..CryptoJS v3.1.2..code.google.com/p/crypto-js..(c) 2009-2013 by Jeff Mott. All rights reserved...code.google.com/p/crypto-js/wiki/License../..var CryptoJS=CryptoJS\|\|function(u,p){var d={},l=d.lib={},s=function(){},t=l.Base={extend:function(a){s.prototype=this;var c=new s;a&&c.mixIn(a);c.hasOwnProperty("init")\|\|(c.init=function(){c.$super.init.apply(this,arguments)});c.init.prototype=c;c.$super=this;return c},create:function(){var a=this.extend();a.init.apply(a,arguments);return a},init:function(){},mixIn:function(a){for(var c in a)a.hasOwnProperty(c)&&(this[c]=a[c]);a.hasOwnProperty("toString")&&(this.toString=a.toString)},clone:function(){return this.init.prototype.extend(this)}},..r=l.WordArray=t.extend({init:function(a,c){a=this.words=a\|\|[];this.sigBytes=c!=p?c:4a.length},toString:function(a){return(a\|\|v).stringify(this)},concat:function(a){var c=this.words,e=a.words,j=this.sigBytes;a=a.sigBytes;this.clamp();if(j%4)for(var k=0;k<a;k++)c[j+k>>>2]\|=(e[k>>>2]>>>24-8(k%4)&255)<<24

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (504), with CRLF line terminators
Category:	dropped
Size (bytes):	877
Entropy (8bit):	5.787573778264621
Encrypted:	false
SSDEEP:	24:SGDGdBjB1ZWES8AdsgkWWHOWNLcLqIL98rGtedkj7lWqeK+C6uSJ:SGDscESZgWWHOWNwRGGteGfl21CT+
MD5:	3A1AA66386A793BE02C7B07672659C6B
SHA1:	B33C2A71336ADE6B34B8C7901AF3B51371B6AB37
SHA-256:	26EE9FAFCCC6D785B96EB63FCADAA2CC39678EFF6D31B66B973520EDD18CBCBC
SHA-512:	CE7DCEDC8F060EDA215E1ADE767A8A66F2084C9458A79CBEAA993A51B18376817D3D2B6EB698C36023AC13ED576FF1E577A623C425252C3343E5D0231777455F
Malicious:	false
Reputation:	low
Preview:	/..CryptoJS v3.1.2..code.google.com/p/crypto-js..(c) 2009-2013 by Jeff Mott. All rights reserved...code.google.com/p/crypto-js/wiki/License../..(function(){var h=CryptoJS,j=h.lib.WordArray;h.enc.Base64={stringify:function(b){var e=b.words,f=b.sigBytes,c=this._map;b.clamp();b=[];for(var a=0;a<f;a+=3)for(var d=(e[a>>>2]>>>24-8(a%4)&255)<<16\|(e[a+1>>>2]>>>24-8((a+1)%4)&255)<<8\|e[a+2>>>2]>>>24-8((a+2)%4)&255,g=0;4>g&&a+0.75g<f;g++)b.push(c.charAt(d>>>6(3-g)&63));if(e=c.charAt(64))for(;b.length%4;)b.push(e);return b.join("")},parse:function(b){var e=b.length,f=this._map,c=f.charAt(64);c&&(c=b.indexOf(c),-1!=c&&(e=c));for(var c=[],a=0,d=0;d<..e;d++)if(d%4){var g=f.indexOf(b.charAt(d-1))<<2(d%4),h=f.indexOf(b.charAt(d))>>>6-2(d%4);c[a>>>2]\|=(g\|h)<<24-8(a%4);a++}return j.create(c,a)},_map:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="}})();..

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	6989
Entropy (8bit):	5.158324178806293
Encrypted:	false
SSDEEP:	96:IM1VqXUQv83je3N6nWO6Di8SgdYt88koZA8/srH+qE3Lt9Ebx5qomuGB2+WF+Glx:I6je7lSgdYtvZhrcG2GB2+SdNbSBA
MD5:	091F32705AC488B815268646015F988A
SHA1:	3F22157281160CECB873C2C24F37BF4F87FA4832
SHA-256:	D50D41F94C4E0A5E6A041B5E5F4CED134B717D9CA2F63F09AA190ADF39F35817
SHA-512:	569160D9BED89AAA24FA45064BDDC8B4E0670468D31C1864367A4A3CE788206B918BA11361990462E00790F5E4F9AFAE111B4FBA6A0524C8CE1162CB9228CE30
Malicious:	false
Reputation:	low
URL:	https://ssif1.globalsign.com/SiteSeal/siteSeal/siteSeal/siteSeal.do?p1=www.giselabravo.com&p2=SZ125-50&p3=image&p4=en&p5=V0023&p6=S001&p7=https
Preview:	...................... ........ss_ua = navigator.userAgent.toLowerCase();..ss_opera = window.opera;..ss_msie = (!ss_opera) && (ss_ua.indexOf("msie") != -1);..ss_msie4 = (!ss_opera) && (ss_ua.indexOf("msie 4") != -1);..ss_ns4 = (!ss_opera) && (ss_ua.indexOf("mozilla/4") != -1) && (ss_ua.indexOf("compatible") == -1);..ss_ns6 = (!ss_opera) && (ss_ua.indexOf("netscape6/6.0") != -1);........ss_opera6lower = (ss_opera) && parseFloat(ss_ua.substr(ss_ua.indexOf("opera")+6)) < 7;..ss_no_dyna_script = ss_opera6lower;....ss_domain = "ssif1.globalsign.com"..ss_fqdn = "www.giselabravo.com"..ss_size = "SZ125-50"..ss_type = "image"..ss_lang = "en"..ss_ver = "V0023"..ss_service = "S001"..ss_protocol = "https"..ss_width = ""..ss_height = ""..ss_deter_dn = ""..ss_imageLocation = "//" + ss_domain + "/SiteSeal/siteSeal/siteSeal/siteSealImage.do?p1=" + ss_fqdn +

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25236), with no line terminators
Category:	dropped
Size (bytes):	25236
Entropy (8bit):	5.415358051384796
Encrypted:	false
SSDEEP:	768:km+f1voM2OjUgEujc4Ksng+z8gq5tNOI2bIqMY9Q0J:kf1voM2OjU5sJT
MD5:	23890911881B913B518FE813362E4093
SHA1:	83E873F9560C3435B287312ADE1A746D5D520661
SHA-256:	8C49A11B7B5A7B51D2982AB6D7FF931A7F09AD5FCC319723F26168EA97E610EF
SHA-512:	80F5835E987D1B55A40FE00FCE2064BD3754A7CDE96F9670D5B3AE4D8475F9720F336C55D7EA43B57AA6B2BDEC8759A9051852488F4D3D7FF3655DE06134A647
Malicious:	false
Reputation:	low
Preview:	if(window.PrimeFaces){$.extend(PrimeFaces.locales.en_US,{decimalSeparator:".",groupingSeparator:",",messages:{"javax.faces.component.UIInput.REQUIRED":"{0}: Validation Error: Value is required.","javax.faces.converter.IntegerConverter.INTEGER":"{2}: '{0}' must be a number consisting of one or more digits.","javax.faces.converter.IntegerConverter.INTEGER_detail":"{2}: '{0}' must be a number between -2147483648 and 2147483647 Example: {1}","javax.faces.converter.LongConverter.LONG":"{2}: '{0}' must be a number consisting of one or more digits.","javax.faces.converter.LongConverter.LONG_detail":"{2}: '{0}' must be a number between -9223372036854775808 to 9223372036854775807 Example: {1}","javax.faces.converter.DoubleConverter.DOUBLE":"{2}: '{0}' must be a number consisting of one or more digits.","javax.faces.converter.DoubleConverter.DOUBLE_detail":"{2}: '{0}' must be a number between 4.9E-324 and 1.7976931348623157E308 Example: {1}","javax.faces.converter.BigDecimalConverter.DECIMAL":"

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19425)
Category:	downloaded
Size (bytes):	267352
Entropy (8bit):	5.2890256282320465
Encrypted:	false
SSDEEP:	6144:rFfwZqOMrqrJxoC9/qd/JsgciBjUZKhXX/:rFBE2J/
MD5:	4D27A5B541B9ADE9E1B3099B55F81590
SHA1:	7920FADE1685806987BC7AECC628D3B45D73745A
SHA-256:	99D02C2DF8CAF8FA07A68D82E7A63A112635C73F03367665786B056C972E1334
SHA-512:	440B5CAAC41E710DAE5BE3A641B3A64C088B6A6A3DA462DEC3443EE28B868714BB332EEE06B6751320263D044A008D4219D5FE779384807474F9917770B27F32
Malicious:	false
Reputation:	low
URL:	https://www.lbpiaccess.com/javax.faces.resource/jquery/jquery-plugins.js.xhtml?ln=primefaces&v=8.0
Preview:	/! jQuery UI - v1.12.1 - 2017-08-09. http://jqueryui.com.* Includes: widget.js, position.js, data.js, disable-selection.js, focusable.js, form-reset-mixin.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/draggable.js, widgets/droppable.js, widgets/resizable.js, widgets/selectable.js, widgets/sortable.js, widgets/datepicker.js, widgets/mouse.js, widgets/slider.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-explode.js, effects/effect-fade.js, effects/effect-fold.js, effects/effect-highlight.js, effects/effect-puff.js, effects/effect-pulsate.js, effects/effect-scale.js, effects/effect-shake.js, effects/effect-size.js, effects/effect-slide.js, effects/effect-transfer.js.* Copyright jQuery Foundation and other contributors; Licensed MIT */.(function(a){if(typeof define==="function"&&define.amd){define(["jquery"],a)}else{a(jQuery)}}(function(K){K.ui=K.ui\|\|{};var Z=K.ui.version="

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1776), with no line terminators
Category:	downloaded
Size (bytes):	1776
Entropy (8bit):	5.063248990547699
Encrypted:	false
SSDEEP:	48:+JWwbvZAVscbFd05gADnly238ENAzZz6hQUNbBCKe:+JW4vZAVsASSenlyEN8p62UtQKe
MD5:	04345F2E4A8F7DB3E5C31DF14459234D
SHA1:	3E9EB80725E53BD8CFF5708B9E1793AC63FA3621
SHA-256:	1B975A25337A9445C1F797A5057D1DA9AA82BEB8EB0AB0882CA283BD139AF4F0
SHA-512:	E4446F21A2C5EE38102F05B7B92859BAF0B1EA654797F88AE7EB630E2E1AEE8F0470E66732EE5266FBEB6E726F00132FBD7498BC0746809F05B6096C4991E306
Malicious:	false
Reputation:	low
URL:	https://www.lbpiaccess.com/javax.faces.resource/app/clienthash.min.js.xhtml?ln=scripts
Preview:	var _0x1cf3=['enc','toString','length','Base64','parse','encrypt','substr','SHA256','AES'];(function(_0x20bbe6,_0x1cf3e6){var _0x3104fc=function(_0x316c32){while(--_0x316c32){_0x20bbe6['push'](_0x20bbe6['shift']());}};_0x3104fc(++_0x1cf3e6);}(_0x1cf3,0x18d));var _0x3104=function(_0x20bbe6,_0x1cf3e6){_0x20bbe6=_0x20bbe6-0x0;var _0x3104fc=_0x1cf3[_0x20bbe6];return _0x3104fc;};var ClientHash=function(){var _0x316c32=function(_0x58d950,_0x3d7dd9,_0x28d149){var _0x5ea972=_0x3104,_0x56aa1=_0x58d950,_0x4bbd87=_0x3d7dd9,_0x3fe201=_0x28d149,_0x3989b4=_0x56aa1['substr'](0x0,_0x58d950[_0x5ea972('0x1')]/0x2),_0x3fc7fe=_0x56aa1[_0x5ea972('0x5')](_0x3989b4[_0x5ea972('0x1')]),_0x484176=_0x4bbd87[_0x5ea972('0x5')](0x0,_0x3d7dd9[_0x5ea972('0x1')]/0x2),_0x365f65=_0x4bbd87[_0x5ea972('0x5')](_0x484176['length']);return _0x56aa1=_0x3fc7fe+_0x365f65+_0x3989b4+_0x484176,_0x56aa1=CryptoJS[_0x5ea972('0x6')](_0x56aa1)[_0x5ea972('0x0')](),_0x28d149['length']>0x0&&(_0x484176=_0x3fe201[_0x5ea972('0x5')](0x0,_0x3fe

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9675), with no line terminators
Category:	downloaded
Size (bytes):	9675
Entropy (8bit):	5.260993822745958
Encrypted:	false
SSDEEP:	192:PQt99+tIYu52SWSe0cicIQ384D/Dj2fXWWf01nKJ3Vnfvaxqiyb5Y:PQT9+tIYu5O0cicIQ384D/Dj2/Rf012Y
MD5:	9639F266399257B0F97AB7514F9C7E8D
SHA1:	3E67463BCD123AA30D456EB08595CD0EAD3FDB85
SHA-256:	AFEE7E1CFC21ACDA9D86BA14539D0F20C276D2DF3F7D65A5B04D79FBC6FF3D35
SHA-512:	4EE4CE0A21A123658BFDF168A2D672EA4FE41ACA15BD994345047B5CB217C517F5E8C5A0858ED75647E5CEE9723E6165D8EFCDF1FC6828D1953D4E57468195AD
Malicious:	false
Reputation:	low
URL:	https://www.lbpiaccess.com/javax.faces.resource/validation/beanvalidation.js.xhtml?ln=primefaces&v=8.0
Preview:	if(window.PrimeFaces){PrimeFaces.locales.en_US.messages["javax.faces.validator.BeanValidator.MESSAGE"]="{0}";PrimeFaces.locales.en_US.messages["javax.validation.constraints.AssertFalse.message"]="must be false";PrimeFaces.locales.en_US.messages["javax.validation.constraints.AssertTrue.message"]="must be true";PrimeFaces.locales.en_US.messages["javax.validation.constraints.DecimalMax.message"]="must be less than or equal to {0}";PrimeFaces.locales.en_US.messages["javax.validation.constraints.DecimalMin.message"]="must be greater than or equal to {0}";PrimeFaces.locales.en_US.messages["javax.validation.constraints.Digits.message"]="numeric value out of bounds (<{0} digits>.<{1} digits> expected)";PrimeFaces.locales.en_US.messages["javax.validation.constraints.Email.message"]="must be a well-formed email address";PrimeFaces.locales.en_US.messages["javax.validation.constraints.Future.message"]="must be a future date";PrimeFaces.locales.en_US.messages["javax.validation.constraints.FutureOrP

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:Hs8CR:M8CR
MD5:	3EDBA42534A8F9DDC1F90FAA6A3F84D2
SHA1:	CBE209E7F817EF3E4B9F712425AD431C0FBFE17C
SHA-256:	A4DE7D55A093A33C3054FE1193932EAB3105CE68157D0514C0FABE584B675358
SHA-512:	F9FEABD7632F26B4D48AD898BF585073E8807B06E0B5238568A1D8732BF855CD01BC0B0079226936316694B27CD517D448B4CA18DB07177D8294E9309E9D60FC
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAnO3lRX1rrOoxIFDfTXR_Y=?alt=proto
Preview:	CgkKBw3010f2GgA=

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 50, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4926
Entropy (8bit):	7.928186499761594
Encrypted:	false
SSDEEP:	96:Rhd54tdlWAUpGclxq9smhmU94ThM2Le0IzMG9nBAMvm5Llp:RhIjfUMclUnmFMOPw9n/uh
MD5:	42B59135522DE0941948F23D94B4E213
SHA1:	8F175DB2108FD993194DF55F5B26F57DE2F472BA
SHA-256:	CA087C45509B633FCF2970A31573505C49537E91F5A62E2E2901DA88BE1F472C
SHA-512:	211602E34538CCE59710AEEDE65A15C4337149352AC72FE8F0DE021023E28E845913285EF2DCDAC982D39C059CB2A4FD5B6E68831CD026757C523E720567F495
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......2......Q......sRGB.........gAMA......a.....pHYs...%...%.IR$.....IDATx^..+.-...3.F "......D....@ ..D...@ ....q...@ ..+".....@ .#....D."........[...N.9.{.X._....]U.]...?~....c.)...;v.`7..;N`7..;N`7..;N`7..;N`7..;N`7..;N`7..;N...P...~...K......];....9~...K}.o..cA.W...@>..px........F..Y.g.........W.............B...o.;x...._..4../.....!nFz.O....>...+..b..L.$....)`......?..>8.^.....k.3x.^..l)+...C.....w!.o..b..v..0.?<.o....V..}.S.......y....:.g..+K&W.g.....p........\|......6.V.z.R.OB...6..Q>...~..C.[..C.8".;....c.?=..3.../.........\|..........r...V.....=...o....~..!....g.e..k.F.v..C.. ".sa.....:..?...B....6^..k <...y.dl.3.~.s].x....f...z-.7`.o._.3..F.e}.k..t..C..DTz. .B.....E........c.....w..m.....y........#<....E......._..s..h3........<..-..}........o....6..O{.@......u.B..h..s},.>....P..>a,G.s^......Jc?..4.J'..\|_za.......{../.3.4.F?...9$..Q..:G.^..O]..A...?.1o...y....`.........S.P......7".&0.qQ.%.y..1Lnn.R..l.....O..y*J...V.

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19425)
Category:	dropped
Size (bytes):	267352
Entropy (8bit):	5.2890256282320465
Encrypted:	false
SSDEEP:	6144:rFfwZqOMrqrJxoC9/qd/JsgciBjUZKhXX/:rFBE2J/
MD5:	4D27A5B541B9ADE9E1B3099B55F81590
SHA1:	7920FADE1685806987BC7AECC628D3B45D73745A
SHA-256:	99D02C2DF8CAF8FA07A68D82E7A63A112635C73F03367665786B056C972E1334
SHA-512:	440B5CAAC41E710DAE5BE3A641B3A64C088B6A6A3DA462DEC3443EE28B868714BB332EEE06B6751320263D044A008D4219D5FE779384807474F9917770B27F32
Malicious:	false
Reputation:	low
Preview:	/! jQuery UI - v1.12.1 - 2017-08-09. http://jqueryui.com.* Includes: widget.js, position.js, data.js, disable-selection.js, focusable.js, form-reset-mixin.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/draggable.js, widgets/droppable.js, widgets/resizable.js, widgets/selectable.js, widgets/sortable.js, widgets/datepicker.js, widgets/mouse.js, widgets/slider.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-explode.js, effects/effect-fade.js, effects/effect-fold.js, effects/effect-highlight.js, effects/effect-puff.js, effects/effect-pulsate.js, effects/effect-scale.js, effects/effect-shake.js, effects/effect-size.js, effects/effect-slide.js, effects/effect-transfer.js.* Copyright jQuery Foundation and other contributors; Licensed MIT */.(function(a){if(typeof define==="function"&&define.amd){define(["jquery"],a)}else{a(jQuery)}}(function(K){K.ui=K.ui\|\|{};var Z=K.ui.version="

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18681)
Category:	downloaded
Size (bytes):	434646
Entropy (8bit):	5.108914692345246
Encrypted:	false
SSDEEP:	3072:wAKVvbIE+fCQ9Humf8tBq6Wiecq+I7Cwm/k8YUA4M2rGU:wAIxQJumfuecqt7+v5
MD5:	14FB81C256401E7421AD90CD18E39431
SHA1:	04462E37D4ABF7C282D79E403E61AC28CB24ABD2
SHA-256:	3BC6502A1CB11FEAB43DA0F3F27ED769B52F6E45C8585DF652C2A58D5D8B9190
SHA-512:	794E20F5614BF731769998E951B6AC1B924D4B6487C42F188555FA29D16FE8226843A5E4F05471D965E8E7C7F8B67C53BB1266F6BF2A41C39A1FA27D996B3436
Malicious:	false
Reputation:	low
URL:	https://www.lbpiaccess.com/javax.faces.resource/components.js.xhtml?ln=primefaces&v=8.0
Preview:	if(!PrimeFaces.dialog){PrimeFaces.dialog={};PrimeFaces.dialog.DialogHandler={openDialog:function(f){var h=this.findRootWindow(),l=f.sourceComponentId+"_dlg";if(h.document.getElementById(l)){return}var k=function(){var v=window;var x=[];while(v.frameElement){var u=v.parent;if(u.PF===undefined){break}var t=v.frameElement;var o=[];for(;t&&t.tagName!==undefined;t=t.parentNode){if(t.id&&!/\s/.test(t.id)){o.unshift(t.id);o.unshift("#");o.unshift(" > ");break}else{if(t.className){var p=t.className.split(" ");var q=[];for(var r in p){if(p.hasOwnProperty(r)&&p[r]){q.unshift(p[r]);q.unshift(".")}}q.unshift(t.tagName);var n=q.join("");var m=$(t.parentNode).find(n);if(m.length>1){o.unshift(":eq("+m.index(t)+")")}o.unshift(n)}else{var m=$(t.parentNode).find(t.tagName);if(m.length>1){o.unshift(":eq("+m.index(t)+")")}o.unshift(t.tagName)}}o.unshift(" > ")}var y=o.slice(1).join("");x.unshift(y);v=u}return x}();var j=f.options.widgetVar;if(!j){j=f.sourceComponentId.replace(/:/g,"_")+"_dlgwidget"}var d=

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.0021331205492245
Encrypted:	false
SSDEEP:	48:DqaYdqqoGPYUOs66QM7LcbN15v+gahe/M2Nc+D:DCdqqs7f15v+e02Ncc
MD5:	14B8F6DC7405DA363D947EA4B5486524
SHA1:	345B0966FA18EE7E3D5244E5C6E54E6DD9E3825A
SHA-256:	8B9815887457C9B236AFB15B41CE7932884DC1595A38A6E2AAC6CE504A382012
SHA-512:	46958E4C4B5D04552F0CD252CF14444B770F40808A5284EC60E723233260A5D53A728F39A3246BB7D80FDA1F4246E3728FFB32C9BF1B756DB6E16E7479494B8D
Malicious:	false
Reputation:	low
Preview:	..ss_ua = navigator.userAgent.toLowerCase();.ss_opera = window.opera;.ss_msie = (!ss_opera) && (ss_ua.indexOf("msie") != -1);.ss_msie4 = (!ss_opera) && (ss_ua.indexOf("msie 4") != -1);.ss_ns4 = (!ss_opera) && (ss_ua.indexOf("mozilla/4") != -1) && (ss_ua.indexOf("compatible") == -1);.ss_ns6 = (!ss_opera) && (ss_ua.indexOf("netscape6/6.0") != -1);..ss_opera6lower = (ss_opera) && parseFloat(ss_ua.substr(ss_ua.indexOf("opera")+6)) < 7;.ss_no_dyna_script = ss_opera6lower;..ss_fqdn = window.location.host;.ss_size = "SZ125-50";.ss_type = "image";.ss_lang = "en";.ss_ver = "V0023";.ss_service = "S001";.ss_protocol = window.location.protocol.substring(0, window.location.protocol.indexOf(":"));..ss_jspUrl = "//ssif1.globalsign.com/SiteSeal/siteSeal/siteSeal/siteSeal.do?p1=" + ss_fqdn + "&p2=" + ss_size + "&p3=" + ss_type + "&p4=" + ss_lang + "&p5=" + ss_ver + "&p6=" + ss_service + "&p7=" + ss_protocol;..function ss_js_seal

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 125 x 50
Category:	dropped
Size (bytes):	128
Entropy (8bit):	6.008005583891261
Encrypted:	false
SSDEEP:	3:Crl3atwltxlglY1C9cr3pv9byYlS0ZYlpn:K4Y1HXdIHlp
MD5:	600B7D77C94AB7FC1D978F1E3874F324
SHA1:	B1DFAE8190C5683CED3B2C73E3FE0E6C87326733
SHA-256:	6C7D5E851044C65CF9F8E1573525F9FDA8CE05E8EED600718165C7A2E890D2F0
SHA-512:	50781A3E350F8DDBDA041AC02AD3514EE1E2C22E89FF686C824F8DD07FF88ECAB35BD39BC7F48CA15A008466B9AB49EA478F44F4BFDD2109BBA4F5BD137946B6
Malicious:	false
Reputation:	low
Preview:	GIF89a}.2..........!.......,....}.2...W................H........L..............L*.....J.....j..........N..........;

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (506), with CRLF line terminators
Category:	downloaded
Size (bytes):	1459
Entropy (8bit):	5.715563803214308
Encrypted:	false
SSDEEP:	24:SGDGdBjBVHlVOkX8wSAglqIOm8ngqCX288rnHEB2YN9jbapIMRc3/lrQzcUInoxO:SGDshVOkX+4vnCX288gB2YN5eIfE7xlU
MD5:	058F72DE4479301A9C60C7B5FF5FF31B
SHA1:	3AC3E62F3E639613FA53044ED7429840BA62ED9F
SHA-256:	BE8F4BCD8479E824813DFB137866A006C536472D0797484E831649D8B502F8F6
SHA-512:	FE691E2024329BB9748C5BAFE1ACA451DE688DC7E7567679ABEBC8144004ECEF100AB4A00C868F4195B7E44BF81F7B605E2C4BC7F0661B7AE77EE57FBE220447
Malicious:	false
Reputation:	low
URL:	https://www.lbpiaccess.com/javax.faces.resource/cryptojs/sha256-min.js.xhtml?ln=scripts
Preview:	/..CryptoJS v3.1.2..code.google.com/p/crypto-js..(c) 2009-2013 by Jeff Mott. All rights reserved...code.google.com/p/crypto-js/wiki/License../..(function(k){for(var g=CryptoJS,h=g.lib,v=h.WordArray,j=h.Hasher,h=g.algo,s=[],t=[],u=function(q){return 4294967296*(q-(q\|0))\|0},l=2,b=0;64>b;){var d;a:{d=l;for(var w=k.sqrt(d),r=2;r<=w;r++)if(!(d%r)){d=!1;break a}d=!0}d&&(8>b&&(s[b]=u(k.pow(l,0.5))),t[b]=u(k.pow(l,1/3)),b++);l++}var n=[],h=h.SHA256=j.extend({_doReset:function(){this._hash=new v.init(s.slice(0))},_doProcessBlock:function(q,h){for(var a=this._hash.words,c=a[0],d=a[1],b=a[2],k=a[3],f=a[4],g=a[5],j=a[6],l=a[7],e=0;64>e;e++){if(16>e)n[e]=..q[h+e]\|0;else{var m=n[e-15],p=n[e-2];n[e]=((m<<25\|m>>>7)^(m<<14\|m>>>18)^m>>>3)+n[e-7]+((p<<15\|p>>>17)^(p<<13\|p>>>19)^p>>>10)+n[e-16]}m=l+((f<<26\|f>>>6)^(f<<21\|f>>>11)^(f<<7\|f>>>25))+(f&g^~f&j)+t[e]+n[e];p=((c<<30\|c>>>2)^(c<<19\|c>>>13)^(c<<10\|c>>>22))+(c&d^c&b^d&b);l=j;j=g;g=f;f=k+m\|0;k=b;b=d;d=c;c=m+p\|0}a[0]=a[0]+c\|0;a[1]=a[1]+d\|0;a[2]=a[2]+b\|0

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (548), with CRLF line terminators
Category:	downloaded
Size (bytes):	3311
Entropy (8bit):	5.404717833219675
Encrypted:	false
SSDEEP:	48:SGDsirZIzsyWNsTY8V4d4WlVwRuMycTyY4i59PudZhDrRz59nzEdcQ9Pa/nQkpAa:HDsirgSbDlCicTJPudR5T4g/5WykDPu
MD5:	556FCBAF96680B77CC9D773133CB4BA6
SHA1:	4FE51A7AFB953D609C39F637C26DACC58D5E3FDB
SHA-256:	4DDC5EDA7FBFD049A90018F53D1D9D031152AAC14C110497CDA63D5C609D5033
SHA-512:	68D0E54C1C53E706D0392F2F4A35635ECEB683FD65E16D4C92B27C1C7741B568CC0706ACB971A1C48274A398880D6B687E9B3D4AE60D19658A1567CBC6EE57CF
Malicious:	false
Reputation:	low
URL:	https://www.lbpiaccess.com/javax.faces.resource/cryptojs/core-min.js.xhtml?ln=scripts
Preview:	/..CryptoJS v3.1.2..code.google.com/p/crypto-js..(c) 2009-2013 by Jeff Mott. All rights reserved...code.google.com/p/crypto-js/wiki/License../..var CryptoJS=CryptoJS\|\|function(h,r){var k={},l=k.lib={},n=function(){},f=l.Base={extend:function(a){n.prototype=this;var b=new n;a&&b.mixIn(a);b.hasOwnProperty("init")\|\|(b.init=function(){b.$super.init.apply(this,arguments)});b.init.prototype=b;b.$super=this;return b},create:function(){var a=this.extend();a.init.apply(a,arguments);return a},init:function(){},mixIn:function(a){for(var b in a)a.hasOwnProperty(b)&&(this[b]=a[b]);a.hasOwnProperty("toString")&&(this.toString=a.toString)},clone:function(){return this.init.prototype.extend(this)}},..j=l.WordArray=f.extend({init:function(a,b){a=this.words=a\|\|[];this.sigBytes=b!=r?b:4a.length},toString:function(a){return(a\|\|s).stringify(this)},concat:function(a){var b=this.words,d=a.words,c=this.sigBytes;a=a.sigBytes;this.clamp();if(c%4)for(var e=0;e<a;e++)b[c+e>>>2]\|=(d[e>>>2]>>>24-8(e%4)&255)<<24

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 615 x 406, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	61738
Entropy (8bit):	7.9819764145125145
Encrypted:	false
SSDEEP:	1536:Fir3KUP+n58dZKyw1AoGlChtPoSntWzuijoaj:FmaUPrdQyw15+ChtPoYtFijoaj
MD5:	D5BD1850FD3B969916FE57F634722C88
SHA1:	70E07E861F25D74D5F2D7FB4D61068BEB15D66E9
SHA-256:	5245B35E6311A00E585E6E97CFE9ED8271DF02E6A0AF07E0AF900B6CF7F19973
SHA-512:	3EB3577F8E3CB8B763F58148A300664C12268ED02CFFEE9170F81A30984062AF26E5B766B7BF29B2950C3B995B87DDD2D21B39E715BF31B52CFECDC2A2160816
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...g.........=.$0....sRGB....... .IDATx^...U........7f.........K.F...1..Wz1...5.X...("." "....e....+..._..cH~I.a.7..]k.r.9{..7...9.E.... .D....".2......!.D...."@......3..D...."@....H!.$.Rh0.."@.... .D...8.9@.... .D....."@.,...L!.D...."@....3..D...."@....H!.$.Rh0.."@.... .D...8.9@.... .D....."@.,...L!.D...."@....3..D...."@....H!.$.Rh0.."@.... .D...8.9@.... .D....."@.,...L!.D...."@....3..D...."@....H!.$.Rh0.."@.... .D...8.9@.... .D....."@.,...L!.D...."@....3..D...."@....H!.$.Rh0.."@.... .D...8.9@.... .D....."@.,...L!.D...."@....3..D...."@....H!.$.Rh0.."@.... .D...8.9@.... .D....."@.,...L!.D...."@....3..D...."@....H!.$.Rh0.."@.... .D...8.9@.... .D....."@.,...L!.D...."@....3..D...."@....H!.$.Rh0.."..........*.h..d.P.U.%QR.........8[.l....q.Z..]..\.q.....r...dK..X...~..3C...sr.Q..q...x..D.....!@..D(.=D ...p].....1`..\_];....W..C..tK.z..L.j...iZ..G..[1.S.lK.m[...w.Gv..s]....h}u<...9.q........}.<.1.fH....hH.h...EI.9...K..;.....`."....BA5.....>.(.u1..S9.J.!

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	dropped
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (548), with CRLF line terminators
Category:	dropped
Size (bytes):	3311
Entropy (8bit):	5.404717833219675
Encrypted:	false
SSDEEP:	48:SGDsirZIzsyWNsTY8V4d4WlVwRuMycTyY4i59PudZhDrRz59nzEdcQ9Pa/nQkpAa:HDsirgSbDlCicTJPudR5T4g/5WykDPu
MD5:	556FCBAF96680B77CC9D773133CB4BA6
SHA1:	4FE51A7AFB953D609C39F637C26DACC58D5E3FDB
SHA-256:	4DDC5EDA7FBFD049A90018F53D1D9D031152AAC14C110497CDA63D5C609D5033
SHA-512:	68D0E54C1C53E706D0392F2F4A35635ECEB683FD65E16D4C92B27C1C7741B568CC0706ACB971A1C48274A398880D6B687E9B3D4AE60D19658A1567CBC6EE57CF
Malicious:	false
Reputation:	low
Preview:	/..CryptoJS v3.1.2..code.google.com/p/crypto-js..(c) 2009-2013 by Jeff Mott. All rights reserved...code.google.com/p/crypto-js/wiki/License../..var CryptoJS=CryptoJS\|\|function(h,r){var k={},l=k.lib={},n=function(){},f=l.Base={extend:function(a){n.prototype=this;var b=new n;a&&b.mixIn(a);b.hasOwnProperty("init")\|\|(b.init=function(){b.$super.init.apply(this,arguments)});b.init.prototype=b;b.$super=this;return b},create:function(){var a=this.extend();a.init.apply(a,arguments);return a},init:function(){},mixIn:function(a){for(var b in a)a.hasOwnProperty(b)&&(this[b]=a[b]);a.hasOwnProperty("toString")&&(this.toString=a.toString)},clone:function(){return this.init.prototype.extend(this)}},..j=l.WordArray=f.extend({init:function(a,b){a=this.words=a\|\|[];this.sigBytes=b!=r?b:4a.length},toString:function(a){return(a\|\|s).stringify(this)},concat:function(a){var b=this.words,d=a.words,c=this.sigBytes;a=a.sigBytes;this.clamp();if(c%4)for(var e=0;e<a;e++)b[c+e>>>2]\|=(d[e>>>2]>>>24-8(e%4)&255)<<24

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1435), with CRLF line terminators
Category:	downloaded
Size (bytes):	29874
Entropy (8bit):	5.16665059000715
Encrypted:	false
SSDEEP:	768:ZE/3Emn5CERKJvxxMZpg1Apr4Zy0JAmjM6pBqIVTfb5:8Emn5CERKJ3Cg1Apr4Zy0JAmjM6pBqIT
MD5:	6321432C90493F6C0E93A959FB1CCF36
SHA1:	1640D4AA39047D3F0FC705A8D7E6460276EAC178
SHA-256:	F647D8CD969A31CCA8C7A8F98479B42E15D8213A625D84812076ADEA78E5A984
SHA-512:	0529417604DE2762F40357C7BDD43C7044A2445138C5D3F25007862926E19BD3FED087C4FA5258807514BB63E929BC6C45B8F1C1526EE51ED39672630428F163
Malicious:	false
Reputation:	low
URL:	https://www.lbpiaccess.com/javax.faces.resource/theme.css.xhtml?ln=primefaces-frontoffice
Preview:	/!.. jQuery UI CSS Framework 1.12.1.. * http://jqueryui.com.. .. Copyright jQuery Foundation and other contributors.. * Released under the MIT license... * http://jquery.org/license.. .. http://api.jqueryui.com/category/theming/.. .. To view and modify this theme, visit http://jqueryui.com/themeroller/?scope=&folderName=custom-theme&bgImgOpacityHeader=&bgImgOpacityContent=&bgImgOpacityDefault=&bgImgOpacityHover=&bgImgOpacityActive=&bgImgOpacityHighlight=&bgImgOpacityError=&cornerRadiusShadow=8px&offsetLeftShadow=0px&offsetTopShadow=0px&thicknessShadow=5px&opacityShadow=30&bgImgOpacityShadow=0&bgTextureShadow=flat&bgColorShadow=%23666666&opacityOverlay=30&bgImgOpacityOverlay=0&bgTextureOverlay=flat&bgColorOverlay=%23aaaaaa&iconColorError=%23cc0000&fcError=%235f3f3f&borderColorError=%23f1a899&bgTextureError=flat&bgColorError=%23fddfdf&iconColorHighlight=%23777620&fcHighlight=%23777620&borderColorHighlight=%23dad55e&bgTextureHighlight=flat&bgColorHighlight=%23fffa90&iconColorA

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (506), with CRLF line terminators
Category:	dropped
Size (bytes):	1459
Entropy (8bit):	5.715563803214308
Encrypted:	false
SSDEEP:	24:SGDGdBjBVHlVOkX8wSAglqIOm8ngqCX288rnHEB2YN9jbapIMRc3/lrQzcUInoxO:SGDshVOkX+4vnCX288gB2YN5eIfE7xlU
MD5:	058F72DE4479301A9C60C7B5FF5FF31B
SHA1:	3AC3E62F3E639613FA53044ED7429840BA62ED9F
SHA-256:	BE8F4BCD8479E824813DFB137866A006C536472D0797484E831649D8B502F8F6
SHA-512:	FE691E2024329BB9748C5BAFE1ACA451DE688DC7E7567679ABEBC8144004ECEF100AB4A00C868F4195B7E44BF81F7B605E2C4BC7F0661B7AE77EE57FBE220447
Malicious:	false
Reputation:	low
Preview:	/..CryptoJS v3.1.2..code.google.com/p/crypto-js..(c) 2009-2013 by Jeff Mott. All rights reserved...code.google.com/p/crypto-js/wiki/License../..(function(k){for(var g=CryptoJS,h=g.lib,v=h.WordArray,j=h.Hasher,h=g.algo,s=[],t=[],u=function(q){return 4294967296*(q-(q\|0))\|0},l=2,b=0;64>b;){var d;a:{d=l;for(var w=k.sqrt(d),r=2;r<=w;r++)if(!(d%r)){d=!1;break a}d=!0}d&&(8>b&&(s[b]=u(k.pow(l,0.5))),t[b]=u(k.pow(l,1/3)),b++);l++}var n=[],h=h.SHA256=j.extend({_doReset:function(){this._hash=new v.init(s.slice(0))},_doProcessBlock:function(q,h){for(var a=this._hash.words,c=a[0],d=a[1],b=a[2],k=a[3],f=a[4],g=a[5],j=a[6],l=a[7],e=0;64>e;e++){if(16>e)n[e]=..q[h+e]\|0;else{var m=n[e-15],p=n[e-2];n[e]=((m<<25\|m>>>7)^(m<<14\|m>>>18)^m>>>3)+n[e-7]+((p<<15\|p>>>17)^(p<<13\|p>>>19)^p>>>10)+n[e-16]}m=l+((f<<26\|f>>>6)^(f<<21\|f>>>11)^(f<<7\|f>>>25))+(f&g^~f&j)+t[e]+n[e];p=((c<<30\|c>>>2)^(c<<19\|c>>>13)^(c<<10\|c>>>22))+(c&d^c&b^d&b);l=j;j=g;g=f;f=k+m\|0;k=b;b=d;d=c;c=m+p\|0}a[0]=a[0]+c\|0;a[1]=a[1]+d\|0;a[2]=a[2]+b\|0

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18681)
Category:	dropped
Size (bytes):	434646
Entropy (8bit):	5.108914692345246
Encrypted:	false
SSDEEP:	3072:wAKVvbIE+fCQ9Humf8tBq6Wiecq+I7Cwm/k8YUA4M2rGU:wAIxQJumfuecqt7+v5
MD5:	14FB81C256401E7421AD90CD18E39431
SHA1:	04462E37D4ABF7C282D79E403E61AC28CB24ABD2
SHA-256:	3BC6502A1CB11FEAB43DA0F3F27ED769B52F6E45C8585DF652C2A58D5D8B9190
SHA-512:	794E20F5614BF731769998E951B6AC1B924D4B6487C42F188555FA29D16FE8226843A5E4F05471D965E8E7C7F8B67C53BB1266F6BF2A41C39A1FA27D996B3436
Malicious:	false
Reputation:	low
Preview:	if(!PrimeFaces.dialog){PrimeFaces.dialog={};PrimeFaces.dialog.DialogHandler={openDialog:function(f){var h=this.findRootWindow(),l=f.sourceComponentId+"_dlg";if(h.document.getElementById(l)){return}var k=function(){var v=window;var x=[];while(v.frameElement){var u=v.parent;if(u.PF===undefined){break}var t=v.frameElement;var o=[];for(;t&&t.tagName!==undefined;t=t.parentNode){if(t.id&&!/\s/.test(t.id)){o.unshift(t.id);o.unshift("#");o.unshift(" > ");break}else{if(t.className){var p=t.className.split(" ");var q=[];for(var r in p){if(p.hasOwnProperty(r)&&p[r]){q.unshift(p[r]);q.unshift(".")}}q.unshift(t.tagName);var n=q.join("");var m=$(t.parentNode).find(n);if(m.length>1){o.unshift(":eq("+m.index(t)+")")}o.unshift(n)}else{var m=$(t.parentNode).find(t.tagName);if(m.length>1){o.unshift(":eq("+m.index(t)+")")}o.unshift(t.tagName)}}o.unshift(" > ")}var y=o.slice(1).join("");x.unshift(y);v=u}return x}();var j=f.options.widgetVar;if(!j){j=f.sourceComponentId.replace(/:/g,"_")+"_dlgwidget"}var d=

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 125 x 50
Category:	dropped
Size (bytes):	2212
Entropy (8bit):	7.7139032594157655
Encrypted:	false
SSDEEP:	48:w0l0D+7fTXSXST+tTCwako+S692isOX3r5Ae46k1xz1nU:dlrf7SXST+tCwaC9QOrqEk1VC
MD5:	10118E88DE5721448EA066AB013CDD16
SHA1:	E65C34557655FCD80E0DAC881733E25E8FA0CB27
SHA-256:	002D436D5DD4334F54512EE7484A44FFBCBB9A5047ADD9890789BD5379DF195C
SHA-512:	27A86174D2B66E3945A1A8F1ADD23BE07E134C094ADCA801F60AF14ED223B6293474DB0AAC83F8AE6FC95552D6C10C773F14093103EAC7875550C9501D99B2AF
Malicious:	false
Reputation:	low
Preview:	GIF89a}.2..?........f.......DDD..............333.............@..www......fff........."""...............{{{VVV............0.........p.`....... y.p....P..===........BBB.................................!...,.?.,....}.2...j..pH,...r.l:..tJ.Z..v..z..xL....z.n...\|N.....~....................................................bA.!.....?.,....r.-......X4..I.I.\(...9x6.$)1$1..oX.`....I.Pi...p.`7....1h(..F:.HRP..Y......!.......!.9..V..,F....DL!.6<....F..82#rK..#{)-9._ZJ\.\d<.6...,0P...G.W(.,P-^.X.$.L...y_J..H".#:+....Z".0."..#........Vl. .Z..V$9.J..Eo8........ .(...*.G"..I...d.N.<.-.uJB.........&$.!...0z..&I...P! ..]1{.x.O.....)J..&;4.j.8Vi.....f@HR........:6d.=.P..HGc.3...A_.C.)..W....._.e.--.r......P.C\,R....(8..'.....T.Kp.+=..g....j..i5.%.......y.JDh!2).@;.v........'..O33V.B6..-......84*..PT{.PC.6L(I..TPA....A'.8p....`.....kB!L.....&...".Xa..08......."..k.eh..-..I......BJC......""&...%.0!.......... ......@E&...........Q.?..Y........N............$.8 ............

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	6.101444055410562
Encrypted:	false
SSDEEP:	24:NsaFR2+28jO3IHlfPuB12vyKFapJb7O1aXmuZEpE5ePx9RE1vw:Nsa32+2o+LiJgt8DpGw
MD5:	A3E5B50FA24DC39773107EB827604FBF
SHA1:	D290EE2B5110FE454F01F217F0E69CF8FF2A2CAD
SHA-256:	06C9AD91CF91E1E3FDB85AF3CBEC9A90D19FFC103FF4C35E4B0079A3A0B16A73
SHA-512:	B4FDC739ECC74870412C6624240E3C4CB8BA7EA81F6114F3122BA9B6B795E04E5838962AC0F040FCFBBEC19B1B8B0610AB70836C913F076223A1AE75BF289629
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... ...................................O...T.f.MIW.g.U...N.e.N.h.U...Z.`.j.1I..0...2.............E...w.F.X.(.N.E.K...J...K...J...J...J.g.M.7.X.X.v.K.H.......n.0.~...T.T.K...J.w.J.a.J.v.K.u.K.j.J.Q.K.N.K.y.K.k.S.&.\|.8.m.....V.Z.<.J.=.J.r.J...K...L.w.K.h.K.`.L.[.K.r.K...K...K...Z.^...?.n.HGN...K...K...K.x.K.f.J.].K.w.J.m.K.5.K..J.:.K.W.J...N.b.q.?IY.(.J.N.J.l.K.Q.J.8.J.s.L...K...K...L...K.f.J...K...J...I...Y.".a.+.M...J...J...K...K...K...K.[.K.[.K...K...K...J...J...M...a.,._.(.O...J...K.>.K...K...K...I.;.J.;.K...K...L...K.>.J...O..._.'.P...L...J...J.u.K...L...K...K...K...K...L...K...K.v.J...L...Q...q.@KS...I...K.u.K...J.c.J.e.L...L...K.g.K.c.K...K.u.I...S...o.<K^.&.N...K...J...I...J...K...K...K...K...J...I...I...J...N...^.&.x.F l.8nL...J...J...J...K...K...K...K...J...J...J...L...l.8nw.F ....`.+mP...O...J...J...J.U.K...L...K.W.J...J...O...P...a.m....V.....^.x.G9U...J...K...J...K...K...I...J...J...U...x.H9..].U.......u.C...W.\.%ze./yR...O...N...O...O...R.

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2112 x 180, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	244291
Entropy (8bit):	7.990196808132169
Encrypted:	true
SSDEEP:	6144:F8/YfIF6wgUAm/4L1Y3GMxVFnF80Ep1rSfEdbw3xFbg:S/gIngUPYMxVU0CYEdbUxFk
MD5:	EE2BB37B3CF507826F7231719A21B9E7
SHA1:	254665DCB90B335D57B5AF8B21282EBFCFDF50B3
SHA-256:	55AB1EFA8AC365CA0810E5AA87C3CB150A133D70EB00907D8883969E4B5B8B99
SHA-512:	B0A825A445010D9772408CE5FAFDF3E46DC8FAD201A7790C2B1C9DE061891A1074ED218C6B8449414D5E8938B0FC9DB372E02CCAC92B6DF76235A28C465F56BF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@................gAMA......a....IiCCPsRGB IEC61966-2.1..H..SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O.

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2112 x 180, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	244291
Entropy (8bit):	7.990196808132169
Encrypted:	true
SSDEEP:	6144:F8/YfIF6wgUAm/4L1Y3GMxVFnF80Ep1rSfEdbw3xFbg:S/gIngUPYMxVU0CYEdbUxFk
MD5:	EE2BB37B3CF507826F7231719A21B9E7
SHA1:	254665DCB90B335D57B5AF8B21282EBFCFDF50B3
SHA-256:	55AB1EFA8AC365CA0810E5AA87C3CB150A133D70EB00907D8883969E4B5B8B99
SHA-512:	B0A825A445010D9772408CE5FAFDF3E46DC8FAD201A7790C2B1C9DE061891A1074ED218C6B8449414D5E8938B0FC9DB372E02CCAC92B6DF76235A28C465F56BF
Malicious:	false
Reputation:	low
URL:	https://www.lbpiaccess.com/resources/images/iAccess_Header.png
Preview:	.PNG........IHDR...@................gAMA......a....IiCCPsRGB IEC61966-2.1..H..SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O.

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text
Category:	downloaded
Size (bytes):	1652
Entropy (8bit):	5.0021331205492245
Encrypted:	false
SSDEEP:	48:DqaYdqqoGPYUOs66QM7LcbN15v+gahe/M2Nc+D:DCdqqs7f15v+e02Ncc
MD5:	14B8F6DC7405DA363D947EA4B5486524
SHA1:	345B0966FA18EE7E3D5244E5C6E54E6DD9E3825A
SHA-256:	8B9815887457C9B236AFB15B41CE7932884DC1595A38A6E2AAC6CE504A382012
SHA-512:	46958E4C4B5D04552F0CD252CF14444B770F40808A5284EC60E723233260A5D53A728F39A3246BB7D80FDA1F4246E3728FFB32C9BF1B756DB6E16E7479494B8D
Malicious:	false
Reputation:	low
URL:	https://seal.globalsign.com/SiteSeal/gmogs_image_125-50_en_dblue.js
Preview:	..ss_ua = navigator.userAgent.toLowerCase();.ss_opera = window.opera;.ss_msie = (!ss_opera) && (ss_ua.indexOf("msie") != -1);.ss_msie4 = (!ss_opera) && (ss_ua.indexOf("msie 4") != -1);.ss_ns4 = (!ss_opera) && (ss_ua.indexOf("mozilla/4") != -1) && (ss_ua.indexOf("compatible") == -1);.ss_ns6 = (!ss_opera) && (ss_ua.indexOf("netscape6/6.0") != -1);..ss_opera6lower = (ss_opera) && parseFloat(ss_ua.substr(ss_ua.indexOf("opera")+6)) < 7;.ss_no_dyna_script = ss_opera6lower;..ss_fqdn = window.location.host;.ss_size = "SZ125-50";.ss_type = "image";.ss_lang = "en";.ss_ver = "V0023";.ss_service = "S001";.ss_protocol = window.location.protocol.substring(0, window.location.protocol.indexOf(":"));..ss_jspUrl = "//ssif1.globalsign.com/SiteSeal/siteSeal/siteSeal/siteSeal.do?p1=" + ss_fqdn + "&p2=" + ss_size + "&p3=" + ss_type + "&p4=" + ss_lang + "&p5=" + ss_ver + "&p6=" + ss_service + "&p7=" + ss_protocol;..function ss_js_seal

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (504), with CRLF line terminators
Category:	downloaded
Size (bytes):	877
Entropy (8bit):	5.787573778264621
Encrypted:	false
SSDEEP:	24:SGDGdBjB1ZWES8AdsgkWWHOWNLcLqIL98rGtedkj7lWqeK+C6uSJ:SGDscESZgWWHOWNwRGGteGfl21CT+
MD5:	3A1AA66386A793BE02C7B07672659C6B
SHA1:	B33C2A71336ADE6B34B8C7901AF3B51371B6AB37
SHA-256:	26EE9FAFCCC6D785B96EB63FCADAA2CC39678EFF6D31B66B973520EDD18CBCBC
SHA-512:	CE7DCEDC8F060EDA215E1ADE767A8A66F2084C9458A79CBEAA993A51B18376817D3D2B6EB698C36023AC13ED576FF1E577A623C425252C3343E5D0231777455F
Malicious:	false
Reputation:	low
URL:	https://www.lbpiaccess.com/javax.faces.resource/cryptojs/enc-base64-min.js.xhtml?ln=scripts
Preview:	/..CryptoJS v3.1.2..code.google.com/p/crypto-js..(c) 2009-2013 by Jeff Mott. All rights reserved...code.google.com/p/crypto-js/wiki/License../..(function(){var h=CryptoJS,j=h.lib.WordArray;h.enc.Base64={stringify:function(b){var e=b.words,f=b.sigBytes,c=this._map;b.clamp();b=[];for(var a=0;a<f;a+=3)for(var d=(e[a>>>2]>>>24-8(a%4)&255)<<16\|(e[a+1>>>2]>>>24-8((a+1)%4)&255)<<8\|e[a+2>>>2]>>>24-8((a+2)%4)&255,g=0;4>g&&a+0.75g<f;g++)b.push(c.charAt(d>>>6(3-g)&63));if(e=c.charAt(64))for(;b.length%4;)b.push(e);return b.join("")},parse:function(b){var e=b.length,f=this._map,c=f.charAt(64);c&&(c=b.indexOf(c),-1!=c&&(e=c));for(var c=[],a=0,d=0;d<..e;d++)if(d%4){var g=f.indexOf(b.charAt(d-1))<<2(d%4),h=f.indexOf(b.charAt(d))>>>6-2(d%4);c[a>>>2]\|=(g\|h)<<24-8(a%4);a++}return j.create(c,a)},_map:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="}})();..

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 15, 2025 00:26:14.569525003 CET	49674	443	192.168.2.5	23.1.237.91
Jan 15, 2025 00:26:14.569617033 CET	49675	443	192.168.2.5	23.1.237.91
Jan 15, 2025 00:26:14.678795099 CET	49673	443	192.168.2.5	23.1.237.91
Jan 15, 2025 00:26:24.170974970 CET	49675	443	192.168.2.5	23.1.237.91
Jan 15, 2025 00:26:24.170984030 CET	49674	443	192.168.2.5	23.1.237.91
Jan 15, 2025 00:26:24.280352116 CET	49673	443	192.168.2.5	23.1.237.91
Jan 15, 2025 00:26:25.150774002 CET	49713	443	192.168.2.5	142.250.185.196
Jan 15, 2025 00:26:25.150815964 CET	443	49713	142.250.185.196	192.168.2.5
Jan 15, 2025 00:26:25.150886059 CET	49713	443	192.168.2.5	142.250.185.196
Jan 15, 2025 00:26:25.151149988 CET	49713	443	192.168.2.5	142.250.185.196
Jan 15, 2025 00:26:25.151166916 CET	443	49713	142.250.185.196	192.168.2.5
Jan 15, 2025 00:26:25.786923885 CET	443	49713	142.250.185.196	192.168.2.5
Jan 15, 2025 00:26:25.787247896 CET	49713	443	192.168.2.5	142.250.185.196
Jan 15, 2025 00:26:25.787262917 CET	443	49713	142.250.185.196	192.168.2.5
Jan 15, 2025 00:26:25.788305998 CET	443	49713	142.250.185.196	192.168.2.5
Jan 15, 2025 00:26:25.788372040 CET	49713	443	192.168.2.5	142.250.185.196
Jan 15, 2025 00:26:25.789849043 CET	49713	443	192.168.2.5	142.250.185.196
Jan 15, 2025 00:26:25.789910078 CET	443	49713	142.250.185.196	192.168.2.5
Jan 15, 2025 00:26:25.843662024 CET	49713	443	192.168.2.5	142.250.185.196
Jan 15, 2025 00:26:25.843673944 CET	443	49713	142.250.185.196	192.168.2.5
Jan 15, 2025 00:26:25.890523911 CET	49713	443	192.168.2.5	142.250.185.196
Jan 15, 2025 00:26:25.968632936 CET	443	49704	23.1.237.91	192.168.2.5
Jan 15, 2025 00:26:25.968854904 CET	49704	443	192.168.2.5	23.1.237.91
Jan 15, 2025 00:26:26.452673912 CET	49715	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:26.452723980 CET	443	49715	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:26.452779055 CET	49715	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:26.455372095 CET	49716	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:26.455459118 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:26.455528975 CET	49716	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:26.456161022 CET	49716	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:26.456209898 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:26.456370115 CET	49715	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:26.456386089 CET	443	49715	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:27.316788912 CET	443	49715	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:27.317080975 CET	49715	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:27.317096949 CET	443	49715	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:27.318095922 CET	443	49715	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:27.318164110 CET	49715	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:27.322902918 CET	49715	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:27.322964907 CET	443	49715	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:27.323101044 CET	49715	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:27.323107958 CET	443	49715	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:27.349838018 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:27.350332022 CET	49716	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:27.350394011 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:27.354355097 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:27.354443073 CET	49716	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:27.354876995 CET	49716	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:27.354974985 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:27.375360966 CET	49715	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:27.407382965 CET	49716	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:27.407452106 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:27.452935934 CET	49716	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:27.606821060 CET	443	49715	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:27.606853962 CET	443	49715	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:27.606863976 CET	443	49715	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:27.606895924 CET	443	49715	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:27.606909037 CET	443	49715	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:27.606916904 CET	49715	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:27.606930971 CET	443	49715	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:27.606937885 CET	49715	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:27.606961966 CET	49715	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:27.606985092 CET	443	49715	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:27.607426882 CET	49715	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:27.621464014 CET	49715	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:27.621515036 CET	443	49715	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:27.660676956 CET	49716	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:27.703418970 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:27.821808100 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:27.821856022 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:27.821918011 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:27.822093010 CET	49719	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:27.822129965 CET	443	49719	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:27.822174072 CET	49719	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:27.822386026 CET	49720	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:27.822480917 CET	443	49720	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:27.822483063 CET	49721	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:27.822530031 CET	443	49721	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:27.822588921 CET	49720	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:27.822671890 CET	49721	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:27.822813988 CET	49722	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:27.822834969 CET	443	49722	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:27.822890997 CET	49722	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:27.823060036 CET	49723	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:27.823072910 CET	443	49723	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:27.823142052 CET	49723	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:27.823497057 CET	49723	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:27.823518038 CET	443	49723	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:27.823803902 CET	49722	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:27.823837996 CET	443	49722	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:27.823957920 CET	49721	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:27.823977947 CET	443	49721	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:27.824191093 CET	49720	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:27.824218035 CET	443	49720	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:27.824322939 CET	49719	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:27.824335098 CET	443	49719	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:27.824459076 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:27.824476004 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:27.958457947 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:27.958522081 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:27.958543062 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:27.958560944 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:27.958599091 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:27.958610058 CET	49716	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:27.958617926 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:27.958673954 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:27.958709002 CET	49716	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:27.958709002 CET	49716	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:27.958739996 CET	49716	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:27.960347891 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:27.960402966 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:27.960433960 CET	49716	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:27.960448027 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:27.960480928 CET	49716	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:27.960500956 CET	49716	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:28.056840897 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:28.056874990 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:28.056979895 CET	49716	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:28.057054043 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:28.057095051 CET	49716	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:28.058237076 CET	49716	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:28.058346987 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:28.058365107 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:28.058429003 CET	49716	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:28.058443069 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:28.058547974 CET	49716	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:28.060317993 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:28.060336113 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:28.060395956 CET	49716	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:28.060408115 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:28.060439110 CET	49716	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:28.060458899 CET	49716	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:28.062199116 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:28.062217951 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:28.062302113 CET	49716	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:28.062319040 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:28.062344074 CET	49716	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:28.062364101 CET	49716	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:28.155860901 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:28.155929089 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:28.155991077 CET	49716	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:28.156064987 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:28.156104088 CET	49716	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:28.156238079 CET	49716	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:28.156445026 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:28.156490088 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:28.156518936 CET	49716	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:28.156531096 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:28.156560898 CET	49716	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:28.156595945 CET	49716	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:28.157809973 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:28.157850027 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:28.157893896 CET	49716	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:28.157906055 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:28.157937050 CET	49716	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:28.157963037 CET	49716	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:28.158606052 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:28.158647060 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:28.158689022 CET	49716	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:28.158705950 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:28.158731937 CET	49716	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:28.159616947 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:28.159665108 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:28.159689903 CET	49716	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:28.159703016 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:28.159734964 CET	49716	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:28.159765959 CET	49716	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:28.160595894 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:28.160636902 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:28.160677910 CET	49716	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:28.160691023 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:28.160717010 CET	49716	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:28.160819054 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:28.160881996 CET	49716	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:28.198772907 CET	49716	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:28.205837011 CET	49716	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:28.205862045 CET	443	49716	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:28.316148043 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:28.316184998 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:28.316272020 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:28.316536903 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:28.316570997 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:28.500696898 CET	443	49721	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:28.500984907 CET	49721	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:28.501010895 CET	443	49719	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:28.501014948 CET	443	49721	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:28.501239061 CET	49719	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:28.501251936 CET	443	49719	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:28.502085924 CET	443	49721	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:28.502146959 CET	49721	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:28.502161026 CET	443	49721	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:28.502218962 CET	49721	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:28.502302885 CET	443	49719	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:28.502368927 CET	49719	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:28.502377033 CET	443	49719	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:28.502563953 CET	49719	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:28.503245115 CET	443	49722	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:28.503436089 CET	49721	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:28.503530979 CET	49719	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:28.503576040 CET	443	49721	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:28.503596067 CET	443	49719	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:28.503700018 CET	49722	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:28.503735065 CET	443	49722	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:28.503978014 CET	49721	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:28.503987074 CET	443	49721	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:28.504003048 CET	443	49720	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:28.504159927 CET	49719	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:28.504167080 CET	443	49719	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:28.504210949 CET	443	49723	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:28.504537106 CET	49723	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:28.504544973 CET	443	49723	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:28.504648924 CET	49720	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:28.504663944 CET	443	49720	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:28.505197048 CET	443	49722	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:28.505269051 CET	49722	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:28.505287886 CET	443	49722	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:28.505342960 CET	49722	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:28.506093979 CET	443	49723	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:28.506175041 CET	49723	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:28.506182909 CET	443	49723	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:28.506211042 CET	443	49720	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:28.506272078 CET	49720	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:28.506285906 CET	443	49720	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:28.506293058 CET	49723	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:28.506372929 CET	49720	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:28.506561041 CET	49722	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:28.506654024 CET	443	49722	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:28.506781101 CET	49722	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:28.506793976 CET	443	49722	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:28.507028103 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:28.507491112 CET	49720	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:28.507585049 CET	443	49720	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:28.508115053 CET	49723	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:28.508202076 CET	443	49723	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:28.508241892 CET	49720	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:28.508255959 CET	443	49720	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:28.508292913 CET	49723	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:28.508300066 CET	443	49723	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:28.508651018 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:28.508683920 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:28.510185957 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:28.510267019 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:28.510277033 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:28.510328054 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:28.511367083 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:28.511454105 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:28.511688948 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:28.511698008 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:28.550406933 CET	49721	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:28.550421000 CET	49719	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:28.550424099 CET	49722	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:28.550424099 CET	49720	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:28.550434113 CET	49723	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:28.566488981 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.205637932 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:29.206106901 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:29.206130981 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:29.207576990 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:29.207778931 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:29.210983992 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:29.211288929 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:29.211374044 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:29.253818035 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:29.253880978 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:29.300090075 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:29.416943073 CET	443	49719	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.418732882 CET	443	49719	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.418744087 CET	443	49719	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.418787003 CET	49719	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.418802977 CET	443	49719	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.418839931 CET	49719	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.418863058 CET	49719	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.447921038 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.447948933 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.447957993 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.447981119 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.448004007 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.448015928 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.448137999 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.448137999 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.448177099 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.448239088 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.646449089 CET	443	49719	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.646460056 CET	443	49719	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.646570921 CET	49719	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.646589041 CET	443	49719	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.647564888 CET	443	49719	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.647634029 CET	443	49719	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.647677898 CET	49719	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.647677898 CET	49719	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.647885084 CET	49719	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.647901058 CET	443	49719	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.648305893 CET	49727	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.648350000 CET	443	49727	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.649069071 CET	49727	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.649323940 CET	49727	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.649349928 CET	443	49727	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.649800062 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.649837971 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.649872065 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.649893045 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.649921894 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.649936914 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.650840998 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.650899887 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.650908947 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.672862053 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.672898054 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.672929049 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.672939062 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.672969103 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.672988892 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.691838980 CET	443	49720	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.691878080 CET	443	49720	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.691888094 CET	443	49720	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.691905975 CET	443	49720	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.691941023 CET	49720	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.691946983 CET	443	49720	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.691982985 CET	443	49720	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.692001104 CET	49720	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.692001104 CET	49720	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.692028999 CET	49720	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.739943981 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.740000963 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.740012884 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.740053892 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.740061045 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.740097046 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.740127087 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.740148067 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.740225077 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.740235090 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.740263939 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.742052078 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:29.742131948 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:29.742151976 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:29.742193937 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:29.742202997 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:29.742219925 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:29.742224932 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:29.742243052 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:29.742264986 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:29.742271900 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:29.742291927 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:29.742291927 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:29.742319107 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:29.743666887 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:29.743712902 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:29.743746042 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:29.743761063 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:29.743789911 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:29.743815899 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:29.752270937 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.752316952 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.752341986 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.752351046 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.752407074 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.752661943 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.757617950 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.757677078 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.787852049 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.787978888 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.788001060 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.793792009 CET	443	49720	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.793869972 CET	49720	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.793879032 CET	443	49720	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.793926001 CET	443	49720	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.793941975 CET	49720	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.793963909 CET	49720	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.800426960 CET	443	49720	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.800489902 CET	49720	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.800515890 CET	443	49720	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.803459883 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.803512096 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.803524971 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.803546906 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.803564072 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.803586960 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.807609081 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.807665110 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.808975935 CET	443	49721	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.809196949 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.809273005 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.809283018 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.811229944 CET	443	49721	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.811238050 CET	443	49721	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.811295986 CET	443	49721	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.811345100 CET	49721	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.811378956 CET	443	49721	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.811414957 CET	49721	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.811466932 CET	49721	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.813921928 CET	443	49720	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.813981056 CET	49720	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.813999891 CET	443	49720	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.814043999 CET	49720	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.814052105 CET	443	49720	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.814892054 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.814944983 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.814954042 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.815012932 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.821151972 CET	443	49720	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.821212053 CET	49720	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.821229935 CET	443	49720	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.821274042 CET	49720	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.821280956 CET	443	49720	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.842206001 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:29.842259884 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:29.842319965 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:29.842341900 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:29.842369080 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:29.842389107 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:29.843403101 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:29.843444109 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:29.843486071 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:29.843497992 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:29.843525887 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:29.843589067 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:29.845550060 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:29.845590115 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:29.845622063 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:29.845634937 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:29.845664978 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:29.845681906 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:29.847296953 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:29.847357035 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:29.847382069 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:29.847393990 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:29.847423077 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:29.847443104 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:29.861865044 CET	49720	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.871478081 CET	443	49720	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.871510029 CET	443	49720	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.871558905 CET	443	49720	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.871557951 CET	49720	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.871593952 CET	49720	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.871608019 CET	443	49720	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.871627092 CET	49720	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.871650934 CET	49720	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.882275105 CET	443	49720	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.882343054 CET	49720	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.882361889 CET	443	49720	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.897459984 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.913239002 CET	443	49721	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.913311958 CET	49721	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.913330078 CET	443	49721	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.915761948 CET	443	49721	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.915828943 CET	49721	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.915838957 CET	443	49721	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.916307926 CET	49721	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.916348934 CET	443	49721	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.916460991 CET	49721	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.916747093 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.916770935 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.917305946 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.918597937 CET	443	49720	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.918642044 CET	443	49720	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.918662071 CET	49720	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.918684006 CET	443	49720	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.918718100 CET	49720	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.918951035 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.918967009 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.922357082 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.922435045 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.922456026 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.922492027 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.922511101 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.922538996 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.937566996 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.937628031 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.937642097 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.937685013 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.939517975 CET	443	49720	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.939589024 CET	49720	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.939610004 CET	443	49720	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.939656019 CET	443	49720	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.939673901 CET	49720	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.939799070 CET	443	49720	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.939850092 CET	49720	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.940274954 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:29.940337896 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:29.940371990 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:29.940416098 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:29.940450907 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:29.940582037 CET	49720	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.940597057 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:29.940599918 CET	443	49720	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.940803051 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:29.940860033 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:29.940893888 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:29.940907001 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:29.940936089 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:29.940954924 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:29.941693068 CET	49735	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.941720963 CET	443	49735	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.941800117 CET	49735	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.941808939 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:29.941848993 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:29.941876888 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:29.941890001 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:29.941914082 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:29.941934109 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:29.942127943 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:29.942181110 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:29.942198992 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:29.942213058 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:29.942254066 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:29.942254066 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:29.943041086 CET	49735	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.943058014 CET	443	49735	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.943078041 CET	443	49723	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.943099022 CET	443	49723	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.943105936 CET	443	49723	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.943116903 CET	443	49723	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.943140030 CET	443	49723	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.943144083 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:29.943152905 CET	49723	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.943167925 CET	443	49723	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.943183899 CET	49723	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.943186045 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:29.943206072 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:29.943216085 CET	49723	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:29.943228960 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:29.943245888 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:29.943269014 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:29.943761110 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:29.943846941 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:29.943854094 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:29.943870068 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:29.943916082 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:29.943934917 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:29.943937063 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:29.943999052 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:29.945979118 CET	49725	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:29.946006060 CET	443	49725	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:29.988816023 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:29.988892078 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.013180971 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.013251066 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.013261080 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.037271976 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.037336111 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.037338018 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.037359953 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.037395000 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.037410021 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.040832996 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.040894985 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.043667078 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.043715954 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.043723106 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.044219971 CET	443	49723	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.044256926 CET	443	49723	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.044291973 CET	49723	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.044308901 CET	443	49723	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.044338942 CET	49723	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.044338942 CET	49723	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.058805943 CET	443	49723	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.058908939 CET	49723	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.058916092 CET	443	49723	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.063222885 CET	443	49723	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.063282013 CET	49723	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.063290119 CET	443	49723	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.063389063 CET	49723	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.078767061 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.078819036 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.078829050 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.078872919 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.116132021 CET	443	49723	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.116152048 CET	443	49723	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.116206884 CET	49723	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.116214991 CET	443	49723	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.116252899 CET	49723	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.116252899 CET	49723	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.117443085 CET	443	49723	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.117491961 CET	49723	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.117497921 CET	443	49723	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.117575884 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.134043932 CET	443	49723	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.134059906 CET	443	49723	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.134115934 CET	49723	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.134124994 CET	443	49723	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.134176016 CET	49723	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.137916088 CET	443	49723	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.137962103 CET	49723	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.137967110 CET	443	49723	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.138015032 CET	443	49723	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.138081074 CET	49723	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.138165951 CET	49723	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.138178110 CET	443	49723	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.139411926 CET	49736	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.139457941 CET	443	49736	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.139532089 CET	49736	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.140172005 CET	49736	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.140185118 CET	443	49736	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.149379969 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.149405003 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.149442911 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.149456978 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.149472952 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.152777910 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.152834892 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.152844906 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.152888060 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.156177998 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.169327021 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.169388056 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.169397116 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.169451952 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.230192900 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.255938053 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.256012917 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.256036997 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.256094933 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.259309053 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.259356976 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.259366035 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.259408951 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.261528015 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.275197983 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.275257111 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.275268078 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.275326014 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.275333881 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.291260958 CET	443	49727	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.291599989 CET	49727	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.291627884 CET	443	49727	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.292004108 CET	443	49727	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.292299032 CET	49727	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.292360067 CET	443	49727	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.292467117 CET	49727	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.320417881 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.320493937 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.320503950 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.320547104 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.337558985 CET	49737	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.337603092 CET	443	49737	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.337676048 CET	49737	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.337872028 CET	49737	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.337886095 CET	443	49737	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.339333057 CET	443	49727	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.346009016 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.355882883 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.355962038 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.355976105 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.365597963 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.365670919 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.365681887 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.381727934 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.381800890 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.381810904 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.381860971 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.411813021 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.411900043 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.413425922 CET	443	49722	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.414516926 CET	443	49722	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.414524078 CET	443	49722	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.414562941 CET	443	49722	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.414613008 CET	49722	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.414648056 CET	443	49722	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.414665937 CET	49722	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.414764881 CET	49722	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.415168047 CET	49722	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.415205956 CET	443	49722	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.415361881 CET	443	49722	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.415416002 CET	49722	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.415436983 CET	49722	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.416080952 CET	49738	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.416110039 CET	443	49738	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.417342901 CET	49738	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.428118944 CET	49738	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.428139925 CET	443	49738	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.476861954 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.484385014 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.484456062 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.484489918 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.484613895 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.490422964 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.490516901 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.492754936 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.496912003 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.497034073 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.497042894 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.497112989 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.502305984 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.502372980 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.507606983 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.510243893 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.510252953 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.526201963 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.526287079 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.526298046 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.526340961 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.558237076 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.567909956 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.567996979 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.583159924 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.584294081 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.584307909 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.597320080 CET	443	49735	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.609047890 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.639075041 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.642340899 CET	49735	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.642354012 CET	443	49735	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.642780066 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.642790079 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.644371033 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.646001101 CET	443	49735	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.646085024 CET	49735	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.646092892 CET	443	49735	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.646136045 CET	49735	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.646718979 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.646918058 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.647003889 CET	49735	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.647176027 CET	443	49735	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.647206068 CET	49735	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.647227049 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.687355995 CET	443	49735	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.687381983 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.694730997 CET	49735	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.694771051 CET	443	49735	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.698240995 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.714652061 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.714673996 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.714759111 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.714783907 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.714798927 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.714828968 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.714852095 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.715167999 CET	49718	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.715181112 CET	443	49718	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.715684891 CET	49742	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.715770960 CET	443	49742	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.715861082 CET	49742	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.716444969 CET	49742	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.716485977 CET	443	49742	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.733187914 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.733239889 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.733350992 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.733736992 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.733750105 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.741044998 CET	49735	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.777020931 CET	443	49736	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.777925968 CET	49736	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.777946949 CET	443	49736	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.781567097 CET	443	49736	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.781667948 CET	49736	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.781673908 CET	443	49736	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.784889936 CET	49736	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.784889936 CET	49736	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.785231113 CET	443	49736	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.785270929 CET	49736	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.831331015 CET	443	49736	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.833501101 CET	49736	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.833512068 CET	443	49736	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.879800081 CET	49736	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.965233088 CET	443	49737	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.965497017 CET	49737	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.965512037 CET	443	49737	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.966990948 CET	443	49737	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.967066050 CET	49737	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.967073917 CET	443	49737	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.967119932 CET	49737	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.967371941 CET	49737	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:30.967444897 CET	443	49737	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:30.967627048 CET	49737	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.015332937 CET	443	49737	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.017631054 CET	49737	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.017638922 CET	443	49737	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.063801050 CET	49737	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.069116116 CET	443	49738	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.069447041 CET	49738	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.069461107 CET	443	49738	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.070647955 CET	443	49738	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.071037054 CET	49738	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.071166039 CET	49738	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.071175098 CET	443	49738	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.071208000 CET	443	49738	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.104548931 CET	443	49727	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.106586933 CET	443	49727	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.106594086 CET	443	49727	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.106662035 CET	49727	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.106677055 CET	443	49727	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.106734991 CET	49727	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.111989975 CET	49738	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.190778017 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.190812111 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.190823078 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.190841913 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.190866947 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.190887928 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.190898895 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.190915108 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.190939903 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.265511990 CET	443	49735	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.265600920 CET	443	49735	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.265660048 CET	49735	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.265677929 CET	443	49735	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.265722036 CET	49735	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.266305923 CET	443	49735	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.266402006 CET	49735	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.266428947 CET	49735	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.266436100 CET	443	49735	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.266482115 CET	49735	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.267015934 CET	49746	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.267040014 CET	443	49746	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.267088890 CET	49746	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.267793894 CET	49746	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.267808914 CET	443	49746	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.270272970 CET	49747	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.270303011 CET	443	49747	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.270454884 CET	49747	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.270661116 CET	49747	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.270672083 CET	443	49747	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.287003994 CET	443	49727	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.287106991 CET	49727	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.287153006 CET	443	49727	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.291727066 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.291789055 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.291806936 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.291817904 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.291842937 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.291863918 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.304347038 CET	443	49736	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.305653095 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.305721045 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.305727959 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.306130886 CET	443	49736	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.306150913 CET	443	49736	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.306169033 CET	443	49736	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.306178093 CET	49736	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.306202888 CET	443	49736	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.306216955 CET	49736	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.306216955 CET	49736	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.306221962 CET	443	49736	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.306268930 CET	49736	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.306268930 CET	49736	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.306608915 CET	443	49736	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.306622028 CET	49736	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.306730986 CET	49736	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.307028055 CET	49748	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.307064056 CET	443	49748	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.307128906 CET	49748	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.307391882 CET	49748	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.307405949 CET	443	49748	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.310050964 CET	443	49727	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.310067892 CET	443	49727	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.310131073 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.310143948 CET	49727	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.310158968 CET	443	49727	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.310183048 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.310190916 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.310240030 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.310966969 CET	49749	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.311054945 CET	443	49749	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.311136961 CET	49749	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.311388016 CET	49749	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.311425924 CET	443	49749	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.315015078 CET	443	49727	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.315062046 CET	443	49727	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.315063953 CET	49727	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.315109015 CET	49727	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.315319061 CET	49727	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.315341949 CET	443	49727	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.315624952 CET	49750	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.315639973 CET	443	49750	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.315695047 CET	49750	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.316196918 CET	49750	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.316210032 CET	443	49750	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.323157072 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.323220968 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.323227882 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.323359966 CET	49751	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.323383093 CET	443	49751	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.323448896 CET	49751	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.323606014 CET	49751	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.323621988 CET	443	49751	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.343352079 CET	443	49742	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.343574047 CET	49742	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.343595982 CET	443	49742	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.343988895 CET	443	49742	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.344331026 CET	49742	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.344403982 CET	443	49742	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.344691038 CET	49742	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.363598108 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.364309072 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.364324093 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.364386082 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.364393950 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.364433050 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.372117996 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.372165918 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.372172117 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.376852989 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.377024889 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.377042055 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.378577948 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.378631115 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.378643036 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.378678083 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.378998041 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.379064083 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.379158974 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.379168987 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.391330004 CET	443	49742	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.392823935 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.392843962 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.392874002 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.392882109 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.392906904 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.405483007 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.405539989 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.405545950 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.421350956 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.429718971 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.429735899 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.429769993 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.429780006 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.429815054 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.450951099 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.451011896 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.451024055 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.452567101 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.452600956 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.452645063 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.452651024 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.452663898 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.452702999 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.456130028 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.456193924 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.456198931 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.465338945 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.465373039 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.465415001 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.465420961 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.465441942 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.465462923 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.474200964 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.474220991 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.474296093 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.474304914 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.474353075 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.479399920 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.479471922 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.479479074 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.481168985 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.481221914 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.481229067 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.481272936 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.492985010 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.493040085 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.493063927 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.493083954 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.493098021 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.493115902 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.497160912 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.497226954 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.497235060 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.497278929 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.497284889 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.505575895 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.505603075 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.505641937 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.505654097 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.505688906 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.513577938 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.513628960 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.513633966 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.517712116 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.517781973 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.517788887 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.517833948 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.538781881 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.538851976 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.538861990 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.538883924 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.538919926 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.538925886 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.538966894 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.540350914 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.540380955 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.540405989 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.540411949 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.540431976 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.540436983 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.540457010 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.540461063 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.540482998 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.541065931 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.541112900 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.541119099 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.541162968 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.542433023 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.542484045 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.542501926 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.542541027 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.554156065 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.554172039 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.554198027 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.554239988 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.554246902 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.554271936 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.558250904 CET	443	49738	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.558427095 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.558480978 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.558492899 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.558938026 CET	443	49738	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.559000015 CET	49738	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.559356928 CET	49738	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.559369087 CET	443	49738	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.559709072 CET	49757	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.559736967 CET	443	49757	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.559806108 CET	49757	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.561786890 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.561842918 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.561851025 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.561897039 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.563143015 CET	49757	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.563160896 CET	443	49757	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.566514969 CET	49758	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.566565037 CET	443	49758	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.566634893 CET	49758	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.566821098 CET	49758	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.566836119 CET	443	49758	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.575097084 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.575110912 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.575170040 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.575181961 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.575220108 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.581370115 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.581437111 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.581446886 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.589437962 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.589452028 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.589529991 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.589538097 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.599209070 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.599251032 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.599306107 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.599313021 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.599350929 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.599368095 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.603797913 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.603975058 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.603981018 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.628158092 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.628216028 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.628228903 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.628271103 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.628665924 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.628695965 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.628727913 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.628736973 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.628756046 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.630599022 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.630611897 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.630685091 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.630692959 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.632110119 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.632168055 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.632175922 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.650259018 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.650295019 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.650336981 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.650348902 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.650358915 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.650376081 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.650410891 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.650415897 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.650454998 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.650455952 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.650495052 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.650779009 CET	49734	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.650789976 CET	443	49734	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.883117914 CET	443	49742	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.883146048 CET	443	49742	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.883244038 CET	49742	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.883279085 CET	443	49742	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.883824110 CET	443	49742	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.883877993 CET	49742	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.883898973 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.883939981 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.883949041 CET	49742	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.883950949 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.883965015 CET	443	49742	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.883976936 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.883991003 CET	49742	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.883996964 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.884011030 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.884021044 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.884028912 CET	49742	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.884032965 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.884068012 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.903229952 CET	443	49746	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.903479099 CET	49746	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.903496981 CET	443	49746	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.904372931 CET	443	49747	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.904531002 CET	49747	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.904540062 CET	443	49747	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.904671907 CET	443	49746	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.904948950 CET	49746	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.905056000 CET	49746	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.905117035 CET	443	49747	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.905122995 CET	443	49746	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.905396938 CET	49747	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.905461073 CET	49747	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.905474901 CET	443	49747	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.940365076 CET	443	49750	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.940660954 CET	49750	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.940680027 CET	443	49750	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.942147970 CET	443	49750	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.942220926 CET	49750	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.942229986 CET	443	49750	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.942264080 CET	49750	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.942609072 CET	49750	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.942688942 CET	443	49750	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.942738056 CET	49750	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.943586111 CET	443	49748	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.943773031 CET	49748	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.943782091 CET	443	49748	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.944845915 CET	443	49748	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.945120096 CET	49748	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.945188046 CET	49748	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.945204973 CET	443	49748	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.952002048 CET	443	49749	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.952197075 CET	49749	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.952261925 CET	443	49749	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.952651024 CET	443	49749	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.953016996 CET	49749	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.953092098 CET	49749	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.953123093 CET	443	49749	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.955832005 CET	49746	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.955832005 CET	49747	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.969119072 CET	443	49751	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.969381094 CET	49751	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.969393015 CET	443	49751	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.973001003 CET	443	49751	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.973083973 CET	49751	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.973093033 CET	443	49751	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.973135948 CET	49751	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.973397970 CET	49751	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.973511934 CET	49751	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.973572016 CET	443	49751	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.976733923 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.976782084 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.976799011 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.976809978 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.976840973 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.976851940 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.981870890 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.981935024 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.981940985 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.983336926 CET	443	49750	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.986421108 CET	49750	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:31.986429930 CET	443	49750	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:31.986443043 CET	49748	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.002391100 CET	49749	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.008616924 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.008637905 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.008677959 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.008688927 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.008713961 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.018237114 CET	49751	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.018299103 CET	443	49751	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.034198999 CET	49750	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.050062895 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.050770998 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.050781012 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.050817966 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.050851107 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.050856113 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.058204889 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.058223009 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.058255911 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.058262110 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.058285952 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.065088034 CET	49751	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.070597887 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.070650101 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.070662975 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.083751917 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.083831072 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.083838940 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.106811047 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.106829882 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.106872082 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.106882095 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.106899023 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.137371063 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.137403965 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.137454033 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.137466908 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.137479067 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.137509108 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.138017893 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.138062954 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.138067961 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.138082027 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.138102055 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.138107061 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.138128042 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.139417887 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.139468908 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.139477015 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.142390013 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.142473936 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.142482042 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.142519951 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.154717922 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.154736996 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.154782057 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.154788971 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.154813051 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.154822111 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.160252094 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.160336971 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.160343885 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.164258003 CET	443	49737	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.164279938 CET	443	49737	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.164287090 CET	443	49737	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.164350986 CET	49737	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.164361954 CET	443	49737	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.164376020 CET	443	49737	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.164407015 CET	49737	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.164417982 CET	443	49737	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.164446115 CET	443	49737	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.164469957 CET	49737	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.164469957 CET	49737	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.164496899 CET	49737	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.167620897 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.167655945 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.167680025 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.167690039 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.167704105 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.167715073 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.173010111 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.173067093 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.173073053 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.174753904 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.174969912 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.174977064 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.175030947 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.185427904 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.185450077 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.185489893 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.185496092 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.185533047 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.185544968 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.190761089 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.190840960 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.190848112 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.194611073 CET	443	49757	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.194864988 CET	49757	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.194875956 CET	443	49757	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.195319891 CET	443	49757	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.195641994 CET	49757	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.195710897 CET	443	49757	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.195758104 CET	49757	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.198880911 CET	443	49758	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.199059010 CET	49758	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.199076891 CET	443	49758	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.200515032 CET	443	49758	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.200786114 CET	49758	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.200867891 CET	49758	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.200959921 CET	443	49758	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.201225042 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.201288939 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.201318026 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.201328993 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.201340914 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.223787069 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.223865986 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.223875999 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.223917007 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.224678040 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.224699020 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.224735022 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.224744081 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.224761963 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.224783897 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.225975990 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.226016045 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.226032972 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.226041079 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.226059914 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.226207018 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.226238012 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.226248980 CET	443	49743	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.226259947 CET	49743	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.226620913 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.226645947 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.226711988 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.227185965 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.227204084 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.239408970 CET	443	49757	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.250853062 CET	49758	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.265717983 CET	443	49737	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.265729904 CET	443	49737	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.265767097 CET	443	49737	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.265778065 CET	443	49737	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.265798092 CET	49737	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.265810966 CET	443	49737	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.265839100 CET	49737	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.265847921 CET	49737	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.270709991 CET	443	49737	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.270780087 CET	49737	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.270785093 CET	443	49737	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.315896988 CET	49737	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.315906048 CET	443	49737	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.335298061 CET	443	49737	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.335387945 CET	49737	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.335395098 CET	443	49737	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.335442066 CET	49737	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.392067909 CET	443	49737	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.392294884 CET	443	49747	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.392349958 CET	443	49747	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.392426968 CET	49747	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.392440081 CET	443	49747	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.392477989 CET	49747	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.392946005 CET	443	49747	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.393019915 CET	443	49747	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.393070936 CET	49747	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.393095016 CET	49747	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.393105030 CET	443	49747	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.393131018 CET	49747	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.393150091 CET	49747	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.393623114 CET	49765	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.393712997 CET	443	49765	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.393794060 CET	49765	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.394402027 CET	49765	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.394443035 CET	443	49765	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.421833038 CET	443	49737	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.421883106 CET	443	49737	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.421922922 CET	49737	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.421936989 CET	443	49737	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.421947002 CET	49737	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.421973944 CET	49737	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.432610035 CET	443	49746	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.432734013 CET	443	49746	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.432800055 CET	49746	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.432815075 CET	443	49746	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.433149099 CET	443	49746	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.433201075 CET	49746	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.433209896 CET	443	49746	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.433223009 CET	49746	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.433223009 CET	49746	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.433247089 CET	49746	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.436346054 CET	443	49750	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.437227011 CET	443	49750	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.437297106 CET	49750	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.437503099 CET	49750	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.437522888 CET	443	49750	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.440438986 CET	49766	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.440469027 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.440550089 CET	49766	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.441150904 CET	49766	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.441168070 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.449712992 CET	443	49749	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.451231956 CET	443	49749	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.451240063 CET	443	49749	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.451272011 CET	443	49749	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.451309919 CET	443	49749	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.451335907 CET	49749	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.451337099 CET	49749	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.451370955 CET	49749	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.451534986 CET	49749	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.451554060 CET	443	49749	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.451795101 CET	49768	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.451802969 CET	443	49768	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.451854944 CET	49768	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.453213930 CET	49768	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.453224897 CET	443	49768	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.589068890 CET	443	49748	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.590539932 CET	443	49748	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.590562105 CET	443	49748	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.590598106 CET	443	49748	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.590603113 CET	49748	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.590627909 CET	443	49748	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.590646029 CET	49748	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.590646029 CET	49748	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.590672016 CET	49748	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.629322052 CET	443	49737	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.660923958 CET	443	49737	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.660943985 CET	443	49737	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.660984993 CET	443	49737	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.661031008 CET	49737	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.661056995 CET	443	49737	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.661072016 CET	49737	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.678940058 CET	443	49748	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.679013968 CET	49748	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.679039001 CET	443	49748	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.679246902 CET	443	49748	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.679291964 CET	49748	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.679523945 CET	49748	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.679543018 CET	443	49748	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.691945076 CET	443	49757	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.693479061 CET	443	49757	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.693516016 CET	443	49757	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.693573952 CET	49757	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.693589926 CET	443	49757	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.693633080 CET	49757	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.693640947 CET	443	49757	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.693727016 CET	443	49757	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.693772078 CET	49757	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.694531918 CET	49757	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.694542885 CET	443	49757	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.710372925 CET	49769	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.710418940 CET	443	49769	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.710491896 CET	49769	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.710664034 CET	49770	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.710684061 CET	443	49770	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.710742950 CET	49770	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.710980892 CET	49771	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.710994959 CET	443	49771	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.711040974 CET	49771	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.711266041 CET	49769	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.711283922 CET	443	49769	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.711436033 CET	49770	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.711448908 CET	443	49770	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.711589098 CET	49771	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.711596966 CET	443	49771	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.713584900 CET	49737	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.741925001 CET	443	49758	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.742444038 CET	443	49758	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.742635965 CET	49758	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.752624989 CET	49758	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.752650976 CET	443	49758	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.752990961 CET	49772	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.753022909 CET	443	49772	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.753079891 CET	49772	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.753549099 CET	49772	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.753565073 CET	443	49772	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.856352091 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.856576920 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.856597900 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.856992960 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.857251883 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.857314110 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.857384920 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.878099918 CET	443	49737	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.903326988 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.903471947 CET	443	49737	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.903482914 CET	443	49737	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.903520107 CET	443	49737	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.903549910 CET	49737	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.903565884 CET	443	49737	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.903598070 CET	49737	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.903604031 CET	443	49737	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.903616905 CET	49737	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.905525923 CET	443	49737	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.905596018 CET	49737	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.905607939 CET	443	49737	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.908626080 CET	443	49737	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.908710003 CET	49737	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.914145947 CET	49737	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.914164066 CET	443	49737	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.914475918 CET	49775	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.914501905 CET	443	49775	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:32.914561987 CET	49775	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.915383101 CET	49775	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:32.915397882 CET	443	49775	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.050360918 CET	443	49765	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.073880911 CET	49765	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.073899984 CET	443	49765	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.075191975 CET	443	49765	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.087856054 CET	443	49751	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.087915897 CET	443	49751	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.087938070 CET	443	49751	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.087955952 CET	443	49751	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.087995052 CET	443	49751	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.087995052 CET	49751	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.088016033 CET	443	49751	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.088041067 CET	49751	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.088043928 CET	443	49751	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.088066101 CET	49751	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.088092089 CET	49751	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.115308046 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.119467974 CET	443	49768	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.119704008 CET	49765	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.123430967 CET	49765	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.123788118 CET	443	49765	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.127422094 CET	49766	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.127433062 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.127532959 CET	49768	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.127540112 CET	443	49768	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.127804995 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.131393909 CET	443	49768	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.131479979 CET	49768	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.131484032 CET	443	49768	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.131521940 CET	49768	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.154640913 CET	49766	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.154714108 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.154786110 CET	49765	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.156495094 CET	49768	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.156689882 CET	443	49768	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.157202959 CET	49766	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.157324076 CET	49768	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.157332897 CET	443	49768	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.180290937 CET	443	49751	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.180352926 CET	443	49751	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.180391073 CET	49751	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.180421114 CET	443	49751	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.180449009 CET	49751	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.180469990 CET	49751	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.194627047 CET	443	49751	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.194722891 CET	49751	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.194737911 CET	443	49751	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.195332050 CET	443	49765	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.198991060 CET	443	49751	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.199045897 CET	49751	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.199059963 CET	443	49751	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.199255943 CET	443	49751	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.199330091 CET	49751	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.200227022 CET	49768	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.202069044 CET	49751	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.202089071 CET	443	49751	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.202557087 CET	49780	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.202579021 CET	443	49780	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.202681065 CET	49780	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.203325987 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.203934908 CET	49780	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.203952074 CET	443	49780	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.378137112 CET	443	49771	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.378479958 CET	49771	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.378510952 CET	443	49771	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.380110025 CET	443	49771	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.380165100 CET	49771	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.380175114 CET	443	49771	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.380222082 CET	49771	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.380641937 CET	49771	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.380723953 CET	443	49771	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.380825996 CET	49771	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.380831957 CET	443	49771	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.381012917 CET	443	49769	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.381201982 CET	49769	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.381212950 CET	443	49769	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.381475925 CET	443	49770	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.381654024 CET	49770	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.381676912 CET	443	49770	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.382411003 CET	443	49769	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.382688999 CET	443	49770	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.382730961 CET	49769	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.382742882 CET	49770	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.382752895 CET	443	49770	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.382791996 CET	49770	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.382900953 CET	443	49769	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.383035898 CET	49770	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.383095026 CET	443	49770	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.383125067 CET	49769	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.383215904 CET	49770	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.383224010 CET	443	49770	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.383703947 CET	443	49772	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.383908987 CET	49772	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.383929968 CET	443	49772	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.385365963 CET	443	49772	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.385421038 CET	49772	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.385430098 CET	443	49772	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.385467052 CET	49772	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.385737896 CET	49772	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.385812998 CET	49772	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.385812998 CET	443	49772	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.404795885 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.404818058 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.404854059 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.404870033 CET	49766	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.404882908 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.404906034 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.404922009 CET	49766	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.404932022 CET	49766	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.404967070 CET	49766	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.427325964 CET	443	49769	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.431334019 CET	443	49772	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.431574106 CET	49771	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.431976080 CET	49772	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.431984901 CET	443	49772	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.432023048 CET	49770	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.482873917 CET	49772	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.497216940 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.497235060 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.497293949 CET	49766	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.497303963 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.497344971 CET	49766	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.502304077 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.502357006 CET	49766	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.529289007 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.529304028 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.529350996 CET	49766	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.529357910 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.529387951 CET	49766	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.561155081 CET	443	49775	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.561368942 CET	49775	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.561389923 CET	443	49775	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.561925888 CET	443	49775	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.563066006 CET	49775	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.563143015 CET	443	49775	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.563345909 CET	49775	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.575184107 CET	49766	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.576342106 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.576355934 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.576406956 CET	49766	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.576417923 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.576481104 CET	49766	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.578052044 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.578113079 CET	49766	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.583115101 CET	443	49765	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.583224058 CET	443	49765	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.583287001 CET	49765	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.583369017 CET	443	49765	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.583872080 CET	443	49765	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.583930969 CET	49765	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.584136009 CET	49765	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.584171057 CET	443	49765	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.584225893 CET	49765	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.584247112 CET	49765	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.604434013 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.604450941 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.604507923 CET	49766	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.604520082 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.604573965 CET	49766	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.611331940 CET	443	49775	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.618316889 CET	443	49768	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.618438959 CET	443	49768	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.618478060 CET	49768	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.618494987 CET	443	49768	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.619129896 CET	443	49768	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.619189978 CET	49768	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.619277000 CET	49768	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.619285107 CET	443	49768	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.619306087 CET	49768	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.619323015 CET	49768	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.625895023 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.625909090 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.625967979 CET	49766	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.625976086 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.626013041 CET	49766	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.653316975 CET	443	49771	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.653393984 CET	443	49771	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.653453112 CET	49771	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.653487921 CET	443	49771	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.654556036 CET	49771	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.654643059 CET	443	49771	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.654696941 CET	49771	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.657002926 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.657072067 CET	49766	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.661608934 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.661668062 CET	49766	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.661679983 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.661704063 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.661729097 CET	49766	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.662926912 CET	443	49770	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.663016081 CET	443	49770	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.663034916 CET	443	49770	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.663067102 CET	49770	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.663079023 CET	443	49770	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.663099051 CET	49770	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.663110018 CET	443	49770	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.663125992 CET	49770	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.663125992 CET	443	49770	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.663149118 CET	49770	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.663166046 CET	49770	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.667586088 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.667601109 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.667634010 CET	49766	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.667643070 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.667673111 CET	49766	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.669795036 CET	49783	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.669836998 CET	443	49783	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.669898033 CET	49783	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.670620918 CET	49783	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.670634031 CET	443	49783	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.676887035 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.676898956 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.676947117 CET	49766	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.676956892 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.682369947 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.682421923 CET	49766	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.682429075 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.693350077 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.693370104 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.693406105 CET	49766	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.693413973 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.693454027 CET	49766	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.702291965 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.702306032 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.702347040 CET	49766	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.702353954 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.702384949 CET	49766	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.708559036 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.708606005 CET	49766	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.708612919 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.720113039 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.720132113 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.720170975 CET	49766	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.720180035 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.720211983 CET	49766	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.747780085 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.747797966 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.747829914 CET	49766	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.747839928 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.747870922 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.747873068 CET	49766	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.747922897 CET	49766	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.748239994 CET	49766	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.748255968 CET	443	49766	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.758483887 CET	443	49770	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.758550882 CET	443	49770	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.758567095 CET	49770	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.758594990 CET	443	49770	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.758621931 CET	49770	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.758634090 CET	49770	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.762543917 CET	49785	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.762569904 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.762629986 CET	49785	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.762878895 CET	49785	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.762896061 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.765520096 CET	443	49770	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.765584946 CET	49770	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.791171074 CET	443	49770	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.791193962 CET	443	49770	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.791241884 CET	49770	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.791250944 CET	443	49770	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.835788965 CET	49770	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.838371038 CET	443	49770	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.838438034 CET	443	49770	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.838469028 CET	49770	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.838476896 CET	443	49770	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.838525057 CET	49770	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.838531971 CET	443	49770	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.838646889 CET	443	49770	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.838700056 CET	49770	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.838803053 CET	49770	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.838809967 CET	443	49770	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.858064890 CET	443	49780	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.858333111 CET	49780	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.858364105 CET	443	49780	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.858747959 CET	443	49780	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.859209061 CET	49780	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.859275103 CET	443	49780	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.859347105 CET	49780	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.866492033 CET	443	49772	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.867357016 CET	443	49772	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.867424965 CET	49772	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.867597103 CET	49772	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.867608070 CET	443	49772	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.867938995 CET	49790	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.868025064 CET	443	49790	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.868098974 CET	49790	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.868490934 CET	49790	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:33.868527889 CET	443	49790	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:33.903353930 CET	443	49780	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.041907072 CET	443	49769	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.043746948 CET	443	49769	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.043771029 CET	443	49769	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.043842077 CET	49769	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.043896914 CET	443	49769	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.043978930 CET	49769	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.046219110 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.046241999 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.046255112 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.046288013 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.046303988 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.046329021 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.046353102 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.050932884 CET	443	49769	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.051093102 CET	443	49769	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.051157951 CET	49769	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.051338911 CET	49769	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.051338911 CET	49769	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.051373959 CET	443	49769	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.051429033 CET	49769	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.063256025 CET	443	49775	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.065406084 CET	443	49775	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.065423965 CET	443	49775	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.065474987 CET	49775	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.065506935 CET	443	49775	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.065571070 CET	49775	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.141632080 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.141680002 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.141705036 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.141716003 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.141745090 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.141760111 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.153232098 CET	443	49775	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.153299093 CET	49775	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.153302908 CET	443	49775	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.153321981 CET	443	49775	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.153373003 CET	49775	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.153398037 CET	443	49775	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.153449059 CET	49775	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.153626919 CET	49775	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.153646946 CET	443	49775	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.153661966 CET	49775	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.153696060 CET	49775	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.154243946 CET	49793	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.154290915 CET	443	49793	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.154357910 CET	49793	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.154959917 CET	49793	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.154979944 CET	443	49793	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.155565977 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.155627966 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.155639887 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.159708023 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.159773111 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.159806013 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.160012007 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.163897991 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.203558922 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.215770006 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.215837955 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.272978067 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.290520906 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.290545940 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.290616035 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.290652990 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.290667057 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.291052103 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.302499056 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.302552938 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.305094004 CET	443	49783	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.305315018 CET	49783	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.305325031 CET	443	49783	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.305815935 CET	443	49783	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.306104898 CET	49783	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.306185007 CET	443	49783	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.306216002 CET	49783	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.347338915 CET	443	49783	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.359761000 CET	49783	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.388493061 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.388767004 CET	49785	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.388801098 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.389178991 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.389496088 CET	49785	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.389561892 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.389739037 CET	49785	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.402124882 CET	443	49780	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.403418064 CET	443	49780	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.403425932 CET	443	49780	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.403479099 CET	443	49780	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.403501987 CET	49780	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.403534889 CET	49780	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.403750896 CET	49780	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.403768063 CET	443	49780	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.431404114 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.498083115 CET	443	49790	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.498352051 CET	49790	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.498414993 CET	443	49790	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.498929024 CET	443	49790	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.500221968 CET	49790	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.500319958 CET	443	49790	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.500338078 CET	49790	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.512466908 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.542131901 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.542145014 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.542357922 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.542424917 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.542505026 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.543349028 CET	443	49790	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.546323061 CET	49790	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.547919035 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.548048019 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.548079967 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.581089020 CET	443	49783	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.581113100 CET	443	49783	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.581157923 CET	49783	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.581172943 CET	443	49783	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.581222057 CET	443	49783	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.581262112 CET	49783	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.581712008 CET	443	49783	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.581733942 CET	49783	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.581768990 CET	443	49783	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.581798077 CET	49783	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.581811905 CET	49783	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.592848063 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.599250078 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.599407911 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.660852909 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.660875082 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.660965919 CET	49785	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.661031961 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.661123037 CET	49785	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.756366968 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.756431103 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.756510973 CET	49785	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.756510973 CET	49785	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.756544113 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.757055998 CET	49785	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.758585930 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.763375044 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.763569117 CET	49785	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.777631044 CET	443	49790	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.777689934 CET	443	49790	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.777709007 CET	443	49790	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.777790070 CET	443	49790	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.777822971 CET	443	49790	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.777887106 CET	49790	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.777887106 CET	49790	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.777887106 CET	49790	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.777888060 CET	49790	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.777960062 CET	443	49790	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.778045893 CET	49790	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.783025980 CET	443	49793	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.783407927 CET	49793	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.783441067 CET	443	49793	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.786616087 CET	443	49793	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.786679983 CET	49793	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.786690950 CET	443	49793	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.786735058 CET	49793	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.787003994 CET	49793	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.787085056 CET	443	49793	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.787151098 CET	49793	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.787942886 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.787983894 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.787997007 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.788009882 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.788022995 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.788033962 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.788054943 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.793747902 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.793792009 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.793879032 CET	49785	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.793879986 CET	49785	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.793912888 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.827347994 CET	443	49793	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.829718113 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.829755068 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.829792976 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.829818964 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.829833984 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.832902908 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.832974911 CET	49785	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.832986116 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.833017111 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.833049059 CET	49785	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.834415913 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.834474087 CET	49785	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.834486008 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.834867001 CET	49793	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.834873915 CET	443	49793	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.845242023 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.845310926 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.845344067 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.845396042 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.857671022 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.857714891 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.857757092 CET	49785	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.857768059 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.857785940 CET	49785	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.869945049 CET	443	49790	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.869993925 CET	443	49790	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.870136023 CET	49790	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.870136976 CET	49790	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.870171070 CET	443	49790	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.870218039 CET	49790	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.876658916 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.876708984 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.876765966 CET	49785	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.876835108 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.876878023 CET	49785	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.877125978 CET	443	49790	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.877187014 CET	49790	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.881685019 CET	49793	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.899620056 CET	443	49790	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.899640083 CET	443	49790	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.899818897 CET	49790	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.899883986 CET	443	49790	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.918741941 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.918819904 CET	49785	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.918852091 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.919075012 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.919115067 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.919135094 CET	49785	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.919145107 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.919162035 CET	49785	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.919184923 CET	49785	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.921772957 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.921786070 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.921838045 CET	49785	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.921848059 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.922955990 CET	49785	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.938044071 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.938061953 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.938268900 CET	49785	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.938302040 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.938349009 CET	49785	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.938610077 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.938666105 CET	49785	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.946748018 CET	443	49790	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.946801901 CET	443	49790	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.946850061 CET	49790	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.946916103 CET	443	49790	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.946968079 CET	443	49790	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.947025061 CET	49790	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.947208881 CET	49790	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.947237015 CET	443	49790	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.949153900 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.949219942 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.949263096 CET	49785	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.949297905 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.949320078 CET	49785	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.949465990 CET	49785	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.957022905 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.957066059 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.957160950 CET	49785	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.957160950 CET	49785	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.957192898 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.957467079 CET	49785	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.961744070 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.961884975 CET	49785	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.970784903 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.970838070 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.970922947 CET	49785	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.970922947 CET	49785	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:34.970956087 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:34.971760988 CET	49785	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:35.005172968 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.005757093 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.005785942 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.005892038 CET	49785	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:35.005892038 CET	49785	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:35.005904913 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.005964994 CET	49785	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:35.006267071 CET	49785	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:35.006298065 CET	443	49785	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.028898001 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.028954029 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.028971910 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.029093027 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:35.029093981 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:35.029093981 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:35.029129028 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.029345989 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:35.061979055 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.062138081 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:35.062170029 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.062470913 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:35.091738939 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.091922045 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:35.250547886 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.277837038 CET	443	49793	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.279400110 CET	443	49793	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.279429913 CET	443	49793	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.279452085 CET	443	49793	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.279493093 CET	443	49793	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.279515028 CET	443	49793	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.279525042 CET	49793	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:35.279541969 CET	443	49793	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.279560089 CET	49793	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:35.279587984 CET	49793	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:35.279659033 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.279680967 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.279716969 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:35.279727936 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.279757023 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:35.286448956 CET	443	49793	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.286681890 CET	443	49793	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.286772013 CET	49793	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:35.286871910 CET	49793	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:35.286883116 CET	443	49793	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.286894083 CET	49793	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:35.286926985 CET	49793	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:35.320086956 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.320133924 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.320171118 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:35.320209026 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.320228100 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:35.337263107 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.337352037 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:35.337367058 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.337414980 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:35.496597052 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.525295019 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.525310993 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.525368929 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.525520086 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:35.525520086 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:35.525557041 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.569650888 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.569694042 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.569838047 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:35.569839001 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:35.569874048 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.583343983 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.583422899 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:35.583434105 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.583476067 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:35.706212997 CET	443	49713	142.250.185.196	192.168.2.5
Jan 15, 2025 00:26:35.706291914 CET	443	49713	142.250.185.196	192.168.2.5
Jan 15, 2025 00:26:35.706338882 CET	49713	443	192.168.2.5	142.250.185.196
Jan 15, 2025 00:26:35.742450953 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.771445990 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.771488905 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.771503925 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.771518946 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:35.771531105 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.771560907 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.771580935 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:35.771580935 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:35.807497025 CET	49713	443	192.168.2.5	142.250.185.196
Jan 15, 2025 00:26:35.807513952 CET	443	49713	142.250.185.196	192.168.2.5
Jan 15, 2025 00:26:35.811250925 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:35.811259985 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.816466093 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.816561937 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:35.816570997 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.816620111 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:35.829375982 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:35.829462051 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:36.028945923 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.049885035 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.049904108 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.049928904 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.049938917 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:36.049954891 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.049981117 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:36.061398983 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.061444044 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:36.061455011 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.061497927 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:36.078644037 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.078696966 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:36.078705072 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.078737974 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:36.115663052 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.115715981 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:36.243886948 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.262954950 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.262970924 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.263010025 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:36.263021946 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.263089895 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:36.270081997 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.270131111 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:36.270138979 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.300031900 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.300088882 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:36.300096989 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.300137043 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:36.330658913 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.330713034 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:36.330722094 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.330760956 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:36.330939054 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.338504076 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.338557959 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:36.338567019 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.338607073 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:36.480597019 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.499816895 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.499836922 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.499875069 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:36.499887943 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.499918938 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:36.544116974 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.544188976 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:36.544198036 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.544250011 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:36.544258118 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.567743063 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.567797899 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:36.567806959 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.567854881 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:36.576972961 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.579668045 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.579725027 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:36.579734087 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.579781055 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:36.629796982 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.634226084 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.634295940 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:36.634320021 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.687592030 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:36.726535082 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.769001007 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.769011974 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.769026995 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.769061089 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:36.769072056 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.769109964 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:36.769130945 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:36.769135952 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.792260885 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.792309999 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:36.792318106 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.792361021 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:36.792366982 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.810494900 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.810548067 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:36.810569048 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.810609102 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:36.816239119 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.816292048 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:36.831821918 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.831867933 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:36.831898928 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.855804920 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.855875969 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:36.855897903 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.855947971 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:36.874036074 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.878874063 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.878940105 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:36.878954887 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.878998041 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:36.972599983 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.991878033 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.991894960 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:36.991959095 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:36.991969109 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.036369085 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.036443949 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:37.036452055 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.036499023 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:37.036504984 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.071378946 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.071444035 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:37.071463108 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.071500063 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:37.094976902 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.120045900 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.120110035 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:37.120132923 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.120176077 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:37.136665106 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.139348030 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.139409065 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:37.139415026 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.139467955 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:37.139472961 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.140727043 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.140785933 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:37.140791893 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.140846968 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:37.158410072 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.158468962 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:37.223320007 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.229712009 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.229779959 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:37.229798079 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.261190891 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.261250973 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:37.261260033 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.261360884 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:37.282126904 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.282335997 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:37.282345057 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.282419920 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:37.301954031 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.302135944 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:37.309916019 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.309988976 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:37.310003042 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.310095072 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:37.365248919 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.368320942 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.368410110 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:37.368421078 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.368525028 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:37.368536949 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.378757954 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.378820896 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:37.378829002 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.378951073 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:37.378957987 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.388561010 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.388626099 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:37.388633966 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.389849901 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:37.465424061 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.487412930 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.487458944 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.487488985 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:37.487503052 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.487535954 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:37.487559080 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:37.487564087 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.506777048 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.506839991 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:37.506845951 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.506886959 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:37.506892920 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.547806025 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.547884941 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:37.547892094 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.548002958 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:37.552316904 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.552375078 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:37.568243980 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.568310022 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:37.568316936 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.568360090 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.568465948 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:37.568473101 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.570467949 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:37.570544958 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:37.570604086 CET	49762	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:37.570607901 CET	443	49762	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:38.391268969 CET	49822	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:38.391299963 CET	443	49822	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:38.391388893 CET	49822	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:38.391678095 CET	49822	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:38.391690969 CET	443	49822	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:39.173532963 CET	443	49822	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:39.173885107 CET	49822	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:39.173894882 CET	443	49822	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:39.174511909 CET	443	49822	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:39.175343037 CET	49822	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:39.175441027 CET	443	49822	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:39.175626040 CET	49822	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:39.218097925 CET	49822	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:39.218110085 CET	443	49822	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:39.451522112 CET	443	49822	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:39.452155113 CET	443	49822	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:39.452260971 CET	49822	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:39.452666998 CET	49822	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:39.452677011 CET	443	49822	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:39.459178925 CET	49832	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:39.459194899 CET	443	49832	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:39.459388971 CET	49832	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:39.459626913 CET	49832	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:39.459640980 CET	443	49832	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:40.121942043 CET	443	49832	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:40.122210026 CET	49832	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:40.122224092 CET	443	49832	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:40.122756004 CET	443	49832	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:40.123095036 CET	49832	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:40.123200893 CET	443	49832	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:40.123234987 CET	49832	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:40.163341045 CET	443	49832	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:40.171205997 CET	49832	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:40.401829958 CET	443	49832	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:40.403336048 CET	443	49832	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:40.403453112 CET	49832	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:40.403791904 CET	49832	443	192.168.2.5	104.102.53.18
Jan 15, 2025 00:26:40.403809071 CET	443	49832	104.102.53.18	192.168.2.5
Jan 15, 2025 00:26:42.670097113 CET	49853	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:42.670116901 CET	443	49853	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:42.670417070 CET	49853	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:42.670417070 CET	49853	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:42.670443058 CET	443	49853	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:42.670532942 CET	49854	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:42.670576096 CET	443	49854	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:42.673135996 CET	49854	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:42.676290989 CET	49854	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:42.676305056 CET	443	49854	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:43.550225019 CET	443	49854	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:43.552350044 CET	49854	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:43.552361965 CET	443	49854	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:43.552803040 CET	443	49854	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:43.556274891 CET	49854	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:43.556361914 CET	443	49854	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:43.556534052 CET	49854	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:43.599327087 CET	443	49854	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:43.672914982 CET	443	49853	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:43.673356056 CET	49853	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:43.673386097 CET	443	49853	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:43.673785925 CET	443	49853	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:43.674557924 CET	49853	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:43.674643993 CET	443	49853	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:43.717645884 CET	49853	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:45.394656897 CET	443	49854	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:45.394680023 CET	443	49854	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:45.394715071 CET	443	49854	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:45.394809961 CET	443	49854	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:45.394810915 CET	49854	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:45.394877911 CET	49854	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:45.396925926 CET	49854	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:45.396941900 CET	443	49854	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:45.397859097 CET	49853	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:45.439352989 CET	443	49853	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:45.600809097 CET	443	49853	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:45.600830078 CET	443	49853	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:45.600847006 CET	443	49853	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:45.600860119 CET	443	49853	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:45.600925922 CET	49853	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:45.600931883 CET	443	49853	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:45.600960016 CET	49853	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:45.600986004 CET	49853	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:45.601882935 CET	49853	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:45.601903915 CET	443	49853	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:45.697906971 CET	49873	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:45.697945118 CET	443	49873	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:45.698033094 CET	49873	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:45.698266029 CET	49873	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:45.698308945 CET	443	49873	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:46.701366901 CET	443	49873	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:46.701854944 CET	49873	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:46.701889992 CET	443	49873	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:46.702327013 CET	443	49873	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:46.702974081 CET	49873	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:46.703047037 CET	443	49873	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:46.703296900 CET	49873	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:46.747327089 CET	443	49873	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:47.715929031 CET	443	49873	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:47.715948105 CET	443	49873	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:47.715974092 CET	443	49873	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:47.716032028 CET	49873	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:47.716056108 CET	443	49873	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:47.716068983 CET	49873	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:47.716100931 CET	49873	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:47.718604088 CET	443	49873	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:47.718626976 CET	443	49873	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:47.718673944 CET	49873	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:47.718682051 CET	443	49873	201.46.113.120	192.168.2.5
Jan 15, 2025 00:26:47.718697071 CET	49873	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:47.718719959 CET	49873	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:47.721142054 CET	49873	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:26:47.721158028 CET	49873	443	192.168.2.5	201.46.113.120
Jan 15, 2025 00:27:01.022897959 CET	51323	53	192.168.2.5	162.159.36.2
Jan 15, 2025 00:27:01.027781963 CET	53	51323	162.159.36.2	192.168.2.5
Jan 15, 2025 00:27:01.027863026 CET	51323	53	192.168.2.5	162.159.36.2
Jan 15, 2025 00:27:01.032704115 CET	53	51323	162.159.36.2	192.168.2.5
Jan 15, 2025 00:27:01.478739023 CET	51323	53	192.168.2.5	162.159.36.2
Jan 15, 2025 00:27:01.483647108 CET	53	51323	162.159.36.2	192.168.2.5
Jan 15, 2025 00:27:01.483738899 CET	51323	53	192.168.2.5	162.159.36.2
Jan 15, 2025 00:27:25.215224028 CET	51399	443	192.168.2.5	142.250.186.100
Jan 15, 2025 00:27:25.215260029 CET	443	51399	142.250.186.100	192.168.2.5
Jan 15, 2025 00:27:25.215362072 CET	51399	443	192.168.2.5	142.250.186.100
Jan 15, 2025 00:27:25.215601921 CET	51399	443	192.168.2.5	142.250.186.100
Jan 15, 2025 00:27:25.215615988 CET	443	51399	142.250.186.100	192.168.2.5
Jan 15, 2025 00:27:25.847351074 CET	443	51399	142.250.186.100	192.168.2.5
Jan 15, 2025 00:27:25.847645998 CET	51399	443	192.168.2.5	142.250.186.100
Jan 15, 2025 00:27:25.847708941 CET	443	51399	142.250.186.100	192.168.2.5
Jan 15, 2025 00:27:25.848181009 CET	443	51399	142.250.186.100	192.168.2.5
Jan 15, 2025 00:27:25.848519087 CET	51399	443	192.168.2.5	142.250.186.100
Jan 15, 2025 00:27:25.848608017 CET	443	51399	142.250.186.100	192.168.2.5
Jan 15, 2025 00:27:25.889524937 CET	51399	443	192.168.2.5	142.250.186.100
Jan 15, 2025 00:27:35.767839909 CET	443	51399	142.250.186.100	192.168.2.5
Jan 15, 2025 00:27:35.767929077 CET	443	51399	142.250.186.100	192.168.2.5
Jan 15, 2025 00:27:35.768146992 CET	51399	443	192.168.2.5	142.250.186.100
Jan 15, 2025 00:27:37.672997952 CET	51399	443	192.168.2.5	142.250.186.100
Jan 15, 2025 00:27:37.673068047 CET	443	51399	142.250.186.100	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 15, 2025 00:26:21.371886969 CET	53	53610	1.1.1.1	192.168.2.5
Jan 15, 2025 00:26:21.421746016 CET	53	51665	1.1.1.1	192.168.2.5
Jan 15, 2025 00:26:22.420627117 CET	53	60277	1.1.1.1	192.168.2.5
Jan 15, 2025 00:26:25.141005993 CET	53712	53	192.168.2.5	1.1.1.1
Jan 15, 2025 00:26:25.141238928 CET	52745	53	192.168.2.5	1.1.1.1
Jan 15, 2025 00:26:25.147922039 CET	53	53712	1.1.1.1	192.168.2.5
Jan 15, 2025 00:26:25.148396015 CET	53	52745	1.1.1.1	192.168.2.5
Jan 15, 2025 00:26:26.390487909 CET	60030	53	192.168.2.5	1.1.1.1
Jan 15, 2025 00:26:26.390654087 CET	60559	53	192.168.2.5	1.1.1.1
Jan 15, 2025 00:26:26.451881886 CET	53	60030	1.1.1.1	192.168.2.5
Jan 15, 2025 00:26:26.451924086 CET	53	60559	1.1.1.1	192.168.2.5
Jan 15, 2025 00:26:27.657397032 CET	51563	53	192.168.2.5	1.1.1.1
Jan 15, 2025 00:26:27.657548904 CET	64076	53	192.168.2.5	1.1.1.1
Jan 15, 2025 00:26:27.714936018 CET	53	64076	1.1.1.1	192.168.2.5
Jan 15, 2025 00:26:27.821048021 CET	53	51563	1.1.1.1	192.168.2.5
Jan 15, 2025 00:26:28.234330893 CET	60022	53	192.168.2.5	1.1.1.1
Jan 15, 2025 00:26:28.234468937 CET	52644	53	192.168.2.5	1.1.1.1
Jan 15, 2025 00:26:28.298463106 CET	53	60022	1.1.1.1	192.168.2.5
Jan 15, 2025 00:26:28.455100060 CET	53	52644	1.1.1.1	192.168.2.5
Jan 15, 2025 00:26:30.149255037 CET	60143	53	192.168.2.5	1.1.1.1
Jan 15, 2025 00:26:30.149614096 CET	63807	53	192.168.2.5	1.1.1.1
Jan 15, 2025 00:26:30.186470985 CET	53	63807	1.1.1.1	192.168.2.5
Jan 15, 2025 00:26:30.333153963 CET	53	60143	1.1.1.1	192.168.2.5
Jan 15, 2025 00:26:33.233632088 CET	53	61911	1.1.1.1	192.168.2.5
Jan 15, 2025 00:26:39.401087999 CET	53	65093	1.1.1.1	192.168.2.5
Jan 15, 2025 00:26:45.706078053 CET	53	63270	1.1.1.1	192.168.2.5
Jan 15, 2025 00:26:47.083273888 CET	53	56264	1.1.1.1	192.168.2.5
Jan 15, 2025 00:26:58.519423008 CET	53	51778	1.1.1.1	192.168.2.5
Jan 15, 2025 00:27:01.022396088 CET	53	53178	162.159.36.2	192.168.2.5
Jan 15, 2025 00:27:01.487935066 CET	64016	53	192.168.2.5	1.1.1.1
Jan 15, 2025 00:27:01.495161057 CET	53	64016	1.1.1.1	192.168.2.5
Jan 15, 2025 00:27:25.205621958 CET	55643	53	192.168.2.5	1.1.1.1
Jan 15, 2025 00:27:25.213866949 CET	53	55643	1.1.1.1	192.168.2.5
Jan 15, 2025 00:27:40.141275883 CET	55183	53	192.168.2.5	1.1.1.1
Jan 15, 2025 00:27:40.148102999 CET	53	55183	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jan 15, 2025 00:26:28.253464937 CET	192.168.2.5	1.1.1.1	c26d	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 15, 2025 00:26:25.141005993 CET	192.168.2.5	1.1.1.1	0xbc96	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 00:26:25.141238928 CET	192.168.2.5	1.1.1.1	0x7df6	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 15, 2025 00:26:26.390487909 CET	192.168.2.5	1.1.1.1	0x8ade	Standard query (0)	www.giselabravo.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 00:26:26.390654087 CET	192.168.2.5	1.1.1.1	0xa535	Standard query (0)	www.giselabravo.com	65	IN (0x0001)	false
Jan 15, 2025 00:26:27.657397032 CET	192.168.2.5	1.1.1.1	0x24e1	Standard query (0)	www.lbpiaccess.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 00:26:27.657548904 CET	192.168.2.5	1.1.1.1	0xfc3a	Standard query (0)	www.lbpiaccess.com	65	IN (0x0001)	false
Jan 15, 2025 00:26:28.234330893 CET	192.168.2.5	1.1.1.1	0x9154	Standard query (0)	www.giselabravo.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 00:26:28.234468937 CET	192.168.2.5	1.1.1.1	0x63e6	Standard query (0)	www.giselabravo.com	65	IN (0x0001)	false
Jan 15, 2025 00:26:30.149255037 CET	192.168.2.5	1.1.1.1	0x483f	Standard query (0)	www.lbpiaccess.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 00:26:30.149614096 CET	192.168.2.5	1.1.1.1	0x1531	Standard query (0)	www.lbpiaccess.com	65	IN (0x0001)	false
Jan 15, 2025 00:27:01.487935066 CET	192.168.2.5	1.1.1.1	0xe95c	Standard query (0)	241.42.69.40.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Jan 15, 2025 00:27:25.205621958 CET	192.168.2.5	1.1.1.1	0x9fc5	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 00:27:40.141275883 CET	192.168.2.5	1.1.1.1	0x7681	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 15, 2025 00:26:25.147922039 CET	1.1.1.1	192.168.2.5	0xbc96	No error (0)	www.google.com		142.250.185.196	A (IP address)	IN (0x0001)	false
Jan 15, 2025 00:26:25.148396015 CET	1.1.1.1	192.168.2.5	0x7df6	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 15, 2025 00:26:26.451881886 CET	1.1.1.1	192.168.2.5	0x8ade	No error (0)	www.giselabravo.com		201.46.113.120	A (IP address)	IN (0x0001)	false
Jan 15, 2025 00:26:27.821048021 CET	1.1.1.1	192.168.2.5	0x24e1	No error (0)	www.lbpiaccess.com		104.102.53.18	A (IP address)	IN (0x0001)	false
Jan 15, 2025 00:26:28.222733021 CET	1.1.1.1	192.168.2.5	0x1ae0	No error (0)	prod.globalsign.map.fastly.net		151.101.2.133	A (IP address)	IN (0x0001)	false
Jan 15, 2025 00:26:28.222733021 CET	1.1.1.1	192.168.2.5	0x1ae0	No error (0)	prod.globalsign.map.fastly.net		151.101.66.133	A (IP address)	IN (0x0001)	false
Jan 15, 2025 00:26:28.222733021 CET	1.1.1.1	192.168.2.5	0x1ae0	No error (0)	prod.globalsign.map.fastly.net		151.101.130.133	A (IP address)	IN (0x0001)	false
Jan 15, 2025 00:26:28.222733021 CET	1.1.1.1	192.168.2.5	0x1ae0	No error (0)	prod.globalsign.map.fastly.net		151.101.194.133	A (IP address)	IN (0x0001)	false
Jan 15, 2025 00:26:28.298463106 CET	1.1.1.1	192.168.2.5	0x9154	No error (0)	www.giselabravo.com		201.46.113.120	A (IP address)	IN (0x0001)	false
Jan 15, 2025 00:26:30.333153963 CET	1.1.1.1	192.168.2.5	0x483f	No error (0)	www.lbpiaccess.com		104.102.53.18	A (IP address)	IN (0x0001)	false
Jan 15, 2025 00:26:37.417690992 CET	1.1.1.1	192.168.2.5	0x38c3	No error (0)	prod.globalsign.map.fastly.net		151.101.2.133	A (IP address)	IN (0x0001)	false
Jan 15, 2025 00:26:37.417690992 CET	1.1.1.1	192.168.2.5	0x38c3	No error (0)	prod.globalsign.map.fastly.net		151.101.66.133	A (IP address)	IN (0x0001)	false
Jan 15, 2025 00:26:37.417690992 CET	1.1.1.1	192.168.2.5	0x38c3	No error (0)	prod.globalsign.map.fastly.net		151.101.130.133	A (IP address)	IN (0x0001)	false
Jan 15, 2025 00:26:37.417690992 CET	1.1.1.1	192.168.2.5	0x38c3	No error (0)	prod.globalsign.map.fastly.net		151.101.194.133	A (IP address)	IN (0x0001)	false
Jan 15, 2025 00:27:01.495161057 CET	1.1.1.1	192.168.2.5	0xe95c	Name error (3)	241.42.69.40.in-addr.arpa	none	none	PTR (Pointer record)	IN (0x0001)	false
Jan 15, 2025 00:27:25.213866949 CET	1.1.1.1	192.168.2.5	0x9fc5	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
Jan 15, 2025 00:27:40.148102999 CET	1.1.1.1	192.168.2.5	0x7681	No error (0)	www.google.com		142.250.185.196	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.giselabravo.com

https:

www.lbpiaccess.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49715	201.46.113.120	443	3364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 23:26:27 UTC	676	OUT	GET /lblogin/logins HTTP/1.1 Host: www.giselabravo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 23:26:27 UTC	420	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 14 Jan 2025 23:26:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Powered-By: PHP/8.0.30 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=ombc6d1oenbcoel3kf6276ivqq; path=/ Strict-Transport-Security: max-age=31536000
2025-01-14 23:26:27 UTC	10335	IN	Data Raw: 31 65 38 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 20 20 20 20 2e 66 6f 72 65 78 2d 72 69 67 68 74 68 2d 61 6c 69 67 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 73 73 6c 2d 73 65 61 6c 20 7b 0d 0a 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 20 20 20 20 20 20 6c 65 66 74 3a 20 35 30 25 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 2d Data Ascii: 1e89<!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml"><style type="text/css"> .forex-righth-align { text-align: right; } .ssl-seal { position: absolute; left: 50%; transform: translate(-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49716	201.46.113.120	443	3364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 23:26:27 UTC	669	OUT	GET /lblogin/login_advisory.jpg HTTP/1.1 Host: www.giselabravo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.giselabravo.com/lblogin/logins Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ombc6d1oenbcoel3kf6276ivqq
2025-01-14 23:26:27 UTC	374	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 14 Jan 2025 23:26:27 GMT Content-Type: image/jpeg Content-Length: 195728 Last-Modified: Sun, 07 Jan 2024 13:13:06 GMT Connection: close Vary: Accept-Encoding ETag: "659aa362-2fc90" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2025-01-14 23:26:27 UTC	16010	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 03 90 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 31 34 36 32 38 39 39 37 37 37 2c 20 32 30 32 33 2f 30 36 2f 32 35 2d 32 33 3a 35 37 3a 31 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: ExifII*DuckyPhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RD
2025-01-14 23:26:27 UTC	16384	IN	Data Raw: 8e fc be 3b bf af 7d d3 dc f4 3e 71 e5 fb 8c cf 3f e8 ac 77 7c 6f 47 bf c3 d7 37 3a f1 b3 d9 fd 2b f8 bc f2 af 23 49 0c ed 63 d0 a5 ee 9c 7a 87 27 d0 59 f4 39 74 a8 f3 64 b3 5d ce dc f3 9f 4b b5 ac 8e 7b dd 73 df ec b6 e7 7c a5 f7 e9 83 e5 c7 2e d4 f1 2c 78 46 45 f5 6c e7 3a 5d 8b ba 98 94 42 e5 a4 8f 4e 3c f7 8e 76 9e 8a e0 f0 d5 e8 5e 22 f6 de 3d 79 df 3d 46 bd e4 56 2f 59 cc eb 9d 17 ce db 72 af 26 7e 95 d1 3c fd fb ef ab 7d eb ba d0 95 d3 91 da 9a 55 34 bc 7b 3d 20 5d 95 aa db 63 ae 72 91 6c 3d 6b e3 f3 ad fd f1 c8 02 3f a7 cd c7 d3 9c 59 f5 b7 8e fb 3f 4b e9 7c 3a 27 22 7d 27 e7 ad b9 f5 2b d7 60 a5 b8 b7 ad e5 e3 4c 74 3e 4e ae 79 d7 cb d6 7c ff 00 42 c6 77 f1 0f a5 f0 de 76 2f 53 e6 cd f9 e0 6d 5e 67 cd d3 8d 0c 0f 43 9e 37 d1 e5 d8 be 7b d2 cc c6 Data Ascii: ;}>q?w\|oG7:+#Icz'Y9td]K{s\|.,xFEl:]BN<v^"=y=FV/Yr&~<}U4{= ]crl=k?Y?K\|:'"}'+`Lt>Ny\|Bwv/Sm^gC7{
2025-01-14 23:26:28 UTC	16384	IN	Data Raw: da a3 3c 6f 3f 1e 13 48 72 dd 32 e1 26 4b 2d b6 d5 e3 33 ce 3a 86 db 6b 70 b9 ac 93 25 25 af 2c d9 b3 62 4a 6e 41 3c 99 f7 94 c1 52 37 0b 4a 52 5c 42 d0 1d b9 43 61 d6 54 95 b5 a8 ae 06 ba 05 65 39 4e e8 a5 be e9 29 49 3c a2 52 8d c5 07 3c d5 59 06 92 b5 11 3c a2 41 ad b0 c3 87 9c 91 29 61 50 de 24 44 8c 87 c6 e6 61 b6 e6 34 f1 21 b5 bf 9d 29 79 49 49 ba b5 0c ea 22 cc 66 19 f5 0f a9 3e f1 07 1e 71 e2 4d c5 d2 12 65 f7 0d b7 3d 82 44 d7 da 79 b9 9d 71 6c 2b a5 8f e8 99 f3 35 e8 5f 7e e9 c8 5f 92 c5 f4 0c 79 19 f4 6e df 73 0f 1d 5c e1 64 c2 7d 3b 6f d3 35 e9 b5 e8 5d 7e e5 12 3f 74 f4 38 8a 86 85 28 c2 8d 21 5a 61 2c b6 66 fa fb 14 c3 d2 93 35 2d 47 6c 94 a2 0a 58 37 0c 20 d2 67 70 3d 24 66 f9 fd e2 09 11 de e3 03 be a4 7b e3 a0 82 93 98 92 bc b8 19 1a 0c Data Ascii: <o?Hr2&K-3:kp%%,bJnA<R7JR\BCaTe9N)I<R<Y<A)aP$Da4!)yII"f>qMe=Dyql+5_~_yns\d};o5]~?t8(!Za,f5-GlX7 gp=$f{
2025-01-14 23:26:28 UTC	16384	IN	Data Raw: 07 82 cf c6 b5 0a 3c 11 5a a9 34 c5 ce a9 c0 fa 72 6a 2b c1 fd 8d 43 30 4e 04 40 ca a2 9c 15 c2 b8 e5 06 42 82 82 83 28 a7 01 60 9c 4f 02 1a 63 4c 2d 35 1a 61 25 42 c0 81 60 7c 1a ca 48 6e 49 a4 b8 0b 81 35 a9 50 15 07 ca 3e 41 54 09 19 72 a0 aa 7e 20 aa 3c 47 cc 2a a1 29 54 40 cc 62 b8 91 8c fc da f8 e5 f8 74 45 5a 90 db 2b 70 b1 c9 50 58 10 a0 57 89 91 85 78 e0 9e b8 53 0a 54 7f 62 c3 c4 19 62 be a5 d0 7f 6c 0c c8 f0 2e 33 3c 4c c5 05 02 78 2b c5 4c 73 03 31 5e 15 03 59 8c c6 10 78 27 13 c0 81 e0 ef 50 df 97 02 05 81 f0 2d 21 bc b9 96 64 66 45 51 da 28 76 4b 05 0d 63 b1 70 76 4e 07 23 29 05 19 ac e6 08 87 88 f1 06 26 2c b2 c5 6b 31 fc c2 8a 14 50 ca b0 79 c4 c7 55 85 0c 13 40 d9 19 0f 14 1f 05 41 61 5c 0c c5 46 6c 08 c1 ab 12 f1 19 7c 0f c0 11 19 8d 17 Data Ascii: <Z4rj+C0N@B(`OcL-5a%B`\|HnI5P>ATr~ <G*)T@btEZ+pPXWxSTbbl.3<Lx+Ls1^Yx'P-!dfEQ(vKcpvN#)&,k1PyU@Aa\Fl\|
2025-01-14 23:26:28 UTC	16384	IN	Data Raw: b8 c7 fa c9 bf c4 b8 97 fa 2f ff 00 70 2e 13 fe 95 ff 00 e3 5c 2b fd 6c 1f e3 0b 8d 7f a2 b9 ff 00 c3 72 0b 88 b9 bd e6 dc c8 5a 3a 43 02 73 dc 4b 9e f7 17 3d c7 32 49 57 ae e3 e6 13 77 1c 9e ce 3b 87 e8 6e ea 99 b7 11 5c 55 e3 b8 4c 5b 9e 1b bc a5 a3 31 ee 8d b8 f3 ae 19 d5 27 f8 55 8f fa d6 ff 00 81 c9 dd 4b 85 ff 00 a5 83 fc 01 71 1f f5 53 7f 8c ae 2f fe 9e 3f f1 15 0f 13 6b 3d 85 f4 61 8f 93 fe d1 9b 0f 89 5a 71 18 31 92 d5 e1 da 7d 21 b5 be 35 bc b6 b6 b8 7d f3 9b d9 b6 7b 40 6b 5d fa ce ae 48 47 c6 62 17 f6 f5 c6 78 c0 6c ad f1 64 e5 25 ed be ad cd c9 82 48 b5 0d 26 85 dc dc 9c 3f 74 e2 dd ec 31 c7 29 18 76 4b ca 34 cf 60 51 5e ce db 7b 9b 9d c5 5e 1c f7 6f 8c d4 c4 69 07 9d 56 94 ae c5 c5 fe f5 9f 42 ba fb 88 7e 85 c0 ff 00 d6 c5 f4 f2 b3 e1 24 dd Data Ascii: /p.\+lrZ:CsK=2IWw;n\UL[1'UKqS/?k=aZq1}!5}{@k]HGbxld%H&?t1)vK4`Q^{^oiVB~$
2025-01-14 23:26:28 UTC	16384	IN	Data Raw: f6 24 22 8b 4f 9d b1 35 bd 69 8e 7c 6e 65 b3 4d 5e f7 61 5e 80 9e 5a ca 10 30 52 17 d3 c6 99 bb 78 7e 98 c5 74 f2 e1 8a ee a1 41 87 3a d2 15 3b ce e6 5d d0 a8 7b 2e f0 8f 83 27 4e 3c bf 0d 70 e3 25 94 b8 1a e6 ce 90 9c f6 9d 4d 73 01 69 e4 2f 93 bb 4a 29 24 37 52 56 43 a8 a0 7e 2e 4e c9 aa 8a 49 6e 1e c3 0b 74 34 05 f8 b9 13 ec ed a5 74 9a 8d 6a 79 1c a0 fb b5 3f aa a4 f1 2b 9e 47 f5 f2 37 d6 43 f5 b1 0a 2f 55 13 6e 1f a8 66 58 ad b7 83 da 6e db aa a3 1a ac 1b f3 2c 19 f3 2c 19 f3 26 b9 d1 d1 ae ee 9a 2d 33 e9 06 99 39 45 3e ec ee b1 a3 97 75 60 83 35 62 fc fe 41 a0 cc 23 20 d0 ea 46 92 07 86 ed 05 08 9b 5d 6d 7e 35 e8 f0 9c 46 31 e4 14 98 f5 2a c8 74 b6 46 d0 d5 48 c9 24 de ca 49 a3 59 8a a5 bc 01 95 f3 dc 8e fa e0 9f d5 19 26 e4 71 0a e7 20 04 4c cb a9 Data Ascii: $"O5i\|neM^a^Z0Rx~tA:;]{.'N<p%Msi/J)$7RVC~.NInt4tjy?+G7C/UnfXn,,&-39E>u`5bA# F]m~5F1*tFH$IY&q L
2025-01-14 23:26:28 UTC	16384	IN	Data Raw: ab 84 8d 9b a0 56 54 f0 7a 51 96 35 0c 27 1d c3 79 21 b4 d0 dc 16 11 ed dc 0f 94 43 c5 02 b1 23 c0 94 38 99 65 1b 0b cd cf dc 7c 43 26 3b 3a b5 17 1d dd 89 9e 09 ca f8 b7 b5 c7 bc cd a5 11 6a 8f 25 27 00 f7 8e 8d c4 8c 9c a0 58 ab f3 2e c3 d4 e4 ec 24 d9 e2 33 e3 dd bf f0 90 d1 aa c6 2a bc c6 58 42 30 f7 7b 42 2c 27 30 36 82 6e 7d dc d8 3d d0 4b 77 16 da f1 3e 69 10 e2 59 e0 a3 5a a8 32 28 a5 8a b8 d6 4b 69 e2 11 5d 5f 22 5f 4b 8b 47 bc af fd 23 41 8e 50 c0 0c 04 d1 eb 08 f1 3f 37 ef 1c 02 de 2e d6 63 a2 2a a2 8d 96 5d 3d ce 80 15 00 ec 0c be f1 00 80 0a 42 c4 ec 90 26 a2 00 1e c7 13 0e 12 c7 63 01 6c 26 aa c0 ba 38 94 5d d2 98 29 9a ed 73 68 3d 91 f6 45 ca 2d a1 6d d7 3f 58 83 b0 a6 4b 2e 9e f0 34 1c da 56 7e 50 20 6f 44 07 d0 80 00 03 40 a0 f9 11 6b ee Data Ascii: VTzQ5'y!C#8e\|C&;:j%'X.$3XB0{B,'06n}=Kw>iYZ2(Ki]_"_KG#AP?7.c]=B&cl&8])sh=E-m?XK.4V~P oD@k
2025-01-14 23:26:28 UTC	16384	IN	Data Raw: e5 fa 01 5d 14 b9 7d 1f fd 31 7f a3 5f bc 7b 38 bf 55 fa 2d f4 5f 41 1a 62 99 6c f3 75 0b c1 05 13 a5 7f e0 2f d0 12 ba 3d 17 d0 25 74 3d 4e 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 e9 49 62 57 f4 0e bf 78 80 ec 65 ac 22 79 b3 cd 9e 6c f3 67 9b 3c d9 e6 cf 36 79 b3 cd 9e 6c f3 67 9b 3c d9 e6 cf 36 79 b3 cd 9e 6c f3 67 3e be 7a ba ff 00 c0 54 a8 46 0c be b5 d1 70 65 f4 65 4a 8f fe 79 2a 57 4a 7a aa 23 52 bf 6b 67 ef b5 11 a9 5f b5 3a 2f e8 2e 5f a2 ba df 4a 81 13 ff 00 55 99 52 a5 7a b4 e9 b7 ed 0b ca 7a 3b fd e6 9f b4 d7 41 15 d1 25 7a d5 2a 54 61 2f a3 d5 70 65 f4 7d 15 2b a5 4a 95 2d 2d 2d 2d 2d 2d 2d 2d 2a 54 a9 52 a5 a5 a5 a5 a5 a5 a5 a5 a5 4a 95 2a 54 b4 b4 Data Ascii: ]}1_{8U-_Ablu/=%t=NIbWxe"ylg<6ylg<6ylg>zTFpeeJyWJz#Rkg_:/._JURzz;A%zTa/pe}+J--------TRJT
2025-01-14 23:26:28 UTC	16384	IN	Data Raw: 1d 6d 9f fd e2 43 46 c6 96 65 25 db c1 69 dd 59 f9 65 fa 5f 97 6e 91 6b 48 0a 4c 3c 04 f6 41 04 6c 81 44 18 00 00 00 0c 71 6e 2d e4 eb 98 cf 93 66 d0 03 8e 4f 8a a1 7c fc 57 27 73 c0 50 7b 7e c2 43 4c a6 d0 65 25 4d 84 a9 dd 58 7d 88 00 9c 40 5a f0 db 41 20 0e 81 80 f0 41 ca 13 6d b4 0c e1 7e 03 04 07 ae 6d cf 17 43 70 2f b7 74 69 0d 96 48 e3 d2 a0 a7 60 81 ca e8 e4 a3 a2 43 4f df 6c 65 25 88 f4 a9 9d 59 96 2f 46 54 88 dc 3c 5d ab 24 94 8c 16 75 c3 36 d8 ed 8c 61 21 87 07 40 3b e9 61 32 41 36 32 f2 36 de a5 ff 00 9c 69 de 6b d8 ed d8 f7 9a 2b 2d 9e e2 43 4d 4c 70 65 25 89 0e 4a 9e 62 7c 7c 87 f1 44 3b 05 ea d8 10 1c 50 54 80 48 f3 cb 62 d3 cd a6 43 2e 61 78 77 c0 a2 15 f4 9a bd 45 2e d0 e5 6e 89 28 44 68 40 9f 8b 3b 99 2d ec d2 43 4f 62 f8 65 25 8b df d9 Data Ascii: mCFe%iYe_nkHL<AlDqn-fO\|W'sP{~CLe%MX}@ZA Am~mCp/tiH`COle%Y/FT<]$u6a!@;a2A626ik+-CMLpe%Jb\|\|D;PTHbC.axwE.n(Dh@;-CObe%
2025-01-14 23:26:28 UTC	16384	IN	Data Raw: f5 b6 d2 b5 28 4a da 84 b4 57 37 1c ef 2c 40 d5 d5 62 00 ca 50 a0 e7 09 55 93 5c 03 60 6b 02 07 79 f6 b0 b6 4a cd 5c cf b9 fe 0b 06 b8 85 e6 0c 36 1a ba ac d4 a8 e8 a0 4a ae 3e 52 a8 00 7a 80 61 5c c7 5d 57 49 ed 63 53 6f 73 e2 c4 f8 0b f8 9f 01 7f 13 e0 2f e2 7c 05 fc 4f 80 bf 89 f0 17 f1 1e 1f 8a f1 16 04 a7 04 47 e9 33 0a 78 c3 c3 50 73 2a c2 81 f0 93 c3 fa 27 8d f4 4f 0f e8 96 ce b0 a0 93 28 8b 6d 19 fb 47 b6 11 08 68 a1 db 51 54 8b 50 1f 59 85 61 f1 ab ff 00 02 8b ba cb b7 aa f8 2e 0e 97 35 2a 13 8a d0 4a e2 4b 05 0f ca a8 d5 10 9d 74 9e 67 26 03 6b 83 24 25 83 25 64 14 c2 b6 04 2b 5a f2 8c 95 0c 34 41 92 4c 28 ab c7 96 98 62 59 42 5d e0 93 92 b7 79 86 4c 8a 8f c8 56 57 17 b7 96 2b 50 40 46 83 e4 08 08 d5 d4 ad be 1d 41 80 a8 34 ac 61 34 75 48 26 00 Data Ascii: (JW7,@bPU\`kyJ\6J>Rza\]WIcSos/\|OG3xPs'O(mGhQTPYa.5JKtg&k$%%d+Z4AL(bYB]yLVW+P@FA4a4uH&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49721	104.102.53.18	443	3364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 23:26:28 UTC	597	OUT	GET /javax.faces.resource/theme.css.xhtml?ln=primefaces-frontoffice HTTP/1.1 Host: www.lbpiaccess.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.giselabravo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 23:26:29 UTC	494	IN	HTTP/1.1 200 OK Content-Type: text/css Expires: Tue, 21 Jan 2025 23:26:29 GMT Last-Modified: Wed, 20 Nov 2024 13:19:16 GMT ETag: W/"28824-1732108756000" Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-ORACLE-DMS-RID: 0 X-Content-Type-Options: nosniff X-ORACLE-DMS-ECID: d51cf803-2cfa-4f0d-b979-dc64dc3b274a-00354560 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Content-Length: 29874 Date: Tue, 14 Jan 2025 23:26:29 GMT Connection: close
2025-01-14 23:26:29 UTC	1357	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 6a 51 75 65 72 79 20 55 49 20 43 53 53 20 46 72 61 6d 65 77 6f 72 6b 20 31 2e 31 32 2e 31 0d 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0d 0a 20 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0d 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0d 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0d 0a 20 2a 0d 0a 20 2a 20 68 74 74 70 3a 2f 2f 61 70 69 2e 6a 71 75 65 72 79 75 69 2e 63 6f 6d 2f 63 61 74 65 67 6f 72 79 2f 74 68 65 6d 69 6e 67 2f 0d 0a 20 2a 0d 0a 20 2a 20 54 6f 20 76 69 65 77 20 61 Data Ascii: /! jQuery UI CSS Framework 1.12.1 * http://jqueryui.com * * Copyright jQuery Foundation and other contributors * Released under the MIT license. * http://jquery.org/license * * http://api.jqueryui.com/category/theming/ * * To view a
2025-01-14 23:26:29 UTC	14336	IN	Data Raw: 65 6e 74 3d 25 32 33 33 38 39 36 38 35 26 66 63 43 6f 6e 74 65 6e 74 3d 25 32 33 33 33 33 33 33 33 26 62 6f 72 64 65 72 43 6f 6c 6f 72 43 6f 6e 74 65 6e 74 3d 25 32 33 64 64 64 64 64 64 26 62 67 54 65 78 74 75 72 65 43 6f 6e 74 65 6e 74 3d 66 6c 61 74 26 62 67 43 6f 6c 6f 72 43 6f 6e 74 65 6e 74 3d 25 32 33 66 66 66 66 66 66 26 69 63 6f 6e 43 6f 6c 6f 72 48 65 61 64 65 72 3d 25 32 33 34 34 34 34 34 34 26 66 63 48 65 61 64 65 72 3d 25 32 33 66 66 66 66 66 66 26 62 6f 72 64 65 72 43 6f 6c 6f 72 48 65 61 64 65 72 3d 25 32 33 64 64 64 64 64 64 26 62 67 54 65 78 74 75 72 65 48 65 61 64 65 72 3d 66 6c 61 74 26 62 67 43 6f 6c 6f 72 48 65 61 64 65 72 3d 25 32 33 33 38 39 36 38 35 26 63 6f 72 6e 65 72 52 61 64 69 75 73 3d 33 70 78 26 66 77 44 65 66 61 75 6c 74 3d Data Ascii: ent=%23389685&fcContent=%23333333&borderColorContent=%23dddddd&bgTextureContent=flat&bgColorContent=%23ffffff&iconColorHeader=%23444444&fcHeader=%23ffffff&borderColorHeader=%23dddddd&bgTextureHeader=flat&bgColorHeader=%23389685&cornerRadius=3px&fwDefault=
2025-01-14 23:26:29 UTC	8883	IN	Data Raw: 64 20 7b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 64 61 64 35 35 65 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 61 39 30 3b 0d 0a 7d 0d 0a 2e 75 69 2d 73 74 61 74 65 2d 68 69 67 68 6c 69 67 68 74 20 61 2c 0d 0a 2e 75 69 2d 77 69 64 67 65 74 2d 63 6f 6e 74 65 6e 74 20 2e 75 69 2d 73 74 61 74 65 2d 68 69 67 68 6c 69 67 68 74 20 61 2c 0d 0a 2e 75 69 2d 77 69 64 67 65 74 2d 68 65 61 64 65 72 20 2e 75 69 2d 73 74 61 74 65 2d 68 69 67 68 6c 69 67 68 74 20 61 20 7b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 37 37 37 36 32 30 3b 0d 0a 7d 0d 0a 2e 75 69 2d 73 74 61 74 65 2d 65 72 72 6f 72 2c 0d 0a 2e 75 69 2d 77 69 64 67 65 74 2d 63 6f 6e 74 65 6e 74 20 2e 75 69 2d 73 74 61 74 65 2d 65 72 72 6f 72 2c 0d 0a Data Ascii: d { border: 1px solid #dad55e; background: #fffa90;}.ui-state-highlight a,.ui-widget-content .ui-state-highlight a,.ui-widget-header .ui-state-highlight a { color: #777620;}.ui-state-error,.ui-widget-content .ui-state-error,
2025-01-14 23:26:29 UTC	5298	IN	Data Raw: 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 32 32 34 70 78 20 2d 31 31 32 70 78 3b 20 7d 0d 0a 2e 75 69 2d 69 63 6f 6e 2d 6c 69 6e 6b 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 32 34 30 70 78 20 2d 31 31 32 70 78 3b 20 7d 0d 0a 2e 75 69 2d 69 63 6f 6e 2d 63 61 6e 63 65 6c 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 20 2d 31 32 38 70 78 3b 20 7d 0d 0a 2e 75 69 2d 69 63 6f 6e 2d 70 6c 75 73 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 31 36 70 78 20 2d 31 32 38 70 78 3b 20 7d 0d 0a 2e 75 69 2d 69 63 6f 6e 2d 70 6c 75 73 74 68 69 63 6b 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 33 32 70 78 20 2d 31 32 38 70 78 3b 20 7d 0d 0a 2e 75 69 2d 69 Data Ascii: d-position: -224px -112px; }.ui-icon-link { background-position: -240px -112px; }.ui-icon-cancel { background-position: 0 -128px; }.ui-icon-plus { background-position: -16px -128px; }.ui-icon-plusthick { background-position: -32px -128px; }.ui-i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49719	104.102.53.18	443	3364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 23:26:28 UTC	601	OUT	GET /javax.faces.resource/fa/font-awesome.css.xhtml?ln=primefaces&v=8.0 HTTP/1.1 Host: www.lbpiaccess.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.giselabravo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 23:26:29 UTC	494	IN	HTTP/1.1 200 OK Content-Type: text/css Expires: Tue, 21 Jan 2025 23:26:29 GMT Last-Modified: Thu, 05 Mar 2020 02:53:06 GMT ETag: W/"31128-1583376786000" Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-ORACLE-DMS-RID: 0 X-Content-Type-Options: nosniff X-ORACLE-DMS-ECID: d51cf803-2cfa-4f0d-b979-dc64dc3b274a-00354551 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Content-Length: 31260 Date: Tue, 14 Jan 2025 23:26:29 GMT Connection: close
2025-01-14 23:26:29 UTC	1355	IN	Data Raw: 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 37 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 61 75 74 6f 3b 73 72 63 3a 75 72 6c 28 22 2f 6a 61 76 61 78 2e 66 61 63 65 73 2e 72 65 73 6f 75 72 63 65 2f 66 61 2f 66 Data Ascii: /! Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';font-display:auto;src:url("/javax.faces.resource/fa/f
2025-01-14 23:26:29 UTC	14336	IN	Data Raw: 65 2d 74 79 70 65 3a 6e 6f 6e 65 7d 2e 66 61 2d 75 6c 3e 6c 69 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 66 61 2d 6c 69 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 2d 32 2e 31 34 32 38 35 37 31 34 65 6d 3b 77 69 64 74 68 3a 32 2e 31 34 32 38 35 37 31 34 65 6d 3b 74 6f 70 3a 2e 31 34 32 38 35 37 31 34 65 6d 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 66 61 2d 6c 69 2e 66 61 2d 6c 67 7b 6c 65 66 74 3a 2d 31 2e 38 35 37 31 34 32 38 36 65 6d 7d 2e 66 61 2d 62 6f 72 64 65 72 7b 70 61 64 64 69 6e 67 3a 2e 32 65 6d 20 2e 32 35 65 6d 20 2e 31 35 65 6d 3b 62 6f 72 64 65 72 3a 73 6f 6c 69 64 20 2e 30 38 65 6d 20 23 65 65 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 31 65 6d 7d 2e 66 61 2d 70 75 6c Data Ascii: e-type:none}.fa-ul>li{position:relative}.fa-li{position:absolute;left:-2.14285714em;width:2.14285714em;top:.14285714em;text-align:center}.fa-li.fa-lg{left:-1.85714286em}.fa-border{padding:.2em .25em .15em;border:solid .08em #eee;border-radius:.1em}.fa-pul
2025-01-14 23:26:29 UTC	8885	IN	Data Raw: 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 36 22 7d 2e 66 61 2d 63 6e 79 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 72 6d 62 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 79 65 6e 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 6a 70 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 37 22 7d 2e 66 61 2d 72 75 62 6c 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 72 6f 75 62 6c 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 72 75 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 38 22 7d 2e 66 61 2d 77 6f 6e 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 6b 72 77 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 39 22 7d 2e 66 61 2d 62 69 74 63 6f 69 6e 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 62 74 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 61 22 7d Data Ascii: {content:"\f156"}.fa-cny:before,.fa-rmb:before,.fa-yen:before,.fa-jpy:before{content:"\f157"}.fa-ruble:before,.fa-rouble:before,.fa-rub:before{content:"\f158"}.fa-won:before,.fa-krw:before{content:"\f159"}.fa-bitcoin:before,.fa-btc:before{content:"\f15a"}
2025-01-14 23:26:29 UTC	6684	IN	Data Raw: 34 31 22 7d 2e 66 61 2d 62 61 74 74 65 72 79 2d 32 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 62 61 74 74 65 72 79 2d 68 61 6c 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 34 32 22 7d 2e 66 61 2d 62 61 74 74 65 72 79 2d 31 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 62 61 74 74 65 72 79 2d 71 75 61 72 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 34 33 22 7d 2e 66 61 2d 62 61 74 74 65 72 79 2d 30 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 62 61 74 74 65 72 79 2d 65 6d 70 74 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 34 34 22 7d 2e 66 61 2d 6d 6f 75 73 65 2d 70 6f 69 6e 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 34 35 22 7d 2e 66 61 2d 69 2d 63 75 72 73 6f 72 3a 62 65 66 6f 72 65 7b 63 6f 6e Data Ascii: 41"}.fa-battery-2:before,.fa-battery-half:before{content:"\f242"}.fa-battery-1:before,.fa-battery-quarter:before{content:"\f243"}.fa-battery-0:before,.fa-battery-empty:before{content:"\f244"}.fa-mouse-pointer:before{content:"\f245"}.fa-i-cursor:before{con

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49722	104.102.53.18	443	3364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 23:26:28 UTC	578	OUT	GET /javax.faces.resource/style.css.xhtml?ln=css HTTP/1.1 Host: www.lbpiaccess.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.giselabravo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 23:26:30 UTC	494	IN	HTTP/1.1 200 OK Content-Type: text/css Expires: Tue, 21 Jan 2025 23:26:29 GMT Last-Modified: Wed, 20 Nov 2024 13:19:20 GMT ETag: W/"11830-1732108760000" Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-ORACLE-DMS-RID: 0 X-Content-Type-Options: nosniff X-ORACLE-DMS-ECID: d51cf803-2cfa-4f0d-b979-dc64dc3b274a-00354570 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Content-Length: 11786 Date: Tue, 14 Jan 2025 23:26:30 GMT Connection: close
2025-01-14 23:26:30 UTC	1352	IN	Data Raw: 2f 2a 0d 0a 54 6f 20 63 68 61 6e 67 65 20 74 68 69 73 20 6c 69 63 65 6e 73 65 20 68 65 61 64 65 72 2c 20 63 68 6f 6f 73 65 20 4c 69 63 65 6e 73 65 20 48 65 61 64 65 72 73 20 69 6e 20 50 72 6f 6a 65 63 74 20 50 72 6f 70 65 72 74 69 65 73 2e 0d 0a 54 6f 20 63 68 61 6e 67 65 20 74 68 69 73 20 74 65 6d 70 6c 61 74 65 20 66 69 6c 65 2c 20 63 68 6f 6f 73 65 20 54 6f 6f 6c 73 20 7c 20 54 65 6d 70 6c 61 74 65 73 0d 0a 61 6e 64 20 6f 70 65 6e 20 74 68 65 20 74 65 6d 70 6c 61 74 65 20 69 6e 20 74 68 65 20 65 64 69 74 6f 72 2e 0d 0a 2a 2f 0d 0a 2f 2a 20 0d 0a 20 20 20 20 41 75 74 68 6f 72 20 20 20 20 20 3a 20 4e 53 59 53 0d 0a 2a 2f 0d 0a 0d 0a 2f 2a 2a 2a 20 50 61 6e 65 6c 20 2a 2a 2a 2f 0d 0a 2e 75 69 2d 70 61 6e 65 6c 2d 74 69 74 6c 65 62 61 72 20 7b 0d 0a 20 20 Data Ascii: /To change this license header, choose License Headers in Project Properties.To change this template file, choose Tools \| Templatesand open the template in the editor.//* Author : NSYS// Panel */.ui-panel-titlebar {
2025-01-14 23:26:30 UTC	10434	IN	Data Raw: 6f 20 42 75 74 74 6f 6e 20 2a 2a 2a 2f 0d 0a 0d 0a 2f 2a 2a 2a 20 4f 75 74 70 75 74 20 4c 61 62 65 6c 20 2a 2a 2a 2f 0d 0a 2e 75 69 2d 6f 75 74 70 75 74 6c 61 62 65 6c 20 7b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 34 31 34 30 34 32 3b 0d 0a 7d 0d 0a 2f 2a 2a 2a 20 4f 75 74 70 75 74 20 4c 61 62 65 6c 20 2a 2a 2a 2f 0d 0a 0d 0a 2f 2a 2a 2a 20 54 61 62 73 20 2a 2a 2a 2f 0d 0a 2e 75 69 2d 74 61 62 73 2d 6e 61 76 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 37 32 42 46 34 34 20 3b 0d 0a 7d 0d 0a 0d 0a 2e 75 69 2d 74 61 62 73 2d 6e 61 76 20 2e 75 69 2d 74 61 62 73 2d 68 65 61 64 65 72 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 64 37 64 66 32 33 3b 0d 0a 7d 0d 0a 0d 0a 2e 75 69 2d 74 61 Data Ascii: o Button *//* Output Label */.ui-outputlabel { color: #414042;}/* Output Label *//* Tabs ***/.ui-tabs-nav { background-color: #72BF44 ;}.ui-tabs-nav .ui-tabs-header { background-color: #d7df23;}.ui-ta

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49720	104.102.53.18	443	3364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 23:26:28 UTC	596	OUT	GET /javax.faces.resource/components.css.xhtml?ln=primefaces&v=8.0 HTTP/1.1 Host: www.lbpiaccess.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.giselabravo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 23:26:29 UTC	531	IN	HTTP/1.1 200 OK Content-Type: text/css Expires: Tue, 21 Jan 2025 23:26:29 GMT Last-Modified: Thu, 05 Mar 2020 02:53:08 GMT ETag: W/"95814-1583376788000" Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-ORACLE-DMS-RID: 0 X-Content-Type-Options: nosniff X-ORACLE-DMS-ECID: d51cf803-2cfa-4f0d-b979-dc64dc3b274a-00354552 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Date: Tue, 14 Jan 2025 23:26:29 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2025-01-14 23:26:29 UTC	15853	IN	Data Raw: 30 30 30 30 38 46 32 38 0d 0a 2e 75 69 2d 68 65 6c 70 65 72 2d 68 69 64 64 65 6e 2d 61 63 63 65 73 73 69 62 6c 65 20 69 6e 70 75 74 2c 2e 75 69 2d 68 65 6c 70 65 72 2d 68 69 64 64 65 6e 2d 61 63 63 65 73 73 69 62 6c 65 20 73 65 6c 65 63 74 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 29 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 29 7d 2e 75 69 2d 73 68 61 64 6f 77 7b 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 35 70 78 20 31 30 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 38 29 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 35 70 78 20 31 30 Data Ascii: 00008F28.ui-helper-hidden-accessible input,.ui-helper-hidden-accessible select{-webkit-transform:scale(0);-moz-transform:scale(0);-ms-transform:scale(0);transform:scale(0)}.ui-shadow{-moz-box-shadow:0 5px 10px rgba(0,0,0,0.8);-webkit-box-shadow:0 5px 10
2025-01-14 23:26:29 UTC	15824	IN	Data Raw: 6e 74 6f 67 67 6c 65 72 20 2e 75 69 2d 63 6f 6c 75 6d 6e 74 6f 67 67 6c 65 72 2d 69 74 65 6d 2e 75 69 2d 63 6f 6c 75 6d 6e 2d 70 2d 31 2c 2e 75 69 2d 63 6f 6c 75 6d 6e 74 6f 67 67 6c 65 72 20 2e 75 69 2d 63 6f 6c 75 6d 6e 74 6f 67 67 6c 65 72 2d 69 74 65 6d 2e 75 69 2d 63 6f 6c 75 6d 6e 2d 70 2d 32 2c 2e 75 69 2d 63 6f 6c 75 6d 6e 74 6f 67 67 6c 65 72 20 2e 75 69 2d 63 6f 6c 75 6d 6e 74 6f 67 67 6c 65 72 2d 69 74 65 6d 2e 75 69 2d 63 6f 6c 75 6d 6e 2d 70 2d 33 2c 2e 75 69 2d 63 6f 6c 75 6d 6e 74 6f 67 67 6c 65 72 20 2e 75 69 2d 63 6f 6c 75 6d 6e 74 6f 67 67 6c 65 72 2d 69 74 65 6d 2e 75 69 2d 63 6f 6c 75 6d 6e 2d 70 2d 34 2c 2e 75 69 2d 63 6f 6c 75 6d 6e 74 6f 67 67 6c 65 72 20 2e 75 69 2d 63 6f 6c 75 6d 6e 74 6f 67 67 6c 65 72 2d 69 74 65 6d 2e 75 69 2d Data Ascii: ntoggler .ui-columntoggler-item.ui-column-p-1,.ui-columntoggler .ui-columntoggler-item.ui-column-p-2,.ui-columntoggler .ui-columntoggler-item.ui-column-p-3,.ui-columntoggler .ui-columntoggler-item.ui-column-p-4,.ui-columntoggler .ui-columntoggler-item.ui-
2025-01-14 23:26:29 UTC	4983	IN	Data Raw: 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 3b 70 61 64 64 69 6e 67 3a 30 20 33 70 78 7d 2e 75 69 2d 73 65 6c 65 63 74 6f 6e 65 6d 65 6e 75 20 2e 75 69 2d 73 65 6c 65 63 74 6f 6e 65 6d 65 6e 75 2d 74 72 69 67 67 65 72 20 2e 75 69 2d 69 63 6f 6e 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 74 6f 70 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 3b 72 69 67 68 74 3a 30 7d 2e 75 69 2d 73 65 6c 65 63 74 6f 6e 65 6d 65 6e 75 20 2e 75 69 2d 73 65 6c 65 63 74 6f 6e 65 6d 65 6e 75 2d 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 62 6f 72 64 65 72 3a 30 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 Data Ascii: sition:absolute;right:0;top:0;padding:0 3px}.ui-selectonemenu .ui-selectonemenu-trigger .ui-icon{position:absolute;margin:auto;top:0;bottom:0;left:0;right:0}.ui-selectonemenu .ui-selectonemenu-label{display:block;border:0;white-space:nowrap;overflow:hidde
2025-01-14 23:26:29 UTC	106	IN	Data Raw: 30 30 30 30 30 30 35 45 0d 0a 2e 75 69 2d 73 65 6c 65 63 74 63 68 65 63 6b 62 6f 78 6d 65 6e 75 2d 70 61 6e 65 6c 20 2e 75 69 2d 73 65 6c 65 63 74 63 68 65 63 6b 62 6f 78 6d 65 6e 75 2d 6c 69 73 74 2d 69 74 65 6d 7b 62 6f 72 64 65 72 3a 30 20 6e 6f 6e 65 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 66 6f 6e 0d 0a Data Ascii: 0000005E.ui-selectcheckboxmenu-panel .ui-selectcheckboxmenu-list-item{border:0 none;cursor:pointer;fon
2025-01-14 23:26:29 UTC	102	IN	Data Raw: 30 30 30 30 30 30 35 41 0d 0a 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 6d 61 72 67 69 6e 3a 31 70 78 20 30 3b 70 61 64 64 69 6e 67 3a 33 70 78 20 35 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 75 69 2d 73 65 6c 65 63 74 0d 0a Data Ascii: 0000005At-weight:normal;margin:1px 0;padding:3px 5px;text-align:left;white-space:nowrap}.ui-select
2025-01-14 23:26:29 UTC	3994	IN	Data Raw: 30 30 30 30 30 46 38 45 0d 0a 63 68 65 63 6b 62 6f 78 6d 65 6e 75 2d 70 61 6e 65 6c 20 2e 75 69 2d 73 65 6c 65 63 74 63 68 65 63 6b 62 6f 78 6d 65 6e 75 2d 6c 69 73 74 2d 69 74 65 6d 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 75 69 2d 73 65 6c 65 63 74 63 68 65 63 6b 62 6f 78 6d 65 6e 75 2d 70 61 6e 65 6c 20 2e 75 69 2d 73 65 6c 65 63 74 63 68 65 63 6b 62 6f 78 6d 65 6e 75 2d 6c 69 73 74 2d 69 74 65 6d 20 2e 75 69 2d 63 68 6b 62 6f 78 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 35 30 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 38 70 78 7d 2e 75 69 2d 73 65 6c 65 63 74 63 68 65 63 6b 62 6f 78 6d 65 6e 75 2d 70 61 6e 65 6c 20 2e 75 69 2d 73 65 6c 65 63 74 63 68 65 63 6b 62 6f Data Ascii: 00000F8Echeckboxmenu-panel .ui-selectcheckboxmenu-list-item{display:block;position:relative}.ui-selectcheckboxmenu-panel .ui-selectcheckboxmenu-list-item .ui-chkbox{position:absolute;top:50%;margin-top:-8px}.ui-selectcheckboxmenu-panel .ui-selectcheckbo
2025-01-14 23:26:29 UTC	102	IN	Data Raw: 30 30 30 30 30 30 35 41 0d 0a 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 75 69 2d 66 6c 75 69 64 20 2e 75 69 2d 69 6e 70 75 74 74 65 78 74 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 75 69 2d 66 6c 75 69 64 20 2e 0d 0a Data Ascii: 0000005Aizing:border-box;-moz-box-sizing:border-box}.ui-fluid .ui-inputtext{width:100%}.ui-fluid .
2025-01-14 23:26:29 UTC	3900	IN	Data Raw: 30 30 30 30 30 46 33 30 0d 0a 75 69 2d 69 6e 70 75 74 6e 75 6d 62 65 72 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 75 69 2d 66 6c 75 69 64 20 2e 75 69 2d 69 6e 70 75 74 74 65 78 74 5b 73 69 7a 65 5d 2c 2e 75 69 2d 66 6c 75 69 64 20 2e 75 69 2d 69 6e 70 75 74 66 69 65 6c 64 5b 73 69 7a 65 5d 7b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 75 69 2d 66 6c 75 69 64 20 2e 75 69 2d 69 6e 70 75 74 74 65 78 74 61 72 65 61 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 75 69 2d 66 6c 75 69 64 20 2e 75 69 2d 73 65 6c 65 63 74 6f 6e 65 6d 65 6e 75 7b 77 69 64 74 68 3a 31 30 30 25 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 Data Ascii: 00000F30ui-inputnumber{width:100%}.ui-fluid .ui-inputtext[size],.ui-fluid .ui-inputfield[size]{width:auto}.ui-fluid .ui-inputtextarea{width:100%}.ui-fluid .ui-selectonemenu{width:100%;box-sizing:border-box;-webkit-box-sizing:border-box;-moz-box-sizing:b
2025-01-14 23:26:29 UTC	102	IN	Data Raw: 30 30 30 30 30 30 35 41 0d 0a 7b 70 61 64 64 69 6e 67 3a 34 70 78 7d 2e 75 69 2d 69 6e 70 75 74 67 72 6f 75 70 20 2e 75 69 2d 69 6e 70 75 74 67 72 6f 75 70 2d 61 64 64 6f 6e 2d 63 68 65 63 6b 62 6f 78 7b 70 61 64 64 69 6e 67 3a 31 70 78 7d 2e 75 69 2d 69 6e 70 75 74 67 72 6f 75 70 20 2e 75 69 2d 69 0d 0a Data Ascii: 0000005A{padding:4px}.ui-inputgroup .ui-inputgroup-addon-checkbox{padding:1px}.ui-inputgroup .ui-i
2025-01-14 23:26:29 UTC	16296	IN	Data Raw: 30 30 30 30 33 46 39 43 0d 0a 6e 70 75 74 67 72 6f 75 70 2d 61 64 64 6f 6e 2b 2e 75 69 2d 69 6e 70 75 74 67 72 6f 75 70 2d 61 64 64 6f 6e 7b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 30 20 6e 6f 6e 65 7d 2e 75 69 2d 69 6e 70 75 74 67 72 6f 75 70 20 2e 75 69 2d 69 6e 70 75 74 74 65 78 74 2c 2e 75 69 2d 69 6e 70 75 74 67 72 6f 75 70 20 2e 75 69 2d 69 6e 70 75 74 74 65 78 74 61 72 65 61 2c 2e 75 69 2d 69 6e 70 75 74 67 72 6f 75 70 20 2e 75 69 2d 70 61 73 73 77 6f 72 64 2c 2e 75 69 2d 69 6e 70 75 74 67 72 6f 75 70 20 2e 75 69 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 69 6e 70 75 74 2c 2e 75 69 2d 69 6e 70 75 74 67 72 6f 75 70 20 2e 75 69 2d 63 68 69 70 73 2d 63 6f 6e 74 61 69 6e 65 72 2c 2e 75 69 2d 69 6e 70 75 74 67 72 6f 75 70 20 2e 75 69 2d 73 70 69 6e 6e 65 72 Data Ascii: 00003F9Cnputgroup-addon+.ui-inputgroup-addon{border-left:0 none}.ui-inputgroup .ui-inputtext,.ui-inputgroup .ui-inputtextarea,.ui-inputgroup .ui-password,.ui-inputgroup .ui-autocomplete-input,.ui-inputgroup .ui-chips-container,.ui-inputgroup .ui-spinner

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49723	104.102.53.18	443	3364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 23:26:28 UTC	584	OUT	GET /javax.faces.resource/jquery/jquery.js.xhtml?ln=primefaces&v=8.0 HTTP/1.1 Host: www.lbpiaccess.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.giselabravo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 23:26:29 UTC	538	IN	HTTP/1.1 200 OK Content-Type: text/javascript Expires: Tue, 21 Jan 2025 23:26:29 GMT Last-Modified: Thu, 05 Mar 2020 02:52:58 GMT ETag: W/"88144-1583376778000" Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-ORACLE-DMS-RID: 0 X-Content-Type-Options: nosniff X-ORACLE-DMS-ECID: d51cf803-2cfa-4f0d-b979-dc64dc3b274a-00354561 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Date: Tue, 14 Jan 2025 23:26:29 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2025-01-14 23:26:29 UTC	15846	IN	Data Raw: 30 30 30 30 39 46 31 30 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f Data Ascii: 00009F10/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Erro
2025-01-14 23:26:30 UTC	15822	IN	Data Raw: 6f 3d 28 61 3d 65 29 5b 6b 5d 7c 7c 28 61 5b 6b 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 53 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 6b 5d 7c 7c 28 61 5b 6b 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 3d 5b 53 2c 64 5d 29 2c 61 3d 3d Data Ascii: o=(a=e)[k]\|\|(a[k]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===S&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[k]\|\|(a[k]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]=[S,d]),a==
2025-01-14 23:26:30 UTC	9064	IN	Data Raw: 64 6f 53 63 72 6f 6c 6c 3f 43 2e 73 65 74 54 69 6d 65 6f 75 74 28 6b 2e 72 65 61 64 79 29 3a 28 45 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 42 29 2c 43 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 42 29 29 3b 76 61 72 20 5f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 29 7b 76 61 72 20 73 3d 30 2c 75 3d 65 2e 6c 65 6e 67 74 68 2c 6c 3d 6e 75 6c 6c 3d 3d 6e 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 77 28 6e 29 29 66 6f 72 28 73 20 69 6e 20 69 3d 21 30 2c 6e 29 5f 28 65 2c 74 2c 73 2c 6e 5b 73 5d 2c 21 30 2c 6f 2c 61 29 3b 65 6c 73 65 20 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 26 26 28 69 3d 21 30 2c 6d 28 72 29 7c 7c 28 61 3d 21 30 Data Ascii: doScroll?C.setTimeout(k.ready):(E.addEventListener("DOMContentLoaded",B),C.addEventListener("load",B));var _=function(e,t,n,r,i,o,a){var s=0,u=e.length,l=null==n;if("object"===w(n))for(s in i=!0,n)_(e,t,s,n[s],!0,o,a);else if(void 0!==r&&(i=!0,m(r)\|\|(a=!0
2025-01-14 23:26:30 UTC	106	IN	Data Raw: 30 30 30 30 30 30 35 45 0d 0a 77 68 69 6c 65 28 6c 2d 2d 29 64 3d 67 3d 28 73 3d 45 65 2e 65 78 65 63 28 65 5b 6c 5d 29 7c 7c 5b 5d 29 5b 31 5d 2c 68 3d 28 73 5b 32 5d 7c 7c 22 22 29 2e 73 70 6c 69 74 28 22 2e 22 29 2e 73 6f 72 74 28 29 2c 64 26 26 28 66 3d 6b 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 5b 64 5d 0d 0a Data Ascii: 0000005Ewhile(l--)d=g=(s=Ee.exec(e[l])\|\|[])[1],h=(s[2]\|\|"").split(".").sort(),d&&(f=k.event.special[d]
2025-01-14 23:26:30 UTC	102	IN	Data Raw: 30 30 30 30 30 30 35 41 0d 0a 7c 7c 7b 7d 2c 64 3d 28 69 3f 66 2e 64 65 6c 65 67 61 74 65 54 79 70 65 3a 66 2e 62 69 6e 64 54 79 70 65 29 7c 7c 64 2c 66 3d 6b 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 5b 64 5d 7c 7c 7b 7d 2c 63 3d 6b 2e 65 78 74 65 6e 64 28 7b 74 79 70 65 3a 64 2c 6f 72 69 67 54 79 0d 0a Data Ascii: 0000005A\|\|{},d=(i?f.delegateType:f.bindType)\|\|d,f=k.event.special[d]\|\|{},c=k.extend({type:d,origTy
2025-01-14 23:26:30 UTC	3900	IN	Data Raw: 30 30 30 30 30 46 33 30 0d 0a 70 65 3a 67 2c 64 61 74 61 3a 72 2c 68 61 6e 64 6c 65 72 3a 6e 2c 67 75 69 64 3a 6e 2e 67 75 69 64 2c 73 65 6c 65 63 74 6f 72 3a 69 2c 6e 65 65 64 73 43 6f 6e 74 65 78 74 3a 69 26 26 6b 2e 65 78 70 72 2e 6d 61 74 63 68 2e 6e 65 65 64 73 43 6f 6e 74 65 78 74 2e 74 65 73 74 28 69 29 2c 6e 61 6d 65 73 70 61 63 65 3a 68 2e 6a 6f 69 6e 28 22 2e 22 29 7d 2c 6f 29 2c 28 70 3d 75 5b 64 5d 29 7c 7c 28 28 70 3d 75 5b 64 5d 3d 5b 5d 29 2e 64 65 6c 65 67 61 74 65 43 6f 75 6e 74 3d 30 2c 66 2e 73 65 74 75 70 26 26 21 31 21 3d 3d 66 2e 73 65 74 75 70 2e 63 61 6c 6c 28 74 2c 72 2c 68 2c 61 29 7c 7c 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 64 2c 61 29 29 2c 66 2e 61 Data Ascii: 00000F30pe:g,data:r,handler:n,guid:n.guid,selector:i,needsContext:i&&k.expr.match.needsContext.test(i),namespace:h.join(".")},o),(p=u[d])\|\|((p=u[d]=[]).delegateCount=0,f.setup&&!1!==f.setup.call(t,r,h,a)\|\|t.addEventListener&&t.addEventListener(d,a)),f.a
2025-01-14 23:26:30 UTC	102	IN	Data Raw: 30 30 30 30 30 30 35 41 0d 0a 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 3b 74 68 69 73 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 3d 6b 65 2c 65 26 26 21 74 68 69 73 2e 69 73 53 0d 0a Data Ascii: 0000005ApreventDefault:function(){var e=this.originalEvent;this.isDefaultPrevented=ke,e&&!this.isS
2025-01-14 23:26:30 UTC	16296	IN	Data Raw: 30 30 30 30 33 46 39 43 0d 0a 69 6d 75 6c 61 74 65 64 26 26 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 2c 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 3b 74 68 69 73 2e 69 73 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 3d 6b 65 2c 65 26 26 21 74 68 69 73 2e 69 73 53 69 6d 75 6c 61 74 65 64 26 26 65 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 7d 2c 73 74 6f 70 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 3b 74 68 69 73 2e 69 73 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f Data Ascii: 00003F9Cimulated&&e.preventDefault()},stopPropagation:function(){var e=this.originalEvent;this.isPropagationStopped=ke,e&&!this.isSimulated&&e.stopPropagation()},stopImmediatePropagation:function(){var e=this.originalEvent;this.isImmediatePropagationSto
2025-01-14 23:26:30 UTC	8214	IN	Data Raw: 30 30 30 30 32 30 30 41 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 68 2e 64 69 73 70 6c 61 79 3d 6c 7d 29 2c 6e 75 6c 6c 3d 3d 6c 26 26 28 63 3d 68 2e 64 69 73 70 6c 61 79 2c 6c 3d 22 6e 6f 6e 65 22 3d 3d 3d 63 3f 22 22 3a 63 29 29 2c 68 2e 64 69 73 70 6c 61 79 3d 22 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 22 29 29 2c 6e 2e 6f 76 65 72 66 6c 6f 77 26 26 28 68 2e 6f 76 65 72 66 6c 6f 77 3d 22 68 69 64 64 65 6e 22 2c 70 2e 61 6c 77 61 79 73 28 66 75 6e 63 74 69 6f 6e 28 29 7b 68 2e 6f 76 65 72 66 6c 6f 77 3d 6e 2e 6f 76 65 72 66 6c 6f 77 5b 30 5d 2c 68 2e 6f 76 65 72 66 6c 6f 77 58 3d 6e 2e 6f 76 65 72 66 6c 6f 77 5b 31 5d 2c 68 2e 6f 76 65 72 66 6c 6f 77 59 3d 6e 2e 6f 76 65 72 66 6c 6f 77 5b 32 5d 7d 29 29 2c 75 3d 21 31 2c 64 29 75 7c 7c 28 76 3f 22 68 69 64 Data Ascii: 0000200A(function(){h.display=l}),null==l&&(c=h.display,l="none"===c?"":c)),h.display="inline-block")),n.overflow&&(h.overflow="hidden",p.always(function(){h.overflow=n.overflow[0],h.overflowX=n.overflow[1],h.overflowY=n.overflow[2]})),u=!1,d)u\|\|(v?"hid
2025-01-14 23:26:30 UTC	102	IN	Data Raw: 30 30 30 30 30 30 35 41 0d 0a 28 6e 3d 21 30 29 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 3d 2d 31 29 2c 6f 7d 7d 7d 7d 29 2c 6b 2e 65 61 63 68 28 5b 22 72 61 64 69 6f 22 2c 22 63 68 65 63 6b 62 6f 78 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6b 2e 76 61 6c 48 0d 0a Data Ascii: 0000005A(n=!0);return n\|\|(e.selectedIndex=-1),o}}}}),k.each(["radio","checkbox"],function(){k.valH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49718	104.102.53.18	443	3364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 23:26:28 UTC	592	OUT	GET /javax.faces.resource/jquery/jquery-plugins.js.xhtml?ln=primefaces&v=8.0 HTTP/1.1 Host: www.lbpiaccess.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.giselabravo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 23:26:29 UTC	539	IN	HTTP/1.1 200 OK Content-Type: text/javascript Expires: Tue, 21 Jan 2025 23:26:28 GMT Last-Modified: Thu, 05 Mar 2020 02:53:08 GMT ETag: W/"267352-1583376788000" Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-ORACLE-DMS-RID: 0 X-Content-Type-Options: nosniff X-ORACLE-DMS-ECID: d51cf803-2cfa-4f0d-b979-dc64dc3b274a-00354545 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Date: Tue, 14 Jan 2025 23:26:29 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2025-01-14 23:26:29 UTC	15845	IN	Data Raw: 30 30 30 30 39 46 31 30 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 37 2d 30 38 2d 30 39 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 74 2e 6a 73 2c 20 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 64 61 74 61 2e 6a 73 2c 20 64 69 73 61 62 6c 65 2d 73 65 6c 65 63 74 69 6f 6e 2e 6a 73 2c 20 66 6f 63 75 73 61 62 6c 65 2e 6a 73 2c 20 66 6f 72 6d 2d 72 65 73 65 74 2d 6d 69 78 69 6e 2e 6a 73 2c 20 6b 65 79 63 6f 64 65 2e 6a 73 2c 20 6c 61 62 65 6c 73 2e 6a 73 2c 20 73 63 72 6f 6c 6c 2d 70 61 72 65 6e 74 2e 6a 73 2c 20 74 61 62 62 61 62 6c 65 2e 6a 73 2c 20 75 6e 69 71 75 65 2d 69 64 2e 6a 73 2c 20 77 69 64 67 65 74 73 2f 64 72 61 67 67 61 62 6c Data Ascii: 00009F10/! jQuery UI - v1.12.1 - 2017-08-09 http://jqueryui.com* Includes: widget.js, position.js, data.js, disable-selection.js, focusable.js, form-reset-mixin.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/draggabl
2025-01-14 23:26:29 UTC	15814	IN	Data Raw: 32 2a 61 79 2e 6f 66 66 73 65 74 5b 30 5d 2c 61 74 2c 61 42 3b 69 66 28 61 45 3c 30 29 7b 61 74 3d 61 7a 2e 6c 65 66 74 2b 61 43 2b 61 46 2b 61 77 2b 61 79 2e 63 6f 6c 6c 69 73 69 6f 6e 57 69 64 74 68 2d 61 47 2d 61 44 3b 69 66 28 61 74 3c 30 7c 7c 61 74 3c 61 72 28 61 45 29 29 7b 61 7a 2e 6c 65 66 74 2b 3d 61 43 2b 61 46 2b 61 77 7d 7d 65 6c 73 65 7b 69 66 28 61 75 3e 30 29 7b 61 42 3d 61 7a 2e 6c 65 66 74 2d 61 79 2e 63 6f 6c 6c 69 73 69 6f 6e 50 6f 73 69 74 69 6f 6e 2e 6d 61 72 67 69 6e 4c 65 66 74 2b 61 43 2b 61 46 2b 61 77 2d 61 76 3b 69 66 28 61 42 3e 30 7c 7c 61 72 28 61 42 29 3c 61 75 29 7b 61 7a 2e 6c 65 66 74 2b 3d 61 43 2b 61 46 2b 61 77 7d 7d 7d 7d 2c 74 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 61 79 2c 61 78 29 7b 76 61 72 20 61 77 3d 61 78 2e 77 Data Ascii: 2*ay.offset[0],at,aB;if(aE<0){at=az.left+aC+aF+aw+ay.collisionWidth-aG-aD;if(at<0\|\|at<ar(aE)){az.left+=aC+aF+aw}}else{if(au>0){aB=az.left-ay.collisionPosition.marginLeft+aC+aF+aw-av;if(aB>0\|\|ar(aB)<au){az.left+=aC+aF+aw}}}},top:function(ay,ax){var aw=ax.w
2025-01-14 23:26:29 UTC	9073	IN	Data Raw: 70 61 72 65 6e 74 4e 6f 64 65 3a 61 6a 2e 61 70 70 65 6e 64 54 6f 29 29 7d 69 66 28 61 69 26 26 61 67 5b 30 5d 3d 3d 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 5b 30 5d 29 7b 74 68 69 73 2e 5f 73 65 74 50 6f 73 69 74 69 6f 6e 52 65 6c 61 74 69 76 65 28 29 7d 69 66 28 61 67 5b 30 5d 21 3d 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 5b 30 5d 26 26 21 28 2f 28 66 69 78 65 64 7c 61 62 73 6f 6c 75 74 65 29 2f 29 2e 74 65 73 74 28 61 67 2e 63 73 73 28 22 70 6f 73 69 74 69 6f 6e 22 29 29 29 7b 61 67 2e 63 73 73 28 22 70 6f 73 69 74 69 6f 6e 22 2c 22 61 62 73 6f 6c 75 74 65 22 29 7d 72 65 74 75 72 6e 20 61 67 7d 2c 5f 73 65 74 50 6f 73 69 74 69 6f 6e 52 65 6c 61 74 69 76 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 28 2f 5e 28 3f 3a 72 7c 61 7c 66 29 2f 29 2e 74 65 Data Ascii: parentNode:aj.appendTo))}if(ai&&ag[0]===this.element[0]){this._setPositionRelative()}if(ag[0]!==this.element[0]&&!(/(fixed\|absolute)/).test(ag.css("position"))){ag.css("position","absolute")}return ag},_setPositionRelative:function(){if(!(/^(?:r\|a\|f)/).te
2025-01-14 23:26:29 UTC	106	IN	Data Raw: 30 30 30 30 30 30 35 45 0d 0a 69 6f 6e 28 29 7b 74 68 69 73 2e 72 65 66 72 65 73 68 50 6f 73 69 74 69 6f 6e 73 28 29 7d 29 7d 7d 7d 29 7d 7d 29 3b 4b 2e 75 69 2e 70 6c 75 67 69 6e 2e 61 64 64 28 22 64 72 61 67 67 61 62 6c 65 22 2c 22 63 75 72 73 6f 72 22 2c 7b 73 74 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 61 69 0d 0a Data Ascii: 0000005Eion(){this.refreshPositions()})}}})}});K.ui.plugin.add("draggable","cursor",{start:function(ai
2025-01-14 23:26:29 UTC	102	IN	Data Raw: 30 30 30 30 30 30 35 41 0d 0a 2c 61 6a 2c 61 67 29 7b 76 61 72 20 61 68 3d 4b 28 22 62 6f 64 79 22 29 2c 61 6b 3d 61 67 2e 6f 70 74 69 6f 6e 73 3b 69 66 28 61 68 2e 63 73 73 28 22 63 75 72 73 6f 72 22 29 29 7b 61 6b 2e 5f 63 75 72 73 6f 72 3d 61 68 2e 63 73 73 28 22 63 75 72 73 6f 72 22 29 7d 61 68 0d 0a Data Ascii: 0000005A,aj,ag){var ah=K("body"),ak=ag.options;if(ah.css("cursor")){ak._cursor=ah.css("cursor")}ah
2025-01-14 23:26:29 UTC	12138	IN	Data Raw: 30 30 30 30 32 46 35 45 0d 0a 2e 63 73 73 28 22 63 75 72 73 6f 72 22 2c 61 6b 2e 63 75 72 73 6f 72 29 7d 2c 73 74 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 61 68 2c 61 69 2c 61 67 29 7b 76 61 72 20 61 6a 3d 61 67 2e 6f 70 74 69 6f 6e 73 3b 69 66 28 61 6a 2e 5f 63 75 72 73 6f 72 29 7b 4b 28 22 62 6f 64 79 22 29 2e 63 73 73 28 22 63 75 72 73 6f 72 22 2c 61 6a 2e 5f 63 75 72 73 6f 72 29 7d 7d 7d 29 3b 4b 2e 75 69 2e 70 6c 75 67 69 6e 2e 61 64 64 28 22 64 72 61 67 67 61 62 6c 65 22 2c 22 6f 70 61 63 69 74 79 22 2c 7b 73 74 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 61 69 2c 61 6a 2c 61 67 29 7b 76 61 72 20 61 68 3d 4b 28 61 6a 2e 68 65 6c 70 65 72 29 2c 61 6b 3d 61 67 2e 6f 70 74 69 6f 6e 73 3b 69 66 28 61 68 2e 63 73 73 28 22 6f 70 61 63 69 74 79 22 29 29 7b 61 6b 2e Data Ascii: 00002F5E.css("cursor",ak.cursor)},stop:function(ah,ai,ag){var aj=ag.options;if(aj._cursor){K("body").css("cursor",aj._cursor)}}});K.ui.plugin.add("draggable","opacity",{start:function(ai,aj,ag){var ah=K(aj.helper),ak=ag.options;if(ah.css("opacity")){ak.
2025-01-14 23:26:29 UTC	102	IN	Data Raw: 30 30 30 30 30 30 35 41 0d 0a 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 0d 0a Data Ascii: 0000005ACopyright jQuery Foundation and other contributors * Released under the MIT license. * h
2025-01-14 23:26:29 UTC	3900	IN	Data Raw: 30 30 30 30 30 46 33 30 0d 0a 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 4b 2e 77 69 64 67 65 74 28 22 75 69 2e 72 65 73 69 7a 61 62 6c 65 22 2c 4b 2e 75 69 2e 6d 6f 75 73 65 2c 7b 76 65 72 73 69 6f 6e 3a 22 31 2e 31 32 2e 31 22 2c 77 69 64 67 65 74 45 76 65 6e 74 50 72 65 66 69 78 3a 22 72 65 73 69 7a 65 22 2c 6f 70 74 69 6f 6e 73 3a 7b 61 6c 73 6f 52 65 73 69 7a 65 3a 66 61 6c 73 65 2c 61 6e 69 6d 61 74 65 3a 66 61 6c 73 65 2c 61 6e 69 6d 61 74 65 44 75 72 61 74 69 6f 6e 3a 22 73 6c 6f 77 22 2c 61 6e 69 6d 61 74 65 45 61 73 69 6e 67 3a 22 73 77 69 6e 67 22 2c 61 73 70 65 63 74 52 61 74 69 6f 3a 66 61 6c 73 65 2c 61 75 74 6f 48 69 64 65 3a 66 61 6c 73 65 2c 63 6c 61 73 73 65 73 3a 7b 22 75 69 2d 72 65 73 69 7a Data Ascii: 00000F30ttp://jquery.org/license */K.widget("ui.resizable",K.ui.mouse,{version:"1.12.1",widgetEventPrefix:"resize",options:{alsoResize:false,animate:false,animateDuration:"slow",animateEasing:"swing",aspectRatio:false,autoHide:false,classes:{"ui-resiz
2025-01-14 23:26:29 UTC	102	IN	Data Raw: 30 30 30 30 30 30 35 41 0d 0a 72 73 74 28 29 2e 73 68 6f 77 28 29 7d 65 6c 73 65 7b 69 66 28 74 68 69 73 2e 68 61 6e 64 6c 65 73 5b 61 6f 5d 2e 6a 71 75 65 72 79 7c 7c 74 68 69 73 2e 68 61 6e 64 6c 65 73 5b 61 6f 5d 2e 6e 6f 64 65 54 79 70 65 29 7b 74 68 69 73 2e 68 61 6e 64 6c 65 73 5b 61 6f 5d 3d 0d 0a Data Ascii: 0000005Arst().show()}else{if(this.handles[ao].jquery\|\|this.handles[ao].nodeType){this.handles[ao]=
2025-01-14 23:26:29 UTC	16	IN	Data Raw: 30 30 30 30 30 30 30 34 0d 0a 4b 28 74 68 0d 0a Data Ascii: 00000004K(th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49725	201.46.113.120	443	3364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 23:26:29 UTC	415	OUT	GET /lblogin/login_advisory.jpg HTTP/1.1 Host: www.giselabravo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ombc6d1oenbcoel3kf6276ivqq
2025-01-14 23:26:29 UTC	374	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 14 Jan 2025 23:26:29 GMT Content-Type: image/jpeg Content-Length: 195728 Last-Modified: Sun, 07 Jan 2024 13:13:06 GMT Connection: close Vary: Accept-Encoding ETag: "659aa362-2fc90" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2025-01-14 23:26:29 UTC	16010	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 03 90 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 31 34 36 32 38 39 39 37 37 37 2c 20 32 30 32 33 2f 30 36 2f 32 35 2d 32 33 3a 35 37 3a 31 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: ExifII*DuckyPhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RD
2025-01-14 23:26:29 UTC	16384	IN	Data Raw: 8e fc be 3b bf af 7d d3 dc f4 3e 71 e5 fb 8c cf 3f e8 ac 77 7c 6f 47 bf c3 d7 37 3a f1 b3 d9 fd 2b f8 bc f2 af 23 49 0c ed 63 d0 a5 ee 9c 7a 87 27 d0 59 f4 39 74 a8 f3 64 b3 5d ce dc f3 9f 4b b5 ac 8e 7b dd 73 df ec b6 e7 7c a5 f7 e9 83 e5 c7 2e d4 f1 2c 78 46 45 f5 6c e7 3a 5d 8b ba 98 94 42 e5 a4 8f 4e 3c f7 8e 76 9e 8a e0 f0 d5 e8 5e 22 f6 de 3d 79 df 3d 46 bd e4 56 2f 59 cc eb 9d 17 ce db 72 af 26 7e 95 d1 3c fd fb ef ab 7d eb ba d0 95 d3 91 da 9a 55 34 bc 7b 3d 20 5d 95 aa db 63 ae 72 91 6c 3d 6b e3 f3 ad fd f1 c8 02 3f a7 cd c7 d3 9c 59 f5 b7 8e fb 3f 4b e9 7c 3a 27 22 7d 27 e7 ad b9 f5 2b d7 60 a5 b8 b7 ad e5 e3 4c 74 3e 4e ae 79 d7 cb d6 7c ff 00 42 c6 77 f1 0f a5 f0 de 76 2f 53 e6 cd f9 e0 6d 5e 67 cd d3 8d 0c 0f 43 9e 37 d1 e5 d8 be 7b d2 cc c6 Data Ascii: ;}>q?w\|oG7:+#Icz'Y9td]K{s\|.,xFEl:]BN<v^"=y=FV/Yr&~<}U4{= ]crl=k?Y?K\|:'"}'+`Lt>Ny\|Bwv/Sm^gC7{
2025-01-14 23:26:29 UTC	16384	IN	Data Raw: da a3 3c 6f 3f 1e 13 48 72 dd 32 e1 26 4b 2d b6 d5 e3 33 ce 3a 86 db 6b 70 b9 ac 93 25 25 af 2c d9 b3 62 4a 6e 41 3c 99 f7 94 c1 52 37 0b 4a 52 5c 42 d0 1d b9 43 61 d6 54 95 b5 a8 ae 06 ba 05 65 39 4e e8 a5 be e9 29 49 3c a2 52 8d c5 07 3c d5 59 06 92 b5 11 3c a2 41 ad b0 c3 87 9c 91 29 61 50 de 24 44 8c 87 c6 e6 61 b6 e6 34 f1 21 b5 bf 9d 29 79 49 49 ba b5 0c ea 22 cc 66 19 f5 0f a9 3e f1 07 1e 71 e2 4d c5 d2 12 65 f7 0d b7 3d 82 44 d7 da 79 b9 9d 71 6c 2b a5 8f e8 99 f3 35 e8 5f 7e e9 c8 5f 92 c5 f4 0c 79 19 f4 6e df 73 0f 1d 5c e1 64 c2 7d 3b 6f d3 35 e9 b5 e8 5d 7e e5 12 3f 74 f4 38 8a 86 85 28 c2 8d 21 5a 61 2c b6 66 fa fb 14 c3 d2 93 35 2d 47 6c 94 a2 0a 58 37 0c 20 d2 67 70 3d 24 66 f9 fd e2 09 11 de e3 03 be a4 7b e3 a0 82 93 98 92 bc b8 19 1a 0c Data Ascii: <o?Hr2&K-3:kp%%,bJnA<R7JR\BCaTe9N)I<R<Y<A)aP$Da4!)yII"f>qMe=Dyql+5_~_yns\d};o5]~?t8(!Za,f5-GlX7 gp=$f{
2025-01-14 23:26:29 UTC	16384	IN	Data Raw: 07 82 cf c6 b5 0a 3c 11 5a a9 34 c5 ce a9 c0 fa 72 6a 2b c1 fd 8d 43 30 4e 04 40 ca a2 9c 15 c2 b8 e5 06 42 82 82 83 28 a7 01 60 9c 4f 02 1a 63 4c 2d 35 1a 61 25 42 c0 81 60 7c 1a ca 48 6e 49 a4 b8 0b 81 35 a9 50 15 07 ca 3e 41 54 09 19 72 a0 aa 7e 20 aa 3c 47 cc 2a a1 29 54 40 cc 62 b8 91 8c fc da f8 e5 f8 74 45 5a 90 db 2b 70 b1 c9 50 58 10 a0 57 89 91 85 78 e0 9e b8 53 0a 54 7f 62 c3 c4 19 62 be a5 d0 7f 6c 0c c8 f0 2e 33 3c 4c c5 05 02 78 2b c5 4c 73 03 31 5e 15 03 59 8c c6 10 78 27 13 c0 81 e0 ef 50 df 97 02 05 81 f0 2d 21 bc b9 96 64 66 45 51 da 28 76 4b 05 0d 63 b1 70 76 4e 07 23 29 05 19 ac e6 08 87 88 f1 06 26 2c b2 c5 6b 31 fc c2 8a 14 50 ca b0 79 c4 c7 55 85 0c 13 40 d9 19 0f 14 1f 05 41 61 5c 0c c5 46 6c 08 c1 ab 12 f1 19 7c 0f c0 11 19 8d 17 Data Ascii: <Z4rj+C0N@B(`OcL-5a%B`\|HnI5P>ATr~ <G*)T@btEZ+pPXWxSTbbl.3<Lx+Ls1^Yx'P-!dfEQ(vKcpvN#)&,k1PyU@Aa\Fl\|
2025-01-14 23:26:29 UTC	16384	IN	Data Raw: b8 c7 fa c9 bf c4 b8 97 fa 2f ff 00 70 2e 13 fe 95 ff 00 e3 5c 2b fd 6c 1f e3 0b 8d 7f a2 b9 ff 00 c3 72 0b 88 b9 bd e6 dc c8 5a 3a 43 02 73 dc 4b 9e f7 17 3d c7 32 49 57 ae e3 e6 13 77 1c 9e ce 3b 87 e8 6e ea 99 b7 11 5c 55 e3 b8 4c 5b 9e 1b bc a5 a3 31 ee 8d b8 f3 ae 19 d5 27 f8 55 8f fa d6 ff 00 81 c9 dd 4b 85 ff 00 a5 83 fc 01 71 1f f5 53 7f 8c ae 2f fe 9e 3f f1 15 0f 13 6b 3d 85 f4 61 8f 93 fe d1 9b 0f 89 5a 71 18 31 92 d5 e1 da 7d 21 b5 be 35 bc b6 b6 b8 7d f3 9b d9 b6 7b 40 6b 5d fa ce ae 48 47 c6 62 17 f6 f5 c6 78 c0 6c ad f1 64 e5 25 ed be ad cd c9 82 48 b5 0d 26 85 dc dc 9c 3f 74 e2 dd ec 31 c7 29 18 76 4b ca 34 cf 60 51 5e ce db 7b 9b 9d c5 5e 1c f7 6f 8c d4 c4 69 07 9d 56 94 ae c5 c5 fe f5 9f 42 ba fb 88 7e 85 c0 ff 00 d6 c5 f4 f2 b3 e1 24 dd Data Ascii: /p.\+lrZ:CsK=2IWw;n\UL[1'UKqS/?k=aZq1}!5}{@k]HGbxld%H&?t1)vK4`Q^{^oiVB~$
2025-01-14 23:26:29 UTC	16384	IN	Data Raw: f6 24 22 8b 4f 9d b1 35 bd 69 8e 7c 6e 65 b3 4d 5e f7 61 5e 80 9e 5a ca 10 30 52 17 d3 c6 99 bb 78 7e 98 c5 74 f2 e1 8a ee a1 41 87 3a d2 15 3b ce e6 5d d0 a8 7b 2e f0 8f 83 27 4e 3c bf 0d 70 e3 25 94 b8 1a e6 ce 90 9c f6 9d 4d 73 01 69 e4 2f 93 bb 4a 29 24 37 52 56 43 a8 a0 7e 2e 4e c9 aa 8a 49 6e 1e c3 0b 74 34 05 f8 b9 13 ec ed a5 74 9a 8d 6a 79 1c a0 fb b5 3f aa a4 f1 2b 9e 47 f5 f2 37 d6 43 f5 b1 0a 2f 55 13 6e 1f a8 66 58 ad b7 83 da 6e db aa a3 1a ac 1b f3 2c 19 f3 2c 19 f3 26 b9 d1 d1 ae ee 9a 2d 33 e9 06 99 39 45 3e ec ee b1 a3 97 75 60 83 35 62 fc fe 41 a0 cc 23 20 d0 ea 46 92 07 86 ed 05 08 9b 5d 6d 7e 35 e8 f0 9c 46 31 e4 14 98 f5 2a c8 74 b6 46 d0 d5 48 c9 24 de ca 49 a3 59 8a a5 bc 01 95 f3 dc 8e fa e0 9f d5 19 26 e4 71 0a e7 20 04 4c cb a9 Data Ascii: $"O5i\|neM^a^Z0Rx~tA:;]{.'N<p%Msi/J)$7RVC~.NInt4tjy?+G7C/UnfXn,,&-39E>u`5bA# F]m~5F1*tFH$IY&q L
2025-01-14 23:26:29 UTC	16384	IN	Data Raw: ab 84 8d 9b a0 56 54 f0 7a 51 96 35 0c 27 1d c3 79 21 b4 d0 dc 16 11 ed dc 0f 94 43 c5 02 b1 23 c0 94 38 99 65 1b 0b cd cf dc 7c 43 26 3b 3a b5 17 1d dd 89 9e 09 ca f8 b7 b5 c7 bc cd a5 11 6a 8f 25 27 00 f7 8e 8d c4 8c 9c a0 58 ab f3 2e c3 d4 e4 ec 24 d9 e2 33 e3 dd bf f0 90 d1 aa c6 2a bc c6 58 42 30 f7 7b 42 2c 27 30 36 82 6e 7d dc d8 3d d0 4b 77 16 da f1 3e 69 10 e2 59 e0 a3 5a a8 32 28 a5 8a b8 d6 4b 69 e2 11 5d 5f 22 5f 4b 8b 47 bc af fd 23 41 8e 50 c0 0c 04 d1 eb 08 f1 3f 37 ef 1c 02 de 2e d6 63 a2 2a a2 8d 96 5d 3d ce 80 15 00 ec 0c be f1 00 80 0a 42 c4 ec 90 26 a2 00 1e c7 13 0e 12 c7 63 01 6c 26 aa c0 ba 38 94 5d d2 98 29 9a ed 73 68 3d 91 f6 45 ca 2d a1 6d d7 3f 58 83 b0 a6 4b 2e 9e f0 34 1c da 56 7e 50 20 6f 44 07 d0 80 00 03 40 a0 f9 11 6b ee Data Ascii: VTzQ5'y!C#8e\|C&;:j%'X.$3XB0{B,'06n}=Kw>iYZ2(Ki]_"_KG#AP?7.c]=B&cl&8])sh=E-m?XK.4V~P oD@k
2025-01-14 23:26:29 UTC	16384	IN	Data Raw: e5 fa 01 5d 14 b9 7d 1f fd 31 7f a3 5f bc 7b 38 bf 55 fa 2d f4 5f 41 1a 62 99 6c f3 75 0b c1 05 13 a5 7f e0 2f d0 12 ba 3d 17 d0 25 74 3d 4e 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 98 e9 49 62 57 f4 0e bf 78 80 ec 65 ac 22 79 b3 cd 9e 6c f3 67 9b 3c d9 e6 cf 36 79 b3 cd 9e 6c f3 67 9b 3c d9 e6 cf 36 79 b3 cd 9e 6c f3 67 3e be 7a ba ff 00 c0 54 a8 46 0c be b5 d1 70 65 f4 65 4a 8f fe 79 2a 57 4a 7a aa 23 52 bf 6b 67 ef b5 11 a9 5f b5 3a 2f e8 2e 5f a2 ba df 4a 81 13 ff 00 55 99 52 a5 7a b4 e9 b7 ed 0b ca 7a 3b fd e6 9f b4 d7 41 15 d1 25 7a d5 2a 54 61 2f a3 d5 70 65 f4 7d 15 2b a5 4a 95 2d 2d 2d 2d 2d 2d 2d 2d 2a 54 a9 52 a5 a5 a5 a5 a5 a5 a5 a5 a5 4a 95 2a 54 b4 b4 Data Ascii: ]}1_{8U-_Ablu/=%t=NIbWxe"ylg<6ylg<6ylg>zTFpeeJyWJz#Rkg_:/._JURzz;A%zTa/pe}+J--------TRJT
2025-01-14 23:26:29 UTC	16384	IN	Data Raw: 1d 6d 9f fd e2 43 46 c6 96 65 25 db c1 69 dd 59 f9 65 fa 5f 97 6e 91 6b 48 0a 4c 3c 04 f6 41 04 6c 81 44 18 00 00 00 0c 71 6e 2d e4 eb 98 cf 93 66 d0 03 8e 4f 8a a1 7c fc 57 27 73 c0 50 7b 7e c2 43 4c a6 d0 65 25 4d 84 a9 dd 58 7d 88 00 9c 40 5a f0 db 41 20 0e 81 80 f0 41 ca 13 6d b4 0c e1 7e 03 04 07 ae 6d cf 17 43 70 2f b7 74 69 0d 96 48 e3 d2 a0 a7 60 81 ca e8 e4 a3 a2 43 4f df 6c 65 25 88 f4 a9 9d 59 96 2f 46 54 88 dc 3c 5d ab 24 94 8c 16 75 c3 36 d8 ed 8c 61 21 87 07 40 3b e9 61 32 41 36 32 f2 36 de a5 ff 00 9c 69 de 6b d8 ed d8 f7 9a 2b 2d 9e e2 43 4d 4c 70 65 25 89 0e 4a 9e 62 7c 7c 87 f1 44 3b 05 ea d8 10 1c 50 54 80 48 f3 cb 62 d3 cd a6 43 2e 61 78 77 c0 a2 15 f4 9a bd 45 2e d0 e5 6e 89 28 44 68 40 9f 8b 3b 99 2d ec d2 43 4f 62 f8 65 25 8b df d9 Data Ascii: mCFe%iYe_nkHL<AlDqn-fO\|W'sP{~CLe%MX}@ZA Am~mCp/tiH`COle%Y/FT<]$u6a!@;a2A626ik+-CMLpe%Jb\|\|D;PTHbC.axwE.n(Dh@;-CObe%
2025-01-14 23:26:29 UTC	16384	IN	Data Raw: f5 b6 d2 b5 28 4a da 84 b4 57 37 1c ef 2c 40 d5 d5 62 00 ca 50 a0 e7 09 55 93 5c 03 60 6b 02 07 79 f6 b0 b6 4a cd 5c cf b9 fe 0b 06 b8 85 e6 0c 36 1a ba ac d4 a8 e8 a0 4a ae 3e 52 a8 00 7a 80 61 5c c7 5d 57 49 ed 63 53 6f 73 e2 c4 f8 0b f8 9f 01 7f 13 e0 2f e2 7c 05 fc 4f 80 bf 89 f0 17 f1 1e 1f 8a f1 16 04 a7 04 47 e9 33 0a 78 c3 c3 50 73 2a c2 81 f0 93 c3 fa 27 8d f4 4f 0f e8 96 ce b0 a0 93 28 8b 6d 19 fb 47 b6 11 08 68 a1 db 51 54 8b 50 1f 59 85 61 f1 ab ff 00 02 8b ba cb b7 aa f8 2e 0e 97 35 2a 13 8a d0 4a e2 4b 05 0f ca a8 d5 10 9d 74 9e 67 26 03 6b 83 24 25 83 25 64 14 c2 b6 04 2b 5a f2 8c 95 0c 34 41 92 4c 28 ab c7 96 98 62 59 42 5d e0 93 92 b7 79 86 4c 8a 8f c8 56 57 17 b7 96 2b 50 40 46 83 e4 08 08 d5 d4 ad be 1d 41 80 a8 34 ac 61 34 75 48 26 00 Data Ascii: (JW7,@bPU\`kyJ\6J>Rza\]WIcSos/\|OG3xPs'O(mGhQTPYa.5JKtg&k$%%d+Z4AL(bYB]yLVW+P@FA4a4uH&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49727	104.102.53.18	443	3364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 23:26:30 UTC	575	OUT	GET /javax.faces.resource/core.js.xhtml?ln=primefaces&v=8.0 HTTP/1.1 Host: www.lbpiaccess.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.giselabravo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 23:26:31 UTC	501	IN	HTTP/1.1 200 OK Content-Type: text/javascript Expires: Tue, 21 Jan 2025 23:26:30 GMT Last-Modified: Thu, 05 Mar 2020 02:53:08 GMT ETag: W/"43094-1583376788000" Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-ORACLE-DMS-RID: 0 X-Content-Type-Options: nosniff X-ORACLE-DMS-ECID: d51cf803-2cfa-4f0d-b979-dc64dc3b274a-00354584 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Content-Length: 43094 Date: Tue, 14 Jan 2025 23:26:31 GMT Connection: close
2025-01-14 23:26:31 UTC	1350	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 42 72 6f 77 73 65 72 20 50 6c 75 67 69 6e 20 30 2e 31 2e 30 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 67 61 62 63 65 62 2f 6a 71 75 65 72 79 2d 62 72 6f 77 73 65 72 2d 70 6c 75 67 69 6e 0a 20 2a 0a 20 2a 20 4f 72 69 67 69 6e 61 6c 20 6a 71 75 65 72 79 2d 62 72 6f 77 73 65 72 20 63 6f 64 65 20 43 6f 70 79 72 69 67 68 74 20 32 30 30 35 2c 20 32 30 31 35 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 4d 6f 64 69 66 69 63 61 74 69 6f 6e 73 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 35 20 47 61 Data Ascii: /! jQuery Browser Plugin 0.1.0 * https://github.com/gabceb/jquery-browser-plugin * * Original jquery-browser code Copyright 2005, 2015 jQuery Foundation, Inc. and other contributors * http://jquery.org/license * * Modifications Copyright 2015 Ga
2025-01-14 23:26:31 UTC	14336	IN	Data Raw: 2e 65 78 65 63 28 64 29 7c 7c 2f 28 6d 61 63 29 2f 2e 65 78 65 63 28 64 29 7c 7c 2f 28 6c 69 6e 75 78 29 2f 2e 65 78 65 63 28 64 29 7c 7c 2f 28 63 72 6f 73 29 2f 2e 65 78 65 63 28 64 29 7c 7c 2f 28 70 6c 61 79 62 6f 6f 6b 29 2f 2e 65 78 65 63 28 64 29 7c 7c 2f 28 62 62 29 2f 2e 65 78 65 63 28 64 29 7c 7c 2f 28 62 6c 61 63 6b 62 65 72 72 79 29 2f 2e 65 78 65 63 28 64 29 7c 7c 5b 5d 3b 76 61 72 20 6b 3d 7b 7d 2c 65 3d 7b 62 72 6f 77 73 65 72 3a 6a 5b 35 5d 7c 7c 6a 5b 33 5d 7c 7c 6a 5b 31 5d 7c 7c 22 22 2c 76 65 72 73 69 6f 6e 3a 6a 5b 32 5d 7c 7c 6a 5b 34 5d 7c 7c 22 30 22 2c 76 65 72 73 69 6f 6e 4e 75 6d 62 65 72 3a 6a 5b 34 5d 7c 7c 6a 5b 32 5d 7c 7c 22 30 22 2c 70 6c 61 74 66 6f 72 6d 3a 69 5b 30 5d 7c 7c 22 22 7d 3b 69 66 28 65 2e 62 72 6f 77 73 65 72 Data Ascii: .exec(d)\|\|/(mac)/.exec(d)\|\|/(linux)/.exec(d)\|\|/(cros)/.exec(d)\|\|/(playbook)/.exec(d)\|\|/(bb)/.exec(d)\|\|/(blackberry)/.exec(d)\|\|[];var k={},e={browser:j[5]\|\|j[3]\|\|j[1]\|\|"",version:j[2]\|\|j[4]\|\|"0",versionNumber:j[4]\|\|j[2]\|\|"0",platform:i[0]\|\|""};if(e.browser
2025-01-14 23:26:31 UTC	8890	IN	Data Raw: 74 72 28 22 6d 65 74 68 6f 64 22 29 3d 3d 3d 22 70 6f 73 74 22 29 7b 76 61 72 20 66 3d 63 2e 63 68 69 6c 64 72 65 6e 28 22 69 6e 70 75 74 5b 6e 61 6d 65 3d 27 22 2b 24 2e 65 73 63 61 70 65 53 65 6c 65 63 74 6f 72 28 68 2b 62 29 2b 22 27 5d 22 29 3b 69 66 28 66 2e 6c 65 6e 67 74 68 3e 30 29 7b 66 2e 76 61 6c 28 65 29 7d 65 6c 73 65 7b 63 2e 61 70 70 65 6e 64 28 27 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 27 2b 68 2b 62 2b 27 22 20 76 61 6c 75 65 3d 22 27 2b 65 2b 27 22 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 6f 66 66 22 20 2f 3e 27 29 7d 7d 7d 7d 2c 75 70 64 61 74 65 48 65 61 64 3a 66 75 6e 63 74 69 6f 6e 28 64 29 7b 76 61 72 20 62 3d 24 2e 61 6a 61 78 53 65 74 75 70 28 29 5b 22 63 61 63 68 65 22 5d 3b 24 2e 61 Data Ascii: tr("method")==="post"){var f=c.children("input[name='"+$.escapeSelector(h+b)+"']");if(f.length>0){f.val(e)}else{c.append('<input type="hidden" name="'+h+b+'" value="'+e+'" autocomplete="off" />')}}}},updateHead:function(d){var b=$.ajaxSetup()["cache"];$.a
2025-01-14 23:26:31 UTC	16384	IN	Data Raw: 65 73 2e 56 49 45 57 5f 53 54 41 54 45 2b 22 27 5d 22 29 3b 69 66 28 61 26 26 61 2e 6c 65 6e 67 74 68 3e 30 29 7b 76 61 72 20 62 3d 61 5b 30 5d 2e 6e 61 6d 65 3b 69 66 28 62 2e 6c 65 6e 67 74 68 3e 50 72 69 6d 65 46 61 63 65 73 2e 56 49 45 57 5f 53 54 41 54 45 2e 6c 65 6e 67 74 68 29 7b 72 65 74 75 72 6e 20 62 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 62 2e 69 6e 64 65 78 4f 66 28 50 72 69 6d 65 46 61 63 65 73 2e 56 49 45 57 5f 53 54 41 54 45 29 29 7d 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 61 72 72 61 79 43 6f 6d 70 61 72 65 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 24 2e 65 61 63 68 28 62 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 63 29 7b 61 3d 24 2e 67 72 65 70 28 61 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 66 29 7b 69 66 28 65 2e 6e 61 6d 65 3d 3d 3d 63 2e 6e Data Ascii: es.VIEW_STATE+"']");if(a&&a.length>0){var b=a[0].name;if(b.length>PrimeFaces.VIEW_STATE.length){return b.substring(0,b.indexOf(PrimeFaces.VIEW_STATE))}}return null},arrayCompare:function(b,a){$.each(b,function(d,c){a=$.grep(a,function(e,f){if(e.name===c.n
2025-01-14 23:26:31 UTC	2134	IN	Data Raw: 3d 31 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 69 66 28 21 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 29 7b 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 29 7b 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 66 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 61 20 52 65 67 45 78 70 22 29 7d 69 66 28 62 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 62 3d 30 7d 72 65 74 75 72 6e 20 74 68 69 73 2e 69 6e 64 65 78 4f 66 28 61 2c 62 29 21 3d 3d 2d 31 7d 7d 3b 0a 50 72 69 6d 65 46 61 63 65 73 2e 77 69 64 67 65 74 2e 41 6a 61 78 53 74 61 74 75 73 3d 50 72 69 6d Data Ascii: =1);return null}}if(!String.prototype.includes){String.prototype.includes=function(a,b){if(a instanceof RegExp){throw TypeError("first argument must not be a RegExp")}if(b===undefined){b=0}return this.indexOf(a,b)!==-1}};PrimeFaces.widget.AjaxStatus=Prim

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49734	104.102.53.18	443	3364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 23:26:30 UTC	581	OUT	GET /javax.faces.resource/components.js.xhtml?ln=primefaces&v=8.0 HTTP/1.1 Host: www.lbpiaccess.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.giselabravo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 23:26:31 UTC	539	IN	HTTP/1.1 200 OK Content-Type: text/javascript Expires: Tue, 21 Jan 2025 23:26:30 GMT Last-Modified: Thu, 05 Mar 2020 02:53:08 GMT ETag: W/"434646-1583376788000" Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-ORACLE-DMS-RID: 0 X-Content-Type-Options: nosniff X-ORACLE-DMS-ECID: d51cf803-2cfa-4f0d-b979-dc64dc3b274a-00354585 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Date: Tue, 14 Jan 2025 23:26:31 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2025-01-14 23:26:31 UTC	15845	IN	Data Raw: 30 30 30 30 39 46 46 36 0d 0a 69 66 28 21 50 72 69 6d 65 46 61 63 65 73 2e 64 69 61 6c 6f 67 29 7b 50 72 69 6d 65 46 61 63 65 73 2e 64 69 61 6c 6f 67 3d 7b 7d 3b 50 72 69 6d 65 46 61 63 65 73 2e 64 69 61 6c 6f 67 2e 44 69 61 6c 6f 67 48 61 6e 64 6c 65 72 3d 7b 6f 70 65 6e 44 69 61 6c 6f 67 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 76 61 72 20 68 3d 74 68 69 73 2e 66 69 6e 64 52 6f 6f 74 57 69 6e 64 6f 77 28 29 2c 6c 3d 66 2e 73 6f 75 72 63 65 43 6f 6d 70 6f 6e 65 6e 74 49 64 2b 22 5f 64 6c 67 22 3b 69 66 28 68 2e 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 6c 29 29 7b 72 65 74 75 72 6e 7d 76 61 72 20 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 76 3d 77 69 6e 64 6f 77 3b 76 61 72 20 78 3d 5b 5d 3b 77 68 69 6c 65 28 76 2e 66 Data Ascii: 00009FF6if(!PrimeFaces.dialog){PrimeFaces.dialog={};PrimeFaces.dialog.DialogHandler={openDialog:function(f){var h=this.findRootWindow(),l=f.sourceComponentId+"_dlg";if(h.document.getElementById(l)){return}var k=function(){var v=window;var x=[];while(v.f
2025-01-14 23:26:31 UTC	15825	IN	Data Raw: 6f 6d 70 6c 65 74 65 2d 69 6e 70 75 74 2d 74 6f 6b 65 6e 22 29 3b 74 68 69 73 2e 6d 75 6c 74 69 49 74 65 6d 43 6f 6e 74 61 69 6e 65 72 2e 68 6f 76 65 72 28 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 74 68 69 73 29 2e 61 64 64 43 6c 61 73 73 28 22 75 69 2d 73 74 61 74 65 2d 68 6f 76 65 72 22 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 74 68 69 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 75 69 2d 73 74 61 74 65 2d 68 6f 76 65 72 22 29 7d 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 69 6e 70 75 74 2e 66 6f 63 75 73 28 29 7d 29 3b 74 68 69 73 2e 69 6e 70 75 74 2e 66 6f 63 75 73 28 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 6d 75 6c 74 69 49 74 65 6d 43 6f 6e 74 61 69 6e 65 72 2e 61 64 64 43 6c 61 73 73 28 22 75 69 2d 73 74 61 74 65 2d 66 6f Data Ascii: omplete-input-token");this.multiItemContainer.hover(function(){$(this).addClass("ui-state-hover")},function(){$(this).removeClass("ui-state-hover")}).click(function(){b.input.focus()});this.input.focus(function(){b.multiItemContainer.addClass("ui-state-fo
2025-01-14 23:26:31 UTC	9292	IN	Data Raw: 68 69 73 2e 63 66 67 2e 62 6c 6f 63 6b 65 64 29 7b 74 68 69 73 2e 73 68 6f 77 28 29 7d 74 68 69 73 2e 72 65 6d 6f 76 65 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 28 74 68 69 73 2e 69 64 29 7d 2c 72 65 66 72 65 73 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 62 6c 6f 63 6b 65 72 2e 72 65 6d 6f 76 65 28 29 3b 74 68 69 73 2e 62 6c 6f 63 6b 2e 63 68 69 6c 64 72 65 6e 28 22 2e 75 69 2d 62 6c 6f 63 6b 75 69 2d 63 6f 6e 74 65 6e 74 22 29 2e 72 65 6d 6f 76 65 28 29 3b 24 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 66 66 28 22 70 66 41 6a 61 78 53 65 6e 64 2e 22 2b 74 68 69 73 2e 69 64 2b 22 20 70 66 41 6a 61 78 43 6f 6d 70 6c 65 74 65 2e 22 2b 74 68 69 73 2e 69 64 29 3b 74 68 69 73 2e 5f 73 75 70 65 72 28 61 29 7d 2c 62 69 6e 64 54 72 69 67 67 65 72 73 3a 66 75 Data Ascii: his.cfg.blocked){this.show()}this.removeScriptElement(this.id)},refresh:function(a){this.blocker.remove();this.block.children(".ui-blockui-content").remove();$(document).off("pfAjaxSend."+this.id+" pfAjaxComplete."+this.id);this._super(a)},bindTriggers:fu
2025-01-14 23:26:31 UTC	3854	IN	Data Raw: 30 30 30 30 30 46 30 32 0d 0a 69 73 2e 73 74 61 74 65 4b 65 79 3d 22 63 61 72 6f 75 73 65 6c 2d 22 2b 74 68 69 73 2e 69 64 3b 74 68 69 73 2e 72 65 73 74 6f 72 65 53 74 61 74 65 28 29 7d 74 68 69 73 2e 72 65 6e 64 65 72 44 65 66 65 72 72 65 64 28 29 7d 2c 5f 72 65 6e 64 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 75 70 64 61 74 65 4e 61 76 69 67 61 74 6f 72 73 28 29 3b 74 68 69 73 2e 62 69 6e 64 45 76 65 6e 74 73 28 29 3b 69 66 28 74 68 69 73 2e 63 66 67 2e 76 65 72 74 69 63 61 6c 29 7b 74 68 69 73 2e 63 61 6c 63 75 6c 61 74 65 49 74 65 6d 48 65 69 67 68 74 73 28 29 7d 65 6c 73 65 7b 69 66 28 74 68 69 73 2e 63 66 67 2e 72 65 73 70 6f 6e 73 69 76 65 29 7b 74 68 69 73 2e 72 65 66 72 65 73 68 44 69 6d 65 6e 73 69 6f 6e 73 28 29 7d 65 6c 73 65 7b Data Ascii: 00000F02is.stateKey="carousel-"+this.id;this.restoreState()}this.renderDeferred()},_render:function(){this.updateNavigators();this.bindEvents();if(this.cfg.vertical){this.calculateItemHeights()}else{if(this.cfg.responsive){this.refreshDimensions()}else{
2025-01-14 23:26:31 UTC	106	IN	Data Raw: 30 30 30 30 30 30 35 45 0d 0a 2e 65 61 73 69 6e 67 3b 74 68 69 73 2e 69 74 65 6d 73 43 6f 6e 74 61 69 6e 65 72 2e 61 6e 69 6d 61 74 65 28 61 2c 7b 64 75 72 61 74 69 6f 6e 3a 74 68 69 73 2e 63 66 67 2e 65 66 66 65 63 74 44 75 72 61 74 69 6f 6e 2c 65 61 73 69 6e 67 3a 74 68 69 73 2e 63 66 67 2e 65 61 73 69 6e 67 0d 0a Data Ascii: 0000005E.easing;this.itemsContainer.animate(a,{duration:this.cfg.effectDuration,easing:this.cfg.easing
2025-01-14 23:26:31 UTC	102	IN	Data Raw: 30 30 30 30 30 30 35 41 0d 0a 2c 63 6f 6d 70 6c 65 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 70 61 67 65 3d 63 3b 62 2e 66 69 72 73 74 3d 62 2e 70 61 67 65 2a 62 2e 63 6f 6c 75 6d 6e 73 3b 62 2e 75 70 64 61 74 65 4e 61 76 69 67 61 74 6f 72 73 28 29 3b 62 2e 73 74 61 74 65 68 6f 6c 64 65 72 2e 0d 0a Data Ascii: 0000005A,complete:function(){b.page=c;b.first=b.page*b.columns;b.updateNavigators();b.stateholder.
2025-01-14 23:26:31 UTC	8066	IN	Data Raw: 30 30 30 30 31 46 37 36 0d 0a 76 61 6c 28 62 2e 70 61 67 65 29 3b 69 66 28 62 2e 63 66 67 2e 73 74 61 74 65 66 75 6c 29 7b 62 2e 73 61 76 65 53 74 61 74 65 28 29 7d 7d 7d 29 7d 7d 2c 73 74 61 72 74 41 75 74 6f 70 6c 61 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 3b 74 68 69 73 2e 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 61 2e 70 61 67 65 3d 3d 3d 28 61 2e 74 6f 74 61 6c 50 61 67 65 73 2d 31 29 29 7b 61 2e 73 65 74 50 61 67 65 28 30 29 7d 65 6c 73 65 7b 61 2e 73 65 74 50 61 67 65 28 61 2e 70 61 67 65 2b 31 29 7d 7d 2c 74 68 69 73 2e 63 66 67 2e 61 75 74 6f 70 6c 61 79 49 6e 74 65 72 76 61 6c 29 7d 2c 73 74 6f 70 41 75 74 6f 70 6c 61 79 3a 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: 00001F76val(b.page);if(b.cfg.stateful){b.saveState()}}})}},startAutoplay:function(){var a=this;this.interval=setInterval(function(){if(a.page===(a.totalPages-1)){a.setPage(0)}else{a.setPage(a.page+1)}},this.cfg.autoplayInterval)},stopAutoplay:function()
2025-01-14 23:26:31 UTC	102	IN	Data Raw: 30 30 30 30 30 30 35 41 0d 0a 22 29 3b 24 28 50 72 69 6d 65 46 61 63 65 73 2e 65 73 63 61 70 65 43 6c 69 65 6e 74 49 64 28 62 2e 61 74 74 72 28 22 69 64 22 29 2b 22 5f 63 6c 6f 6e 65 22 29 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 75 69 2d 68 65 6c 70 65 72 2d 68 69 64 64 65 6e 22 29 3b 64 2e 63 0d 0a Data Ascii: 0000005A");$(PrimeFaces.escapeClientId(b.attr("id")+"_clone")).removeClass("ui-helper-hidden");d.c
2025-01-14 23:26:31 UTC	16296	IN	Data Raw: 30 30 30 30 33 46 39 43 0d 0a 68 69 6c 64 72 65 6e 28 22 74 72 22 29 2e 66 69 6e 64 28 22 74 64 3a 6e 74 68 2d 63 68 69 6c 64 28 22 2b 65 2b 22 29 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 75 69 2d 68 65 6c 70 65 72 2d 68 69 64 64 65 6e 22 29 3b 68 2e 63 68 69 6c 64 72 65 6e 28 22 74 72 22 29 2e 66 69 6e 64 28 22 74 64 3a 6e 74 68 2d 63 68 69 6c 64 28 22 2b 65 2b 22 29 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 75 69 2d 68 65 6c 70 65 72 2d 68 69 64 64 65 6e 22 29 3b 69 66 28 74 68 69 73 2e 68 61 73 46 72 6f 7a 65 6e 43 6f 6c 75 6d 6e 29 7b 76 61 72 20 61 3d 66 2e 63 68 69 6c 64 72 65 6e 28 22 74 68 22 29 3b 69 66 28 61 2e 6c 65 6e 67 74 68 21 3d 3d 61 2e 66 69 6c 74 65 72 28 22 2e 75 69 2d 68 65 6c 70 65 72 2d 68 69 64 64 65 6e 22 29 2e 6c 65 Data Ascii: 00003F9Children("tr").find("td:nth-child("+e+")").removeClass("ui-helper-hidden");h.children("tr").find("td:nth-child("+e+")").removeClass("ui-helper-hidden");if(this.hasFrozenColumn){var a=f.children("th");if(a.length!==a.filter(".ui-helper-hidden").le
2025-01-14 23:26:31 UTC	8214	IN	Data Raw: 30 30 30 30 32 30 30 41 0d 0a 53 6f 72 74 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 69 66 28 74 68 69 73 2e 69 73 45 6d 70 74 79 28 29 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 76 61 72 20 63 3d 24 28 62 2e 74 61 72 67 65 74 29 3b 69 66 28 63 2e 63 6c 6f 73 65 73 74 28 22 2e 75 69 2d 63 6f 6c 75 6d 6e 2d 63 75 73 74 6f 6d 66 69 6c 74 65 72 22 2c 61 29 2e 6c 65 6e 67 74 68 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 72 65 74 75 72 6e 20 63 2e 69 73 28 22 74 68 2c 73 70 61 6e 22 29 7d 2c 61 64 64 53 6f 72 74 4d 65 74 61 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 73 6f 72 74 4d 65 74 61 3d 24 2e 67 72 65 70 28 74 68 69 73 2e 73 6f 72 74 4d 65 74 61 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 2e 63 6f 6c 21 3d 3d 61 2e 63 Data Ascii: 0000200ASort:function(b,a){if(this.isEmpty()){return false}var c=$(b.target);if(c.closest(".ui-column-customfilter",a).length){return false}return c.is("th,span")},addSortMeta:function(a){this.sortMeta=$.grep(this.sortMeta,function(b){return b.col!==a.c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49735	104.102.53.18	443	3364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 23:26:30 UTC	579	OUT	GET /javax.faces.resource/cryptojs/core-min.js.xhtml?ln=scripts HTTP/1.1 Host: www.lbpiaccess.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.giselabravo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 23:26:31 UTC	499	IN	HTTP/1.1 200 OK Content-Length: 3311 Content-Type: text/javascript Expires: Tue, 21 Jan 2025 23:26:30 GMT Last-Modified: Wed, 20 Nov 2024 13:19:22 GMT ETag: W/"3311-1732108762000" Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-ORACLE-DMS-RID: 0 X-Content-Type-Options: nosniff X-ORACLE-DMS-ECID: d51cf803-2cfa-4f0d-b979-dc64dc3b274a-00354586 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Date: Tue, 14 Jan 2025 23:26:31 GMT Connection: close
2025-01-14 23:26:31 UTC	1349	IN	Data Raw: 2f 2a 0d 0a 43 72 79 70 74 6f 4a 53 20 76 33 2e 31 2e 32 0d 0a 63 6f 64 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 2f 63 72 79 70 74 6f 2d 6a 73 0d 0a 28 63 29 20 32 30 30 39 2d 32 30 31 33 20 62 79 20 4a 65 66 66 20 4d 6f 74 74 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 63 6f 64 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 2f 63 72 79 70 74 6f 2d 6a 73 2f 77 69 6b 69 2f 4c 69 63 65 6e 73 65 0d 0a 2a 2f 0d 0a 76 61 72 20 43 72 79 70 74 6f 4a 53 3d 43 72 79 70 74 6f 4a 53 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 2c 72 29 7b 76 61 72 20 6b 3d 7b 7d 2c 6c 3d 6b 2e 6c 69 62 3d 7b 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 66 3d 6c 2e 42 61 73 65 3d 7b 65 78 74 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6e 2e 70 72 6f 74 6f 74 Data Ascii: /CryptoJS v3.1.2code.google.com/p/crypto-js(c) 2009-2013 by Jeff Mott. All rights reserved.code.google.com/p/crypto-js/wiki/License/var CryptoJS=CryptoJS\|\|function(h,r){var k={},l=k.lib={},n=function(){},f=l.Base={extend:function(a){n.protot
2025-01-14 23:26:31 UTC	1962	IN	Data Raw: 64 3c 61 3b 64 2b 3d 34 29 62 2e 70 75 73 68 28 34 32 39 34 39 36 37 32 39 36 2a 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 6a 2e 69 6e 69 74 28 62 2c 61 29 7d 7d 29 2c 6d 3d 6b 2e 65 6e 63 3d 7b 7d 2c 73 3d 6d 2e 48 65 78 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 77 6f 72 64 73 3b 61 3d 61 2e 73 69 67 42 79 74 65 73 3b 66 6f 72 28 76 61 72 20 64 3d 5b 5d 2c 63 3d 30 3b 63 3c 61 3b 63 2b 2b 29 7b 76 61 72 20 65 3d 62 5b 63 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 38 2a 28 63 25 34 29 26 32 35 35 3b 64 2e 70 75 73 68 28 28 65 3e 3e 3e 34 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 29 3b 64 2e 70 75 73 68 28 28 65 26 31 35 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 29 7d 72 65 74 75 Data Ascii: d<a;d+=4)b.push(4294967296h.random()\|0);return new j.init(b,a)}}),m=k.enc={},s=m.Hex={stringify:function(a){var b=a.words;a=a.sigBytes;for(var d=[],c=0;c<a;c++){var e=b[c>>>2]>>>24-8(c%4)&255;d.push((e>>>4).toString(16));d.push((e&15).toString(16))}retu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49736	104.102.53.18	443	3364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 23:26:30 UTC	574	OUT	GET /javax.faces.resource/cryptojs/aes.js.xhtml?ln=scripts HTTP/1.1 Host: www.lbpiaccess.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.giselabravo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 23:26:31 UTC	501	IN	HTTP/1.1 200 OK Content-Type: text/javascript Expires: Tue, 21 Jan 2025 23:26:31 GMT Last-Modified: Wed, 20 Nov 2024 13:19:22 GMT ETag: W/"13395-1732108762000" Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-ORACLE-DMS-RID: 0 X-Content-Type-Options: nosniff X-ORACLE-DMS-ECID: d51cf803-2cfa-4f0d-b979-dc64dc3b274a-00354587 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Content-Length: 13395 Date: Tue, 14 Jan 2025 23:26:31 GMT Connection: close
2025-01-14 23:26:31 UTC	1347	IN	Data Raw: 2f 2a 0d 0a 43 72 79 70 74 6f 4a 53 20 76 33 2e 31 2e 32 0d 0a 63 6f 64 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 2f 63 72 79 70 74 6f 2d 6a 73 0d 0a 28 63 29 20 32 30 30 39 2d 32 30 31 33 20 62 79 20 4a 65 66 66 20 4d 6f 74 74 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 63 6f 64 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 2f 63 72 79 70 74 6f 2d 6a 73 2f 77 69 6b 69 2f 4c 69 63 65 6e 73 65 0d 0a 2a 2f 0d 0a 76 61 72 20 43 72 79 70 74 6f 4a 53 3d 43 72 79 70 74 6f 4a 53 7c 7c 66 75 6e 63 74 69 6f 6e 28 75 2c 70 29 7b 76 61 72 20 64 3d 7b 7d 2c 6c 3d 64 2e 6c 69 62 3d 7b 7d 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 74 3d 6c 2e 42 61 73 65 3d 7b 65 78 74 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 73 2e 70 72 6f 74 6f 74 Data Ascii: /CryptoJS v3.1.2code.google.com/p/crypto-js(c) 2009-2013 by Jeff Mott. All rights reserved.code.google.com/p/crypto-js/wiki/License/var CryptoJS=CryptoJS\|\|function(u,p){var d={},l=d.lib={},s=function(){},t=l.Base={extend:function(a){s.protot
2025-01-14 23:26:31 UTC	12048	IN	Data Raw: 30 3b 65 3c 61 3b 65 2b 3d 34 29 63 2e 70 75 73 68 28 34 32 39 34 39 36 37 32 39 36 2a 75 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 72 2e 69 6e 69 74 28 63 2c 61 29 7d 7d 29 2c 77 3d 64 2e 65 6e 63 3d 7b 7d 2c 76 3d 77 2e 48 65 78 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 61 2e 77 6f 72 64 73 3b 61 3d 61 2e 73 69 67 42 79 74 65 73 3b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 6a 3d 30 3b 6a 3c 61 3b 6a 2b 2b 29 7b 76 61 72 20 6b 3d 63 5b 6a 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 38 2a 28 6a 25 34 29 26 32 35 35 3b 65 2e 70 75 73 68 28 28 6b 3e 3e 3e 34 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 29 3b 65 2e 70 75 73 68 28 28 6b 26 31 35 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 29 7d 72 65 Data Ascii: 0;e<a;e+=4)c.push(4294967296u.random()\|0);return new r.init(c,a)}}),w=d.enc={},v=w.Hex={stringify:function(a){var c=a.words;a=a.sigBytes;for(var e=[],j=0;j<a;j++){var k=c[j>>>2]>>>24-8(j%4)&255;e.push((k>>>4).toString(16));e.push((k&15).toString(16))}re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49737	104.102.53.18	443	3364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 23:26:30 UTC	405	OUT	GET /javax.faces.resource/jquery/jquery.js.xhtml?ln=primefaces&v=8.0 HTTP/1.1 Host: www.lbpiaccess.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 23:26:32 UTC	538	IN	HTTP/1.1 200 OK Content-Type: text/javascript Expires: Tue, 21 Jan 2025 23:26:31 GMT Last-Modified: Thu, 05 Mar 2020 02:52:58 GMT ETag: W/"88144-1583376778000" Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-ORACLE-DMS-RID: 0 X-Content-Type-Options: nosniff X-ORACLE-DMS-ECID: d51cf803-2cfa-4f0d-b979-dc64dc3b274a-00354588 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Date: Tue, 14 Jan 2025 23:26:32 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2025-01-14 23:26:32 UTC	15846	IN	Data Raw: 30 30 30 30 38 46 32 38 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f Data Ascii: 00008F28/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Erro
2025-01-14 23:26:32 UTC	15822	IN	Data Raw: 6f 3d 28 61 3d 65 29 5b 6b 5d 7c 7c 28 61 5b 6b 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 53 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 6b 5d 7c 7c 28 61 5b 6b 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 3d 5b 53 2c 64 5d 29 2c 61 3d 3d Data Ascii: o=(a=e)[k]\|\|(a[k]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===S&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[k]\|\|(a[k]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]=[S,d]),a==
2025-01-14 23:26:32 UTC	4992	IN	Data Raw: 64 6f 53 63 72 6f 6c 6c 3f 43 2e 73 65 74 54 69 6d 65 6f 75 74 28 6b 2e 72 65 61 64 79 29 3a 28 45 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 42 29 2c 43 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 42 29 29 3b 76 61 72 20 5f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 29 7b 76 61 72 20 73 3d 30 2c 75 3d 65 2e 6c 65 6e 67 74 68 2c 6c 3d 6e 75 6c 6c 3d 3d 6e 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 77 28 6e 29 29 66 6f 72 28 73 20 69 6e 20 69 3d 21 30 2c 6e 29 5f 28 65 2c 74 2c 73 2c 6e 5b 73 5d 2c 21 30 2c 6f 2c 61 29 3b 65 6c 73 65 20 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 26 26 28 69 3d 21 30 2c 6d 28 72 29 7c 7c 28 61 3d 21 30 Data Ascii: doScroll?C.setTimeout(k.ready):(E.addEventListener("DOMContentLoaded",B),C.addEventListener("load",B));var _=function(e,t,n,r,i,o,a){var s=0,u=e.length,l=null==n;if("object"===w(n))for(s in i=!0,n)_(e,t,s,n[s],!0,o,a);else if(void 0!==r&&(i=!0,m(r)\|\|(a=!0
2025-01-14 23:26:32 UTC	106	IN	Data Raw: 30 30 30 30 30 30 35 45 0d 0a 29 28 72 3d 65 5b 63 5d 29 2e 73 74 79 6c 65 26 26 28 6e 3d 72 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 2c 74 3f 28 22 6e 6f 6e 65 22 3d 3d 3d 6e 26 26 28 6c 5b 63 5d 3d 51 2e 67 65 74 28 72 2c 22 64 69 73 70 6c 61 79 22 29 7c 7c 6e 75 6c 6c 2c 6c 5b 63 5d 7c 7c 28 72 2e 73 74 79 0d 0a Data Ascii: 0000005E)(r=e[c]).style&&(n=r.style.display,t?("none"===n&&(l[c]=Q.get(r,"display")\|\|null,l[c]\|\|(r.sty
2025-01-14 23:26:32 UTC	102	IN	Data Raw: 30 30 30 30 30 30 35 41 0d 0a 6c 65 2e 64 69 73 70 6c 61 79 3d 22 22 29 29 2c 22 22 3d 3d 3d 72 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 26 26 73 65 28 72 29 26 26 28 6c 5b 63 5d 3d 28 75 3d 61 3d 6f 3d 76 6f 69 64 20 30 2c 61 3d 28 69 3d 72 29 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 73 3d 69 0d 0a Data Ascii: 0000005Ale.display="")),""===r.style.display&&se(r)&&(l[c]=(u=a=o=void 0,a=(i=r).ownerDocument,s=i
2025-01-14 23:26:32 UTC	3900	IN	Data Raw: 30 30 30 30 30 46 33 30 0d 0a 2e 6e 6f 64 65 4e 61 6d 65 2c 28 75 3d 63 65 5b 73 5d 29 7c 7c 28 6f 3d 61 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 29 29 2c 75 3d 6b 2e 63 73 73 28 6f 2c 22 64 69 73 70 6c 61 79 22 29 2c 6f 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 6f 29 2c 22 6e 6f 6e 65 22 3d 3d 3d 75 26 26 28 75 3d 22 62 6c 6f 63 6b 22 29 2c 63 65 5b 73 5d 3d 75 29 29 29 29 3a 22 6e 6f 6e 65 22 21 3d 3d 6e 26 26 28 6c 5b 63 5d 3d 22 6e 6f 6e 65 22 2c 51 2e 73 65 74 28 72 2c 22 64 69 73 70 6c 61 79 22 2c 6e 29 29 29 3b 66 6f 72 28 63 3d 30 3b 63 3c 66 3b 63 2b 2b 29 6e 75 6c 6c 21 3d 6c 5b 63 5d 26 26 28 65 5b 63 5d 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 6c Data Ascii: 00000F30.nodeName,(u=ce[s])\|\|(o=a.body.appendChild(a.createElement(s)),u=k.css(o,"display"),o.parentNode.removeChild(o),"none"===u&&(u="block"),ce[s]=u)))):"none"!==n&&(l[c]="none",Q.set(r,"display",n)));for(c=0;c<f;c++)null!=l[c]&&(e[c].style.display=l
2025-01-14 23:26:32 UTC	102	IN	Data Raw: 30 30 30 30 30 30 35 41 0d 0a 77 68 69 6c 65 28 6c 2d 2d 29 64 3d 67 3d 28 73 3d 45 65 2e 65 78 65 63 28 65 5b 6c 5d 29 7c 7c 5b 5d 29 5b 31 5d 2c 68 3d 28 73 5b 32 5d 7c 7c 22 22 29 2e 73 70 6c 69 74 28 22 2e 22 29 2e 73 6f 72 74 28 29 2c 64 26 26 28 66 3d 6b 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 0d 0a Data Ascii: 0000005Awhile(l--)d=g=(s=Ee.exec(e[l])\|\|[])[1],h=(s[2]\|\|"").split(".").sort(),d&&(f=k.event.specia
2025-01-14 23:26:32 UTC	16	IN	Data Raw: 30 30 30 30 30 30 30 34 0d 0a 6c 5b 64 5d 0d 0a Data Ascii: 00000004l[d]
2025-01-14 23:26:32 UTC	102	IN	Data Raw: 30 30 30 30 30 30 35 41 0d 0a 7c 7c 7b 7d 2c 64 3d 28 69 3f 66 2e 64 65 6c 65 67 61 74 65 54 79 70 65 3a 66 2e 62 69 6e 64 54 79 70 65 29 7c 7c 64 2c 66 3d 6b 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 5b 64 5d 7c 7c 7b 7d 2c 63 3d 6b 2e 65 78 74 65 6e 64 28 7b 74 79 70 65 3a 64 2c 6f 72 69 67 54 79 0d 0a Data Ascii: 0000005A\|\|{},d=(i?f.delegateType:f.bindType)\|\|d,f=k.event.special[d]\|\|{},c=k.extend({type:d,origTy
2025-01-14 23:26:32 UTC	12044	IN	Data Raw: 30 30 30 30 32 46 30 30 0d 0a 70 65 3a 67 2c 64 61 74 61 3a 72 2c 68 61 6e 64 6c 65 72 3a 6e 2c 67 75 69 64 3a 6e 2e 67 75 69 64 2c 73 65 6c 65 63 74 6f 72 3a 69 2c 6e 65 65 64 73 43 6f 6e 74 65 78 74 3a 69 26 26 6b 2e 65 78 70 72 2e 6d 61 74 63 68 2e 6e 65 65 64 73 43 6f 6e 74 65 78 74 2e 74 65 73 74 28 69 29 2c 6e 61 6d 65 73 70 61 63 65 3a 68 2e 6a 6f 69 6e 28 22 2e 22 29 7d 2c 6f 29 2c 28 70 3d 75 5b 64 5d 29 7c 7c 28 28 70 3d 75 5b 64 5d 3d 5b 5d 29 2e 64 65 6c 65 67 61 74 65 43 6f 75 6e 74 3d 30 2c 66 2e 73 65 74 75 70 26 26 21 31 21 3d 3d 66 2e 73 65 74 75 70 2e 63 61 6c 6c 28 74 2c 72 2c 68 2c 61 29 7c 7c 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 64 2c 61 29 29 2c 66 2e 61 Data Ascii: 00002F00pe:g,data:r,handler:n,guid:n.guid,selector:i,needsContext:i&&k.expr.match.needsContext.test(i),namespace:h.join(".")},o),(p=u[d])\|\|((p=u[d]=[]).delegateCount=0,f.setup&&!1!==f.setup.call(t,r,h,a)\|\|t.addEventListener&&t.addEventListener(d,a)),f.a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49738	104.102.53.18	443	3364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 23:26:31 UTC	585	OUT	GET /javax.faces.resource/cryptojs/enc-base64-min.js.xhtml?ln=scripts HTTP/1.1 Host: www.lbpiaccess.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.giselabravo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 23:26:31 UTC	497	IN	HTTP/1.1 200 OK Content-Length: 877 Content-Type: text/javascript Expires: Tue, 21 Jan 2025 23:26:31 GMT Last-Modified: Wed, 20 Nov 2024 13:19:22 GMT ETag: W/"877-1732108762000" Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-ORACLE-DMS-RID: 0 X-Content-Type-Options: nosniff X-ORACLE-DMS-ECID: d51cf803-2cfa-4f0d-b979-dc64dc3b274a-0035458b X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Date: Tue, 14 Jan 2025 23:26:31 GMT Connection: close
2025-01-14 23:26:31 UTC	877	IN	Data Raw: 2f 2a 0d 0a 43 72 79 70 74 6f 4a 53 20 76 33 2e 31 2e 32 0d 0a 63 6f 64 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 2f 63 72 79 70 74 6f 2d 6a 73 0d 0a 28 63 29 20 32 30 30 39 2d 32 30 31 33 20 62 79 20 4a 65 66 66 20 4d 6f 74 74 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 63 6f 64 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 2f 63 72 79 70 74 6f 2d 6a 73 2f 77 69 6b 69 2f 4c 69 63 65 6e 73 65 0d 0a 2a 2f 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 43 72 79 70 74 6f 4a 53 2c 6a 3d 68 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 3b 68 2e 65 6e 63 2e 42 61 73 65 36 34 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 65 3d 62 2e 77 6f 72 64 73 2c 66 3d 62 2e 73 69 67 42 79 74 65 73 2c 63 Data Ascii: /CryptoJS v3.1.2code.google.com/p/crypto-js(c) 2009-2013 by Jeff Mott. All rights reserved.code.google.com/p/crypto-js/wiki/License/(function(){var h=CryptoJS,j=h.lib.WordArray;h.enc.Base64={stringify:function(b){var e=b.words,f=b.sigBytes,c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49742	104.102.53.18	443	3364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 23:26:31 UTC	581	OUT	GET /javax.faces.resource/cryptojs/sha256-min.js.xhtml?ln=scripts HTTP/1.1 Host: www.lbpiaccess.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.giselabravo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 23:26:31 UTC	499	IN	HTTP/1.1 200 OK Content-Length: 1459 Content-Type: text/javascript Expires: Tue, 21 Jan 2025 23:26:31 GMT Last-Modified: Wed, 20 Nov 2024 13:19:22 GMT ETag: W/"1459-1732108762000" Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-ORACLE-DMS-RID: 0 X-Content-Type-Options: nosniff X-ORACLE-DMS-ECID: d51cf803-2cfa-4f0d-b979-dc64dc3b274a-0035458d X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Date: Tue, 14 Jan 2025 23:26:31 GMT Connection: close
2025-01-14 23:26:31 UTC	1353	IN	Data Raw: 2f 2a 0d 0a 43 72 79 70 74 6f 4a 53 20 76 33 2e 31 2e 32 0d 0a 63 6f 64 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 2f 63 72 79 70 74 6f 2d 6a 73 0d 0a 28 63 29 20 32 30 30 39 2d 32 30 31 33 20 62 79 20 4a 65 66 66 20 4d 6f 74 74 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 63 6f 64 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 2f 63 72 79 70 74 6f 2d 6a 73 2f 77 69 6b 69 2f 4c 69 63 65 6e 73 65 0d 0a 2a 2f 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 66 6f 72 28 76 61 72 20 67 3d 43 72 79 70 74 6f 4a 53 2c 68 3d 67 2e 6c 69 62 2c 76 3d 68 2e 57 6f 72 64 41 72 72 61 79 2c 6a 3d 68 2e 48 61 73 68 65 72 2c 68 3d 67 2e 61 6c 67 6f 2c 73 3d 5b 5d 2c 74 3d 5b 5d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 71 29 7b 72 65 74 75 72 6e 20 34 32 39 34 Data Ascii: /CryptoJS v3.1.2code.google.com/p/crypto-js(c) 2009-2013 by Jeff Mott. All rights reserved.code.google.com/p/crypto-js/wiki/License/(function(k){for(var g=CryptoJS,h=g.lib,v=h.WordArray,j=h.Hasher,h=g.algo,s=[],t=[],u=function(q){return 4294
2025-01-14 23:26:31 UTC	106	IN	Data Raw: 3d 74 68 69 73 2e 5f 68 61 73 68 2e 63 6c 6f 6e 65 28 29 3b 72 65 74 75 72 6e 20 62 7d 7d 29 3b 67 2e 53 48 41 32 35 36 3d 6a 2e 5f 63 72 65 61 74 65 48 65 6c 70 65 72 28 68 29 3b 67 2e 48 6d 61 63 53 48 41 32 35 36 3d 6a 2e 5f 63 72 65 61 74 65 48 6d 61 63 48 65 6c 70 65 72 28 68 29 7d 29 28 4d 61 74 68 29 3b 0d 0a Data Ascii: =this._hash.clone();return b}});g.SHA256=j._createHelper(h);g.HmacSHA256=j._createHmacHelper(h)})(Math);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49743	104.102.53.18	443	3364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 23:26:31 UTC	413	OUT	GET /javax.faces.resource/jquery/jquery-plugins.js.xhtml?ln=primefaces&v=8.0 HTTP/1.1 Host: www.lbpiaccess.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 23:26:31 UTC	539	IN	HTTP/1.1 200 OK Content-Type: text/javascript Expires: Tue, 21 Jan 2025 23:26:31 GMT Last-Modified: Thu, 05 Mar 2020 02:53:08 GMT ETag: W/"267352-1583376788000" Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-ORACLE-DMS-RID: 0 X-Content-Type-Options: nosniff X-ORACLE-DMS-ECID: d51cf803-2cfa-4f0d-b979-dc64dc3b274a-0035458c X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Date: Tue, 14 Jan 2025 23:26:31 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2025-01-14 23:26:31 UTC	15845	IN	Data Raw: 30 30 30 30 38 46 32 38 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 37 2d 30 38 2d 30 39 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 74 2e 6a 73 2c 20 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 64 61 74 61 2e 6a 73 2c 20 64 69 73 61 62 6c 65 2d 73 65 6c 65 63 74 69 6f 6e 2e 6a 73 2c 20 66 6f 63 75 73 61 62 6c 65 2e 6a 73 2c 20 66 6f 72 6d 2d 72 65 73 65 74 2d 6d 69 78 69 6e 2e 6a 73 2c 20 6b 65 79 63 6f 64 65 2e 6a 73 2c 20 6c 61 62 65 6c 73 2e 6a 73 2c 20 73 63 72 6f 6c 6c 2d 70 61 72 65 6e 74 2e 6a 73 2c 20 74 61 62 62 61 62 6c 65 2e 6a 73 2c 20 75 6e 69 71 75 65 2d 69 64 2e 6a 73 2c 20 77 69 64 67 65 74 73 2f 64 72 61 67 67 61 62 6c Data Ascii: 00008F28/! jQuery UI - v1.12.1 - 2017-08-09 http://jqueryui.com* Includes: widget.js, position.js, data.js, disable-selection.js, focusable.js, form-reset-mixin.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/draggabl
2025-01-14 23:26:31 UTC	15814	IN	Data Raw: 32 2a 61 79 2e 6f 66 66 73 65 74 5b 30 5d 2c 61 74 2c 61 42 3b 69 66 28 61 45 3c 30 29 7b 61 74 3d 61 7a 2e 6c 65 66 74 2b 61 43 2b 61 46 2b 61 77 2b 61 79 2e 63 6f 6c 6c 69 73 69 6f 6e 57 69 64 74 68 2d 61 47 2d 61 44 3b 69 66 28 61 74 3c 30 7c 7c 61 74 3c 61 72 28 61 45 29 29 7b 61 7a 2e 6c 65 66 74 2b 3d 61 43 2b 61 46 2b 61 77 7d 7d 65 6c 73 65 7b 69 66 28 61 75 3e 30 29 7b 61 42 3d 61 7a 2e 6c 65 66 74 2d 61 79 2e 63 6f 6c 6c 69 73 69 6f 6e 50 6f 73 69 74 69 6f 6e 2e 6d 61 72 67 69 6e 4c 65 66 74 2b 61 43 2b 61 46 2b 61 77 2d 61 76 3b 69 66 28 61 42 3e 30 7c 7c 61 72 28 61 42 29 3c 61 75 29 7b 61 7a 2e 6c 65 66 74 2b 3d 61 43 2b 61 46 2b 61 77 7d 7d 7d 7d 2c 74 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 61 79 2c 61 78 29 7b 76 61 72 20 61 77 3d 61 78 2e 77 Data Ascii: 2*ay.offset[0],at,aB;if(aE<0){at=az.left+aC+aF+aw+ay.collisionWidth-aG-aD;if(at<0\|\|at<ar(aE)){az.left+=aC+aF+aw}}else{if(au>0){aB=az.left-ay.collisionPosition.marginLeft+aC+aF+aw-av;if(aB>0\|\|ar(aB)<au){az.left+=aC+aF+aw}}}},top:function(ay,ax){var aw=ax.w
2025-01-14 23:26:31 UTC	5001	IN	Data Raw: 70 61 72 65 6e 74 4e 6f 64 65 3a 61 6a 2e 61 70 70 65 6e 64 54 6f 29 29 7d 69 66 28 61 69 26 26 61 67 5b 30 5d 3d 3d 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 5b 30 5d 29 7b 74 68 69 73 2e 5f 73 65 74 50 6f 73 69 74 69 6f 6e 52 65 6c 61 74 69 76 65 28 29 7d 69 66 28 61 67 5b 30 5d 21 3d 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 5b 30 5d 26 26 21 28 2f 28 66 69 78 65 64 7c 61 62 73 6f 6c 75 74 65 29 2f 29 2e 74 65 73 74 28 61 67 2e 63 73 73 28 22 70 6f 73 69 74 69 6f 6e 22 29 29 29 7b 61 67 2e 63 73 73 28 22 70 6f 73 69 74 69 6f 6e 22 2c 22 61 62 73 6f 6c 75 74 65 22 29 7d 72 65 74 75 72 6e 20 61 67 7d 2c 5f 73 65 74 50 6f 73 69 74 69 6f 6e 52 65 6c 61 74 69 76 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 28 2f 5e 28 3f 3a 72 7c 61 7c 66 29 2f 29 2e 74 65 Data Ascii: parentNode:aj.appendTo))}if(ai&&ag[0]===this.element[0]){this._setPositionRelative()}if(ag[0]!==this.element[0]&&!(/(fixed\|absolute)/).test(ag.css("position"))){ag.css("position","absolute")}return ag},_setPositionRelative:function(){if(!(/^(?:r\|a\|f)/).te
2025-01-14 23:26:31 UTC	106	IN	Data Raw: 30 30 30 30 30 30 35 45 0d 0a 72 69 64 29 7b 61 70 3d 61 69 2e 67 72 69 64 5b 31 5d 3f 74 68 69 73 2e 6f 72 69 67 69 6e 61 6c 50 61 67 65 59 2b 4d 61 74 68 2e 72 6f 75 6e 64 28 28 61 6b 2d 74 68 69 73 2e 6f 72 69 67 69 6e 61 6c 50 61 67 65 59 29 2f 61 69 2e 67 72 69 64 5b 31 5d 29 2a 61 69 2e 67 72 69 64 5b 31 0d 0a Data Ascii: 0000005Erid){ap=ai.grid[1]?this.originalPageY+Math.round((ak-this.originalPageY)/ai.grid[1])*ai.grid[1
2025-01-14 23:26:31 UTC	102	IN	Data Raw: 30 30 30 30 30 30 35 41 0d 0a 5d 3a 74 68 69 73 2e 6f 72 69 67 69 6e 61 6c 50 61 67 65 59 3b 61 6b 3d 61 67 3f 28 28 61 70 2d 74 68 69 73 2e 6f 66 66 73 65 74 2e 63 6c 69 63 6b 2e 74 6f 70 3e 3d 61 67 5b 31 5d 7c 7c 61 70 2d 74 68 69 73 2e 6f 66 66 73 65 74 2e 63 6c 69 63 6b 2e 74 6f 70 3e 61 67 5b 0d 0a Data Ascii: 0000005A]:this.originalPageY;ak=ag?((ap-this.offset.click.top>=ag[1]\|\|ap-this.offset.click.top>ag[
2025-01-14 23:26:32 UTC	16296	IN	Data Raw: 30 30 30 30 33 46 39 43 0d 0a 33 5d 29 3f 61 70 3a 28 28 61 70 2d 74 68 69 73 2e 6f 66 66 73 65 74 2e 63 6c 69 63 6b 2e 74 6f 70 3e 3d 61 67 5b 31 5d 29 3f 61 70 2d 61 69 2e 67 72 69 64 5b 31 5d 3a 61 70 2b 61 69 2e 67 72 69 64 5b 31 5d 29 29 3a 61 70 3b 61 6a 3d 61 69 2e 67 72 69 64 5b 30 5d 3f 74 68 69 73 2e 6f 72 69 67 69 6e 61 6c 50 61 67 65 58 2b 4d 61 74 68 2e 72 6f 75 6e 64 28 28 61 6c 2d 74 68 69 73 2e 6f 72 69 67 69 6e 61 6c 50 61 67 65 58 29 2f 61 69 2e 67 72 69 64 5b 30 5d 29 2a 61 69 2e 67 72 69 64 5b 30 5d 3a 74 68 69 73 2e 6f 72 69 67 69 6e 61 6c 50 61 67 65 58 3b 61 6c 3d 61 67 3f 28 28 61 6a 2d 74 68 69 73 2e 6f 66 66 73 65 74 2e 63 6c 69 63 6b 2e 6c 65 66 74 3e 3d 61 67 5b 30 5d 7c 7c 61 6a 2d 74 68 69 73 2e 6f 66 66 73 65 74 2e 63 6c 69 Data Ascii: 00003F9C3])?ap:((ap-this.offset.click.top>=ag[1])?ap-ai.grid[1]:ap+ai.grid[1])):ap;aj=ai.grid[0]?this.originalPageX+Math.round((al-this.originalPageX)/ai.grid[0])*ai.grid[0]:this.originalPageX;al=ag?((aj-this.offset.click.left>=ag[0]\|\|aj-this.offset.cli
2025-01-14 23:26:32 UTC	8214	IN	Data Raw: 30 30 30 30 32 30 30 41 0d 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 4b 2e 77 69 64 67 65 74 28 22 75 69 2e 72 65 73 69 7a 61 62 6c 65 22 2c 4b 2e 75 69 2e 6d 6f 75 73 65 2c 7b 76 65 72 73 69 6f 6e 3a 22 31 2e 31 32 2e 31 22 2c 77 69 64 67 65 74 45 76 65 6e 74 50 72 65 66 69 78 3a 22 72 65 73 69 7a 65 22 2c 6f 70 74 69 6f 6e 73 3a 7b 61 6c 73 6f 52 65 73 69 7a 65 3a 66 61 6c 73 65 2c 61 6e 69 6d 61 74 65 3a 66 61 6c 73 65 2c 61 6e 69 6d 61 74 65 44 75 72 61 74 69 6f 6e 3a 22 73 6c 6f 77 22 2c 61 6e 69 6d 61 74 65 45 61 73 69 6e 67 3a 22 73 77 69 6e 67 22 2c 61 73 70 65 63 74 52 61 74 69 6f 3a 66 61 6c 73 65 2c 61 75 74 6f 48 69 64 65 3a 66 61 6c 73 65 2c 63 6c 61 73 73 65 73 3a 7b 22 75 69 2d 72 Data Ascii: 0000200A * http://jquery.org/license */K.widget("ui.resizable",K.ui.mouse,{version:"1.12.1",widgetEventPrefix:"resize",options:{alsoResize:false,animate:false,animateDuration:"slow",animateEasing:"swing",aspectRatio:false,autoHide:false,classes:{"ui-r
2025-01-14 23:26:32 UTC	102	IN	Data Raw: 30 30 30 30 30 30 35 41 0d 0a 65 56 69 72 74 75 61 6c 42 6f 75 6e 64 61 72 69 65 73 3a 66 75 6e 63 74 69 6f 6e 28 61 69 29 7b 76 61 72 20 61 6b 2c 61 6a 2c 61 68 2c 61 6d 2c 61 67 2c 61 6c 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3b 61 67 3d 7b 6d 69 6e 57 69 64 74 68 3a 74 68 69 73 2e 5f 69 73 4e 75 0d 0a Data Ascii: 0000005AeVirtualBoundaries:function(ai){var ak,aj,ah,am,ag,al=this.options;ag={minWidth:this._isNu
2025-01-14 23:26:32 UTC	16296	IN	Data Raw: 30 30 30 30 33 46 39 43 0d 0a 6d 62 65 72 28 61 6c 2e 6d 69 6e 57 69 64 74 68 29 3f 61 6c 2e 6d 69 6e 57 69 64 74 68 3a 30 2c 6d 61 78 57 69 64 74 68 3a 74 68 69 73 2e 5f 69 73 4e 75 6d 62 65 72 28 61 6c 2e 6d 61 78 57 69 64 74 68 29 3f 61 6c 2e 6d 61 78 57 69 64 74 68 3a 49 6e 66 69 6e 69 74 79 2c 6d 69 6e 48 65 69 67 68 74 3a 74 68 69 73 2e 5f 69 73 4e 75 6d 62 65 72 28 61 6c 2e 6d 69 6e 48 65 69 67 68 74 29 3f 61 6c 2e 6d 69 6e 48 65 69 67 68 74 3a 30 2c 6d 61 78 48 65 69 67 68 74 3a 74 68 69 73 2e 5f 69 73 4e 75 6d 62 65 72 28 61 6c 2e 6d 61 78 48 65 69 67 68 74 29 3f 61 6c 2e 6d 61 78 48 65 69 67 68 74 3a 49 6e 66 69 6e 69 74 79 7d 3b 69 66 28 74 68 69 73 2e 5f 61 73 70 65 63 74 52 61 74 69 6f 7c 7c 61 69 29 7b 61 6b 3d 61 67 2e 6d 69 6e 48 65 69 67 Data Ascii: 00003F9Cmber(al.minWidth)?al.minWidth:0,maxWidth:this._isNumber(al.maxWidth)?al.maxWidth:Infinity,minHeight:this._isNumber(al.minHeight)?al.minHeight:0,maxHeight:this._isNumber(al.maxHeight)?al.maxHeight:Infinity};if(this._aspectRatio\|\|ai){ak=ag.minHeig
2025-01-14 23:26:32 UTC	7832	IN	Data Raw: 30 30 30 30 31 45 38 43 0d 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 76 61 72 20 6d 3d 4b 2e 77 69 64 67 65 74 28 22 75 69 2e 73 6f 72 74 61 62 6c 65 22 2c 4b 2e 75 69 2e 6d 6f 75 73 65 2c 7b 76 65 72 73 69 6f 6e 3a 22 31 2e 31 32 2e 31 22 2c 77 69 64 67 65 74 45 76 65 6e 74 50 72 65 66 69 78 3a 22 73 6f 72 74 22 2c 72 65 61 64 79 3a 66 61 6c 73 65 2c 6f 70 74 69 6f 6e 73 3a 7b 61 70 70 65 6e 64 54 6f 3a 22 70 61 72 65 6e 74 22 2c 61 78 69 73 3a 66 61 6c 73 65 2c 63 6f 6e 6e 65 63 74 57 69 74 68 3a 66 61 6c 73 65 2c 63 6f 6e 74 61 69 6e 6d 65 6e 74 3a 66 61 6c 73 65 2c 63 75 72 73 6f 72 3a 22 61 75 74 6f 22 2c 63 75 72 73 6f 72 41 74 3a 66 61 6c 73 65 2c 64 72 6f 70 4f 6e 45 6d 70 74 79 3a 74 72 Data Ascii: 00001E8C * http://jquery.org/license */var m=K.widget("ui.sortable",K.ui.mouse,{version:"1.12.1",widgetEventPrefix:"sort",ready:false,options:{appendTo:"parent",axis:false,connectWith:false,containment:false,cursor:"auto",cursorAt:false,dropOnEmpty:tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49746	104.102.53.18	443	3364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 23:26:31 UTC	580	OUT	GET /javax.faces.resource/app/clienthash.min.js.xhtml?ln=scripts HTTP/1.1 Host: www.lbpiaccess.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.giselabravo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 23:26:32 UTC	499	IN	HTTP/1.1 200 OK Content-Length: 1776 Content-Type: text/javascript Expires: Tue, 21 Jan 2025 23:26:32 GMT Last-Modified: Wed, 20 Nov 2024 13:19:20 GMT ETag: W/"1776-1732108760000" Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-ORACLE-DMS-RID: 0 X-Content-Type-Options: nosniff X-ORACLE-DMS-ECID: d51cf803-2cfa-4f0d-b979-dc64dc3b274a-00354598 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Date: Tue, 14 Jan 2025 23:26:32 GMT Connection: close
2025-01-14 23:26:32 UTC	1347	IN	Data Raw: 76 61 72 20 5f 30 78 31 63 66 33 3d 5b 27 65 6e 63 27 2c 27 74 6f 53 74 72 69 6e 67 27 2c 27 6c 65 6e 67 74 68 27 2c 27 42 61 73 65 36 34 27 2c 27 70 61 72 73 65 27 2c 27 65 6e 63 72 79 70 74 27 2c 27 73 75 62 73 74 72 27 2c 27 53 48 41 32 35 36 27 2c 27 41 45 53 27 5d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 30 62 62 65 36 2c 5f 30 78 31 63 66 33 65 36 29 7b 76 61 72 20 5f 30 78 33 31 30 34 66 63 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 33 31 36 63 33 32 29 7b 77 68 69 6c 65 28 2d 2d 5f 30 78 33 31 36 63 33 32 29 7b 5f 30 78 32 30 62 62 65 36 5b 27 70 75 73 68 27 5d 28 5f 30 78 32 30 62 62 65 36 5b 27 73 68 69 66 74 27 5d 28 29 29 3b 7d 7d 3b 5f 30 78 33 31 30 34 66 63 28 2b 2b 5f 30 78 31 63 66 33 65 36 29 3b 7d 28 5f 30 78 31 63 66 33 2c 30 78 31 38 Data Ascii: var _0x1cf3=['enc','toString','length','Base64','parse','encrypt','substr','SHA256','AES'];(function(_0x20bbe6,_0x1cf3e6){var _0x3104fc=function(_0x316c32){while(--_0x316c32){_0x20bbe6['push'](_0x20bbe6['shift']());}};_0x3104fc(++_0x1cf3e6);}(_0x1cf3,0x18
2025-01-14 23:26:32 UTC	429	IN	Data Raw: 31 65 3d 43 72 79 70 74 6f 4a 53 5b 5f 30 78 33 64 32 34 65 30 28 27 30 78 38 27 29 5d 5b 5f 30 78 33 64 32 34 65 30 28 27 30 78 32 27 29 5d 5b 27 70 61 72 73 65 27 5d 28 5f 30 78 35 33 63 36 61 39 29 2c 5f 30 78 35 38 62 33 34 62 3d 43 72 79 70 74 6f 4a 53 5b 5f 30 78 33 64 32 34 65 30 28 27 30 78 38 27 29 5d 5b 5f 30 78 33 64 32 34 65 30 28 27 30 78 32 27 29 5d 5b 5f 30 78 33 64 32 34 65 30 28 27 30 78 33 27 29 5d 28 5f 30 78 35 33 63 36 61 39 29 3b 72 65 74 75 72 6e 20 43 72 79 70 74 6f 4a 53 5b 5f 30 78 33 64 32 34 65 30 28 27 30 78 37 27 29 5d 5b 5f 30 78 33 64 32 34 65 30 28 27 30 78 34 27 29 5d 28 5f 30 78 31 61 64 39 38 30 2c 5f 30 78 65 38 61 61 31 65 2c 7b 27 69 76 27 3a 5f 30 78 35 38 62 33 34 62 7d 29 3b 7d 3b 72 65 74 75 72 6e 7b 27 68 61 73 Data Ascii: 1e=CryptoJS[_0x3d24e0('0x8')][_0x3d24e0('0x2')]['parse'](_0x53c6a9),_0x58b34b=CryptoJS[_0x3d24e0('0x8')][_0x3d24e0('0x2')][_0x3d24e0('0x3')](_0x53c6a9);return CryptoJS[_0x3d24e0('0x7')][_0x3d24e0('0x4')](_0x1ad980,_0xe8aa1e,{'iv':_0x58b34b});};return{'has

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49747	104.102.53.18	443	3364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 23:26:31 UTC	400	OUT	GET /javax.faces.resource/cryptojs/core-min.js.xhtml?ln=scripts HTTP/1.1 Host: www.lbpiaccess.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 23:26:32 UTC	499	IN	HTTP/1.1 200 OK Content-Length: 3311 Content-Type: text/javascript Expires: Tue, 21 Jan 2025 23:26:32 GMT Last-Modified: Wed, 20 Nov 2024 13:19:22 GMT ETag: W/"3311-1732108762000" Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-ORACLE-DMS-RID: 0 X-Content-Type-Options: nosniff X-ORACLE-DMS-ECID: d51cf803-2cfa-4f0d-b979-dc64dc3b274a-00354594 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Date: Tue, 14 Jan 2025 23:26:32 GMT Connection: close
2025-01-14 23:26:32 UTC	1354	IN	Data Raw: 2f 2a 0d 0a 43 72 79 70 74 6f 4a 53 20 76 33 2e 31 2e 32 0d 0a 63 6f 64 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 2f 63 72 79 70 74 6f 2d 6a 73 0d 0a 28 63 29 20 32 30 30 39 2d 32 30 31 33 20 62 79 20 4a 65 66 66 20 4d 6f 74 74 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 63 6f 64 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 2f 63 72 79 70 74 6f 2d 6a 73 2f 77 69 6b 69 2f 4c 69 63 65 6e 73 65 0d 0a 2a 2f 0d 0a 76 61 72 20 43 72 79 70 74 6f 4a 53 3d 43 72 79 70 74 6f 4a 53 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 2c 72 29 7b 76 61 72 20 6b 3d 7b 7d 2c 6c 3d 6b 2e 6c 69 62 3d 7b 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 66 3d 6c 2e 42 61 73 65 3d 7b 65 78 74 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6e 2e 70 72 6f 74 6f 74 Data Ascii: /CryptoJS v3.1.2code.google.com/p/crypto-js(c) 2009-2013 by Jeff Mott. All rights reserved.code.google.com/p/crypto-js/wiki/License/var CryptoJS=CryptoJS\|\|function(h,r){var k={},l=k.lib={},n=function(){},f=l.Base={extend:function(a){n.protot
2025-01-14 23:26:32 UTC	1957	IN	Data Raw: 2b 3d 34 29 62 2e 70 75 73 68 28 34 32 39 34 39 36 37 32 39 36 2a 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 6a 2e 69 6e 69 74 28 62 2c 61 29 7d 7d 29 2c 6d 3d 6b 2e 65 6e 63 3d 7b 7d 2c 73 3d 6d 2e 48 65 78 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 77 6f 72 64 73 3b 61 3d 61 2e 73 69 67 42 79 74 65 73 3b 66 6f 72 28 76 61 72 20 64 3d 5b 5d 2c 63 3d 30 3b 63 3c 61 3b 63 2b 2b 29 7b 76 61 72 20 65 3d 62 5b 63 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 38 2a 28 63 25 34 29 26 32 35 35 3b 64 2e 70 75 73 68 28 28 65 3e 3e 3e 34 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 29 3b 64 2e 70 75 73 68 28 28 65 26 31 35 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 29 7d 72 65 74 75 72 6e 20 64 2e Data Ascii: +=4)b.push(4294967296h.random()\|0);return new j.init(b,a)}}),m=k.enc={},s=m.Hex={stringify:function(a){var b=a.words;a=a.sigBytes;for(var d=[],c=0;c<a;c++){var e=b[c>>>2]>>>24-8(c%4)&255;d.push((e>>>4).toString(16));d.push((e&15).toString(16))}return d.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49750	104.102.53.18	443	3364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 23:26:31 UTC	575	OUT	GET /javax.faces.resource/app/login.min.js.xhtml?ln=scripts HTTP/1.1 Host: www.lbpiaccess.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.giselabravo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 23:26:32 UTC	497	IN	HTTP/1.1 200 OK Content-Length: 604 Content-Type: text/javascript Expires: Tue, 21 Jan 2025 23:26:32 GMT Last-Modified: Wed, 20 Nov 2024 13:19:20 GMT ETag: W/"604-1732108760000" Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-ORACLE-DMS-RID: 0 X-Content-Type-Options: nosniff X-ORACLE-DMS-ECID: d51cf803-2cfa-4f0d-b979-dc64dc3b274a-00354597 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Date: Tue, 14 Jan 2025 23:26:32 GMT Connection: close
2025-01-14 23:26:32 UTC	604	IN	Data Raw: 76 61 72 20 5f 30 78 32 30 39 34 3d 5b 27 76 61 6c 27 2c 27 23 70 61 73 73 77 6f 72 64 27 2c 27 23 70 69 27 2c 27 23 6b 69 27 5d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 36 39 38 63 33 30 2c 5f 30 78 32 30 39 34 30 33 29 7b 76 61 72 20 5f 30 78 33 37 64 62 31 30 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 35 63 36 37 66 63 29 7b 77 68 69 6c 65 28 2d 2d 5f 30 78 35 63 36 37 66 63 29 7b 5f 30 78 36 39 38 63 33 30 5b 27 70 75 73 68 27 5d 28 5f 30 78 36 39 38 63 33 30 5b 27 73 68 69 66 74 27 5d 28 29 29 3b 7d 7d 3b 5f 30 78 33 37 64 62 31 30 28 2b 2b 5f 30 78 32 30 39 34 30 33 29 3b 7d 28 5f 30 78 32 30 39 34 2c 30 78 31 39 63 29 29 3b 76 61 72 20 5f 30 78 33 37 64 62 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 36 39 38 63 33 30 2c 5f 30 78 32 30 39 34 30 33 29 7b 5f Data Ascii: var _0x2094=['val','#password','#pi','#ki'];(function(_0x698c30,_0x209403){var _0x37db10=function(_0x5c67fc){while(--_0x5c67fc){_0x698c30['push'](_0x698c30['shift']());}};_0x37db10(++_0x209403);}(_0x2094,0x19c));var _0x37db=function(_0x698c30,_0x209403){_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49748	104.102.53.18	443	3364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 23:26:31 UTC	592	OUT	GET /javax.faces.resource/validation/validation.js.xhtml?ln=primefaces&v=8.0 HTTP/1.1 Host: www.lbpiaccess.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.giselabravo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 23:26:32 UTC	501	IN	HTTP/1.1 200 OK Content-Type: text/javascript Expires: Tue, 21 Jan 2025 23:26:32 GMT Last-Modified: Thu, 05 Mar 2020 02:53:08 GMT ETag: W/"25236-1583376788000" Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-ORACLE-DMS-RID: 0 X-Content-Type-Options: nosniff X-ORACLE-DMS-ECID: d51cf803-2cfa-4f0d-b979-dc64dc3b274a-00354599 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Content-Length: 25236 Date: Tue, 14 Jan 2025 23:26:32 GMT Connection: close
2025-01-14 23:26:32 UTC	1347	IN	Data Raw: 69 66 28 77 69 6e 64 6f 77 2e 50 72 69 6d 65 46 61 63 65 73 29 7b 24 2e 65 78 74 65 6e 64 28 50 72 69 6d 65 46 61 63 65 73 2e 6c 6f 63 61 6c 65 73 2e 65 6e 5f 55 53 2c 7b 64 65 63 69 6d 61 6c 53 65 70 61 72 61 74 6f 72 3a 22 2e 22 2c 67 72 6f 75 70 69 6e 67 53 65 70 61 72 61 74 6f 72 3a 22 2c 22 2c 6d 65 73 73 61 67 65 73 3a 7b 22 6a 61 76 61 78 2e 66 61 63 65 73 2e 63 6f 6d 70 6f 6e 65 6e 74 2e 55 49 49 6e 70 75 74 2e 52 45 51 55 49 52 45 44 22 3a 22 7b 30 7d 3a 20 56 61 6c 69 64 61 74 69 6f 6e 20 45 72 72 6f 72 3a 20 56 61 6c 75 65 20 69 73 20 72 65 71 75 69 72 65 64 2e 22 2c 22 6a 61 76 61 78 2e 66 61 63 65 73 2e 63 6f 6e 76 65 72 74 65 72 2e 49 6e 74 65 67 65 72 43 6f 6e 76 65 72 74 65 72 2e 49 4e 54 45 47 45 52 22 3a 22 7b 32 7d 3a 20 27 7b 30 7d 27 Data Ascii: if(window.PrimeFaces){$.extend(PrimeFaces.locales.en_US,{decimalSeparator:".",groupingSeparator:",",messages:{"javax.faces.component.UIInput.REQUIRED":"{0}: Validation Error: Value is required.","javax.faces.converter.IntegerConverter.INTEGER":"{2}: '{0}'
2025-01-14 23:26:32 UTC	14336	IN	Data Raw: 6f 66 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 64 69 67 69 74 73 2e 22 2c 22 6a 61 76 61 78 2e 66 61 63 65 73 2e 63 6f 6e 76 65 72 74 65 72 2e 42 69 67 49 6e 74 65 67 65 72 43 6f 6e 76 65 72 74 65 72 2e 42 49 47 49 4e 54 45 47 45 52 5f 64 65 74 61 69 6c 22 3a 22 7b 32 7d 3a 20 27 7b 30 7d 27 20 6d 75 73 74 20 62 65 20 61 20 6e 75 6d 62 65 72 20 63 6f 6e 73 69 73 74 69 6e 67 20 6f 66 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 64 69 67 69 74 73 2e 20 45 78 61 6d 70 6c 65 3a 20 7b 31 7d 22 2c 22 6a 61 76 61 78 2e 66 61 63 65 73 2e 63 6f 6e 76 65 72 74 65 72 2e 42 79 74 65 43 6f 6e 76 65 72 74 65 72 2e 42 59 54 45 22 3a 22 7b 32 7d 3a 20 27 7b 30 7d 27 20 6d 75 73 74 20 62 65 20 61 20 6e 75 6d 62 65 72 20 62 65 74 77 65 65 6e 20 2d 31 32 38 20 61 6e 64 20 31 32 37 Data Ascii: of one or more digits.","javax.faces.converter.BigIntegerConverter.BIGINTEGER_detail":"{2}: '{0}' must be a number consisting of one or more digits. Example: {1}","javax.faces.converter.ByteConverter.BYTE":"{2}: '{0}' must be a number between -128 and 127
2025-01-14 23:26:32 UTC	8893	IN	Data Raw: 73 28 22 3a 63 68 65 63 6b 62 6f 78 2c 3a 72 61 64 69 6f 22 29 26 26 63 2e 64 61 74 61 28 22 70 2d 67 72 6f 75 70 65 64 22 29 29 7b 76 61 72 20 6d 3d 63 2e 61 74 74 72 28 22 6e 61 6d 65 22 29 3b 69 66 28 21 62 2e 69 73 47 72 6f 75 70 56 61 6c 69 64 61 74 65 64 28 6d 29 29 7b 62 2e 61 64 64 45 6c 65 6d 65 6e 74 47 72 6f 75 70 28 6d 29 7d 65 6c 73 65 7b 72 65 74 75 72 6e 7d 7d 69 66 28 63 2e 70 61 72 65 6e 74 28 29 2e 68 61 73 43 6c 61 73 73 28 22 75 69 2d 69 6e 70 75 74 6e 75 6d 62 65 72 22 29 29 7b 63 3d 63 2e 70 61 72 65 6e 74 28 29 2e 63 68 69 6c 64 72 65 6e 28 22 69 6e 70 75 74 3a 68 69 64 64 65 6e 22 29 7d 76 61 72 20 71 3d 62 2e 67 65 74 53 75 62 6d 69 74 74 65 64 56 61 6c 75 65 28 63 29 2c 72 3d 74 72 75 65 2c 74 3d 63 2e 64 61 74 61 28 22 70 2d 63 Data Ascii: s(":checkbox,:radio")&&c.data("p-grouped")){var m=c.attr("name");if(!b.isGroupValidated(m)){b.addElementGroup(m)}else{return}}if(c.parent().hasClass("ui-inputnumber")){c=c.parent().children("input:hidden")}var q=b.getSubmittedValue(c),r=true,t=c.data("p-c
2025-01-14 23:26:32 UTC	660	IN	Data Raw: 64 69 76 2e 75 69 2d 72 61 64 69 6f 62 75 74 74 6f 6e 2d 62 6f 78 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 64 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 7b 64 2e 65 71 28 62 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 75 69 2d 73 74 61 74 65 2d 65 72 72 6f 72 22 29 7d 50 72 69 6d 65 46 61 63 65 73 2e 76 61 6c 69 64 61 74 6f 72 2e 48 69 67 68 6c 69 67 68 74 65 72 2e 75 6e 68 69 67 68 6c 69 67 68 74 4c 61 62 65 6c 28 61 29 7d 7d 2c 62 6f 6f 6c 65 61 6e 62 75 74 74 6f 6e 3a 7b 68 69 67 68 6c 69 67 68 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 70 61 72 65 6e 74 28 29 2e 70 61 72 65 6e 74 28 29 2e 61 64 64 43 6c 61 73 73 28 22 75 69 2d 73 74 61 74 65 2d 65 72 72 6f 72 22 29 7d 2c 75 6e 68 69 67 68 6c 69 67 68 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b Data Ascii: div.ui-radiobutton-box");for(var b=0;b<d.length;b++){d.eq(b).removeClass("ui-state-error")}PrimeFaces.validator.Highlighter.unhighlightLabel(a)}},booleanbutton:{highlight:function(a){a.parent().parent().addClass("ui-state-error")},unhighlight:function(a){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49749	104.102.53.18	443	3364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 23:26:31 UTC	395	OUT	GET /javax.faces.resource/cryptojs/aes.js.xhtml?ln=scripts HTTP/1.1 Host: www.lbpiaccess.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 23:26:32 UTC	501	IN	HTTP/1.1 200 OK Content-Type: text/javascript Expires: Tue, 21 Jan 2025 23:26:32 GMT Last-Modified: Wed, 20 Nov 2024 13:19:22 GMT ETag: W/"13395-1732108762000" Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-ORACLE-DMS-RID: 0 X-Content-Type-Options: nosniff X-ORACLE-DMS-ECID: d51cf803-2cfa-4f0d-b979-dc64dc3b274a-00354596 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Content-Length: 13395 Date: Tue, 14 Jan 2025 23:26:32 GMT Connection: close
2025-01-14 23:26:32 UTC	1348	IN	Data Raw: 2f 2a 0d 0a 43 72 79 70 74 6f 4a 53 20 76 33 2e 31 2e 32 0d 0a 63 6f 64 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 2f 63 72 79 70 74 6f 2d 6a 73 0d 0a 28 63 29 20 32 30 30 39 2d 32 30 31 33 20 62 79 20 4a 65 66 66 20 4d 6f 74 74 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 63 6f 64 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 2f 63 72 79 70 74 6f 2d 6a 73 2f 77 69 6b 69 2f 4c 69 63 65 6e 73 65 0d 0a 2a 2f 0d 0a 76 61 72 20 43 72 79 70 74 6f 4a 53 3d 43 72 79 70 74 6f 4a 53 7c 7c 66 75 6e 63 74 69 6f 6e 28 75 2c 70 29 7b 76 61 72 20 64 3d 7b 7d 2c 6c 3d 64 2e 6c 69 62 3d 7b 7d 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 74 3d 6c 2e 42 61 73 65 3d 7b 65 78 74 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 73 2e 70 72 6f 74 6f 74 Data Ascii: /CryptoJS v3.1.2code.google.com/p/crypto-js(c) 2009-2013 by Jeff Mott. All rights reserved.code.google.com/p/crypto-js/wiki/License/var CryptoJS=CryptoJS\|\|function(u,p){var d={},l=d.lib={},s=function(){},t=l.Base={extend:function(a){s.protot
2025-01-14 23:26:32 UTC	12047	IN	Data Raw: 3b 65 3c 61 3b 65 2b 3d 34 29 63 2e 70 75 73 68 28 34 32 39 34 39 36 37 32 39 36 2a 75 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 72 2e 69 6e 69 74 28 63 2c 61 29 7d 7d 29 2c 77 3d 64 2e 65 6e 63 3d 7b 7d 2c 76 3d 77 2e 48 65 78 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 61 2e 77 6f 72 64 73 3b 61 3d 61 2e 73 69 67 42 79 74 65 73 3b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 6a 3d 30 3b 6a 3c 61 3b 6a 2b 2b 29 7b 76 61 72 20 6b 3d 63 5b 6a 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 38 2a 28 6a 25 34 29 26 32 35 35 3b 65 2e 70 75 73 68 28 28 6b 3e 3e 3e 34 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 29 3b 65 2e 70 75 73 68 28 28 6b 26 31 35 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 29 7d 72 65 74 Data Ascii: ;e<a;e+=4)c.push(4294967296u.random()\|0);return new r.init(c,a)}}),w=d.enc={},v=w.Hex={stringify:function(a){var c=a.words;a=a.sigBytes;for(var e=[],j=0;j<a;j++){var k=c[j>>>2]>>>24-8(j%4)&255;e.push((k>>>4).toString(16));e.push((k&15).toString(16))}ret

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49751	104.102.53.18	443	3364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 23:26:31 UTC	396	OUT	GET /javax.faces.resource/core.js.xhtml?ln=primefaces&v=8.0 HTTP/1.1 Host: www.lbpiaccess.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 23:26:33 UTC	538	IN	HTTP/1.1 200 OK Content-Type: text/javascript Expires: Tue, 21 Jan 2025 23:26:32 GMT Last-Modified: Thu, 05 Mar 2020 02:53:08 GMT ETag: W/"43094-1583376788000" Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-ORACLE-DMS-RID: 0 X-Content-Type-Options: nosniff X-ORACLE-DMS-ECID: d51cf803-2cfa-4f0d-b979-dc64dc3b274a-003545a1 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Date: Tue, 14 Jan 2025 23:26:32 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2025-01-14 23:26:33 UTC	15846	IN	Data Raw: 30 30 30 30 39 46 31 30 0d 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 42 72 6f 77 73 65 72 20 50 6c 75 67 69 6e 20 30 2e 31 2e 30 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 67 61 62 63 65 62 2f 6a 71 75 65 72 79 2d 62 72 6f 77 73 65 72 2d 70 6c 75 67 69 6e 0a 20 2a 0a 20 2a 20 4f 72 69 67 69 6e 61 6c 20 6a 71 75 65 72 79 2d 62 72 6f 77 73 65 72 20 63 6f 64 65 20 43 6f 70 79 72 69 67 68 74 20 32 30 30 35 2c 20 32 30 31 35 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 4d 6f 64 69 66 69 63 61 74 69 6f 6e 73 20 43 6f 70 79 72 69 67 Data Ascii: 00009F10/! jQuery Browser Plugin 0.1.0 * https://github.com/gabceb/jquery-browser-plugin * * Original jquery-browser code Copyright 2005, 2015 jQuery Foundation, Inc. and other contributors * http://jquery.org/license * * Modifications Copyrig
2025-01-14 23:26:33 UTC	15831	IN	Data Raw: 2b 68 2b 62 2b 27 22 20 76 61 6c 75 65 3d 22 27 2b 65 2b 27 22 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 6f 66 66 22 20 2f 3e 27 29 7d 7d 7d 7d 2c 75 70 64 61 74 65 48 65 61 64 3a 66 75 6e 63 74 69 6f 6e 28 64 29 7b 76 61 72 20 62 3d 24 2e 61 6a 61 78 53 65 74 75 70 28 29 5b 22 63 61 63 68 65 22 5d 3b 24 2e 61 6a 61 78 53 65 74 75 70 28 29 5b 22 63 61 63 68 65 22 5d 3d 74 72 75 65 3b 76 61 72 20 61 3d 6e 65 77 20 52 65 67 45 78 70 28 22 3c 68 65 61 64 5b 5e 3e 5d 2a 3e 22 2c 22 67 69 22 29 2e 65 78 65 63 28 64 29 5b 30 5d 3b 76 61 72 20 63 3d 64 2e 69 6e 64 65 78 4f 66 28 61 29 2b 61 2e 6c 65 6e 67 74 68 3b 24 28 22 68 65 61 64 22 29 2e 68 74 6d 6c 28 64 2e 73 75 62 73 74 72 69 6e 67 28 63 2c 64 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 3c 2f 68 65 61 Data Ascii: +h+b+'" value="'+e+'" autocomplete="off" />')}}}},updateHead:function(d){var b=$.ajaxSetup()["cache"];$.ajaxSetup()["cache"]=true;var a=new RegExp("<head[^>]*>","gi").exec(d)[0];var c=d.indexOf(a)+a.length;$("head").html(d.substring(c,d.lastIndexOf("</hea
2025-01-14 23:26:33 UTC	9055	IN	Data Raw: 3d 65 2b 22 5f 6d 6f 64 61 6c 22 3b 76 61 72 20 62 3d 24 28 27 3c 64 69 76 20 69 64 3d 22 27 2b 61 2b 27 22 20 63 6c 61 73 73 3d 22 75 69 2d 77 69 64 67 65 74 2d 6f 76 65 72 6c 61 79 20 75 69 2d 64 69 61 6c 6f 67 2d 6d 61 73 6b 22 3e 3c 2f 64 69 76 3e 27 29 3b 62 2e 61 70 70 65 6e 64 54 6f 28 24 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 29 3b 62 2e 63 73 73 28 22 7a 2d 69 6e 64 65 78 22 2c 66 29 3b 72 65 74 75 72 6e 20 62 7d 2c 70 72 65 76 65 6e 74 54 61 62 62 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 64 2c 63 2c 61 29 7b 76 61 72 20 62 3d 24 28 64 6f 63 75 6d 65 6e 74 29 3b 62 2e 6f 6e 28 22 66 6f 63 75 73 2e 22 2b 64 2b 22 20 6d 6f 75 73 65 64 6f 77 6e 2e 22 2b 64 2b 22 20 6d 6f 75 73 65 75 70 2e 22 2b 64 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 Data Ascii: =e+"_modal";var b=$('<div id="'+a+'" class="ui-widget-overlay ui-dialog-mask"></div>');b.appendTo($(document.body));b.css("z-index",f);return b},preventTabbing:function(d,c,a){var b=$(document);b.on("focus."+d+" mousedown."+d+" mouseup."+d,function(e){if(
2025-01-14 23:26:33 UTC	106	IN	Data Raw: 30 30 30 30 30 30 35 45 0d 0a 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 73 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 77 65 62 6b 69 74 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7d 69 66 28 21 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 0d 0a Data Ascii: 0000005Et.prototype.msMatchesSelector\|\|Element.prototype.webkitMatchesSelector}if(!Element.prototype.c
2025-01-14 23:26:33 UTC	102	IN	Data Raw: 30 30 30 30 30 30 35 41 0d 0a 6c 6f 73 65 73 74 29 7b 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 6f 73 65 73 74 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 61 3d 74 68 69 73 3b 64 6f 7b 69 66 28 61 2e 6d 61 74 63 68 65 73 28 62 29 29 7b 72 65 74 75 72 6e 20 61 7d 61 3d 61 2e 0d 0a Data Ascii: 0000005Alosest){Element.prototype.closest=function(b){var a=this;do{if(a.matches(b)){return a}a=a.
2025-01-14 23:26:33 UTC	2202	IN	Data Raw: 30 30 30 30 30 38 38 45 0d 0a 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 7c 7c 61 2e 70 61 72 65 6e 74 4e 6f 64 65 7d 77 68 69 6c 65 28 61 21 3d 3d 6e 75 6c 6c 26 26 61 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 31 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 69 66 28 21 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 29 7b 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 29 7b 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 66 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 61 20 52 65 67 45 78 70 22 29 7d 69 66 28 62 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 62 3d 30 7d Data Ascii: 0000088EparentElement\|\|a.parentNode}while(a!==null&&a.nodeType===1);return null}}if(!String.prototype.includes){String.prototype.includes=function(a,b){if(a instanceof RegExp){throw TypeError("first argument must not be a RegExp")}if(b===undefined){b=0}
2025-01-14 23:26:33 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49757	104.102.53.18	443	3364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 23:26:32 UTC	596	OUT	GET /javax.faces.resource/validation/beanvalidation.js.xhtml?ln=primefaces&v=8.0 HTTP/1.1 Host: www.lbpiaccess.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.giselabravo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 23:26:32 UTC	499	IN	HTTP/1.1 200 OK Content-Type: text/javascript Expires: Tue, 21 Jan 2025 23:26:32 GMT Last-Modified: Thu, 05 Mar 2020 02:53:08 GMT ETag: W/"9675-1583376788000" Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-ORACLE-DMS-RID: 0 X-Content-Type-Options: nosniff X-ORACLE-DMS-ECID: d51cf803-2cfa-4f0d-b979-dc64dc3b274a-0035459f X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Content-Length: 9675 Date: Tue, 14 Jan 2025 23:26:32 GMT Connection: close
2025-01-14 23:26:32 UTC	1354	IN	Data Raw: 69 66 28 77 69 6e 64 6f 77 2e 50 72 69 6d 65 46 61 63 65 73 29 7b 50 72 69 6d 65 46 61 63 65 73 2e 6c 6f 63 61 6c 65 73 2e 65 6e 5f 55 53 2e 6d 65 73 73 61 67 65 73 5b 22 6a 61 76 61 78 2e 66 61 63 65 73 2e 76 61 6c 69 64 61 74 6f 72 2e 42 65 61 6e 56 61 6c 69 64 61 74 6f 72 2e 4d 45 53 53 41 47 45 22 5d 3d 22 7b 30 7d 22 3b 50 72 69 6d 65 46 61 63 65 73 2e 6c 6f 63 61 6c 65 73 2e 65 6e 5f 55 53 2e 6d 65 73 73 61 67 65 73 5b 22 6a 61 76 61 78 2e 76 61 6c 69 64 61 74 69 6f 6e 2e 63 6f 6e 73 74 72 61 69 6e 74 73 2e 41 73 73 65 72 74 46 61 6c 73 65 2e 6d 65 73 73 61 67 65 22 5d 3d 22 6d 75 73 74 20 62 65 20 66 61 6c 73 65 22 3b 50 72 69 6d 65 46 61 63 65 73 2e 6c 6f 63 61 6c 65 73 2e 65 6e 5f 55 53 2e 6d 65 73 73 61 67 65 73 5b 22 6a 61 76 61 78 2e 76 61 6c Data Ascii: if(window.PrimeFaces){PrimeFaces.locales.en_US.messages["javax.faces.validator.BeanValidator.MESSAGE"]="{0}";PrimeFaces.locales.en_US.messages["javax.validation.constraints.AssertFalse.message"]="must be false";PrimeFaces.locales.en_US.messages["javax.val
2025-01-14 23:26:32 UTC	8321	IN	Data Raw: 72 61 69 6e 74 73 2e 4e 65 67 61 74 69 76 65 2e 6d 65 73 73 61 67 65 22 5d 3d 22 6d 75 73 74 20 62 65 20 6c 65 73 73 20 74 68 61 6e 20 30 22 3b 50 72 69 6d 65 46 61 63 65 73 2e 6c 6f 63 61 6c 65 73 2e 65 6e 5f 55 53 2e 6d 65 73 73 61 67 65 73 5b 22 6a 61 76 61 78 2e 76 61 6c 69 64 61 74 69 6f 6e 2e 63 6f 6e 73 74 72 61 69 6e 74 73 2e 4e 65 67 61 74 69 76 65 4f 72 5a 65 72 6f 2e 6d 65 73 73 61 67 65 22 5d 3d 22 6d 75 73 74 20 62 65 20 6c 65 73 73 20 74 68 61 6e 20 6f 72 20 65 71 75 61 6c 20 74 6f 20 30 22 3b 50 72 69 6d 65 46 61 63 65 73 2e 6c 6f 63 61 6c 65 73 2e 65 6e 5f 55 53 2e 6d 65 73 73 61 67 65 73 5b 22 6a 61 76 61 78 2e 76 61 6c 69 64 61 74 69 6f 6e 2e 63 6f 6e 73 74 72 61 69 6e 74 73 2e 4e 6f 74 42 6c 61 6e 6b 2e 6d 65 73 73 61 67 65 22 5d 3d 22 Data Ascii: raints.Negative.message"]="must be less than 0";PrimeFaces.locales.en_US.messages["javax.validation.constraints.NegativeOrZero.message"]="must be less than or equal to 0";PrimeFaces.locales.en_US.messages["javax.validation.constraints.NotBlank.message"]="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49758	104.102.53.18	443	3364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 23:26:32 UTC	406	OUT	GET /javax.faces.resource/cryptojs/enc-base64-min.js.xhtml?ln=scripts HTTP/1.1 Host: www.lbpiaccess.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 23:26:32 UTC	497	IN	HTTP/1.1 200 OK Content-Length: 877 Content-Type: text/javascript Expires: Tue, 21 Jan 2025 23:26:32 GMT Last-Modified: Wed, 20 Nov 2024 13:19:22 GMT ETag: W/"877-1732108762000" Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-ORACLE-DMS-RID: 0 X-Content-Type-Options: nosniff X-ORACLE-DMS-ECID: d51cf803-2cfa-4f0d-b979-dc64dc3b274a-0035459e X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Date: Tue, 14 Jan 2025 23:26:32 GMT Connection: close
2025-01-14 23:26:32 UTC	877	IN	Data Raw: 2f 2a 0d 0a 43 72 79 70 74 6f 4a 53 20 76 33 2e 31 2e 32 0d 0a 63 6f 64 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 2f 63 72 79 70 74 6f 2d 6a 73 0d 0a 28 63 29 20 32 30 30 39 2d 32 30 31 33 20 62 79 20 4a 65 66 66 20 4d 6f 74 74 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 63 6f 64 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 2f 63 72 79 70 74 6f 2d 6a 73 2f 77 69 6b 69 2f 4c 69 63 65 6e 73 65 0d 0a 2a 2f 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 43 72 79 70 74 6f 4a 53 2c 6a 3d 68 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 3b 68 2e 65 6e 63 2e 42 61 73 65 36 34 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 65 3d 62 2e 77 6f 72 64 73 2c 66 3d 62 2e 73 69 67 42 79 74 65 73 2c 63 Data Ascii: /CryptoJS v3.1.2code.google.com/p/crypto-js(c) 2009-2013 by Jeff Mott. All rights reserved.code.google.com/p/crypto-js/wiki/License/(function(){var h=CryptoJS,j=h.lib.WordArray;h.enc.Base64={stringify:function(b){var e=b.words,f=b.sigBytes,c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49762	104.102.53.18	443	3364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 23:26:32 UTC	402	OUT	GET /javax.faces.resource/components.js.xhtml?ln=primefaces&v=8.0 HTTP/1.1 Host: www.lbpiaccess.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 23:26:34 UTC	539	IN	HTTP/1.1 200 OK Content-Type: text/javascript Expires: Tue, 21 Jan 2025 23:26:33 GMT Last-Modified: Thu, 05 Mar 2020 02:53:08 GMT ETag: W/"434646-1583376788000" Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-ORACLE-DMS-RID: 0 X-Content-Type-Options: nosniff X-ORACLE-DMS-ECID: d51cf803-2cfa-4f0d-b979-dc64dc3b274a-003545b4 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Date: Tue, 14 Jan 2025 23:26:33 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2025-01-14 23:26:34 UTC	15845	IN	Data Raw: 30 30 30 30 39 46 46 36 0d 0a 69 66 28 21 50 72 69 6d 65 46 61 63 65 73 2e 64 69 61 6c 6f 67 29 7b 50 72 69 6d 65 46 61 63 65 73 2e 64 69 61 6c 6f 67 3d 7b 7d 3b 50 72 69 6d 65 46 61 63 65 73 2e 64 69 61 6c 6f 67 2e 44 69 61 6c 6f 67 48 61 6e 64 6c 65 72 3d 7b 6f 70 65 6e 44 69 61 6c 6f 67 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 76 61 72 20 68 3d 74 68 69 73 2e 66 69 6e 64 52 6f 6f 74 57 69 6e 64 6f 77 28 29 2c 6c 3d 66 2e 73 6f 75 72 63 65 43 6f 6d 70 6f 6e 65 6e 74 49 64 2b 22 5f 64 6c 67 22 3b 69 66 28 68 2e 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 6c 29 29 7b 72 65 74 75 72 6e 7d 76 61 72 20 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 76 3d 77 69 6e 64 6f 77 3b 76 61 72 20 78 3d 5b 5d 3b 77 68 69 6c 65 28 76 2e 66 Data Ascii: 00009FF6if(!PrimeFaces.dialog){PrimeFaces.dialog={};PrimeFaces.dialog.DialogHandler={openDialog:function(f){var h=this.findRootWindow(),l=f.sourceComponentId+"_dlg";if(h.document.getElementById(l)){return}var k=function(){var v=window;var x=[];while(v.f
2025-01-14 23:26:34 UTC	15825	IN	Data Raw: 6f 6d 70 6c 65 74 65 2d 69 6e 70 75 74 2d 74 6f 6b 65 6e 22 29 3b 74 68 69 73 2e 6d 75 6c 74 69 49 74 65 6d 43 6f 6e 74 61 69 6e 65 72 2e 68 6f 76 65 72 28 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 74 68 69 73 29 2e 61 64 64 43 6c 61 73 73 28 22 75 69 2d 73 74 61 74 65 2d 68 6f 76 65 72 22 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 74 68 69 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 75 69 2d 73 74 61 74 65 2d 68 6f 76 65 72 22 29 7d 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 69 6e 70 75 74 2e 66 6f 63 75 73 28 29 7d 29 3b 74 68 69 73 2e 69 6e 70 75 74 2e 66 6f 63 75 73 28 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 6d 75 6c 74 69 49 74 65 6d 43 6f 6e 74 61 69 6e 65 72 2e 61 64 64 43 6c 61 73 73 28 22 75 69 2d 73 74 61 74 65 2d 66 6f Data Ascii: omplete-input-token");this.multiItemContainer.hover(function(){$(this).addClass("ui-state-hover")},function(){$(this).removeClass("ui-state-hover")}).click(function(){b.input.focus()});this.input.focus(function(){b.multiItemContainer.addClass("ui-state-fo
2025-01-14 23:26:34 UTC	9292	IN	Data Raw: 68 69 73 2e 63 66 67 2e 62 6c 6f 63 6b 65 64 29 7b 74 68 69 73 2e 73 68 6f 77 28 29 7d 74 68 69 73 2e 72 65 6d 6f 76 65 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 28 74 68 69 73 2e 69 64 29 7d 2c 72 65 66 72 65 73 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 62 6c 6f 63 6b 65 72 2e 72 65 6d 6f 76 65 28 29 3b 74 68 69 73 2e 62 6c 6f 63 6b 2e 63 68 69 6c 64 72 65 6e 28 22 2e 75 69 2d 62 6c 6f 63 6b 75 69 2d 63 6f 6e 74 65 6e 74 22 29 2e 72 65 6d 6f 76 65 28 29 3b 24 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 66 66 28 22 70 66 41 6a 61 78 53 65 6e 64 2e 22 2b 74 68 69 73 2e 69 64 2b 22 20 70 66 41 6a 61 78 43 6f 6d 70 6c 65 74 65 2e 22 2b 74 68 69 73 2e 69 64 29 3b 74 68 69 73 2e 5f 73 75 70 65 72 28 61 29 7d 2c 62 69 6e 64 54 72 69 67 67 65 72 73 3a 66 75 Data Ascii: his.cfg.blocked){this.show()}this.removeScriptElement(this.id)},refresh:function(a){this.blocker.remove();this.block.children(".ui-blockui-content").remove();$(document).off("pfAjaxSend."+this.id+" pfAjaxComplete."+this.id);this._super(a)},bindTriggers:fu
2025-01-14 23:26:34 UTC	3854	IN	Data Raw: 30 30 30 30 30 46 30 32 0d 0a 69 73 2e 73 74 61 74 65 4b 65 79 3d 22 63 61 72 6f 75 73 65 6c 2d 22 2b 74 68 69 73 2e 69 64 3b 74 68 69 73 2e 72 65 73 74 6f 72 65 53 74 61 74 65 28 29 7d 74 68 69 73 2e 72 65 6e 64 65 72 44 65 66 65 72 72 65 64 28 29 7d 2c 5f 72 65 6e 64 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 75 70 64 61 74 65 4e 61 76 69 67 61 74 6f 72 73 28 29 3b 74 68 69 73 2e 62 69 6e 64 45 76 65 6e 74 73 28 29 3b 69 66 28 74 68 69 73 2e 63 66 67 2e 76 65 72 74 69 63 61 6c 29 7b 74 68 69 73 2e 63 61 6c 63 75 6c 61 74 65 49 74 65 6d 48 65 69 67 68 74 73 28 29 7d 65 6c 73 65 7b 69 66 28 74 68 69 73 2e 63 66 67 2e 72 65 73 70 6f 6e 73 69 76 65 29 7b 74 68 69 73 2e 72 65 66 72 65 73 68 44 69 6d 65 6e 73 69 6f 6e 73 28 29 7d 65 6c 73 65 7b Data Ascii: 00000F02is.stateKey="carousel-"+this.id;this.restoreState()}this.renderDeferred()},_render:function(){this.updateNavigators();this.bindEvents();if(this.cfg.vertical){this.calculateItemHeights()}else{if(this.cfg.responsive){this.refreshDimensions()}else{
2025-01-14 23:26:34 UTC	102	IN	Data Raw: 30 30 30 30 30 30 35 41 0d 0a 2e 65 61 73 69 6e 67 3b 74 68 69 73 2e 69 74 65 6d 73 43 6f 6e 74 61 69 6e 65 72 2e 61 6e 69 6d 61 74 65 28 61 2c 7b 64 75 72 61 74 69 6f 6e 3a 74 68 69 73 2e 63 66 67 2e 65 66 66 65 63 74 44 75 72 61 74 69 6f 6e 2c 65 61 73 69 6e 67 3a 74 68 69 73 2e 63 66 67 2e 65 61 0d 0a Data Ascii: 0000005A.easing;this.itemsContainer.animate(a,{duration:this.cfg.effectDuration,easing:this.cfg.ea
2025-01-14 23:26:34 UTC	16	IN	Data Raw: 30 30 30 30 30 30 30 34 0d 0a 73 69 6e 67 0d 0a Data Ascii: 00000004sing
2025-01-14 23:26:34 UTC	102	IN	Data Raw: 30 30 30 30 30 30 35 41 0d 0a 2c 63 6f 6d 70 6c 65 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 70 61 67 65 3d 63 3b 62 2e 66 69 72 73 74 3d 62 2e 70 61 67 65 2a 62 2e 63 6f 6c 75 6d 6e 73 3b 62 2e 75 70 64 61 74 65 4e 61 76 69 67 61 74 6f 72 73 28 29 3b 62 2e 73 74 61 74 65 68 6f 6c 64 65 72 2e 0d 0a Data Ascii: 0000005A,complete:function(){b.page=c;b.first=b.page*b.columns;b.updateNavigators();b.stateholder.
2025-01-14 23:26:34 UTC	3900	IN	Data Raw: 30 30 30 30 30 46 33 30 0d 0a 76 61 6c 28 62 2e 70 61 67 65 29 3b 69 66 28 62 2e 63 66 67 2e 73 74 61 74 65 66 75 6c 29 7b 62 2e 73 61 76 65 53 74 61 74 65 28 29 7d 7d 7d 29 7d 7d 2c 73 74 61 72 74 41 75 74 6f 70 6c 61 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 3b 74 68 69 73 2e 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 61 2e 70 61 67 65 3d 3d 3d 28 61 2e 74 6f 74 61 6c 50 61 67 65 73 2d 31 29 29 7b 61 2e 73 65 74 50 61 67 65 28 30 29 7d 65 6c 73 65 7b 61 2e 73 65 74 50 61 67 65 28 61 2e 70 61 67 65 2b 31 29 7d 7d 2c 74 68 69 73 2e 63 66 67 2e 61 75 74 6f 70 6c 61 79 49 6e 74 65 72 76 61 6c 29 7d 2c 73 74 6f 70 41 75 74 6f 70 6c 61 79 3a 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: 00000F30val(b.page);if(b.cfg.stateful){b.saveState()}}})}},startAutoplay:function(){var a=this;this.interval=setInterval(function(){if(a.page===(a.totalPages-1)){a.setPage(0)}else{a.setPage(a.page+1)}},this.cfg.autoplayInterval)},stopAutoplay:function()
2025-01-14 23:26:34 UTC	102	IN	Data Raw: 30 30 30 30 30 30 35 41 0d 0a 64 67 65 74 22 3e 3c 64 69 76 20 72 6f 6c 65 3d 22 63 68 65 63 6b 62 6f 78 22 20 74 61 62 69 6e 64 65 78 3d 22 30 22 20 61 72 69 61 2d 63 68 65 63 6b 65 64 3d 22 27 2b 21 68 2b 27 22 20 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 3d 22 27 2b 66 2b 27 22 20 63 6c 61 73 0d 0a Data Ascii: 0000005Adget"><div role="checkbox" tabindex="0" aria-checked="'+!h+'" aria-labelledby="'+f+'" clas
2025-01-14 23:26:34 UTC	16	IN	Data Raw: 30 30 30 30 30 30 30 34 0d 0a 73 3d 22 27 0d 0a Data Ascii: 00000004s="'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49765	104.102.53.18	443	3364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 23:26:33 UTC	402	OUT	GET /javax.faces.resource/cryptojs/sha256-min.js.xhtml?ln=scripts HTTP/1.1 Host: www.lbpiaccess.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 23:26:33 UTC	499	IN	HTTP/1.1 200 OK Content-Length: 1459 Content-Type: text/javascript Expires: Tue, 21 Jan 2025 23:26:33 GMT Last-Modified: Wed, 20 Nov 2024 13:19:22 GMT ETag: W/"1459-1732108762000" Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-ORACLE-DMS-RID: 0 X-Content-Type-Options: nosniff X-ORACLE-DMS-ECID: d51cf803-2cfa-4f0d-b979-dc64dc3b274a-003545b7 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Date: Tue, 14 Jan 2025 23:26:33 GMT Connection: close
2025-01-14 23:26:33 UTC	1350	IN	Data Raw: 2f 2a 0d 0a 43 72 79 70 74 6f 4a 53 20 76 33 2e 31 2e 32 0d 0a 63 6f 64 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 2f 63 72 79 70 74 6f 2d 6a 73 0d 0a 28 63 29 20 32 30 30 39 2d 32 30 31 33 20 62 79 20 4a 65 66 66 20 4d 6f 74 74 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 63 6f 64 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 2f 63 72 79 70 74 6f 2d 6a 73 2f 77 69 6b 69 2f 4c 69 63 65 6e 73 65 0d 0a 2a 2f 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 66 6f 72 28 76 61 72 20 67 3d 43 72 79 70 74 6f 4a 53 2c 68 3d 67 2e 6c 69 62 2c 76 3d 68 2e 57 6f 72 64 41 72 72 61 79 2c 6a 3d 68 2e 48 61 73 68 65 72 2c 68 3d 67 2e 61 6c 67 6f 2c 73 3d 5b 5d 2c 74 3d 5b 5d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 71 29 7b 72 65 74 75 72 6e 20 34 32 39 34 Data Ascii: /CryptoJS v3.1.2code.google.com/p/crypto-js(c) 2009-2013 by Jeff Mott. All rights reserved.code.google.com/p/crypto-js/wiki/License/(function(k){for(var g=CryptoJS,h=g.lib,v=h.WordArray,j=h.Hasher,h=g.algo,s=[],t=[],u=function(q){return 4294
2025-01-14 23:26:33 UTC	109	IN	Data Raw: 61 73 68 3d 74 68 69 73 2e 5f 68 61 73 68 2e 63 6c 6f 6e 65 28 29 3b 72 65 74 75 72 6e 20 62 7d 7d 29 3b 67 2e 53 48 41 32 35 36 3d 6a 2e 5f 63 72 65 61 74 65 48 65 6c 70 65 72 28 68 29 3b 67 2e 48 6d 61 63 53 48 41 32 35 36 3d 6a 2e 5f 63 72 65 61 74 65 48 6d 61 63 48 65 6c 70 65 72 28 68 29 7d 29 28 4d 61 74 68 29 3b 0d 0a Data Ascii: ash=this._hash.clone();return b}});g.SHA256=j._createHelper(h);g.HmacSHA256=j._createHmacHelper(h)})(Math);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49766	104.102.53.18	443	3364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 23:26:33 UTC	616	OUT	GET /resources/images/iAccess_Header.png HTTP/1.1 Host: www.lbpiaccess.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.giselabravo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 23:26:33 UTC	447	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Last-Modified: Wed, 20 Nov 2024 13:19:20 GMT X-ORACLE-DMS-ECID: 7a38b041-505a-4402-8d39-5435ce46a11f-009d4bf4 X-ORACLE-DMS-RID: 0 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Date: Tue, 14 Jan 2025 23:26:33 GMT Content-Length: 244291 Connection: close
2025-01-14 23:26:33 UTC	15937	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 08 40 00 00 00 b4 08 06 00 00 00 9e a9 cb 94 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 0a 49 69 43 43 50 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 48 89 9d 53 77 58 93 f7 16 3e df f7 65 0f 56 42 d8 f0 b1 97 6c 81 00 22 23 ac 08 c8 10 59 a2 10 92 00 61 84 10 12 40 c5 85 88 0a 56 14 15 11 9c 48 55 c4 82 d5 0a 48 9d 88 e2 a0 28 b8 67 41 8a 88 5a 8b 55 5c 38 ee 1f dc a7 b5 7d 7a ef ed ed fb d7 fb bc e7 9c e7 fc ce 79 cf 0f 80 11 12 26 91 e6 a2 6a 00 39 52 85 3c 3a d8 1f 8f 4f 48 c4 c9 bd 80 02 15 48 e0 04 20 10 e6 cb c2 67 05 c5 00 00 f0 03 79 78 7e 74 b0 3f fc 01 af 6f 00 02 00 70 d5 2e 24 12 c7 e1 ff 83 ba 50 26 57 00 20 91 00 e0 22 12 e7 0b 01 90 52 00 c8 2e 54 c8 14 00 c8 18 Data Ascii: PNGIHDR@gAMAaIiCCPsRGB IEC61966-2.1HSwX>eVBl"#Ya@VHUH(gAZU\8}zy&j9R<:OHH gyx~t?op.$P&W "R.T
2025-01-14 23:26:33 UTC	16384	IN	Data Raw: 85 a9 10 04 f0 1b 77 00 9d ae 44 af 9d a7 cf ac a3 35 f4 ee fb 4c 37 f1 22 51 12 06 90 75 7a 1d b6 50 83 1f 8c fd 8a db c8 0f 03 4f 88 3a 94 80 1f 54 7e 12 9d 25 d9 76 2d 29 b7 d8 61 c6 b1 21 44 bf c5 e2 7d ba 40 aa ec 5f 44 39 aa 71 ff fa 17 4a 12 05 c4 98 05 8e e0 87 79 a1 34 4f 15 f9 ea c5 e7 6d 83 1e d7 a1 f0 69 45 79 76 c0 dc 5e 92 ec ef 9a 8f 05 88 73 1b f5 b9 8a b7 ea 7b 30 e0 17 3b 62 c2 b6 ce fb ee d2 bb 14 c7 b8 5d ef 12 d1 87 80 14 01 42 84 98 4e b9 8c 1b bd d3 c7 27 a5 c0 50 97 88 38 f6 47 99 c6 ea 8f 42 7e 62 80 ce 8b a2 7e a6 74 56 03 5b 44 c7 3e 37 55 98 f5 25 3e 63 d8 02 34 e8 66 8b 74 a3 db 70 8a c5 b0 d3 ad ec 97 4f 0f b5 7d e5 c3 d9 49 63 f5 21 70 73 48 d5 1b 92 44 be 18 96 ed c4 18 40 22 31 35 6c f5 c2 f2 84 21 00 0d 28 a3 97 a6 7e b4 Data Ascii: wD5L7"QuzPO:T~%v-)a!D}@_D9qJy4OmiEyv^s{0;b]BN'P8GB~b~tV[D>7U%>c4ftpO}Ic!psHD@"15l!(~
2025-01-14 23:26:33 UTC	3501	IN	Data Raw: 3a 8f 9e f1 59 92 ed 9c cd 00 72 3a 13 99 63 f9 d9 44 74 e8 e7 4f 80 26 9d 42 fb 88 b1 09 d2 5e 65 d4 91 94 16 12 95 40 e8 d7 bc cd 00 07 35 28 46 10 fe 12 b5 20 3f 53 2b a1 03 3f a5 0f d2 8e a4 de 59 52 14 86 fa 3b 8b 0f 66 c6 2d 01 12 ea 75 39 9b 37 e9 a3 03 1a e0 83 d5 9e ec 0f 5b 8a f8 90 0d 0c 06 98 40 da 20 8e e1 0c bd 84 ab 34 68 03 55 d4 07 a4 f7 cf 72 e6 27 de fd b2 e0 78 38 a8 0a 6f 3d 36 d7 eb 35 a6 cd 9a ec 03 8c 98 1a e2 78 3c 14 f0 5d e7 44 77 c9 69 7c bd 5e b3 81 c9 e4 0f 31 5d 85 5f 96 e1 8c a2 54 f7 7a bd e2 d6 a7 cf 50 fa 79 3a 9d e2 f9 64 ac 83 eb f5 8a db ba 4e e9 38 ef 71 3a 1e 2b 3d b3 95 9d 6f b7 2b d6 eb 35 d1 50 64 0e 26 90 23 25 75 46 e1 e9 72 b9 4c 23 81 30 33 4e a7 63 93 16 a1 5e af e7 f3 05 d7 f3 c5 d4 b7 b7 2d e0 e5 e5 05 a7 Data Ascii: :Yr:cDtO&B^e@5(F ?S+?YR;f-u97[@ 4hUr'x8o=65x<]Dwi\|^1]_TzPy:dN8q:+=o+5Pd&#%uFrL#03Nc^-
2025-01-14 23:26:33 UTC	16384	IN	Data Raw: 92 ce 01 8d 02 33 d2 c5 07 8d 03 cc 53 dc a3 8a 30 db 95 79 0a 8c ea 4f e7 08 9a 6f 2c 6c 01 cb 41 bb 71 d1 1b b6 23 ef 1c 02 60 e5 4b 75 34 48 65 e6 b9 80 f4 a2 29 bd 8a 39 a9 2c e0 80 2b ce 09 94 ea a6 1c 6c 09 51 93 dd 4d 9b 22 2d cc 79 dd 46 e1 a2 aa c3 98 e4 42 a1 56 0a c5 b8 11 d5 c5 11 a1 c3 4b a4 36 82 1a 96 13 40 ca 05 dc 19 1d 02 63 12 02 62 1c 13 31 94 4c c6 aa 2f 33 40 ca bf bd 32 db da fe 3e 24 bf c2 82 94 79 e0 9f af 17 71 f2 4b 5b d2 c2 70 eb be e6 8b 63 2e 31 cd d9 bc 9f 42 23 a8 37 89 f2 ba 56 97 a4 ac 55 02 ba 5c 59 72 88 f6 a1 7c eb b2 35 e9 3e ea 26 6d 20 83 08 04 0c a8 cf 38 a2 69 74 17 0b 3c c1 e9 f3 2d 48 58 db f1 99 9c 3b 4f e1 69 96 0a 03 40 13 c9 a1 ae 07 be 23 92 43 12 fc 06 83 2e 17 64 e1 0c 04 91 05 c6 1e 04 c1 3c 4d 45 21 ed Data Ascii: 3S0yOo,lAq#`Ku4He)9,+lQM"-yFBVK6@cb1L/3@2>$yqK[pc.1B#7VU\Yr\|5>&m 8it<-HX;Oi@#C.d<ME!
2025-01-14 23:26:33 UTC	16384	IN	Data Raw: 56 00 02 05 f3 66 94 08 16 a6 e3 2d 39 09 86 9b f5 44 29 0a 83 be 87 45 d9 32 00 7d 24 87 d8 70 06 5f 68 85 50 04 c6 de 41 0e 44 87 31 53 bc 01 ae 8b 4f 31 95 81 ef 72 8e 0b ef b2 ef 98 00 04 a2 0c a2 18 84 93 f4 bb f3 e9 dc 90 7d b4 ab 0f a4 48 14 de 41 8b 04 e1 88 80 1d 20 06 28 46 82 20 94 5c 65 7d 33 8b f3 58 19 60 0e 39 94 5f ff 50 8e 04 d1 39 71 33 2f ce 81 0e 87 72 0b d7 e0 85 c5 09 98 6e 2c 6b e3 12 9d 53 5b 4c 77 61 1e a0 00 38 09 77 3e 8e 65 0a f4 9c d1 c8 32 47 b2 2e 45 00 9b dd 3e 0e db 16 9d e1 a4 87 c1 92 b9 27 24 b0 c2 1d d1 20 c0 31 84 19 3b 67 86 f7 92 bf bd f7 11 90 94 15 06 06 66 46 0c 4a b7 b9 51 d2 6e 94 fe 8d c2 be b4 01 51 4a 1a a7 69 db 87 56 31 2c e7 34 b8 44 73 98 01 21 ea cf 08 c8 68 e7 0c 2e a8 6e cd 5b fb 47 b3 97 56 df 0b a8 Data Ascii: Vf-9D)E2}$p_hPAD1SO1r}HA (F \e}3X`9_P9q3/rn,kS[Lwa8w>e2G.E>'$ 1;gfFJQnQJiV1,4Ds!h.n[GV
2025-01-14 23:26:33 UTC	7952	IN	Data Raw: e0 2b d0 58 73 a7 f9 de af 6d 15 3f 9f 44 27 74 1d 9f 06 e3 ea b1 f2 43 a9 de 8d ee 4d ff 16 c2 e8 1a 9c e7 41 7d fa 9d 09 0d 12 20 5b 39 6f de bb cf 56 67 51 f3 f7 cf cd 96 c1 90 eb db 94 15 20 0f 60 32 e3 f8 71 4f 20 79 1a 74 9c 15 ca 48 17 1a f8 40 7b 7e 12 c7 65 e7 1f a8 af ae f3 4a 1a 7d 01 b4 8e b1 72 1a 4b 5f c6 0a bb 05 02 60 a4 a3 91 6e cb c9 94 e0 73 5e 4a 18 90 44 1c c5 88 e3 c8 64 99 b0 81 0e c5 66 15 78 73 94 a6 48 b3 4c 05 fc 39 81 49 72 9b cc 34 21 8b 00 0b ca a2 60 97 3f 28 0d 33 80 34 cb 90 a6 e9 c4 59 1f c0 18 12 27 eb 43 c8 59 33 18 0e 8d a1 1e e2 4a f3 3a 49 12 c5 33 e0 ac 01 14 48 63 38 1a 01 18 0f a6 48 ec 12 1a 3e f9 84 30 f2 8d 03 7c d4 6b 35 55 fe 2b 60 5f 8e 46 23 0c 87 c3 ea 7e 4e 08 7e c8 c6 64 7e 00 80 46 a3 ae c7 b8 a8 63 32 Data Ascii: +Xsm?D'tCMA} [9oVgQ `2qO ytH@{~eJ}rK_`ns^JDdfxsHL9Ir4!`?(34Y'CY3J:I3Hc8H>0\|k5U+`_F#~N~d~Fc2
2025-01-14 23:26:33 UTC	16384	IN	Data Raw: a5 0b cf c4 0d 80 ba 63 ac 9b e4 f0 97 c1 90 10 60 81 64 2d a5 21 b6 9a 0c bd 57 47 cb b0 3d 5a 34 7e b4 97 e6 9e 89 19 2f 09 d3 29 25 74 27 ec 51 a5 70 63 0a c8 c0 4a e9 f9 24 d4 49 b2 d4 53 8e 87 48 65 81 b0 de 63 8a 39 30 15 e4 56 35 88 fc 37 d3 bd c5 2c 10 d2 6c ae c1 a0 8d 0e 46 50 5d 46 9b 3f 63 1c aa 2e 58 18 91 99 49 2d b3 fb 0e 83 40 10 d5 32 33 c0 eb e4 e6 96 d3 3a 44 59 26 54 ea 37 cf 77 71 1c ab e0 84 6f 3e 32 40 0a 09 81 22 08 c2 9e 71 94 85 61 c1 4a 74 09 c0 50 12 c1 28 52 be 4c 16 80 0b 82 f0 cd 39 66 40 22 d3 c8 c9 59 52 fa 2c cb 32 93 09 22 42 12 d6 57 9d 5e f0 c2 a9 0c 89 74 34 42 14 c7 2a 88 66 3f 3f 13 f0 8b c0 04 cb 9f 8d 84 0a 3a 45 ea e4 32 bd 1c a4 68 93 31 5a da 17 35 60 42 02 88 c1 30 11 f8 01 30 fb 94 4f 1f 50 81 3f 09 21 10 54 Data Ascii: c`d-!WG=Z4~/)%t'QpcJ$ISHec90V57,lFP]F?c.XI-@23:DY&T7wqo>2@"qaJtP(RL9f@"YR,2"BW^t4B*f??:E2h1Z5`B00OP?!T
2025-01-14 23:26:33 UTC	16384	IN	Data Raw: b8 f8 fc 8b fe 0d cd 64 e5 c4 7d b1 e9 60 ef 7e 7c f1 f6 d7 e3 fd df 7f 16 be b3 fd 1f 0b e0 07 00 de f7 44 02 a5 39 b7 eb d0 4d f8 fa ed 7f 85 f7 5d ff 54 5c 7b c7 1b 31 37 58 78 a9 e8 e7 5e f0 6e 34 92 16 22 66 95 4c a4 71 76 40 33 55 54 5a 47 f4 df 4f 3a e5 2d 58 d1 1a e3 2b 0f d0 dc 60 17 be 76 d7 9b f0 c1 ef 3f 15 df db fe 8e 6a f0 83 bd ee d2 5a a1 41 fb 07 7a 77 e2 c6 1d ff 8a 8f fd e8 b9 b8 f6 ce d7 e1 60 ef be 05 c9 03 00 57 9c f2 57 e8 d4 56 83 bb eb d3 98 fb 68 0d a3 92 96 8c 31 05 40 72 d6 a4 27 6c fb 63 ac 6e 9f ba 20 d9 46 59 17 df bd ff af f0 a1 1f 3c 05 df be f7 4f b1 e3 e0 f5 c8 44 6a 4a 56 9a 6c b2 d4 2e f9 87 9c 3d ef 40 ff 7e dc b2 e3 fd f8 dc cd ff 03 9f fa f1 8b 70 cf be cf 8d 6d 3b 44 e7 1d f3 eb d8 38 7b 71 69 2c 94 cf 2d 33 73 9e Data Ascii: d}`~\|D9M]T\{17Xx^n4"fLqv@3UTZGO:-X+`v?jZAzw`WWVh1@r'lcn FY<ODjJVl.=@~pm;D8{qi,-3s
2025-01-14 23:26:33 UTC	7952	IN	Data Raw: cf 6c c3 c6 34 68 18 2f 20 f4 1a b5 00 24 1e f7 f1 13 17 fe 0a 6e df f5 6d 08 99 2a 4f 4a 59 4c 9c 28 b8 3a 24 a4 98 68 dc 0d 49 60 fd cc 09 78 eb 05 ef 81 c7 26 ab fb 0f ae 7d 07 0e 2f ec 07 00 24 48 54 0e f9 dc 33 9c 31 48 9d 4f cf b9 1e b3 f4 c6 ab 57 92 46 c2 f7 3d c4 71 e2 7e 17 f5 df 54 3e bf 4c 49 28 e5 95 4b 59 48 49 94 af 8c 42 f8 39 65 d0 e1 20 ed a3 72 fe a0 2b a4 04 b4 1c 79 52 21 ba 15 00 c2 65 14 b0 9a 32 d1 38 1a 05 df f1 05 a1 dd ff b3 13 29 61 4a 99 4d 6f 81 64 80 c0 fa 77 75 8b 5d 61 32 53 60 43 f5 4a 90 24 09 98 94 90 2c 0d 3b 96 9f 63 80 7d 18 4c c3 c2 55 1e e0 e9 3b 21 94 a9 53 4a a3 ec 19 4f 7b 9e c8 f9 af 0f c2 e4 ec 35 e3 5c 59 9f fe 9f 7e df 12 21 54 88 37 a6 d1 de 25 55 da c5 1b be 0f 8a ea 20 01 73 8e 89 13 0b e1 9b 2b c4 19 37 Data Ascii: l4h/ $nm*OJYL(:$hI`x&}/$HT31HOWF=q~T>LI(KYHIB9e r+yR!e28)aJModwu]a2S`CJ$,;c}LU;!SJO{5\Y~!T7%U s+7
2025-01-14 23:26:33 UTC	12216	IN	Data Raw: 7f ef fe 5b d0 8f e6 9c df dd be fb 1a d4 09 fd 04 00 0d af 89 0b 36 3e af 76 bd 4b a1 bf fa ee fb 30 8c 17 6a 3f 7f d9 29 6f c0 f6 75 cf 7c 0a 25 9a 1e fd ed 6d bf 81 fd f3 4f c2 f3 aa 41 13 e4 18 ce bf 73 06 3c e0 7b a5 eb 32 d3 bb 76 1c b9 23 69 98 0d dd 1b 03 82 48 c4 58 10 44 65 4e 70 a6 14 ae aa 48 10 01 85 fd 2f 67 a1 9c bd d6 86 6e 3b d8 00 20 0c 43 34 f5 4d 5e 8f 14 bf 09 17 39 02 41 70 8f 9b fe fb 7f 81 d2 70 97 2e a2 73 83 1a bd 7c 34 88 02 2f 5d c4 f3 b8 ba 09 ae 0f 8c 55 5d 49 07 2c 21 04 62 7d 73 de 15 fd 24 2f b3 a7 1d 88 a5 87 d2 b2 76 0a 01 a1 81 10 26 7c a8 f2 7e 5b 02 59 8d d1 b2 28 c7 bd 07 8f 9c bd e4 b4 1f 6b 45 d4 fb ae 14 60 5c a5 d7 80 46 9d 9b 43 6f 49 7b 09 0d 2d a4 d4 e9 34 54 64 85 fc 0d 1d 93 bb d0 ea 07 6e 47 9a b0 06 2b 8e Data Ascii: [6>vK0j?)ou\|%mOAs<{2v#iHXDeNpH/gn; C4M^9App.s\|4/]U]I,!b}s$/v&\|~[Y(kE`\FCoI{-4TdnG+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49768	104.102.53.18	443	3364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 23:26:33 UTC	401	OUT	GET /javax.faces.resource/app/clienthash.min.js.xhtml?ln=scripts HTTP/1.1 Host: www.lbpiaccess.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 23:26:33 UTC	499	IN	HTTP/1.1 200 OK Content-Length: 1776 Content-Type: text/javascript Expires: Tue, 21 Jan 2025 23:26:33 GMT Last-Modified: Wed, 20 Nov 2024 13:19:20 GMT ETag: W/"1776-1732108760000" Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-ORACLE-DMS-RID: 0 X-Content-Type-Options: nosniff X-ORACLE-DMS-ECID: d51cf803-2cfa-4f0d-b979-dc64dc3b274a-003545b8 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Date: Tue, 14 Jan 2025 23:26:33 GMT Connection: close
2025-01-14 23:26:33 UTC	1354	IN	Data Raw: 76 61 72 20 5f 30 78 31 63 66 33 3d 5b 27 65 6e 63 27 2c 27 74 6f 53 74 72 69 6e 67 27 2c 27 6c 65 6e 67 74 68 27 2c 27 42 61 73 65 36 34 27 2c 27 70 61 72 73 65 27 2c 27 65 6e 63 72 79 70 74 27 2c 27 73 75 62 73 74 72 27 2c 27 53 48 41 32 35 36 27 2c 27 41 45 53 27 5d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 30 62 62 65 36 2c 5f 30 78 31 63 66 33 65 36 29 7b 76 61 72 20 5f 30 78 33 31 30 34 66 63 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 33 31 36 63 33 32 29 7b 77 68 69 6c 65 28 2d 2d 5f 30 78 33 31 36 63 33 32 29 7b 5f 30 78 32 30 62 62 65 36 5b 27 70 75 73 68 27 5d 28 5f 30 78 32 30 62 62 65 36 5b 27 73 68 69 66 74 27 5d 28 29 29 3b 7d 7d 3b 5f 30 78 33 31 30 34 66 63 28 2b 2b 5f 30 78 31 63 66 33 65 36 29 3b 7d 28 5f 30 78 31 63 66 33 2c 30 78 31 38 Data Ascii: var _0x1cf3=['enc','toString','length','Base64','parse','encrypt','substr','SHA256','AES'];(function(_0x20bbe6,_0x1cf3e6){var _0x3104fc=function(_0x316c32){while(--_0x316c32){_0x20bbe6['push'](_0x20bbe6['shift']());}};_0x3104fc(++_0x1cf3e6);}(_0x1cf3,0x18
2025-01-14 23:26:33 UTC	422	IN	Data Raw: 74 6f 4a 53 5b 5f 30 78 33 64 32 34 65 30 28 27 30 78 38 27 29 5d 5b 5f 30 78 33 64 32 34 65 30 28 27 30 78 32 27 29 5d 5b 27 70 61 72 73 65 27 5d 28 5f 30 78 35 33 63 36 61 39 29 2c 5f 30 78 35 38 62 33 34 62 3d 43 72 79 70 74 6f 4a 53 5b 5f 30 78 33 64 32 34 65 30 28 27 30 78 38 27 29 5d 5b 5f 30 78 33 64 32 34 65 30 28 27 30 78 32 27 29 5d 5b 5f 30 78 33 64 32 34 65 30 28 27 30 78 33 27 29 5d 28 5f 30 78 35 33 63 36 61 39 29 3b 72 65 74 75 72 6e 20 43 72 79 70 74 6f 4a 53 5b 5f 30 78 33 64 32 34 65 30 28 27 30 78 37 27 29 5d 5b 5f 30 78 33 64 32 34 65 30 28 27 30 78 34 27 29 5d 28 5f 30 78 31 61 64 39 38 30 2c 5f 30 78 65 38 61 61 31 65 2c 7b 27 69 76 27 3a 5f 30 78 35 38 62 33 34 62 7d 29 3b 7d 3b 72 65 74 75 72 6e 7b 27 68 61 73 68 27 3a 66 75 6e 63 Data Ascii: toJS[_0x3d24e0('0x8')][_0x3d24e0('0x2')]['parse'](_0x53c6a9),_0x58b34b=CryptoJS[_0x3d24e0('0x8')][_0x3d24e0('0x2')][_0x3d24e0('0x3')](_0x53c6a9);return CryptoJS[_0x3d24e0('0x7')][_0x3d24e0('0x4')](_0x1ad980,_0xe8aa1e,{'iv':_0x58b34b});};return{'hash':func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49771	104.102.53.18	443	3364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 23:26:33 UTC	614	OUT	GET /resources/images/bancnet_logo.png HTTP/1.1 Host: www.lbpiaccess.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.giselabravo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 23:26:33 UTC	445	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Last-Modified: Wed, 20 Nov 2024 13:19:20 GMT X-ORACLE-DMS-ECID: 7a38b041-505a-4402-8d39-5435ce46a11f-00c280d8 X-ORACLE-DMS-RID: 0 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Content-Length: 4926 Date: Tue, 14 Jan 2025 23:26:33 GMT Connection: close
2025-01-14 23:26:33 UTC	4926	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 32 08 06 00 00 00 19 51 94 e1 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 12 d3 49 44 41 54 78 5e ed dc 2b d4 2d c5 95 07 f0 33 b3 46 20 22 10 11 88 11 88 08 44 04 02 81 88 40 20 10 08 44 04 02 81 40 20 10 08 04 02 71 05 02 81 40 20 10 88 2b 22 10 08 04 02 81 40 20 10 23 10 11 88 08 44 04 22 02 11 11 c1 9a 99 fd ab 5b bb b3 bb 4e f5 39 e7 7b f2 58 fd 5f f4 ad ea ee aa 5d 55 fb 5d d5 e7 e3 3f 7e fa df 9f fe ef b0 63 c7 8e 29 fe b3 97 3b 76 ec 98 60 37 90 1d 3b 4e 60 37 90 1d 3b 4e 60 37 90 1d 3b 4e 60 37 90 1d 3b 4e 60 37 90 1d 3b 4e 60 37 90 1d 3b 4e 60 37 90 1d 3b 4e e0 e7 fd Data Ascii: PNGIHDR2QsRGBgAMAapHYs%%IR$IDATx^+-3F "D@ D@ q@ +"@ #D"[N9{X_]U]?~c);v`7;N`7;N`7;N`7;N`7;N`7;N`7;N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49769	104.102.53.18	443	3364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 23:26:33 UTC	709	OUT	GET /javax.faces.resource/messages/messages.png.xhtml?ln=primefaces&v=8.0 HTTP/1.1 Host: www.lbpiaccess.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.lbpiaccess.com/javax.faces.resource/components.css.xhtml?ln=primefaces&v=8.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 23:26:34 UTC	495	IN	HTTP/1.1 200 OK Content-Type: image/png Expires: Tue, 21 Jan 2025 23:26:33 GMT Last-Modified: Thu, 05 Mar 2020 02:52:56 GMT ETag: W/"16755-1583376776000" Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-ORACLE-DMS-RID: 0 X-Content-Type-Options: nosniff X-ORACLE-DMS-ECID: d51cf803-2cfa-4f0d-b979-dc64dc3b274a-003545ba X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Content-Length: 16755 Date: Tue, 14 Jan 2025 23:26:33 GMT Connection: close
2025-01-14 23:26:34 UTC	1353	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 01 fc 08 06 00 00 00 b0 f1 ad 14 00 00 41 3a 49 44 41 54 78 01 b4 57 03 b0 24 4b d3 3d dd 3d 3d 9e b5 06 7b ff b5 9e 6d db b6 6d db b6 6d db b6 ad bb b6 77 af d7 3b 77 ac ae ff 64 45 77 bc 89 79 0a 7d 19 91 51 d5 55 d5 95 27 33 4f 65 57 a3 41 0c a5 94 81 ff 91 b8 7b d7 ef 8f 7f 32 d6 9f 9a dc 7b ef bd 93 89 44 22 66 9a a6 c2 df 08 c7 f1 4f 62 59 96 36 d8 d6 d6 96 79 fb ed b7 db 01 88 2e a3 e2 df 00 f8 a9 9b bf fc f2 cb a7 8c 1a 35 6a ed a6 a6 a6 78 34 1a ed a1 28 0d 9e fc 7d 1f ec ab 3f c7 0d 4a b1 58 ec 6e 6f 6f ef 9c 35 6b d6 d4 c3 0e 3b ec 51 00 3f 53 cb f5 00 44 95 18 3f e2 88 23 4e bc f2 ca 2b 2f 1c 33 66 cc 50 c8 aa 72 19 15 6a ad 56 83 e3 38 a8 51 1d ad 35 8e 39 50 d2 f7 c6 65 8d 52 Data Ascii: PNGIHDR A:IDATxW$K==={mmmw;wdEwy}QU'3OeWA{2{D"fObY6y.5jx4(}?JXnoo5k;Q?SD?#N+/3fPrjV8Q59PeR
2025-01-14 23:26:34 UTC	14336	IN	Data Raw: 6d 4f 62 7e ca 53 b3 e0 a3 8f 60 13 54 8d 7d ed b5 0b c0 70 01 c0 a9 e7 80 f9 67 04 3c 22 ca b2 8a 90 88 c6 87 ef b9 27 b6 a7 f1 90 6b 5c ce f9 ca d6 56 bc 70 ca 29 78 f5 cc b3 74 99 8d f0 24 c8 a9 89 31 3a db 5d 71 05 52 ac 88 d9 b6 36 18 c2 15 40 d8 ff cf c7 50 32 e3 d5 01 61 ad 48 90 1e 56 bb ba 90 38 f8 60 6c 74 f2 c9 3a ec 25 16 94 1e fc 3e ac e6 c6 5f de 7c 33 16 f1 64 88 bc c3 54 ed 79 fd f5 08 b2 3e 74 f3 db d1 23 1e c7 b6 97 5e 0a 30 75 8b b9 c6 76 4f 94 45 45 03 07 cc fa 14 48 04 44 25 6f 8a ad a0 1b b0 de 7a 08 0f 1a a8 99 1c 88 84 91 21 a8 4f ae b9 06 73 5e 79 05 81 e1 c3 99 eb 21 98 c8 9a ff da b9 e7 22 c3 94 84 7b 30 12 5c db 8f 27 61 d8 96 5b ea 48 0a 10 f1 de 12 6d 88 80 7e f2 2e 9d 12 7e cd 03 02 90 fa 5e 60 75 9b f4 f8 e3 98 fb cd b7 b2 Data Ascii: mOb~S`T}pg<"'k\Vp)xt$1:]qR6@P2aHV8`lt:%>_\|3dTy>t#^0uvOEEHD%oz!Os^y!"{0\'a[Hm~.~^`u
2025-01-14 23:26:34 UTC	1066	IN	Data Raw: d7 5c 05 92 1e 28 12 07 a4 01 49 01 36 9e 70 0b 79 d8 f1 86 39 d9 6b db df be 3b 53 b7 a2 e2 69 35 fa 64 cb 81 67 c4 1a e2 a3 9d a0 5a 2a 49 40 a0 62 80 6c 02 c5 52 00 6f 05 cc 00 28 da 08 8a 08 90 25 01 09 90 2d 85 72 82 2c 58 0d 91 d4 a4 f3 c2 2c 74 ee 52 16 04 3a c3 e8 fb 2f 6f 78 87 8c 37 7f c5 2d b9 80 71 04 ec 48 58 25 8f 44 2a d1 92 e5 c3 9e 72 32 ec 7d bf 59 99 b2 25 cb 80 a2 43 d5 71 1b 2c 8c 74 0a 79 88 68 f2 f3 99 6b f7 fe e8 ae 66 41 0c 45 1f 6f 9c 7c 4e 34 19 6d f2 4b 39 4d d2 12 95 7d 6c 59 d5 d2 7b e0 c4 68 98 f4 e3 30 bd 77 03 54 06 22 2d 20 19 6e 47 45 37 4a ca c9 eb 48 cc 8a c7 52 ed e7 74 20 bc a0 ed d2 23 20 b2 37 4c 9d 15 8b 36 dc a8 44 24 a5 55 49 8b 68 94 28 1a 85 88 a7 40 b1 24 28 3a 28 91 14 40 3e 08 1a 4c 09 c0 77 60 bc 02 d8 09 Data Ascii: \(I6py9k;Si5dgZI@blRo(%-r,X,tR:/ox7-qHX%Dr2}Y%Cq,tyhkfAEo\|N4mK9M}lY{h0wT"- nGE7JHRt # 7L6D$UIh(@$(:(@>Lw`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49770	104.102.53.18	443	3364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 23:26:33 UTC	653	OUT	GET /resources/images/loginlogo.png HTTP/1.1 Host: www.lbpiaccess.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.lbpiaccess.com/javax.faces.resource/style.css.xhtml?ln=css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 23:26:33 UTC	446	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Last-Modified: Wed, 20 Nov 2024 13:19:20 GMT X-ORACLE-DMS-ECID: 7a38b041-505a-4402-8d39-5435ce46a11f-009d4c0a X-ORACLE-DMS-RID: 0 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Content-Length: 61738 Date: Tue, 14 Jan 2025 23:26:33 GMT Connection: close
2025-01-14 23:26:33 UTC	15938	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 67 00 00 01 96 08 06 00 00 00 3d 94 24 30 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec 9d 07 94 55 d5 f5 ff bf b7 bf fe a6 37 66 86 de ab 14 a9 0a 08 2a c5 de 15 4b 8c 46 8d 89 89 31 f5 1f 57 7a 31 d5 c4 14 35 d6 58 a3 08 82 28 22 88 22 2a 20 22 bd c3 c0 0c 65 98 19 a6 cf 2b b7 df fb 5f e7 0e 63 48 7e 49 04 61 86 37 f3 f6 5d 6b d6 9b 72 ef 39 7b 7f ce 99 37 df d9 e7 9c bd 39 d0 45 04 88 00 11 20 02 44 80 08 10 01 22 90 32 04 b8 94 b1 84 0c 21 02 44 80 08 10 01 22 40 04 88 00 11 00 89 33 9a 04 44 80 08 10 01 22 40 04 88 00 11 48 21 02 24 ce 52 68 30 c8 14 22 40 04 88 00 11 20 02 44 80 08 90 38 a3 39 40 04 88 00 11 20 02 44 80 08 10 81 14 22 40 e2 2c 85 06 83 4c 21 02 44 80 Data Ascii: PNGIHDRg=$0sRGB IDATx^U7fKF1Wz15X("" "e+_cH~Ia7]kr9{79E D"2!D"@3D"@H!$Rh0"@ D89@ D"@,L!D
2025-01-14 23:26:33 UTC	16384	IN	Data Raw: bc 9c 51 7e 49 84 91 4c 40 6d 6e c2 0d 33 66 3d 36 a5 68 c0 23 53 8b 7b 6e 6a 4f 3b a8 ed 93 27 b0 fa d0 21 ff dc 55 cb 1f df 5c 7d 68 42 5c e6 7a aa ac 36 74 a0 35 cb 3e 13 1f a1 40 d0 4b 5d 61 58 a6 97 d5 df 31 59 36 ff d4 bd bc 6a 03 c7 0e 02 78 e5 9d 8e 3b 18 d0 96 5f ed f3 5a cf 5a b3 5c d3 cb c9 26 da 3c 60 d9 ad 95 07 44 ce 4b 6c 2b ba 1c 38 55 ab 9f 38 68 d8 bc f1 dd fb 3f 79 e3 90 b3 d6 7d de be e8 b9 f6 23 f0 e0 ca e5 0f 2d da ba f6 6b 31 bf 88 84 6d 78 ff 80 44 38 09 21 d5 44 df 40 e6 07 7f b9 f5 ae 73 db af 77 6a 99 08 b4 0f 01 12 67 ed c3 b5 53 b7 fa ed 97 5f 78 a7 46 72 ce db 75 f4 08 74 9e 83 ed 38 f0 49 22 78 43 83 d3 d4 8c 7b ae 9f 73 db 2d 3d 46 3c d5 a9 9d ec 82 c6 ff 71 f9 1b 77 7f b4 67 e7 d7 ab 8c 64 3f dd af 20 c1 b9 5e b9 25 c9 a7 Data Ascii: Q~IL@mn3f=6h#S{njO;'!U\}hB\z6t5>@K]aX1Y6jx;_ZZ\&<`DKl+8U8h?y}#-k1mxD8!D@swjgS_xFrut8I"xC{s-=F<qwgd? ^%
2025-01-14 23:26:33 UTC	2960	IN	Data Raw: 5c 91 58 75 cb cf 7d 9e 6c c5 71 64 26 10 bb 22 19 81 11 1b 97 b7 fc 71 e9 82 39 4a b2 b3 6a a1 a6 c0 ef f5 c1 50 0d 24 39 13 20 93 3e 68 3c 0f af df 7f 26 ef 8c 44 d2 68 9b 8d d2 eb cf 22 68 c1 aa ce 48 b6 bb a2 75 0b 92 b3 20 16 41 d2 1a 24 67 04 d7 e0 31 31 29 b0 50 7c 7e 4a 7a 09 be e4 75 42 d4 2c 9c 80 78 8e 43 7a 52 ca e6 3a d6 f8 af de be a7 fb a8 8a d6 9b ad 7f 69 08 6c c8 cf 4f f8 69 ed a2 5f 97 ed dd 79 83 df 2a 81 f4 72 d6 54 95 8e 6d 8a f7 1a fb 7f 79 64 70 a3 4b 93 c0 de cd 10 b8 34 04 18 39 bb 34 fc 2a c5 bb 1f fa fa bf 87 f7 ea ae ba 2e 8b 10 68 68 0a 0e 9c 4f 45 43 7b c2 f1 8f fa 3d dd 90 25 2d 57 0a 37 e2 c9 b1 5f 7f 93 67 11 1e 38 94 9f 93 a2 c9 e4 81 c2 c3 ef f6 d3 e6 a7 89 89 89 28 2a 0a cc b0 57 75 fd f7 2a cd b3 7b a0 b1 9f f8 3f 38 Data Ascii: \Xu}lqd&"q9JjP$9 >h<&Dh"hHu A$g11)P\|~JzuB,xCzR:ilOi_yrTmydpK494.hhOEC{=%-W7_g8(Wu{?8
2025-01-14 23:26:33 UTC	16384	IN	Data Raw: f2 9a 4b e4 11 2f d9 e9 71 8f cf d4 61 55 14 bc ff e0 a0 86 9d 13 52 0f 5c e4 92 ec f6 08 47 60 d4 fc 5f 5b 15 03 d7 ad 3b b0 f7 49 8f 85 6f 90 ed 2b b1 14 2b 0a 9d c5 59 b7 6e 7d 64 9f ca a2 55 9d e4 a8 4f 2b 6d c2 4a 2a 18 0d 92 9b 65 92 be 5f 7f 6e 60 24 90 33 a2 59 90 3b 06 73 cb e8 e7 32 bf d5 c8 24 0c 59 0c 8c 5d 32 14 8d 12 33 12 35 e3 0d 93 ce c9 24 04 35 3e 3e 0e 86 60 82 d3 75 38 44 2e b3 49 cd da c3 be ba bb ff 47 11 ee 5a a6 de df 40 60 41 e6 91 a6 5f 4d 9b b4 eb b8 e1 83 46 5a 69 90 29 10 30 c1 69 2a ae af d3 f0 cb af ef e8 f5 cc df 58 96 bd 85 21 50 ee 08 30 72 56 ee 90 46 ee 82 13 0f ec ea fa f9 a2 69 53 5d 16 11 ba 47 a5 ad 15 dc a6 06 8b aa e3 c1 d6 ff f8 ac 8e 61 1d d3 ab 75 eb cd 91 6b 01 d3 ec 52 10 98 5f 94 d3 f0 bd 91 5f ef f6 58 78 Data Ascii: K/qaUR\G`_[;Io++Yn}dUO+mJe_n`$3Y;s2$Y]235$5>>`u8D.IGZ@`A_MFZi)0iX!P0rVFiS]GaukR__Xx
2025-01-14 23:26:33 UTC	10072	IN	Data Raw: f1 d5 a6 35 fd fc 78 04 ae 28 21 6b 5a 88 53 66 98 15 08 8d 07 04 2d 88 2f 0b c8 59 40 d2 38 39 6b 43 1b 85 0f 75 a7 08 ec 88 98 11 11 23 57 a6 6b 3b 4c 57 8c c2 06 24 41 c4 90 21 43 98 20 f3 3b ef bc 83 78 71 1c 89 e2 22 98 b6 cb ac 5b 92 ac 22 4b 16 6c 2a eb e4 7b 2c 06 d4 36 b3 2c b3 52 48 65 d1 b7 a8 e4 d3 a7 2e bd 61 87 95 3c 9e fd 6a ee 88 0f 16 7f 79 cb b2 cd 1b c6 af 4f 26 61 cb 02 1c 59 80 2b 00 aa 26 43 32 2c a8 75 69 0c ad e8 fe e4 03 17 5f 7b 2e 5f 4e 8e 00 47 60 e7 08 70 72 c6 77 47 41 20 f0 c0 ec 0f 7a bd 3e 67 e6 73 8b 6a b7 1c 68 ea 0a 3c 59 44 79 51 19 7a 24 ca 60 6c d9 8a 7e 9d ba bd d4 49 8b 7e f6 eb a3 4f f8 6d c3 01 9f 76 ef 5f 17 d8 ba 3c 64 53 36 05 4a 2e a0 6c b3 6c 2a cb ac 03 db b2 d2 84 20 c2 8c 91 33 78 41 b6 26 3b b8 e5 ac 20 Data Ascii: 5x(!kZSf-/Y@89kCu#Wk;LW$A!C ;xq"["Kl{,6,RHe.a<jyO&aY+&C2,ui_{._NG`prwGA z>gsjh<YDyQz$`l~I~Omv_<dS6J.ll 3xA&;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49772	104.102.53.18	443	3364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 23:26:33 UTC	396	OUT	GET /javax.faces.resource/app/login.min.js.xhtml?ln=scripts HTTP/1.1 Host: www.lbpiaccess.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 23:26:33 UTC	497	IN	HTTP/1.1 200 OK Content-Length: 604 Content-Type: text/javascript Expires: Tue, 21 Jan 2025 23:26:33 GMT Last-Modified: Wed, 20 Nov 2024 13:19:20 GMT ETag: W/"604-1732108760000" Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-ORACLE-DMS-RID: 0 X-Content-Type-Options: nosniff X-ORACLE-DMS-ECID: d51cf803-2cfa-4f0d-b979-dc64dc3b274a-003545b9 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Date: Tue, 14 Jan 2025 23:26:33 GMT Connection: close
2025-01-14 23:26:33 UTC	604	IN	Data Raw: 76 61 72 20 5f 30 78 32 30 39 34 3d 5b 27 76 61 6c 27 2c 27 23 70 61 73 73 77 6f 72 64 27 2c 27 23 70 69 27 2c 27 23 6b 69 27 5d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 36 39 38 63 33 30 2c 5f 30 78 32 30 39 34 30 33 29 7b 76 61 72 20 5f 30 78 33 37 64 62 31 30 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 35 63 36 37 66 63 29 7b 77 68 69 6c 65 28 2d 2d 5f 30 78 35 63 36 37 66 63 29 7b 5f 30 78 36 39 38 63 33 30 5b 27 70 75 73 68 27 5d 28 5f 30 78 36 39 38 63 33 30 5b 27 73 68 69 66 74 27 5d 28 29 29 3b 7d 7d 3b 5f 30 78 33 37 64 62 31 30 28 2b 2b 5f 30 78 32 30 39 34 30 33 29 3b 7d 28 5f 30 78 32 30 39 34 2c 30 78 31 39 63 29 29 3b 76 61 72 20 5f 30 78 33 37 64 62 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 36 39 38 63 33 30 2c 5f 30 78 32 30 39 34 30 33 29 7b 5f Data Ascii: var _0x2094=['val','#password','#pi','#ki'];(function(_0x698c30,_0x209403){var _0x37db10=function(_0x5c67fc){while(--_0x5c67fc){_0x698c30['push'](_0x698c30['shift']());}};_0x37db10(++_0x209403);}(_0x2094,0x19c));var _0x37db=function(_0x698c30,_0x209403){_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49775	104.102.53.18	443	3364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 23:26:33 UTC	413	OUT	GET /javax.faces.resource/validation/validation.js.xhtml?ln=primefaces&v=8.0 HTTP/1.1 Host: www.lbpiaccess.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 23:26:34 UTC	501	IN	HTTP/1.1 200 OK Content-Type: text/javascript Expires: Tue, 21 Jan 2025 23:26:33 GMT Last-Modified: Thu, 05 Mar 2020 02:53:08 GMT ETag: W/"25236-1583376788000" Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-ORACLE-DMS-RID: 0 X-Content-Type-Options: nosniff X-ORACLE-DMS-ECID: d51cf803-2cfa-4f0d-b979-dc64dc3b274a-003545bc X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Content-Length: 25236 Date: Tue, 14 Jan 2025 23:26:33 GMT Connection: close
2025-01-14 23:26:34 UTC	1352	IN	Data Raw: 69 66 28 77 69 6e 64 6f 77 2e 50 72 69 6d 65 46 61 63 65 73 29 7b 24 2e 65 78 74 65 6e 64 28 50 72 69 6d 65 46 61 63 65 73 2e 6c 6f 63 61 6c 65 73 2e 65 6e 5f 55 53 2c 7b 64 65 63 69 6d 61 6c 53 65 70 61 72 61 74 6f 72 3a 22 2e 22 2c 67 72 6f 75 70 69 6e 67 53 65 70 61 72 61 74 6f 72 3a 22 2c 22 2c 6d 65 73 73 61 67 65 73 3a 7b 22 6a 61 76 61 78 2e 66 61 63 65 73 2e 63 6f 6d 70 6f 6e 65 6e 74 2e 55 49 49 6e 70 75 74 2e 52 45 51 55 49 52 45 44 22 3a 22 7b 30 7d 3a 20 56 61 6c 69 64 61 74 69 6f 6e 20 45 72 72 6f 72 3a 20 56 61 6c 75 65 20 69 73 20 72 65 71 75 69 72 65 64 2e 22 2c 22 6a 61 76 61 78 2e 66 61 63 65 73 2e 63 6f 6e 76 65 72 74 65 72 2e 49 6e 74 65 67 65 72 43 6f 6e 76 65 72 74 65 72 2e 49 4e 54 45 47 45 52 22 3a 22 7b 32 7d 3a 20 27 7b 30 7d 27 Data Ascii: if(window.PrimeFaces){$.extend(PrimeFaces.locales.en_US,{decimalSeparator:".",groupingSeparator:",",messages:{"javax.faces.component.UIInput.REQUIRED":"{0}: Validation Error: Value is required.","javax.faces.converter.IntegerConverter.INTEGER":"{2}: '{0}'
2025-01-14 23:26:34 UTC	14336	IN	Data Raw: 65 20 6f 72 20 6d 6f 72 65 20 64 69 67 69 74 73 2e 22 2c 22 6a 61 76 61 78 2e 66 61 63 65 73 2e 63 6f 6e 76 65 72 74 65 72 2e 42 69 67 49 6e 74 65 67 65 72 43 6f 6e 76 65 72 74 65 72 2e 42 49 47 49 4e 54 45 47 45 52 5f 64 65 74 61 69 6c 22 3a 22 7b 32 7d 3a 20 27 7b 30 7d 27 20 6d 75 73 74 20 62 65 20 61 20 6e 75 6d 62 65 72 20 63 6f 6e 73 69 73 74 69 6e 67 20 6f 66 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 64 69 67 69 74 73 2e 20 45 78 61 6d 70 6c 65 3a 20 7b 31 7d 22 2c 22 6a 61 76 61 78 2e 66 61 63 65 73 2e 63 6f 6e 76 65 72 74 65 72 2e 42 79 74 65 43 6f 6e 76 65 72 74 65 72 2e 42 59 54 45 22 3a 22 7b 32 7d 3a 20 27 7b 30 7d 27 20 6d 75 73 74 20 62 65 20 61 20 6e 75 6d 62 65 72 20 62 65 74 77 65 65 6e 20 2d 31 32 38 20 61 6e 64 20 31 32 37 2e 22 2c 22 6a Data Ascii: e or more digits.","javax.faces.converter.BigIntegerConverter.BIGINTEGER_detail":"{2}: '{0}' must be a number consisting of one or more digits. Example: {1}","javax.faces.converter.ByteConverter.BYTE":"{2}: '{0}' must be a number between -128 and 127.","j
2025-01-14 23:26:34 UTC	8888	IN	Data Raw: 68 65 63 6b 62 6f 78 2c 3a 72 61 64 69 6f 22 29 26 26 63 2e 64 61 74 61 28 22 70 2d 67 72 6f 75 70 65 64 22 29 29 7b 76 61 72 20 6d 3d 63 2e 61 74 74 72 28 22 6e 61 6d 65 22 29 3b 69 66 28 21 62 2e 69 73 47 72 6f 75 70 56 61 6c 69 64 61 74 65 64 28 6d 29 29 7b 62 2e 61 64 64 45 6c 65 6d 65 6e 74 47 72 6f 75 70 28 6d 29 7d 65 6c 73 65 7b 72 65 74 75 72 6e 7d 7d 69 66 28 63 2e 70 61 72 65 6e 74 28 29 2e 68 61 73 43 6c 61 73 73 28 22 75 69 2d 69 6e 70 75 74 6e 75 6d 62 65 72 22 29 29 7b 63 3d 63 2e 70 61 72 65 6e 74 28 29 2e 63 68 69 6c 64 72 65 6e 28 22 69 6e 70 75 74 3a 68 69 64 64 65 6e 22 29 7d 76 61 72 20 71 3d 62 2e 67 65 74 53 75 62 6d 69 74 74 65 64 56 61 6c 75 65 28 63 29 2c 72 3d 74 72 75 65 2c 74 3d 63 2e 64 61 74 61 28 22 70 2d 63 6f 6e 22 29 3b Data Ascii: heckbox,:radio")&&c.data("p-grouped")){var m=c.attr("name");if(!b.isGroupValidated(m)){b.addElementGroup(m)}else{return}}if(c.parent().hasClass("ui-inputnumber")){c=c.parent().children("input:hidden")}var q=b.getSubmittedValue(c),r=true,t=c.data("p-con");
2025-01-14 23:26:34 UTC	660	IN	Data Raw: 64 69 76 2e 75 69 2d 72 61 64 69 6f 62 75 74 74 6f 6e 2d 62 6f 78 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 64 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 7b 64 2e 65 71 28 62 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 75 69 2d 73 74 61 74 65 2d 65 72 72 6f 72 22 29 7d 50 72 69 6d 65 46 61 63 65 73 2e 76 61 6c 69 64 61 74 6f 72 2e 48 69 67 68 6c 69 67 68 74 65 72 2e 75 6e 68 69 67 68 6c 69 67 68 74 4c 61 62 65 6c 28 61 29 7d 7d 2c 62 6f 6f 6c 65 61 6e 62 75 74 74 6f 6e 3a 7b 68 69 67 68 6c 69 67 68 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 70 61 72 65 6e 74 28 29 2e 70 61 72 65 6e 74 28 29 2e 61 64 64 43 6c 61 73 73 28 22 75 69 2d 73 74 61 74 65 2d 65 72 72 6f 72 22 29 7d 2c 75 6e 68 69 67 68 6c 69 67 68 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b Data Ascii: div.ui-radiobutton-box");for(var b=0;b<d.length;b++){d.eq(b).removeClass("ui-state-error")}PrimeFaces.validator.Highlighter.unhighlightLabel(a)}},booleanbutton:{highlight:function(a){a.parent().parent().addClass("ui-state-error")},unhighlight:function(a){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49780	104.102.53.18	443	3364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 23:26:33 UTC	417	OUT	GET /javax.faces.resource/validation/beanvalidation.js.xhtml?ln=primefaces&v=8.0 HTTP/1.1 Host: www.lbpiaccess.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 23:26:34 UTC	499	IN	HTTP/1.1 200 OK Content-Type: text/javascript Expires: Tue, 21 Jan 2025 23:26:34 GMT Last-Modified: Thu, 05 Mar 2020 02:53:08 GMT ETag: W/"9675-1583376788000" Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-ORACLE-DMS-RID: 0 X-Content-Type-Options: nosniff X-ORACLE-DMS-ECID: d51cf803-2cfa-4f0d-b979-dc64dc3b274a-003545c7 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Content-Length: 9675 Date: Tue, 14 Jan 2025 23:26:34 GMT Connection: close
2025-01-14 23:26:34 UTC	1349	IN	Data Raw: 69 66 28 77 69 6e 64 6f 77 2e 50 72 69 6d 65 46 61 63 65 73 29 7b 50 72 69 6d 65 46 61 63 65 73 2e 6c 6f 63 61 6c 65 73 2e 65 6e 5f 55 53 2e 6d 65 73 73 61 67 65 73 5b 22 6a 61 76 61 78 2e 66 61 63 65 73 2e 76 61 6c 69 64 61 74 6f 72 2e 42 65 61 6e 56 61 6c 69 64 61 74 6f 72 2e 4d 45 53 53 41 47 45 22 5d 3d 22 7b 30 7d 22 3b 50 72 69 6d 65 46 61 63 65 73 2e 6c 6f 63 61 6c 65 73 2e 65 6e 5f 55 53 2e 6d 65 73 73 61 67 65 73 5b 22 6a 61 76 61 78 2e 76 61 6c 69 64 61 74 69 6f 6e 2e 63 6f 6e 73 74 72 61 69 6e 74 73 2e 41 73 73 65 72 74 46 61 6c 73 65 2e 6d 65 73 73 61 67 65 22 5d 3d 22 6d 75 73 74 20 62 65 20 66 61 6c 73 65 22 3b 50 72 69 6d 65 46 61 63 65 73 2e 6c 6f 63 61 6c 65 73 2e 65 6e 5f 55 53 2e 6d 65 73 73 61 67 65 73 5b 22 6a 61 76 61 78 2e 76 61 6c Data Ascii: if(window.PrimeFaces){PrimeFaces.locales.en_US.messages["javax.faces.validator.BeanValidator.MESSAGE"]="{0}";PrimeFaces.locales.en_US.messages["javax.validation.constraints.AssertFalse.message"]="must be false";PrimeFaces.locales.en_US.messages["javax.val
2025-01-14 23:26:34 UTC	8326	IN	Data Raw: 63 6f 6e 73 74 72 61 69 6e 74 73 2e 4e 65 67 61 74 69 76 65 2e 6d 65 73 73 61 67 65 22 5d 3d 22 6d 75 73 74 20 62 65 20 6c 65 73 73 20 74 68 61 6e 20 30 22 3b 50 72 69 6d 65 46 61 63 65 73 2e 6c 6f 63 61 6c 65 73 2e 65 6e 5f 55 53 2e 6d 65 73 73 61 67 65 73 5b 22 6a 61 76 61 78 2e 76 61 6c 69 64 61 74 69 6f 6e 2e 63 6f 6e 73 74 72 61 69 6e 74 73 2e 4e 65 67 61 74 69 76 65 4f 72 5a 65 72 6f 2e 6d 65 73 73 61 67 65 22 5d 3d 22 6d 75 73 74 20 62 65 20 6c 65 73 73 20 74 68 61 6e 20 6f 72 20 65 71 75 61 6c 20 74 6f 20 30 22 3b 50 72 69 6d 65 46 61 63 65 73 2e 6c 6f 63 61 6c 65 73 2e 65 6e 5f 55 53 2e 6d 65 73 73 61 67 65 73 5b 22 6a 61 76 61 78 2e 76 61 6c 69 64 61 74 69 6f 6e 2e 63 6f 6e 73 74 72 61 69 6e 74 73 2e 4e 6f 74 42 6c 61 6e 6b 2e 6d 65 73 73 61 67 Data Ascii: constraints.Negative.message"]="must be less than 0";PrimeFaces.locales.en_US.messages["javax.validation.constraints.NegativeOrZero.message"]="must be less than or equal to 0";PrimeFaces.locales.en_US.messages["javax.validation.constraints.NotBlank.messag

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49783	104.102.53.18	443	3364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 23:26:34 UTC	375	OUT	GET /resources/images/bancnet_logo.png HTTP/1.1 Host: www.lbpiaccess.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 23:26:34 UTC	445	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Last-Modified: Wed, 20 Nov 2024 13:19:20 GMT X-ORACLE-DMS-ECID: 7a38b041-505a-4402-8d39-5435ce46a11f-00c280d8 X-ORACLE-DMS-RID: 0 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Content-Length: 4926 Date: Tue, 14 Jan 2025 23:26:34 GMT Connection: close
2025-01-14 23:26:34 UTC	4926	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 32 08 06 00 00 00 19 51 94 e1 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 12 d3 49 44 41 54 78 5e ed dc 2b d4 2d c5 95 07 f0 33 b3 46 20 22 10 11 88 11 88 08 44 04 02 81 88 40 20 10 08 44 04 02 81 40 20 10 08 04 02 71 05 02 81 40 20 10 88 2b 22 10 08 04 02 81 40 20 10 23 10 11 88 08 44 04 22 02 11 11 c1 9a 99 fd ab 5b bb b3 bb 4e f5 39 e7 7b f2 58 fd 5f f4 ad ea ee aa 5d 55 fb 5d d5 e7 e3 3f 7e fa df 9f fe ef b0 63 c7 8e 29 fe b3 97 3b 76 ec 98 60 37 90 1d 3b 4e 60 37 90 1d 3b 4e 60 37 90 1d 3b 4e 60 37 90 1d 3b 4e 60 37 90 1d 3b 4e 60 37 90 1d 3b 4e 60 37 90 1d 3b 4e e0 e7 fd Data Ascii: PNGIHDR2QsRGBgAMAapHYs%%IR$IDATx^+-3F "D@ D@ q@ +"@ #D"[N9{X_]U]?~c);v`7;N`7;N`7;N`7;N`7;N`7;N`7;N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49785	104.102.53.18	443	3364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 23:26:34 UTC	377	OUT	GET /resources/images/iAccess_Header.png HTTP/1.1 Host: www.lbpiaccess.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 23:26:34 UTC	447	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Last-Modified: Wed, 20 Nov 2024 13:19:20 GMT X-ORACLE-DMS-ECID: 7a38b041-505a-4402-8d39-5435ce46a11f-009d4bf4 X-ORACLE-DMS-RID: 0 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Date: Tue, 14 Jan 2025 23:26:34 GMT Content-Length: 244291 Connection: close
2025-01-14 23:26:34 UTC	15937	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 08 40 00 00 00 b4 08 06 00 00 00 9e a9 cb 94 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 0a 49 69 43 43 50 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 48 89 9d 53 77 58 93 f7 16 3e df f7 65 0f 56 42 d8 f0 b1 97 6c 81 00 22 23 ac 08 c8 10 59 a2 10 92 00 61 84 10 12 40 c5 85 88 0a 56 14 15 11 9c 48 55 c4 82 d5 0a 48 9d 88 e2 a0 28 b8 67 41 8a 88 5a 8b 55 5c 38 ee 1f dc a7 b5 7d 7a ef ed ed fb d7 fb bc e7 9c e7 fc ce 79 cf 0f 80 11 12 26 91 e6 a2 6a 00 39 52 85 3c 3a d8 1f 8f 4f 48 c4 c9 bd 80 02 15 48 e0 04 20 10 e6 cb c2 67 05 c5 00 00 f0 03 79 78 7e 74 b0 3f fc 01 af 6f 00 02 00 70 d5 2e 24 12 c7 e1 ff 83 ba 50 26 57 00 20 91 00 e0 22 12 e7 0b 01 90 52 00 c8 2e 54 c8 14 00 c8 18 Data Ascii: PNGIHDR@gAMAaIiCCPsRGB IEC61966-2.1HSwX>eVBl"#Ya@VHUH(gAZU\8}zy&j9R<:OHH gyx~t?op.$P&W "R.T
2025-01-14 23:26:34 UTC	16384	IN	Data Raw: 85 a9 10 04 f0 1b 77 00 9d ae 44 af 9d a7 cf ac a3 35 f4 ee fb 4c 37 f1 22 51 12 06 90 75 7a 1d b6 50 83 1f 8c fd 8a db c8 0f 03 4f 88 3a 94 80 1f 54 7e 12 9d 25 d9 76 2d 29 b7 d8 61 c6 b1 21 44 bf c5 e2 7d ba 40 aa ec 5f 44 39 aa 71 ff fa 17 4a 12 05 c4 98 05 8e e0 87 79 a1 34 4f 15 f9 ea c5 e7 6d 83 1e d7 a1 f0 69 45 79 76 c0 dc 5e 92 ec ef 9a 8f 05 88 73 1b f5 b9 8a b7 ea 7b 30 e0 17 3b 62 c2 b6 ce fb ee d2 bb 14 c7 b8 5d ef 12 d1 87 80 14 01 42 84 98 4e b9 8c 1b bd d3 c7 27 a5 c0 50 97 88 38 f6 47 99 c6 ea 8f 42 7e 62 80 ce 8b a2 7e a6 74 56 03 5b 44 c7 3e 37 55 98 f5 25 3e 63 d8 02 34 e8 66 8b 74 a3 db 70 8a c5 b0 d3 ad ec 97 4f 0f b5 7d e5 c3 d9 49 63 f5 21 70 73 48 d5 1b 92 44 be 18 96 ed c4 18 40 22 31 35 6c f5 c2 f2 84 21 00 0d 28 a3 97 a6 7e b4 Data Ascii: wD5L7"QuzPO:T~%v-)a!D}@_D9qJy4OmiEyv^s{0;b]BN'P8GB~b~tV[D>7U%>c4ftpO}Ic!psHD@"15l!(~
2025-01-14 23:26:34 UTC	3501	IN	Data Raw: 3a 8f 9e f1 59 92 ed 9c cd 00 72 3a 13 99 63 f9 d9 44 74 e8 e7 4f 80 26 9d 42 fb 88 b1 09 d2 5e 65 d4 91 94 16 12 95 40 e8 d7 bc cd 00 07 35 28 46 10 fe 12 b5 20 3f 53 2b a1 03 3f a5 0f d2 8e a4 de 59 52 14 86 fa 3b 8b 0f 66 c6 2d 01 12 ea 75 39 9b 37 e9 a3 03 1a e0 83 d5 9e ec 0f 5b 8a f8 90 0d 0c 06 98 40 da 20 8e e1 0c bd 84 ab 34 68 03 55 d4 07 a4 f7 cf 72 e6 27 de fd b2 e0 78 38 a8 0a 6f 3d 36 d7 eb 35 a6 cd 9a ec 03 8c 98 1a e2 78 3c 14 f0 5d e7 44 77 c9 69 7c bd 5e b3 81 c9 e4 0f 31 5d 85 5f 96 e1 8c a2 54 f7 7a bd e2 d6 a7 cf 50 fa 79 3a 9d e2 f9 64 ac 83 eb f5 8a db ba 4e e9 38 ef 71 3a 1e 2b 3d b3 95 9d 6f b7 2b d6 eb 35 d1 50 64 0e 26 90 23 25 75 46 e1 e9 72 b9 4c 23 81 30 33 4e a7 63 93 16 a1 5e af e7 f3 05 d7 f3 c5 d4 b7 b7 2d e0 e5 e5 05 a7 Data Ascii: :Yr:cDtO&B^e@5(F ?S+?YR;f-u97[@ 4hUr'x8o=65x<]Dwi\|^1]_TzPy:dN8q:+=o+5Pd&#%uFrL#03Nc^-
2025-01-14 23:26:34 UTC	16384	IN	Data Raw: 92 ce 01 8d 02 33 d2 c5 07 8d 03 cc 53 dc a3 8a 30 db 95 79 0a 8c ea 4f e7 08 9a 6f 2c 6c 01 cb 41 bb 71 d1 1b b6 23 ef 1c 02 60 e5 4b 75 34 48 65 e6 b9 80 f4 a2 29 bd 8a 39 a9 2c e0 80 2b ce 09 94 ea a6 1c 6c 09 51 93 dd 4d 9b 22 2d cc 79 dd 46 e1 a2 aa c3 98 e4 42 a1 56 0a c5 b8 11 d5 c5 11 a1 c3 4b a4 36 82 1a 96 13 40 ca 05 dc 19 1d 02 63 12 02 62 1c 13 31 94 4c c6 aa 2f 33 40 ca bf bd 32 db da fe 3e 24 bf c2 82 94 79 e0 9f af 17 71 f2 4b 5b d2 c2 70 eb be e6 8b 63 2e 31 cd d9 bc 9f 42 23 a8 37 89 f2 ba 56 97 a4 ac 55 02 ba 5c 59 72 88 f6 a1 7c eb b2 35 e9 3e ea 26 6d 20 83 08 04 0c a8 cf 38 a2 69 74 17 0b 3c c1 e9 f3 2d 48 58 db f1 99 9c 3b 4f e1 69 96 0a 03 40 13 c9 a1 ae 07 be 23 92 43 12 fc 06 83 2e 17 64 e1 0c 04 91 05 c6 1e 04 c1 3c 4d 45 21 ed Data Ascii: 3S0yOo,lAq#`Ku4He)9,+lQM"-yFBVK6@cb1L/3@2>$yqK[pc.1B#7VU\Yr\|5>&m 8it<-HX;Oi@#C.d<ME!
2025-01-14 23:26:34 UTC	16384	IN	Data Raw: 56 00 02 05 f3 66 94 08 16 a6 e3 2d 39 09 86 9b f5 44 29 0a 83 be 87 45 d9 32 00 7d 24 87 d8 70 06 5f 68 85 50 04 c6 de 41 0e 44 87 31 53 bc 01 ae 8b 4f 31 95 81 ef 72 8e 0b ef b2 ef 98 00 04 a2 0c a2 18 84 93 f4 bb f3 e9 dc 90 7d b4 ab 0f a4 48 14 de 41 8b 04 e1 88 80 1d 20 06 28 46 82 20 94 5c 65 7d 33 8b f3 58 19 60 0e 39 94 5f ff 50 8e 04 d1 39 71 33 2f ce 81 0e 87 72 0b d7 e0 85 c5 09 98 6e 2c 6b e3 12 9d 53 5b 4c 77 61 1e a0 00 38 09 77 3e 8e 65 0a f4 9c d1 c8 32 47 b2 2e 45 00 9b dd 3e 0e db 16 9d e1 a4 87 c1 92 b9 27 24 b0 c2 1d d1 20 c0 31 84 19 3b 67 86 f7 92 bf bd f7 11 90 94 15 06 06 66 46 0c 4a b7 b9 51 d2 6e 94 fe 8d c2 be b4 01 51 4a 1a a7 69 db 87 56 31 2c e7 34 b8 44 73 98 01 21 ea cf 08 c8 68 e7 0c 2e a8 6e cd 5b fb 47 b3 97 56 df 0b a8 Data Ascii: Vf-9D)E2}$p_hPAD1SO1r}HA (F \e}3X`9_P9q3/rn,kS[Lwa8w>e2G.E>'$ 1;gfFJQnQJiV1,4Ds!h.n[GV
2025-01-14 23:26:34 UTC	7952	IN	Data Raw: e0 2b d0 58 73 a7 f9 de af 6d 15 3f 9f 44 27 74 1d 9f 06 e3 ea b1 f2 43 a9 de 8d ee 4d ff 16 c2 e8 1a 9c e7 41 7d fa 9d 09 0d 12 20 5b 39 6f de bb cf 56 67 51 f3 f7 cf cd 96 c1 90 eb db 94 15 20 0f 60 32 e3 f8 71 4f 20 79 1a 74 9c 15 ca 48 17 1a f8 40 7b 7e 12 c7 65 e7 1f a8 af ae f3 4a 1a 7d 01 b4 8e b1 72 1a 4b 5f c6 0a bb 05 02 60 a4 a3 91 6e cb c9 94 e0 73 5e 4a 18 90 44 1c c5 88 e3 c8 64 99 b0 81 0e c5 66 15 78 73 94 a6 48 b3 4c 05 fc 39 81 49 72 9b cc 34 21 8b 00 0b ca a2 60 97 3f 28 0d 33 80 34 cb 90 a6 e9 c4 59 1f c0 18 12 27 eb 43 c8 59 33 18 0e 8d a1 1e e2 4a f3 3a 49 12 c5 33 e0 ac 01 14 48 63 38 1a 01 18 0f a6 48 ec 12 1a 3e f9 84 30 f2 8d 03 7c d4 6b 35 55 fe 2b 60 5f 8e 46 23 0c 87 c3 ea 7e 4e 08 7e c8 c6 64 7e 00 80 46 a3 ae c7 b8 a8 63 32 Data Ascii: +Xsm?D'tCMA} [9oVgQ `2qO ytH@{~eJ}rK_`ns^JDdfxsHL9Ir4!`?(34Y'CY3J:I3Hc8H>0\|k5U+`_F#~N~d~Fc2
2025-01-14 23:26:34 UTC	16384	IN	Data Raw: a5 0b cf c4 0d 80 ba 63 ac 9b e4 f0 97 c1 90 10 60 81 64 2d a5 21 b6 9a 0c bd 57 47 cb b0 3d 5a 34 7e b4 97 e6 9e 89 19 2f 09 d3 29 25 74 27 ec 51 a5 70 63 0a c8 c0 4a e9 f9 24 d4 49 b2 d4 53 8e 87 48 65 81 b0 de 63 8a 39 30 15 e4 56 35 88 fc 37 d3 bd c5 2c 10 d2 6c ae c1 a0 8d 0e 46 50 5d 46 9b 3f 63 1c aa 2e 58 18 91 99 49 2d b3 fb 0e 83 40 10 d5 32 33 c0 eb e4 e6 96 d3 3a 44 59 26 54 ea 37 cf 77 71 1c ab e0 84 6f 3e 32 40 0a 09 81 22 08 c2 9e 71 94 85 61 c1 4a 74 09 c0 50 12 c1 28 52 be 4c 16 80 0b 82 f0 cd 39 66 40 22 d3 c8 c9 59 52 fa 2c cb 32 93 09 22 42 12 d6 57 9d 5e f0 c2 a9 0c 89 74 34 42 14 c7 2a 88 66 3f 3f 13 f0 8b c0 04 cb 9f 8d 84 0a 3a 45 ea e4 32 bd 1c a4 68 93 31 5a da 17 35 60 42 02 88 c1 30 11 f8 01 30 fb 94 4f 1f 50 81 3f 09 21 10 54 Data Ascii: c`d-!WG=Z4~/)%t'QpcJ$ISHec90V57,lFP]F?c.XI-@23:DY&T7wqo>2@"qaJtP(RL9f@"YR,2"BW^t4B*f??:E2h1Z5`B00OP?!T
2025-01-14 23:26:34 UTC	16384	IN	Data Raw: b8 f8 fc 8b fe 0d cd 64 e5 c4 7d b1 e9 60 ef 7e 7c f1 f6 d7 e3 fd df 7f 16 be b3 fd 1f 0b e0 07 00 de f7 44 02 a5 39 b7 eb d0 4d f8 fa ed 7f 85 f7 5d ff 54 5c 7b c7 1b 31 37 58 78 a9 e8 e7 5e f0 6e 34 92 16 22 66 95 4c a4 71 76 40 33 55 54 5a 47 f4 df 4f 3a e5 2d 58 d1 1a e3 2b 0f d0 dc 60 17 be 76 d7 9b f0 c1 ef 3f 15 df db fe 8e 6a f0 83 bd ee d2 5a a1 41 fb 07 7a 77 e2 c6 1d ff 8a 8f fd e8 b9 b8 f6 ce d7 e1 60 ef be 05 c9 03 00 57 9c f2 57 e8 d4 56 83 bb eb d3 98 fb 68 0d a3 92 96 8c 31 05 40 72 d6 a4 27 6c fb 63 ac 6e 9f ba 20 d9 46 59 17 df bd ff af f0 a1 1f 3c 05 df be f7 4f b1 e3 e0 f5 c8 44 6a 4a 56 9a 6c b2 d4 2e f9 87 9c 3d ef 40 ff 7e dc b2 e3 fd f8 dc cd ff 03 9f fa f1 8b 70 cf be cf 8d 6d 3b 44 e7 1d f3 eb d8 38 7b 71 69 2c 94 cf 2d 33 73 9e Data Ascii: d}`~\|D9M]T\{17Xx^n4"fLqv@3UTZGO:-X+`v?jZAzw`WWVh1@r'lcn FY<ODjJVl.=@~pm;D8{qi,-3s
2025-01-14 23:26:34 UTC	7952	IN	Data Raw: cf 6c c3 c6 34 68 18 2f 20 f4 1a b5 00 24 1e f7 f1 13 17 fe 0a 6e df f5 6d 08 99 2a 4f 4a 59 4c 9c 28 b8 3a 24 a4 98 68 dc 0d 49 60 fd cc 09 78 eb 05 ef 81 c7 26 ab fb 0f ae 7d 07 0e 2f ec 07 00 24 48 54 0e f9 dc 33 9c 31 48 9d 4f cf b9 1e b3 f4 c6 ab 57 92 46 c2 f7 3d c4 71 e2 7e 17 f5 df 54 3e bf 4c 49 28 e5 95 4b 59 48 49 94 af 8c 42 f8 39 65 d0 e1 20 ed a3 72 fe a0 2b a4 04 b4 1c 79 52 21 ba 15 00 c2 65 14 b0 9a 32 d1 38 1a 05 df f1 05 a1 dd ff b3 13 29 61 4a 99 4d 6f 81 64 80 c0 fa 77 75 8b 5d 61 32 53 60 43 f5 4a 90 24 09 98 94 90 2c 0d 3b 96 9f 63 80 7d 18 4c c3 c2 55 1e e0 e9 3b 21 94 a9 53 4a a3 ec 19 4f 7b 9e c8 f9 af 0f c2 e4 ec 35 e3 5c 59 9f fe 9f 7e df 12 21 54 88 37 a6 d1 de 25 55 da c5 1b be 0f 8a ea 20 01 73 8e 89 13 0b e1 9b 2b c4 19 37 Data Ascii: l4h/ $nm*OJYL(:$hI`x&}/$HT31HOWF=q~T>LI(KYHIB9e r+yR!e28)aJModwu]a2S`CJ$,;c}LU;!SJO{5\Y~!T7%U s+7
2025-01-14 23:26:34 UTC	12216	IN	Data Raw: 7f ef fe 5b d0 8f e6 9c df dd be fb 1a d4 09 fd 04 00 0d af 89 0b 36 3e af 76 bd 4b a1 bf fa ee fb 30 8c 17 6a 3f 7f d9 29 6f c0 f6 75 cf 7c 0a 25 9a 1e fd ed 6d bf 81 fd f3 4f c2 f3 aa 41 13 e4 18 ce bf 73 06 3c e0 7b a5 eb 32 d3 bb 76 1c b9 23 69 98 0d dd 1b 03 82 48 c4 58 10 44 65 4e 70 a6 14 ae aa 48 10 01 85 fd 2f 67 a1 9c bd d6 86 6e 3b d8 00 20 0c 43 34 f5 4d 5e 8f 14 bf 09 17 39 02 41 70 8f 9b fe fb 7f 81 d2 70 97 2e a2 73 83 1a bd 7c 34 88 02 2f 5d c4 f3 b8 ba 09 ae 0f 8c 55 5d 49 07 2c 21 04 62 7d 73 de 15 fd 24 2f b3 a7 1d 88 a5 87 d2 b2 76 0a 01 a1 81 10 26 7c a8 f2 7e 5b 02 59 8d d1 b2 28 c7 bd 07 8f 9c bd e4 b4 1f 6b 45 d4 fb ae 14 60 5c a5 d7 80 46 9d 9b 43 6f 49 7b 09 0d 2d a4 d4 e9 34 54 64 85 fc 0d 1d 93 bb d0 ea 07 6e 47 9a b0 06 2b 8e Data Ascii: [6>vK0j?)ou\|%mOAs<{2v#iHXDeNpH/gn; C4M^9App.s\|4/]U]I,!b}s$/v&\|~[Y(kE`\FCoI{-4TdnG+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49790	104.102.53.18	443	3364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 23:26:34 UTC	372	OUT	GET /resources/images/loginlogo.png HTTP/1.1 Host: www.lbpiaccess.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 23:26:34 UTC	446	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Last-Modified: Wed, 20 Nov 2024 13:19:20 GMT X-ORACLE-DMS-ECID: 7a38b041-505a-4402-8d39-5435ce46a11f-009d4c0a X-ORACLE-DMS-RID: 0 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Content-Length: 61738 Date: Tue, 14 Jan 2025 23:26:34 GMT Connection: close
2025-01-14 23:26:34 UTC	15938	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 67 00 00 01 96 08 06 00 00 00 3d 94 24 30 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec 9d 07 94 55 d5 f5 ff bf b7 bf fe a6 37 66 86 de ab 14 a9 0a 08 2a c5 de 15 4b 8c 46 8d 89 89 31 f5 1f 57 7a 31 d5 c4 14 35 d6 58 a3 08 82 28 22 88 22 2a 20 22 bd c3 c0 0c 65 98 19 a6 cf 2b b7 df fb 5f e7 0e 63 48 7e 49 04 61 86 37 f3 f6 5d 6b d6 9b 72 ef 39 7b 7f ce 99 37 df d9 e7 9c bd 39 d0 45 04 88 00 11 20 02 44 80 08 10 01 22 90 32 04 b8 94 b1 84 0c 21 02 44 80 08 10 01 22 40 04 88 00 11 00 89 33 9a 04 44 80 08 10 01 22 40 04 88 00 11 48 21 02 24 ce 52 68 30 c8 14 22 40 04 88 00 11 20 02 44 80 08 90 38 a3 39 40 04 88 00 11 20 02 44 80 08 10 81 14 22 40 e2 2c 85 06 83 4c 21 02 44 80 Data Ascii: PNGIHDRg=$0sRGB IDATx^U7fKF1Wz15X("" "e+_cH~Ia7]kr9{79E D"2!D"@3D"@H!$Rh0"@ D89@ D"@,L!D
2025-01-14 23:26:34 UTC	16384	IN	Data Raw: bc 9c 51 7e 49 84 91 4c 40 6d 6e c2 0d 33 66 3d 36 a5 68 c0 23 53 8b 7b 6e 6a 4f 3b a8 ed 93 27 b0 fa d0 21 ff dc 55 cb 1f df 5c 7d 68 42 5c e6 7a aa ac 36 74 a0 35 cb 3e 13 1f a1 40 d0 4b 5d 61 58 a6 97 d5 df 31 59 36 ff d4 bd bc 6a 03 c7 0e 02 78 e5 9d 8e 3b 18 d0 96 5f ed f3 5a cf 5a b3 5c d3 cb c9 26 da 3c 60 d9 ad 95 07 44 ce 4b 6c 2b ba 1c 38 55 ab 9f 38 68 d8 bc f1 dd fb 3f 79 e3 90 b3 d6 7d de be e8 b9 f6 23 f0 e0 ca e5 0f 2d da ba f6 6b 31 bf 88 84 6d 78 ff 80 44 38 09 21 d5 44 df 40 e6 07 7f b9 f5 ae 73 db af 77 6a 99 08 b4 0f 01 12 67 ed c3 b5 53 b7 fa ed 97 5f 78 a7 46 72 ce db 75 f4 08 74 9e 83 ed 38 f0 49 22 78 43 83 d3 d4 8c 7b ae 9f 73 db 2d 3d 46 3c d5 a9 9d ec 82 c6 ff 71 f9 1b 77 7f b4 67 e7 d7 ab 8c 64 3f dd af 20 c1 b9 5e b9 25 c9 a7 Data Ascii: Q~IL@mn3f=6h#S{njO;'!U\}hB\z6t5>@K]aX1Y6jx;_ZZ\&<`DKl+8U8h?y}#-k1mxD8!D@swjgS_xFrut8I"xC{s-=F<qwgd? ^%
2025-01-14 23:26:34 UTC	2960	IN	Data Raw: 5c 91 58 75 cb cf 7d 9e 6c c5 71 64 26 10 bb 22 19 81 11 1b 97 b7 fc 71 e9 82 39 4a b2 b3 6a a1 a6 c0 ef f5 c1 50 0d 24 39 13 20 93 3e 68 3c 0f af df 7f 26 ef 8c 44 d2 68 9b 8d d2 eb cf 22 68 c1 aa ce 48 b6 bb a2 75 0b 92 b3 20 16 41 d2 1a 24 67 04 d7 e0 31 31 29 b0 50 7c 7e 4a 7a 09 be e4 75 42 d4 2c 9c 80 78 8e 43 7a 52 ca e6 3a d6 f8 af de be a7 fb a8 8a d6 9b ad 7f 69 08 6c c8 cf 4f f8 69 ed a2 5f 97 ed dd 79 83 df 2a 81 f4 72 d6 54 95 8e 6d 8a f7 1a fb 7f 79 64 70 a3 4b 93 c0 de cd 10 b8 34 04 18 39 bb 34 fc 2a c5 bb 1f fa fa bf 87 f7 ea ae ba 2e 8b 10 68 68 0a 0e 9c 4f 45 43 7b c2 f1 8f fa 3d dd 90 25 2d 57 0a 37 e2 c9 b1 5f 7f 93 67 11 1e 38 94 9f 93 a2 c9 e4 81 c2 c3 ef f6 d3 e6 a7 89 89 89 28 2a 0a cc b0 57 75 fd f7 2a cd b3 7b a0 b1 9f f8 3f 38 Data Ascii: \Xu}lqd&"q9JjP$9 >h<&Dh"hHu A$g11)P\|~JzuB,xCzR:ilOi_yrTmydpK494.hhOEC{=%-W7_g8(Wu{?8
2025-01-14 23:26:34 UTC	16384	IN	Data Raw: f2 9a 4b e4 11 2f d9 e9 71 8f cf d4 61 55 14 bc ff e0 a0 86 9d 13 52 0f 5c e4 92 ec f6 08 47 60 d4 fc 5f 5b 15 03 d7 ad 3b b0 f7 49 8f 85 6f 90 ed 2b b1 14 2b 0a 9d c5 59 b7 6e 7d 64 9f ca a2 55 9d e4 a8 4f 2b 6d c2 4a 2a 18 0d 92 9b 65 92 be 5f 7f 6e 60 24 90 33 a2 59 90 3b 06 73 cb e8 e7 32 bf d5 c8 24 0c 59 0c 8c 5d 32 14 8d 12 33 12 35 e3 0d 93 ce c9 24 04 35 3e 3e 0e 86 60 82 d3 75 38 44 2e b3 49 cd da c3 be ba bb ff 47 11 ee 5a a6 de df 40 60 41 e6 91 a6 5f 4d 9b b4 eb b8 e1 83 46 5a 69 90 29 10 30 c1 69 2a ae af d3 f0 cb af ef e8 f5 cc df 58 96 bd 85 21 50 ee 08 30 72 56 ee 90 46 ee 82 13 0f ec ea fa f9 a2 69 53 5d 16 11 ba 47 a5 ad 15 dc a6 06 8b aa e3 c1 d6 ff f8 ac 8e 61 1d d3 ab 75 eb cd 91 6b 01 d3 ec 52 10 98 5f 94 d3 f0 bd 91 5f ef f6 58 78 Data Ascii: K/qaUR\G`_[;Io++Yn}dUO+mJe_n`$3Y;s2$Y]235$5>>`u8D.IGZ@`A_MFZi)0iX!P0rVFiS]GaukR__Xx
2025-01-14 23:26:34 UTC	10072	IN	Data Raw: f1 d5 a6 35 fd fc 78 04 ae 28 21 6b 5a 88 53 66 98 15 08 8d 07 04 2d 88 2f 0b c8 59 40 d2 38 39 6b 43 1b 85 0f 75 a7 08 ec 88 98 11 11 23 57 a6 6b 3b 4c 57 8c c2 06 24 41 c4 90 21 43 98 20 f3 3b ef bc 83 78 71 1c 89 e2 22 98 b6 cb ac 5b 92 ac 22 4b 16 6c 2a eb e4 7b 2c 06 d4 36 b3 2c b3 52 48 65 d1 b7 a8 e4 d3 a7 2e bd 61 87 95 3c 9e fd 6a ee 88 0f 16 7f 79 cb b2 cd 1b c6 af 4f 26 61 cb 02 1c 59 80 2b 00 aa 26 43 32 2c a8 75 69 0c ad e8 fe e4 03 17 5f 7b 2e 5f 4e 8e 00 47 60 e7 08 70 72 c6 77 47 41 20 f0 c0 ec 0f 7a bd 3e 67 e6 73 8b 6a b7 1c 68 ea 0a 3c 59 44 79 51 19 7a 24 ca 60 6c d9 8a 7e 9d ba bd d4 49 8b 7e f6 eb a3 4f f8 6d c3 01 9f 76 ef 5f 17 d8 ba 3c 64 53 36 05 4a 2e a0 6c b3 6c 2a cb ac 03 db b2 d2 84 20 c2 8c 91 33 78 41 b6 26 3b b8 e5 ac 20 Data Ascii: 5x(!kZSf-/Y@89kCu#Wk;LW$A!C ;xq"["Kl{,6,RHe.a<jyO&aY+&C2,ui_{._NG`prwGA z>gsjh<YDyQz$`l~I~Omv_<dS6J.ll 3xA&;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49793	104.102.53.18	443	3364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 23:26:34 UTC	410	OUT	GET /javax.faces.resource/messages/messages.png.xhtml?ln=primefaces&v=8.0 HTTP/1.1 Host: www.lbpiaccess.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 23:26:35 UTC	495	IN	HTTP/1.1 200 OK Content-Type: image/png Expires: Tue, 21 Jan 2025 23:26:35 GMT Last-Modified: Thu, 05 Mar 2020 02:52:56 GMT ETag: W/"16755-1583376776000" Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-ORACLE-DMS-RID: 0 X-Content-Type-Options: nosniff X-ORACLE-DMS-ECID: d51cf803-2cfa-4f0d-b979-dc64dc3b274a-003545f6 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Content-Length: 16755 Date: Tue, 14 Jan 2025 23:26:35 GMT Connection: close
2025-01-14 23:26:35 UTC	1358	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 01 fc 08 06 00 00 00 b0 f1 ad 14 00 00 41 3a 49 44 41 54 78 01 b4 57 03 b0 24 4b d3 3d dd 3d 3d 9e b5 06 7b ff b5 9e 6d db b6 6d db b6 6d db b6 ad bb b6 77 af d7 3b 77 ac ae ff 64 45 77 bc 89 79 0a 7d 19 91 51 d5 55 d5 95 27 33 4f 65 57 a3 41 0c a5 94 81 ff 91 b8 7b d7 ef 8f 7f 32 d6 9f 9a dc 7b ef bd 93 89 44 22 66 9a a6 c2 df 08 c7 f1 4f 62 59 96 36 d8 d6 d6 96 79 fb ed b7 db 01 88 2e a3 e2 df 00 f8 a9 9b bf fc f2 cb a7 8c 1a 35 6a ed a6 a6 a6 78 34 1a ed a1 28 0d 9e fc 7d 1f ec ab 3f c7 0d 4a b1 58 ec 6e 6f 6f ef 9c 35 6b d6 d4 c3 0e 3b ec 51 00 3f 53 cb f5 00 44 95 18 3f e2 88 23 4e bc f2 ca 2b 2f 1c 33 66 cc 50 c8 aa 72 19 15 6a ad 56 83 e3 38 a8 51 1d ad 35 8e 39 50 d2 f7 c6 65 8d 52 Data Ascii: PNGIHDR A:IDATxW$K==={mmmw;wdEwy}QU'3OeWA{2{D"fObY6y.5jx4(}?JXnoo5k;Q?SD?#N+/3fPrjV8Q59PeR
2025-01-14 23:26:35 UTC	14336	IN	Data Raw: 53 b3 e0 a3 8f 60 13 54 8d 7d ed b5 0b c0 70 01 c0 a9 e7 80 f9 67 04 3c 22 ca b2 8a 90 88 c6 87 ef b9 27 b6 a7 f1 90 6b 5c ce f9 ca d6 56 bc 70 ca 29 78 f5 cc b3 74 99 8d f0 24 c8 a9 89 31 3a db 5d 71 05 52 ac 88 d9 b6 36 18 c2 15 40 d8 ff cf c7 50 32 e3 d5 01 61 ad 48 90 1e 56 bb ba 90 38 f8 60 6c 74 f2 c9 3a ec 25 16 94 1e fc 3e ac e6 c6 5f de 7c 33 16 f1 64 88 bc c3 54 ed 79 fd f5 08 b2 3e 74 f3 db d1 23 1e c7 b6 97 5e 0a 30 75 8b b9 c6 76 4f 94 45 45 03 07 cc fa 14 48 04 44 25 6f 8a ad a0 1b b0 de 7a 08 0f 1a a8 99 1c 88 84 91 21 a8 4f ae b9 06 73 5e 79 05 81 e1 c3 99 eb 21 98 c8 9a ff da b9 e7 22 c3 94 84 7b 30 12 5c db 8f 27 61 d8 96 5b ea 48 0a 10 f1 de 12 6d 88 80 7e f2 2e 9d 12 7e cd 03 02 90 fa 5e 60 75 9b f4 f8 e3 98 fb cd b7 b2 09 0d 74 e1 7b Data Ascii: S`T}pg<"'k\Vp)xt$1:]qR6@P2aHV8`lt:%>_\|3dTy>t#^0uvOEEHD%oz!Os^y!"{0\'a[Hm~.~^`ut{
2025-01-14 23:26:35 UTC	1061	IN	Data Raw: 28 12 07 a4 01 49 01 36 9e 70 0b 79 d8 f1 86 39 d9 6b db df be 3b 53 b7 a2 e2 69 35 fa 64 cb 81 67 c4 1a e2 a3 9d a0 5a 2a 49 40 a0 62 80 6c 02 c5 52 00 6f 05 cc 00 28 da 08 8a 08 90 25 01 09 90 2d 85 72 82 2c 58 0d 91 d4 a4 f3 c2 2c 74 ee 52 16 04 3a c3 e8 fb 2f 6f 78 87 8c 37 7f c5 2d b9 80 71 04 ec 48 58 25 8f 44 2a d1 92 e5 c3 9e 72 32 ec 7d bf 59 99 b2 25 cb 80 a2 43 d5 71 1b 2c 8c 74 0a 79 88 68 f2 f3 99 6b f7 fe e8 ae 66 41 0c 45 1f 6f 9c 7c 4e 34 19 6d f2 4b 39 4d d2 12 95 7d 6c 59 d5 d2 7b e0 c4 68 98 f4 e3 30 bd 77 03 54 06 22 2d 20 19 6e 47 45 37 4a ca c9 eb 48 cc 8a c7 52 ed e7 74 20 bc a0 ed d2 23 20 b2 37 4c 9d 15 8b 36 dc a8 44 24 a5 55 49 8b 68 94 28 1a 85 88 a7 40 b1 24 28 3a 28 91 14 40 3e 08 1a 4c 09 c0 77 60 bc 02 d8 09 ae 8a 79 c0 29 Data Ascii: (I6py9k;Si5dgZI@blRo(%-r,X,tR:/ox7-qHX%Dr2}Y%Cq,tyhkfAEo\|N4mK9M}lY{h0wT"- nGE7JHRt # 7L6D$UIh(@$(:(@>Lw`y)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49822	104.102.53.18	443	3364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 23:26:39 UTC	609	OUT	GET /resources/images/favicon.ico HTTP/1.1 Host: www.lbpiaccess.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.giselabravo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 23:26:39 UTC	448	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 1150 Content-Type: image/x-icon Last-Modified: Wed, 20 Nov 2024 13:19:20 GMT X-ORACLE-DMS-ECID: 7a38b041-505a-4402-8d39-5435ce46a11f-009d5a5f X-ORACLE-DMS-RID: 0 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Date: Tue, 14 Jan 2025 23:26:39 GMT Connection: close
2025-01-14 23:26:39 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 c3 0e 00 00 c3 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 81 c9 4f 00 91 cf 54 09 66 bf 4d 49 57 bc 67 a2 55 bd 89 e2 4e b9 65 f8 4e b9 68 f8 55 be 8e e2 5a bc 60 a2 6a be 31 49 93 cb 30 09 83 c6 32 00 00 00 00 00 00 00 00 00 ff ff ff 00 45 ae 0e 00 77 c3 46 1a 58 b7 28 8d 4e b6 45 e9 4b be bd ff 4a c2 e7 ff 4b bb 9a ff 4a bc 98 ff 4a c1 cf ff 4a b8 67 ff 4d b5 37 e9 58 bb 58 8d 76 c5 4b 1a 48 b2 1e 00 ff ff ff 00 6e c0 30 00 7e c6 2e 1a 54 ba 54 ab 4b bd a2 fd 4a b9 77 ff 4a b7 61 ff 4a b9 76 ff 4b b9 75 ff 4b b9 6a ff 4a b7 51 ff 4b b7 4e ff 4b b9 79 ff 4b b8 6b fd 53 b6 26 ab 7c c6 38 1a 6d c0 2e 00 9c Data Ascii: h( OTfMIWgUNeNhUZ`j1I02EwFX(NEKJKJJJgM7XXvKHn0~.TTKJwJaJvKuKjJQKNKyKkS&\|8m.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49832	104.102.53.18	443	3364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 23:26:40 UTC	370	OUT	GET /resources/images/favicon.ico HTTP/1.1 Host: www.lbpiaccess.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 23:26:40 UTC	448	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 1150 Content-Type: image/x-icon Last-Modified: Wed, 20 Nov 2024 13:19:20 GMT X-ORACLE-DMS-ECID: 7a38b041-505a-4402-8d39-5435ce46a11f-009d5a5f X-ORACLE-DMS-RID: 0 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Date: Tue, 14 Jan 2025 23:26:40 GMT Connection: close
2025-01-14 23:26:40 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 c3 0e 00 00 c3 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 81 c9 4f 00 91 cf 54 09 66 bf 4d 49 57 bc 67 a2 55 bd 89 e2 4e b9 65 f8 4e b9 68 f8 55 be 8e e2 5a bc 60 a2 6a be 31 49 93 cb 30 09 83 c6 32 00 00 00 00 00 00 00 00 00 ff ff ff 00 45 ae 0e 00 77 c3 46 1a 58 b7 28 8d 4e b6 45 e9 4b be bd ff 4a c2 e7 ff 4b bb 9a ff 4a bc 98 ff 4a c1 cf ff 4a b8 67 ff 4d b5 37 e9 58 bb 58 8d 76 c5 4b 1a 48 b2 1e 00 ff ff ff 00 6e c0 30 00 7e c6 2e 1a 54 ba 54 ab 4b bd a2 fd 4a b9 77 ff 4a b7 61 ff 4a b9 76 ff 4b b9 75 ff 4b b9 6a ff 4a b7 51 ff 4b b7 4e ff 4b b9 79 ff 4b b8 6b fd 53 b6 26 ab 7c c6 38 1a 6d c0 2e 00 9c Data Ascii: h( OTfMIWgUNeNhUZ`j1I02EwFX(NEKJKJJJgM7XXvKHn0~.TTKJwJaJvKuKjJQKNKyKkS&\|8m.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49854	201.46.113.120	443	3364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 23:26:43 UTC	916	OUT	POST /lblogin/logins HTTP/1.1 Host: www.giselabravo.com Connection: keep-alive Content-Length: 183 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://www.giselabravo.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://www.giselabravo.com/lblogin/logins Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ombc6d1oenbcoel3kf6276ivqq
2025-01-14 23:26:43 UTC	183	OUT	Data Raw: 6c 6f 67 69 6e 2d 66 6f 72 6d 3d 6c 6f 67 69 6e 2d 66 6f 72 6d 26 6b 3d 4e 4e 42 4c 44 41 53 58 4c 58 49 44 26 6b 69 3d 63 6d 68 70 63 6e 46 71 4d 6c 67 79 4f 54 52 34 62 55 35 7a 65 41 25 33 44 25 33 44 26 70 69 3d 26 75 73 65 72 49 64 3d 26 70 61 73 73 3d 25 33 46 25 32 33 25 32 34 56 56 55 61 55 45 25 35 42 50 73 26 6c 6f 67 69 6e 3d 4c 6f 67 69 6e 26 6a 61 76 61 78 2e 66 61 63 65 73 2e 56 69 65 77 53 74 61 74 65 3d 34 35 30 39 35 39 31 38 33 37 30 32 35 35 38 37 39 35 36 25 33 41 2d 38 31 34 37 36 39 34 38 36 39 39 31 39 32 37 30 35 34 34 Data Ascii: login-form=login-form&k=NNBLDASXLXID&ki=cmhpcnFqMlgyOTR4bU5zeA%3D%3D&pi=&userId=&pass=%3F%23%24VVUaUE%5BPs&login=Login&javax.faces.ViewState=4509591837025587956%3A-8147694869919270544
2025-01-14 23:26:45 UTC	363	IN	HTTP/1.1 302 Found Server: nginx Date: Tue, 14 Jan 2025 23:26:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache location: otp-entry Strict-Transport-Security: max-age=31536000
2025-01-14 23:26:45 UTC	10335	IN	Data Raw: 31 65 61 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 20 20 20 20 2e 66 6f 72 65 78 2d 72 69 67 68 74 68 2d 61 6c 69 67 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 73 73 6c 2d 73 65 61 6c 20 7b 0d 0a 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 20 20 20 20 20 20 6c 65 66 74 3a 20 35 30 25 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 2d Data Ascii: 1eab<!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml"><style type="text/css"> .forex-righth-align { text-align: right; } .ssl-seal { position: absolute; left: 50%; transform: translate(-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49853	201.46.113.120	443	3364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 23:26:45 UTC	811	OUT	GET /lblogin/otp-entry HTTP/1.1 Host: www.giselabravo.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.giselabravo.com/lblogin/logins Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ombc6d1oenbcoel3kf6276ivqq
2025-01-14 23:26:45 UTC	362	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 14 Jan 2025 23:26:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Powered-By: PHP/8.0.30 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Strict-Transport-Security: max-age=31536000
2025-01-14 23:26:45 UTC	11347	IN	Data Raw: 31 65 63 33 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 20 20 20 20 20 20 20 20 2e 66 6f 72 65 78 2d 72 69 67 68 74 68 2d 61 6c 69 67 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2e 73 73 6c 2d 73 65 61 6c 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 66 74 3a 20 35 30 25 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d Data Ascii: 1ec3<html xmlns="http://www.w3.org/1999/xhtml"><head><style type="text/css"> .forex-righth-align { text-align: right; } .ssl-seal { position: absolute; left: 50%; transform

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49873	201.46.113.120	443	3364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 23:26:46 UTC	713	OUT	GET /javax.faces.resource/spacer/dot_clear.gif.xhtml?ln=primefaces&v=8.0 HTTP/1.1 Host: www.giselabravo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.giselabravo.com/lblogin/otp-entry Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ombc6d1oenbcoel3kf6276ivqq
2025-01-14 23:26:47 UTC	424	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 14 Jan 2025 23:26:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Powered-By: PHP/8.0.30 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.giselabravo.com/wp-json/>; rel="https://api.w.org/" Strict-Transport-Security: max-age=31536000
2025-01-14 23:26:47 UTC	15960	IN	Data Raw: 31 65 38 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 22 20 70 72 65 66 69 78 3d 22 6f 67 3a 20 68 74 74 70 73 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 Data Ascii: 1e85<!DOCTYPE html><html lang="es" prefix="og: https://ogp.me/ns#"><head><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1" /><link rel="profile" href="http://gmpg.org/xfn/11" /><link rel="pingback" hre
2025-01-14 23:26:47 UTC	16384	IN	Data Raw: 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 65 6c 65 6d 65 6e 74 6f 72 2d 69 63 6f 6e 73 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 69 73 65 6c 61 62 72 61 76 6f 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 65 6c 65 6d 65 6e 74 6f 72 2f 61 73 73 65 74 73 2f 6c 69 62 2f 65 69 63 6f 6e 73 2f 63 73 73 2f 65 6c 65 6d 65 6e 74 6f 72 2d 69 63 6f 6e 73 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 35 2e 32 30 2e 30 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 65 6c Data Ascii: 'text/css' media='all' /><link rel='stylesheet' id='elementor-icons-css' href='https://www.giselabravo.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.20.0' type='text/css' media='all' /><link rel='stylesheet' id='el

Target ID:	0
Start time:	18:26:15
Start date:	14/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	18:26:19
Start date:	14/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2016 --field-trial-handle=1944,i,2642613565630590889,9283772032916600276,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	18:26:25
Start date:	14/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.giselabravo.com/lblogin/logins"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.giselabravo.com/lblogin/logins

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Windows Analysis Report
https://www.giselabravo.com/lblogin/logins