Edit tour

Windows Analysis Report
https://elc-path.com/pdfglobal2/docs89q9eqwwe/login.php#wa=wsignin1.0&rpsnv=13&ct=1539585327&rver=7.0.6737.0&wp=MBI_SSL&wreply=https%3a%2f%2foutlook.live.com%2fowa%2f%3fnlp%3d1%26RpsCsrfState%3d715d44a2-2f11-4282-f625-a066679e96e2&id=292841&CBCXT=out&lw=1&fl=dob%2cflname%2cwld&cobrandid=90015

Overview

General Information

Sample URL:	https://elc-path.com/pdfglobal2/docs89q9eqwwe/login.php#wa=wsignin1.0&rpsnv=13&ct=1539585327&rver=7.0.6737.0&wp=MBI_SSL&wreply=https%3a%2f%2foutlook.live.com%2fowa%2f%3fnlp%3d1%26RpsCsrfState%3d715d44
Analysis ID:	1501222
Infos:

Detection

HTMLPhisher

Score:	76
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Yara detected HtmlPhish10

Phishing site detected (based on favicon image match)

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML title does not match URL

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3648 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3008 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1948 --field-trial-handle=1892,i,1456892703543471323,7420831319488466678,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5004 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://elc-path.com/pdfglobal2/docs89q9eqwwe/login.php#wa=wsignin1.0&rpsnv=13&ct=1539585327&rver=7.0.6737.0&wp=MBI_SSL&wreply=https%3a%2f%2foutlook.live.com%2fowa%2f%3fnlp%3d1%26RpsCsrfState%3d715d44a2-2f11-4282-f625-a066679e96e2&id=292841&CBCXT=out&lw=1&fl=dob%2cflname%2cwld&cobrandid=90015" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
0.0.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Suricata Signatures

ET PHISHING Microsoft Account Phishing Landing 2018-08-07 - Source IP: 192.249.123.145 - Destination IP: 192.168.2.5

Timestamp:	2024-08-29T15:50:01.210739+0200
SID:	2025974
Severity:	2
Source Port:	443
Destination Port:	49709
Protocol:	TCP
Classtype:	Possible Social Engineering Attempted

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://elc-path.com/pdfglobal2/docs89q9eqwwe/login.php#wa=wsignin1.0&rpsnv=13&ct=1539585327&rver=7.0.6737.0&wp=MBI_SSL&wreply=https%3a%2f%2foutlook.live.com%2fowa%2f%3fnlp%3d1%26RpsCsrfState%3d715d44a2-2f11-4282-f625-a066679e96e2&id=292841&CBCXT=out&lw=1&fl=dob%2cflname%2cwld&cobrandid=90015

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Phishing

AI detected phishing page

LLM: Score: 8 Reasons: The URL elc-path.com does not match the legitimate domain associated with Microsoft, which is microsoft.com. The use of a different domain name, even if it seems appropriate, is a common tactic used by phishers to create convincing fake login pages. DOM: 0.0.pages.csv

Yara detected HtmlPhish10

Source: Yara match

File source: 0.0.pages.csv, type: HTML

Phishing site detected (based on favicon image match)

Source: https://elc-path.com	Matcher: Template: microsoft matched with high similarity
Source: https://elc-path.com/pdfglobal2/docs89q9eqwwe/login.php#wa=wsignin1.0&rpsnv=13&ct=1539585327&rver=7.0.6737.0&wp=MBI_SSL&wreply=https%3a%2f%2foutlook.live.com%2fowa%2f%3fnlp%3d1%26RpsCsrfState%3d715d44a2-2f11-4282-f625-a066679e96e2&id=292841&CBCXT=out&lw=1&fl=dob%2cflname%2cwld&cobrandid=90015	Matcher: Template: microsoft matched with high similarity

Phishing site detected (based on image similarity)

Matcher: Found strong image similarity, brand: MICROSOFT

Phishing site detected (based on logo match)

Matcher: Template: microsoft matched

HTTP Parser: Number of links: 0

HTTP Parser: Title: Sign in to your Microsoft account does not match URL

HTTP Parser: No <meta name="author".. found

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49726 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.5:56395 -> 1.1.1.1:53

Source: Network traffic

Suricata IDS: 2025974 - Severity 2 - ET PHISHING Microsoft Account Phishing Landing 2018-08-07 : 192.249.123.145:443 -> 192.168.2.5:49709

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /pdfglobal2/docs89q9eqwwe/login.php HTTP/1.1Host: elc-path.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pdfglobal2/docs89q9eqwwe/assets/css/login.css HTTP/1.1Host: elc-path.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://elc-path.com/pdfglobal2/docs89q9eqwwe/login.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9d98dbccaec32948374c5e64a70679f2
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/css/bootstrap.min.css HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://elc-path.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://elc-path.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.14.3/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://elc-path.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pdfglobal2/docs89q9eqwwe/assets/images/background.jpg HTTP/1.1Host: elc-path.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://elc-path.com/pdfglobal2/docs89q9eqwwe/assets/css/login.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9d98dbccaec32948374c5e64a70679f2
Source: global traffic	HTTP traffic detected: GET /pdfglobal2/docs89q9eqwwe/assets/images/logo.svg HTTP/1.1Host: elc-path.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://elc-path.com/pdfglobal2/docs89q9eqwwe/login.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9d98dbccaec32948374c5e64a70679f2
Source: global traffic	HTTP traffic detected: GET /pdfglobal2/docs89q9eqwwe/assets/images/ellipsis_white.svg HTTP/1.1Host: elc-path.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://elc-path.com/pdfglobal2/docs89q9eqwwe/login.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9d98dbccaec32948374c5e64a70679f2
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.14.3/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /pdfglobal2/docs89q9eqwwe/assets/images/favicon.ico HTTP/1.1Host: elc-path.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://elc-path.com/pdfglobal2/docs89q9eqwwe/login.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9d98dbccaec32948374c5e64a70679f2
Source: global traffic	HTTP traffic detected: GET /pdfglobal2/docs89q9eqwwe/assets/images/logo.svg HTTP/1.1Host: elc-path.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9d98dbccaec32948374c5e64a70679f2
Source: global traffic	HTTP traffic detected: GET /pdfglobal2/docs89q9eqwwe/assets/images/background.jpg HTTP/1.1Host: elc-path.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9d98dbccaec32948374c5e64a70679f2
Source: global traffic	HTTP traffic detected: GET /pdfglobal2/docs89q9eqwwe/assets/images/ellipsis_white.svg HTTP/1.1Host: elc-path.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9d98dbccaec32948374c5e64a70679f2
Source: global traffic	HTTP traffic detected: GET /pdfglobal2/docs89q9eqwwe/assets/images/favicon.ico HTTP/1.1Host: elc-path.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9d98dbccaec32948374c5e64a70679f2

Source: global traffic	DNS traffic detected: DNS query: elc-path.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com

Source: chromecache_137.2.dr, chromecache_150.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_144.2.dr, chromecache_140.2.dr, chromecache_148.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_144.2.dr, chromecache_140.2.dr, chromecache_148.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_144.2.dr, chromecache_140.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)

Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56399 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56399
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49726 version: TLS 1.2

Source: classification engine

Classification label: mal76.phis.win@21/33@14/7

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1948 --field-trial-handle=1892,i,1456892703543471323,7420831319488466678,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://elc-path.com/pdfglobal2/docs89q9eqwwe/login.php#wa=wsignin1.0&rpsnv=13&ct=1539585327&rver=7.0.6737.0&wp=MBI_SSL&wreply=https%3a%2f%2foutlook.live.com%2fowa%2f%3fnlp%3d1%26RpsCsrfState%3d715d44a2-2f11-4282-f625-a066679e96e2&id=292841&CBCXT=out&lw=1&fl=dob%2cflname%2cwld&cobrandid=90015"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1948 --field-trial-handle=1892,i,1456892703543471323,7420831319488466678,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://elc-path.com/pdfglobal2/docs89q9eqwwe/login.php#wa=wsignin1.0&rpsnv=13&ct=1539585327&rver=7.0.6737.0&wp=MBI_SSL&wreply=https%3a%2f%2foutlook.live.com%2fowa%2f%3fnlp%3d1%26RpsCsrfState%3d715d44a2-2f11-4282-f625-a066679e96e2&id=292841&CBCXT=out&lw=1&fl=dob%2cflname%2cwld&cobrandid=90015	0%	Avira URL Cloud	safe
https://elc-path.com/pdfglobal2/docs89q9eqwwe/login.php#wa=wsignin1.0&rpsnv=13&ct=1539585327&rver=7.0.6737.0&wp=MBI_SSL&wreply=https%3a%2f%2foutlook.live.com%2fowa%2f%3fnlp%3d1%26RpsCsrfState%3d715d44a2-2f11-4282-f625-a066679e96e2&id=292841&CBCXT=out&lw=1&fl=dob%2cflname%2cwld&cobrandid=90015	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Label
http://opensource.org/licenses/MIT).	0%	URL Reputation	safe
https://getbootstrap.com/)	0%	URL Reputation	safe
https://elc-path.com/pdfglobal2/docs89q9eqwwe/assets/images/ellipsis_white.svg	0%	Avira URL Cloud	safe
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js	0%	Avira URL Cloud	safe
https://maxcdn.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js	0%	Avira URL Cloud	safe
https://github.com/twbs/bootstrap/graphs/contributors)	0%	Avira URL Cloud	safe
https://elc-path.com/pdfglobal2/docs89q9eqwwe/assets/images/logo.svg	0%	Avira URL Cloud	safe
https://elc-path.com/pdfglobal2/docs89q9eqwwe/login.php	0%	Avira URL Cloud	safe
https://elc-path.com/pdfglobal2/docs89q9eqwwe/assets/images/background.jpg	0%	Avira URL Cloud	safe
https://github.com/twbs/bootstrap/blob/master/LICENSE)	0%	Avira URL Cloud	safe
https://maxcdn.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css	0%	Avira URL Cloud	safe
https://elc-path.com/pdfglobal2/docs89q9eqwwe/assets/images/favicon.ico	0%	Avira URL Cloud	safe
https://elc-path.com/pdfglobal2/docs89q9eqwwe/assets/css/login.css	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	unknown
maxcdn.bootstrapcdn.com	104.18.10.207	true	false	unknown
www.google.com	142.250.185.132	true	false	unknown
elc-path.com	192.249.123.145	true	true	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://elc-path.com/pdfglobal2/docs89q9eqwwe/login.php	true	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js	false	Avira URL Cloud: safe	unknown
https://maxcdn.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js	false	Avira URL Cloud: safe	unknown
https://elc-path.com/pdfglobal2/docs89q9eqwwe/login.php#wa=wsignin1.0&rpsnv=13&ct=1539585327&rver=7.0.6737.0&wp=MBI_SSL&wreply=https%3a%2f%2foutlook.live.com%2fowa%2f%3fnlp%3d1%26RpsCsrfState%3d715d44a2-2f11-4282-f625-a066679e96e2&id=292841&CBCXT=out&lw=1&fl=dob%2cflname%2cwld&cobrandid=90015	true		unknown
https://elc-path.com/pdfglobal2/docs89q9eqwwe/assets/images/background.jpg	true	Avira URL Cloud: safe	unknown
https://maxcdn.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css	false	Avira URL Cloud: safe	unknown
https://elc-path.com/pdfglobal2/docs89q9eqwwe/assets/images/favicon.ico	true	Avira URL Cloud: safe	unknown
https://elc-path.com/pdfglobal2/docs89q9eqwwe/assets/images/ellipsis_white.svg	true	Avira URL Cloud: safe	unknown
https://elc-path.com/pdfglobal2/docs89q9eqwwe/assets/images/logo.svg	true	Avira URL Cloud: safe	unknown
https://elc-path.com/pdfglobal2/docs89q9eqwwe/assets/css/login.css	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_144.2.dr, chromecache_140.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_144.2.dr, chromecache_140.2.dr, chromecache_148.2.dr	false	Avira URL Cloud: safe	unknown
http://opensource.org/licenses/MIT).	chromecache_137.2.dr, chromecache_150.2.dr	false	URL Reputation: safe	unknown
https://getbootstrap.com/)	chromecache_144.2.dr, chromecache_140.2.dr, chromecache_148.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.10.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
142.250.185.132	www.google.com	United States	15169	GOOGLEUS	false
192.249.123.145	elc-path.com	United States	22611	IMH-WESTUS	true
104.18.11.207	unknown	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1501222
Start date and time:	2024-08-29 15:49:05 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 25s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://elc-path.com/pdfglobal2/docs89q9eqwwe/login.php#wa=wsignin1.0&rpsnv=13&ct=1539585327&rver=7.0.6737.0&wp=MBI_SSL&wreply=https%3a%2f%2foutlook.live.com%2fowa%2f%3fnlp%3d1%26RpsCsrfState%3d715d44a2-2f11-4282-f625-a066679e96e2&id=292841&CBCXT=out&lw=1&fl=dob%2cflname%2cwld&cobrandid=90015
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal76.phis.win@21/33@14/7
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.181.227, 142.250.181.238, 66.102.1.84, 34.104.35.123, 142.250.185.106, 216.58.206.74, 142.250.185.234, 142.250.181.234, 216.58.212.138, 142.250.186.74, 142.250.184.202, 216.58.206.42, 142.250.185.74, 172.217.18.106, 172.217.16.138, 142.250.74.202, 172.217.18.10, 216.58.212.170, 172.217.16.202, 142.250.186.42, 142.250.186.138, 20.114.59.183, 199.232.210.172, 192.229.221.95, 20.3.187.198, 13.95.31.18, 216.58.206.35, 131.107.255.255
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ajax.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, dns.msftncsi.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://elc-path.com/pdfglobal2/docs89q9eqwwe/login.php#wa=wsignin1.0&rpsnv=13&ct=1539585327&rver=7.0.6737.0&wp=MBI_SSL&wreply=https%3a%2f%2foutlook.live.com%2fowa%2f%3fnlp%3d1%26RpsCsrfState%3d715d44a2-2f11-4282-f625-a066679e96e2&id=292841&CBCXT=out&lw=1&fl=dob%2cflname%2cwld&cobrandid=90015

Input	Output
URL: https://elc-path.com/pdfglobal2/docs89q9eqwwe/login.php#wa=wsignin1.0&rpsnv=13&ct=1539585327&rver=7.0.6737.0&wp=MBI_SSL&wreply=https%3a%2f%2foutlook.live.com%2fowa%2f%3fnlp%3d1%26RpsCsrfState%3d715d44a2-2f11-4282-f625-a066679e96e2&id=292841&CBCXT=out&lw=1 Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":false, "prominent_button_name":"Next", "text_input_field_labels":["Email, phone, or Skype", "No account? Create one"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://elc-path.com/pdfglobal2/docs89q9eqwwe/login.php#wa=wsignin1.0&rpsnv=13&ct=1539585327&rver=7.0.6737.0&wp=MBI_SSL&wreply=https%3a%2f%2foutlook.live.com%2fowa%2f%3fnlp%3d1%26RpsCsrfState%3d715d44a2-2f11-4282-f625-a066679e96e2&id=292841&CBCXT=out&lw=1 Model: jbxai	{ "phishing_score":8, "brand_name":"Microsoft", "reasons":"The URL elc-path.com does not match the legitimate domain associated with Microsoft, which is microsoft.com. The use of a different domain name, even if it seems appropriate, is a common tactic used by phishers to create convincing fake login pages."}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Aug 29 12:49:58 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9737822808878867
Encrypted:	false
SSDEEP:	48:8XBd6TG6s/cHzWidAKZdA19ehwiZUklqehyy+3:8ens/a8hy
MD5:	5D49938A167068DA97AA48ED2642E98C
SHA1:	2C067DB8908DF8E021E82B9A00640D3A77F95526
SHA-256:	92A444F17E6295BCFD5F01A380197AA9B37ECC78F4665635F0566F509DBB8AA0
SHA-512:	34A82475E8DECE495E243382C5863620D755D3BA9945D5D9B154BCA6ED7B53904A9D3AB192D0CB67DF75BDC25FBD64C58E7F97A91B5D34F08732F5DC9DE37E73
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....?.7V....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y;n....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y;n....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y;n....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y;n..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y@n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Aug 29 12:49:58 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.987602976450388
Encrypted:	false
SSDEEP:	48:8Zd6TG6s/cHzWidAKZdA1weh/iZUkAQkqehRy+2:8Wns/aO9QMy
MD5:	278420CC89EE0526EEAFF99417EDA8CC
SHA1:	CFCABAB90E68B48ADCBA9D9D88E3108FB043B8E7
SHA-256:	E7837A2F36473E40A4BDC640B164DC29FE0F45C6858A0F4F880C12BBB406B4C0
SHA-512:	FEF48F7159D09DC0431BB606813DB9E29E52624D9D3680DBA9C8806F10F5A14518457B4AE3523066BEC127CE5B6B0512BE1BAAE34A48F14E9A756958DC066747
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....A-V....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y;n....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y;n....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y;n....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y;n..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y@n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.003445422466557
Encrypted:	false
SSDEEP:	48:8xTd6TG6sHzWidAKZdA14tseh7sFiZUkmgqeh7szy+BX:8xgnK2n9y
MD5:	148F0DD4EFDADDF981CFEAEF96033376
SHA1:	30590F9906EB91E80700149108CF5548FC059C9C
SHA-256:	0502CAB03BCB6BBA31DA1D279D983BFEFC7C8640F51B6F648D2482CEA465535B
SHA-512:	D1EA01E840D559025F0612BF71BF57C6DB0BE734B0539355AF69394CBB1094D38700C3CFB8C87F0F5A93B11849FDBBC147A27C0493540F02B65B5AB1EA4670F0
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y;n....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y;n....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y;n....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y;n..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Aug 29 12:49:58 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9905510316672337
Encrypted:	false
SSDEEP:	48:8Id6TG6s/cHzWidAKZdA1vehDiZUkwqehVy+R:8Nns/aVry
MD5:	3AE8F72FD7BB05E9D5D7894AE5C9CAD4
SHA1:	F78497A2B28FC6272B7F3F3E09511BA61EA54AF4
SHA-256:	CC2306AC88A41FECFDED420988B35093FDCC83AC3E06823E5075848C011028A0
SHA-512:	0DA443AC2E5A2D93B78C6BAC14EF22F8C680B584E20DAFFF8379B8CE03AE31973EA424D68F4FCEC6578871F75C29BB0915AFD664F2AB5A10CF56A1CC8DAC6FCC
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....9.(V....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y;n....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y;n....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y;n....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y;n..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y@n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Aug 29 12:49:58 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9768704617243267
Encrypted:	false
SSDEEP:	48:85d6TG6s/cHzWidAKZdA1hehBiZUk1W1qeh/y+C:82ns/aF9fy
MD5:	65243A03594BFBB6F8891805E3CA4415
SHA1:	6A05AE7AB25BE12B34012F9B768BE513396E6F1F
SHA-256:	987E2A5270A0319317F50C3A88D71B17D1E95D441771DECC9F2F8421923AB036
SHA-512:	E74CBC45E50543C48A0E55DF35CB3CAF923C19623863EF14BA22C18013E7DD73C530B479A688CC6172B5887503602F3F554546AB8F20EE7CD07D304B8A9D13D3
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......2V....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y;n....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y;n....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y;n....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y;n..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y@n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Aug 29 12:49:58 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9875233732983686
Encrypted:	false
SSDEEP:	48:8nd6TG6s/cHzWidAKZdA1duT+ehOuTbbiZUk5OjqehOuTb9y+yT+:8kns/aZT/TbxWOvTb9y7T
MD5:	6B59BE6348124A99EF8BFA574D715B6B
SHA1:	6DB2D67E7C32684B6C35DBB667208AF97AA318D4
SHA-256:	7AAFE2DC7D90E11528BB55A042515C855C1C6A7F494D01D6D9898722705FD7ED
SHA-512:	01D2AF0EC48A3D9BCACFDDBEDA0E5C7C1F9C945C2EB445F5C8C83723CD585E0FCB463FB1C166AB62BB2A98665E772DA8DA85B9CB2C4D33311873CADEE3762CB8
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......!V....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y;n....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y;n....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y;n....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y;n..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y@n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20164)
Category:	downloaded
Size (bytes):	20337
Entropy (8bit):	5.215593959725368
Encrypted:	false
SSDEEP:	384:fYn0vf4wzTC9nNbR1PTM4CrBEQxkxpOxvYLmD75zfC5vIfg3rzGp/TidOgHhXjE9:w0vAwzTC/nM4BxpOxv/D7pC5vfzy/TiE
MD5:	83FB8C4D9199DCE0224DA0206423106F
SHA1:	D8503645C17F9856868A7DEF3DC0505E19A95EC7
SHA-256:	F7CBC01A310318DEFD4E31E4616543E2CF3BAEF5A47562C73ECE4C0B716F157E
SHA-512:	95D735B0FBB5159F2C9A0920A7E1F09D8C956F57919F6C0498AAC383526A3C46F4DBE122E243730C843453087400954B4058C9A16C06FBBEB8C7BD33CB94EFE0
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2018. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll\|overlay)/.test(r+s+p)?e:n(o(e))}function r(e){return 11===e?re:10===e?pe:re\|\|pe}function p(e){if(!e)return document.documentElement;for(var o=r(10)?document.body:null,n=e.offsetParent;n===o&&e.nextElementSibling;)n=(e=e.nextElementSibling).offsetParent

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	915
Entropy (8bit):	3.877322891561989
Encrypted:	false
SSDEEP:	24:t4CvnAVRf83f1QqCSzGUdiHTVtpRduf1QqCWbVHTVeUV0Uv6f1QqCWbVHTVeUV0W:fnL1QqC4GuiHFXS1QqCWRHQ3V1QqCWRV
MD5:	5AC590EE72BFE06A7CECFD75B588AD73
SHA1:	DDA2CB89A241BC424746D8CF2A22A35535094611
SHA-256:	6075736EA9C281D69C4A3D78FF97BB61B9416A5809919BABE5A0C5596F99AAEA
SHA-512:	B9135D934B9EA50B51BB0316E383B114C8F24DFE75FEF11DCBD1C96170EA59202F6BAFE11AAF534CC2F4ED334A8EA4DBE96AF2504130896D6203BFD2DA69138F
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" viewBox="0 0 16 16"><title>assets</title><path fill="#ffffff" d="M1.143,6.857a1.107,1.107,0,0,1,.446.089,1.164,1.164,0,0,1,.607.607,1.161,1.161,0,0,1,0,.893,1.164,1.164,0,0,1-.607.607,1.107,1.107,0,0,1-.446.089A1.107,1.107,0,0,1,.7,9.054a1.164,1.164,0,0,1-.607-.607,1.161,1.161,0,0,1,0-.893A1.164,1.164,0,0,1,.7,6.946a1.107,1.107,0,0,1,.446-.089M8,6.857a1.107,1.107,0,0,1,.446.089,1.164,1.164,0,0,1,.607.607,1.161,1.161,0,0,1,0,.893,1.164,1.164,0,0,1-.607.607,1.161,1.161,0,0,1-.893,0,1.164,1.164,0,0,1-.607-.607,1.161,1.161,0,0,1,0-.893,1.164,1.164,0,0,1,.607-.607A1.107,1.107,0,0,1,8,6.857m6.857,0a1.107,1.107,0,0,1,.446.089,1.164,1.164,0,0,1,.607.607,1.161,1.161,0,0,1,0,.893,1.164,1.164,0,0,1-.607.607,1.161,1.161,0,0,1-.893,0,1.164,1.164,0,0,1-.607-.607,1.161,1.161,0,0,1,0-.893,1.164,1.164,0,0,1,.607-.607A1.107,1.107,0,0,1,14.857,6.857Z"/></svg>

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50758)
Category:	dropped
Size (bytes):	51039
Entropy (8bit):	5.247253437401007
Encrypted:	false
SSDEEP:	768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+
MD5:	67176C242E1BDC20603C878DEE836DF3
SHA1:	27A71B00383D61EF3C489326B3564D698FC1227C
SHA-256:	56C12A125B021D21A69E61D7190CEFA168D6C28CE715265CEA1B3B0112D169C4
SHA-512:	9FA75814E1B9F7DB38FE61A503A13E60B82D83DB8F4CE30351BD08A6B48C0D854BAF472D891AF23C443C8293380C2325C7B3361B708AF9971AA0EA09A25CDD0A
Malicious:	false
Reputation:	low
Preview:	/!. Bootstrap v4.1.3 (https://getbootstrap.com/). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filter(function(t){return Object.getOwnPropertyDescriptor(o,t).enum

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	dropped
Size (bytes):	86927
Entropy (8bit):	5.289226719276158
Encrypted:	false
SSDEEP:	1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69
MD5:	A09E13EE94D51C524B7E2A728C7D4039
SHA1:	0DC32DB4AA9C5F03F3B38C47D883DBD4FED13AAE
SHA-256:	160A426FF2894252CD7CEBBDD6D6B7DA8FCD319C65B70468F10B6690C45D02EF
SHA-512:	F8DA8F95B6ED33542A88AF19028E18AE3D9CE25350A06BFC3FBF433ED2B38FEFA5E639CDDFDAC703FC6CAA7F3313D974B92A3168276B3A016CEB28F27DB0714A
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.3.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(e,t){"use strict";var n=[],r=e.document,i=Object.getPrototypeOf,o=n.slice,a=n.concat,s=n.push,u=n.indexOf,l={},c=l.toString,f=l.hasOwnProperty,p=f.toString,d=p.call(Object),h={},g=function e(t){return"function"==typeof t&&"number"!=typeof t.nodeType},y=function e(t){return null!=t&&t===t.window},v={type:!0,src:!0,noModule:!0};function m(e,t,n){var i,o=(t=t\|\|r).createElement("script");if(o.text=e,n)for(i in v)n[i]&&(o[i]=n[i]);t.head.appendChild(o).parentNode.removeChild(o)}function x(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?l[c.call(e)]\|\|"object":typeof e}var b="3.3.1",w=function(e,t){return new w.fn.init(e,t)},

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1965
Entropy (8bit):	4.646756006993403
Encrypted:	false
SSDEEP:	24:Uw9P6AoJHaUaktwIcuo5A4yTa9KFxIdSFidYir/bFF/EnFw1eC5Ah+C5ncAvDKTa:UyaFtwperFidYe/JF/A2V5Ah75cAvGTa
MD5:	B8C8C2DD60E847A55847F9469A138078
SHA1:	936BA10971C42CB21C1733E9D18577D9705FC32C
SHA-256:	35C946CBC580E838B6B3255EE94576AD8C31A741AF87EE42A9FC27CCDB852F54
SHA-512:	026C1DA6CD7EAEB5339F1DE0C6D63D855CC7753B113B1093796C30B2663C9579908C362E6F92F1D4304F035D3AD8A5DE24961DED522A93AA85726255E304112B
Malicious:	false
Reputation:	low
URL:	https://elc-path.com/pdfglobal2/docs89q9eqwwe/assets/css/login.css
Preview:	body {.. background: url('../images/background.jpg') no-repeat fixed center;..}...row {.. height: 100vh;..}...card {.. padding: 25px;.. border-radius: 0;..}...card-body > img,...card-body > h4 {.. margin-bottom: 20px;..}...form-control {.. border-top: none;.. border-left: none;.. border-right: none;.. border-radius: unset;.. border-bottom: 1px solid rgba(0,0,0,.6);.. padding-left: 0;.. transition: 0.2s ease all; .. -moz-transition: 0.2s ease all; .. -webkit-transition: 0.2s ease all;..}...form-control:focus {.. box-shadow: unset;..}...form-control::placeholder {.. color: rgba(0,0,0,.6);.. font-size: 16px;..}..input:invalid {.. box-shadow: none;.. -moz-box-shadow: none;..}...form-group > p {.. font-size: 14px;.. margin-top: 15px;.. margin-bottom: 70px;..}...form-group > p > a {.. text-decoration: none;..}...btn {.. width: 120px;.. background: #0067b8;.. color: #fff;.. border-radius: 0;..}...footer {.. po

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 1920x1080, components 3
Category:	dropped
Size (bytes):	283351
Entropy (8bit):	7.975896455873056
Encrypted:	false
SSDEEP:	6144:hPgRhluS12CyK8XGsLzsr5XONnQ4/bEmhZSIj6xU2zyOX/:2vz1pyWsLoXqN/YWPUU2OOX/
MD5:	A5DBD4393FF6A725C7E62B61DF7E72F0
SHA1:	55B292F885FFC92ABCE18750B07AA4ACFA4E903E
SHA-256:	211A907DE2DA0FF4A0E90917AC8054E2F35C351180977550C26E51B4909F2BEB
SHA-512:	850586A05B67EF25492BD50A090F1EC0A0CC21DC4E4EFEB35E19CDC78A98F9415A3807318FA02664EADE87F0E2D8FA2A2958CD0D712329800FC05689E01DC614
Malicious:	false
Reputation:	low
Preview:	.....Phttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about=""/> </rdf:RDF> </x:xmpmeta>

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50758)
Category:	downloaded
Size (bytes):	51039
Entropy (8bit):	5.247253437401007
Encrypted:	false
SSDEEP:	768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+
MD5:	67176C242E1BDC20603C878DEE836DF3
SHA1:	27A71B00383D61EF3C489326B3564D698FC1227C
SHA-256:	56C12A125B021D21A69E61D7190CEFA168D6C28CE715265CEA1B3B0112D169C4
SHA-512:	9FA75814E1B9F7DB38FE61A503A13E60B82D83DB8F4CE30351BD08A6B48C0D854BAF472D891AF23C443C8293380C2325C7B3361B708AF9971AA0EA09A25CDD0A
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.1.3 (https://getbootstrap.com/). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filter(function(t){return Object.getOwnPropertyDescriptor(o,t).enum

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.625
Encrypted:	false
SSDEEP:	3:HmkLn:Gk
MD5:	E3F5C580FE9E2A003FDED5FA018AAC20
SHA1:	6068DF81A701917D7A2E79B2CDCEE1D4F2B92EE6
SHA-256:	56B38A556527F95DBA9D035E6287AD9C0A2145029C5328A92D719A10182D0A06
SHA-512:	22A2879045453B98488BD6666FB2751E1554941756322FC8780245D43A44C7E4F46155EE28F7B85E5392D1192C2F95E4C5E1EF2BAC8851BA3628BF27710C2816
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAnutafWukLFJBIFDSKE8YA=?alt=proto
Preview:	CgkKBw0ihPGAGgA=

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://elc-path.com/pdfglobal2/docs89q9eqwwe/assets/images/favicon.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65324)
Category:	downloaded
Size (bytes):	140936
Entropy (8bit):	5.058262383051032
Encrypted:	false
SSDEEP:	1536:un1QWSUPBT+QYYDnDEBi82NcuSEz/NvT/gIENM6HN26e:q1L7PDxYIENM6HN26e
MD5:	04ACA1F4CD3EC3C05A75A879F3BE75A3
SHA1:	675FCF28F9FBF37139D3B2C0B676F96F601A4203
SHA-256:	7928B5AB63C6E89EE0EE26F5EF201A58C72BAF91ABB688580A1AA26EB57B3C11
SHA-512:	890415FA75ED065992DD7883AED98BFBDFD9FA26EEC7E62EA30263238ADCA4EECD6204F37D33A214D9B4F645AD7D9CC407D7D0E93C0E55CF251555A8A05B83FF
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css
Preview:	/!. Bootstrap v4.1.3 (https://getbootstrap.com/). * Copyright 2011-2018 The Bootstrap Authors. * Copyright 2011-2018 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). /:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace},::after,::before{box-sizing:border-box}h

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
URL:	https://elc-path.com/pdfglobal2/docs89q9eqwwe/assets/images/logo.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20164)
Category:	dropped
Size (bytes):	20337
Entropy (8bit):	5.215593959725368
Encrypted:	false
SSDEEP:	384:fYn0vf4wzTC9nNbR1PTM4CrBEQxkxpOxvYLmD75zfC5vIfg3rzGp/TidOgHhXjE9:w0vAwzTC/nM4BxpOxv/D7pC5vfzy/TiE
MD5:	83FB8C4D9199DCE0224DA0206423106F
SHA1:	D8503645C17F9856868A7DEF3DC0505E19A95EC7
SHA-256:	F7CBC01A310318DEFD4E31E4616543E2CF3BAEF5A47562C73ECE4C0B716F157E
SHA-512:	95D735B0FBB5159F2C9A0920A7E1F09D8C956F57919F6C0498AAC383526A3C46F4DBE122E243730C843453087400954B4058C9A16C06FBBEB8C7BD33CB94EFE0
Malicious:	false
Reputation:	low
Preview:	/. Copyright (C) Federico Zivolo 2018. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll\|overlay)/.test(r+s+p)?e:n(o(e))}function r(e){return 11===e?re:10===e?pe:re\|\|pe}function p(e){if(!e)return document.documentElement;for(var o=r(10)?document.body:null,n=e.offsetParent;n===o&&e.nextElementSibling;)n=(e=e.nextElementSibling).offsetParent

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	915
Entropy (8bit):	3.877322891561989
Encrypted:	false
SSDEEP:	24:t4CvnAVRf83f1QqCSzGUdiHTVtpRduf1QqCWbVHTVeUV0Uv6f1QqCWbVHTVeUV0W:fnL1QqC4GuiHFXS1QqCWRHQ3V1QqCWRV
MD5:	5AC590EE72BFE06A7CECFD75B588AD73
SHA1:	DDA2CB89A241BC424746D8CF2A22A35535094611
SHA-256:	6075736EA9C281D69C4A3D78FF97BB61B9416A5809919BABE5A0C5596F99AAEA
SHA-512:	B9135D934B9EA50B51BB0316E383B114C8F24DFE75FEF11DCBD1C96170EA59202F6BAFE11AAF534CC2F4ED334A8EA4DBE96AF2504130896D6203BFD2DA69138F
Malicious:	false
Reputation:	low
URL:	https://elc-path.com/pdfglobal2/docs89q9eqwwe/assets/images/ellipsis_white.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" viewBox="0 0 16 16"><title>assets</title><path fill="#ffffff" d="M1.143,6.857a1.107,1.107,0,0,1,.446.089,1.164,1.164,0,0,1,.607.607,1.161,1.161,0,0,1,0,.893,1.164,1.164,0,0,1-.607.607,1.107,1.107,0,0,1-.446.089A1.107,1.107,0,0,1,.7,9.054a1.164,1.164,0,0,1-.607-.607,1.161,1.161,0,0,1,0-.893A1.164,1.164,0,0,1,.7,6.946a1.107,1.107,0,0,1,.446-.089M8,6.857a1.107,1.107,0,0,1,.446.089,1.164,1.164,0,0,1,.607.607,1.161,1.161,0,0,1,0,.893,1.164,1.164,0,0,1-.607.607,1.161,1.161,0,0,1-.893,0,1.164,1.164,0,0,1-.607-.607,1.161,1.161,0,0,1,0-.893,1.164,1.164,0,0,1,.607-.607A1.107,1.107,0,0,1,8,6.857m6.857,0a1.107,1.107,0,0,1,.446.089,1.164,1.164,0,0,1,.607.607,1.161,1.161,0,0,1,0,.893,1.164,1.164,0,0,1-.607.607,1.161,1.161,0,0,1-.893,0,1.164,1.164,0,0,1-.607-.607,1.161,1.161,0,0,1,0-.893,1.164,1.164,0,0,1,.607-.607A1.107,1.107,0,0,1,14.857,6.857Z"/></svg>

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 1920x1080, components 3
Category:	downloaded
Size (bytes):	283351
Entropy (8bit):	7.975896455873056
Encrypted:	false
SSDEEP:	6144:hPgRhluS12CyK8XGsLzsr5XONnQ4/bEmhZSIj6xU2zyOX/:2vz1pyWsLoXqN/YWPUU2OOX/
MD5:	A5DBD4393FF6A725C7E62B61DF7E72F0
SHA1:	55B292F885FFC92ABCE18750B07AA4ACFA4E903E
SHA-256:	211A907DE2DA0FF4A0E90917AC8054E2F35C351180977550C26E51B4909F2BEB
SHA-512:	850586A05B67EF25492BD50A090F1EC0A0CC21DC4E4EFEB35E19CDC78A98F9415A3807318FA02664EADE87F0E2D8FA2A2958CD0D712329800FC05689E01DC614
Malicious:	false
Reputation:	low
URL:	https://elc-path.com/pdfglobal2/docs89q9eqwwe/assets/images/background.jpg
Preview:	.....Phttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about=""/> </rdf:RDF> </x:xmpmeta>

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	86927
Entropy (8bit):	5.289226719276158
Encrypted:	false
SSDEEP:	1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69
MD5:	A09E13EE94D51C524B7E2A728C7D4039
SHA1:	0DC32DB4AA9C5F03F3B38C47D883DBD4FED13AAE
SHA-256:	160A426FF2894252CD7CEBBDD6D6B7DA8FCD319C65B70468F10B6690C45D02EF
SHA-512:	F8DA8F95B6ED33542A88AF19028E18AE3D9CE25350A06BFC3FBF433ED2B38FEFA5E639CDDFDAC703FC6CAA7F3313D974B92A3168276B3A016CEB28F27DB0714A
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js
Preview:	/! jQuery v3.3.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(e,t){"use strict";var n=[],r=e.document,i=Object.getPrototypeOf,o=n.slice,a=n.concat,s=n.push,u=n.indexOf,l={},c=l.toString,f=l.hasOwnProperty,p=f.toString,d=p.call(Object),h={},g=function e(t){return"function"==typeof t&&"number"!=typeof t.nodeType},y=function e(t){return null!=t&&t===t.window},v={type:!0,src:!0,noModule:!0};function m(e,t,n){var i,o=(t=t\|\|r).createElement("script");if(o.text=e,n)for(i in v)n[i]&&(o[i]=n[i]);t.head.appendChild(o).parentNode.removeChild(o)}function x(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?l[c.call(e)]\|\|"object":typeof e}var b="3.3.1",w=function(e,t){return new w.fn.init(e,t)},

Timestamp	Protocol	SID	Signature	Severity	Source Port	Dest Port	Source IP	Dest IP
2024-08-29T15:50:01.210739+0200	TCP	2025974	ET PHISHING Microsoft Account Phishing Landing 2018-08-07	2	443	49709	192.249.123.145	192.168.2.5

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 29, 2024 15:49:50.315665960 CEST	49675	443	192.168.2.5	23.1.237.91
Aug 29, 2024 15:49:50.331298113 CEST	49674	443	192.168.2.5	23.1.237.91
Aug 29, 2024 15:49:50.440844059 CEST	49673	443	192.168.2.5	23.1.237.91
Aug 29, 2024 15:49:59.008759975 CEST	49709	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:49:59.008800983 CEST	443	49709	192.249.123.145	192.168.2.5
Aug 29, 2024 15:49:59.008862972 CEST	49709	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:49:59.009121895 CEST	49709	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:49:59.009135962 CEST	443	49709	192.249.123.145	192.168.2.5
Aug 29, 2024 15:49:59.009547949 CEST	49710	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:49:59.009557009 CEST	443	49710	192.249.123.145	192.168.2.5
Aug 29, 2024 15:49:59.009604931 CEST	49710	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:49:59.009833097 CEST	49710	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:49:59.009845018 CEST	443	49710	192.249.123.145	192.168.2.5
Aug 29, 2024 15:49:59.823976994 CEST	443	49710	192.249.123.145	192.168.2.5
Aug 29, 2024 15:49:59.824014902 CEST	443	49709	192.249.123.145	192.168.2.5
Aug 29, 2024 15:49:59.824220896 CEST	49709	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:49:59.824237108 CEST	443	49709	192.249.123.145	192.168.2.5
Aug 29, 2024 15:49:59.824317932 CEST	49710	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:49:59.824327946 CEST	443	49710	192.249.123.145	192.168.2.5
Aug 29, 2024 15:49:59.825205088 CEST	443	49709	192.249.123.145	192.168.2.5
Aug 29, 2024 15:49:59.825273991 CEST	49709	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:49:59.825381994 CEST	443	49710	192.249.123.145	192.168.2.5
Aug 29, 2024 15:49:59.825428963 CEST	49710	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:49:59.826359034 CEST	49709	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:49:59.826464891 CEST	443	49709	192.249.123.145	192.168.2.5
Aug 29, 2024 15:49:59.826582909 CEST	49709	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:49:59.826591015 CEST	443	49709	192.249.123.145	192.168.2.5
Aug 29, 2024 15:49:59.826689005 CEST	49710	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:49:59.826749086 CEST	443	49710	192.249.123.145	192.168.2.5
Aug 29, 2024 15:49:59.877171040 CEST	49709	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:49:59.877171040 CEST	49710	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:49:59.877182007 CEST	443	49710	192.249.123.145	192.168.2.5
Aug 29, 2024 15:49:59.924040079 CEST	49710	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:49:59.924046040 CEST	49675	443	192.168.2.5	23.1.237.91
Aug 29, 2024 15:49:59.939297915 CEST	49674	443	192.168.2.5	23.1.237.91
Aug 29, 2024 15:50:00.043843031 CEST	49673	443	192.168.2.5	23.1.237.91
Aug 29, 2024 15:50:01.210473061 CEST	443	49709	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:01.210491896 CEST	443	49709	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:01.210551977 CEST	49709	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:01.210565090 CEST	443	49709	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:01.210644960 CEST	443	49709	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:01.210690022 CEST	49709	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:01.309777975 CEST	49709	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:01.309803009 CEST	443	49709	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:01.450678110 CEST	49713	443	192.168.2.5	142.250.185.132
Aug 29, 2024 15:50:01.450706005 CEST	443	49713	142.250.185.132	192.168.2.5
Aug 29, 2024 15:50:01.450768948 CEST	49713	443	192.168.2.5	142.250.185.132
Aug 29, 2024 15:50:01.453830004 CEST	49713	443	192.168.2.5	142.250.185.132
Aug 29, 2024 15:50:01.453841925 CEST	443	49713	142.250.185.132	192.168.2.5
Aug 29, 2024 15:50:01.484524965 CEST	49710	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:01.489530087 CEST	49714	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:01.489557028 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:01.489604950 CEST	49714	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:01.490118027 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:01.490153074 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:01.490201950 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:01.490834951 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:01.490849018 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:01.491498947 CEST	49714	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:01.491508961 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:01.495604992 CEST	49717	443	192.168.2.5	104.17.25.14
Aug 29, 2024 15:50:01.495632887 CEST	443	49717	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:01.495729923 CEST	49717	443	192.168.2.5	104.17.25.14
Aug 29, 2024 15:50:01.498030901 CEST	49717	443	192.168.2.5	104.17.25.14
Aug 29, 2024 15:50:01.498044968 CEST	443	49717	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:01.528491020 CEST	443	49710	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:01.667746067 CEST	443	49710	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:01.667764902 CEST	443	49710	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:01.667810917 CEST	49710	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:01.667824030 CEST	443	49710	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:01.668972015 CEST	443	49710	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:01.669020891 CEST	49710	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:01.685638905 CEST	443	49703	23.1.237.91	192.168.2.5
Aug 29, 2024 15:50:01.685708046 CEST	49703	443	192.168.2.5	23.1.237.91
Aug 29, 2024 15:50:01.707902908 CEST	49710	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:01.707914114 CEST	443	49710	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:01.952713966 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:01.952984095 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:01.953006983 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:01.953989029 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:01.954140902 CEST	49714	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:01.954148054 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:01.954224110 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:01.954279900 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:01.955260992 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:01.955311060 CEST	49714	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:01.956579924 CEST	443	49717	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:01.956881046 CEST	49717	443	192.168.2.5	104.17.25.14
Aug 29, 2024 15:50:01.956895113 CEST	443	49717	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:01.958076954 CEST	443	49717	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:01.958132982 CEST	49717	443	192.168.2.5	104.17.25.14
Aug 29, 2024 15:50:02.087481022 CEST	443	49713	142.250.185.132	192.168.2.5
Aug 29, 2024 15:50:02.089696884 CEST	49713	443	192.168.2.5	142.250.185.132
Aug 29, 2024 15:50:02.089715004 CEST	443	49713	142.250.185.132	192.168.2.5
Aug 29, 2024 15:50:02.090548992 CEST	443	49713	142.250.185.132	192.168.2.5
Aug 29, 2024 15:50:02.090606928 CEST	49713	443	192.168.2.5	142.250.185.132
Aug 29, 2024 15:50:02.172496080 CEST	49718	443	192.168.2.5	184.28.90.27
Aug 29, 2024 15:50:02.172534943 CEST	443	49718	184.28.90.27	192.168.2.5
Aug 29, 2024 15:50:02.172605991 CEST	49718	443	192.168.2.5	184.28.90.27
Aug 29, 2024 15:50:02.174439907 CEST	49718	443	192.168.2.5	184.28.90.27
Aug 29, 2024 15:50:02.174455881 CEST	443	49718	184.28.90.27	192.168.2.5
Aug 29, 2024 15:50:02.282505035 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.282602072 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.283129930 CEST	49714	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.283236980 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.283596039 CEST	49717	443	192.168.2.5	104.17.25.14
Aug 29, 2024 15:50:02.283735991 CEST	443	49717	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:02.284379005 CEST	49713	443	192.168.2.5	142.250.185.132
Aug 29, 2024 15:50:02.284466982 CEST	443	49713	142.250.185.132	192.168.2.5
Aug 29, 2024 15:50:02.285429001 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.285445929 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.285705090 CEST	49714	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.285720110 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.285912991 CEST	49717	443	192.168.2.5	104.17.25.14
Aug 29, 2024 15:50:02.285933971 CEST	443	49717	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:02.326962948 CEST	49714	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.326994896 CEST	49713	443	192.168.2.5	142.250.185.132
Aug 29, 2024 15:50:02.327001095 CEST	49717	443	192.168.2.5	104.17.25.14
Aug 29, 2024 15:50:02.327003002 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.327007055 CEST	443	49713	142.250.185.132	192.168.2.5
Aug 29, 2024 15:50:02.370949030 CEST	49713	443	192.168.2.5	142.250.185.132
Aug 29, 2024 15:50:02.391422987 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.391462088 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.391489983 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.391499996 CEST	49714	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.391515017 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.391546011 CEST	49714	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.391551971 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.391572952 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.391726971 CEST	49714	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.391733885 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.392034054 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.392057896 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.392072916 CEST	49714	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.392079115 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.392103910 CEST	49714	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.392108917 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.394977093 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.395011902 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.395035982 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.395057917 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.395062923 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.395073891 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.395102024 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.395113945 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.395140886 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.395169973 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.395180941 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.395190001 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.395210028 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.395509958 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.395514965 CEST	443	49717	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:02.395551920 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.395555973 CEST	443	49717	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:02.395559072 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.395581961 CEST	443	49717	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:02.395590067 CEST	49717	443	192.168.2.5	104.17.25.14
Aug 29, 2024 15:50:02.395603895 CEST	443	49717	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:02.395627022 CEST	443	49717	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:02.395636082 CEST	49717	443	192.168.2.5	104.17.25.14
Aug 29, 2024 15:50:02.395642042 CEST	443	49717	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:02.395673037 CEST	443	49717	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:02.395675898 CEST	49717	443	192.168.2.5	104.17.25.14
Aug 29, 2024 15:50:02.395689011 CEST	443	49717	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:02.395719051 CEST	49717	443	192.168.2.5	104.17.25.14
Aug 29, 2024 15:50:02.396020889 CEST	443	49717	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:02.396128893 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.396167040 CEST	49714	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.396172047 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.396365881 CEST	443	49717	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:02.396640062 CEST	49717	443	192.168.2.5	104.17.25.14
Aug 29, 2024 15:50:02.396646023 CEST	443	49717	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:02.400070906 CEST	443	49717	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:02.400156021 CEST	49717	443	192.168.2.5	104.17.25.14
Aug 29, 2024 15:50:02.400161982 CEST	443	49717	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:02.426700115 CEST	49719	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:02.426733971 CEST	443	49719	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:02.426919937 CEST	49719	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:02.427993059 CEST	49719	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:02.428004980 CEST	443	49719	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:02.429538965 CEST	49720	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:02.429546118 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:02.429635048 CEST	49720	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:02.429828882 CEST	49720	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:02.429837942 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:02.448755026 CEST	49717	443	192.168.2.5	104.17.25.14
Aug 29, 2024 15:50:02.448755980 CEST	49714	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.448757887 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.448766947 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.479773045 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.479830027 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.479854107 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.479863882 CEST	49714	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.479875088 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.479942083 CEST	49714	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.480365992 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.480411053 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.480432987 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.480456114 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.480473042 CEST	49714	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.480479002 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.480499029 CEST	49714	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.481409073 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.481434107 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.481458902 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.481470108 CEST	49714	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.481477976 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.481501102 CEST	49714	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.482088089 CEST	443	49717	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:02.482264996 CEST	443	49717	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:02.482320070 CEST	49717	443	192.168.2.5	104.17.25.14
Aug 29, 2024 15:50:02.482327938 CEST	443	49717	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:02.482386112 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.482412100 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.482428074 CEST	49714	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.482433081 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.482456923 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.482462883 CEST	49714	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.482464075 CEST	443	49717	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:02.482470989 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.482496023 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.482506990 CEST	49717	443	192.168.2.5	104.17.25.14
Aug 29, 2024 15:50:02.482508898 CEST	49714	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.482512951 CEST	443	49717	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:02.482515097 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.482542038 CEST	443	49717	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:02.482543945 CEST	49714	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.482573986 CEST	49717	443	192.168.2.5	104.17.25.14
Aug 29, 2024 15:50:02.482716084 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.482742071 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.482759953 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.482769966 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.482799053 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.482836008 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.482844114 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.482873917 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.483167887 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.483226061 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.483246088 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.483258963 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.483263969 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.483264923 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.483273983 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.483311892 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.483356953 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.483385086 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.483392000 CEST	49714	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.483398914 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.483427048 CEST	49714	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.483977079 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.484023094 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.484029055 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.484100103 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.484122992 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.484132051 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.484139919 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.484225035 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.484231949 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.484828949 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.484850883 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.484874010 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.484883070 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.484924078 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.484932899 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.485676050 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.485742092 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.485763073 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.485784054 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.485791922 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.485815048 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.488965988 CEST	49717	443	192.168.2.5	104.17.25.14
Aug 29, 2024 15:50:02.488979101 CEST	443	49717	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:02.540868044 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.568285942 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.568326950 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.568370104 CEST	49714	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.568377018 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.568387985 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.568427086 CEST	49714	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.569921017 CEST	49714	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.569935083 CEST	443	49714	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.570171118 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.570219040 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.570270061 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.570276976 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.570344925 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.570364952 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.570400000 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.570409060 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.570450068 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.570851088 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.570894003 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.570940971 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.570981979 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.570988894 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.571597099 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.571636915 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.571644068 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.571672916 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.571763039 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.571804047 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.571820021 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.571827888 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.571849108 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.571865082 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.572565079 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.572611094 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.572633982 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.572643042 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.572654009 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.572673082 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.573398113 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.573442936 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.657857895 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.657912970 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.657924891 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.657932997 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.657959938 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.657973051 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.658220053 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.658258915 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.658410072 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.658459902 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.658554077 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.658597946 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.658795118 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.658837080 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.658884048 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.658922911 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.658989906 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.659039974 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.659635067 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.659694910 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.659784079 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.659817934 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.659826994 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.659835100 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.659878016 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.659883976 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.659893990 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.659945965 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.659945965 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.660593033 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.660640955 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.660646915 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.660661936 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.660855055 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.662405968 CEST	49715	443	192.168.2.5	104.18.10.207
Aug 29, 2024 15:50:02.662420034 CEST	443	49715	104.18.10.207	192.168.2.5
Aug 29, 2024 15:50:02.823111057 CEST	443	49718	184.28.90.27	192.168.2.5
Aug 29, 2024 15:50:02.823199034 CEST	49718	443	192.168.2.5	184.28.90.27
Aug 29, 2024 15:50:02.859940052 CEST	49721	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:02.859967947 CEST	443	49721	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:02.860210896 CEST	49721	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:02.861915112 CEST	49721	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:02.861924887 CEST	443	49721	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:02.874483109 CEST	49718	443	192.168.2.5	184.28.90.27
Aug 29, 2024 15:50:02.874495983 CEST	443	49718	184.28.90.27	192.168.2.5
Aug 29, 2024 15:50:02.874732018 CEST	443	49718	184.28.90.27	192.168.2.5
Aug 29, 2024 15:50:02.919138908 CEST	49718	443	192.168.2.5	184.28.90.27
Aug 29, 2024 15:50:03.076261044 CEST	49718	443	192.168.2.5	184.28.90.27
Aug 29, 2024 15:50:03.116493940 CEST	443	49718	184.28.90.27	192.168.2.5
Aug 29, 2024 15:50:03.126617908 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.126817942 CEST	49720	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.126826048 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.127135038 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.127624989 CEST	49720	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.127675056 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.127832890 CEST	49720	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.130213022 CEST	443	49719	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.132998943 CEST	49719	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.133006096 CEST	443	49719	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.148829937 CEST	443	49719	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.155566931 CEST	49723	443	192.168.2.5	104.17.25.14
Aug 29, 2024 15:50:03.155589104 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:03.155667067 CEST	49723	443	192.168.2.5	104.17.25.14
Aug 29, 2024 15:50:03.156327009 CEST	49719	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.157746077 CEST	49719	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.157749891 CEST	443	49719	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.158426046 CEST	49723	443	192.168.2.5	104.17.25.14
Aug 29, 2024 15:50:03.158433914 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:03.161268950 CEST	443	49719	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.168494940 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.183151960 CEST	49724	443	192.168.2.5	104.18.11.207
Aug 29, 2024 15:50:03.183175087 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:03.183404922 CEST	49724	443	192.168.2.5	104.18.11.207
Aug 29, 2024 15:50:03.196433067 CEST	49724	443	192.168.2.5	104.18.11.207
Aug 29, 2024 15:50:03.196444988 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:03.213057041 CEST	49719	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.262897015 CEST	443	49718	184.28.90.27	192.168.2.5
Aug 29, 2024 15:50:03.262947083 CEST	443	49718	184.28.90.27	192.168.2.5
Aug 29, 2024 15:50:03.262991905 CEST	49718	443	192.168.2.5	184.28.90.27
Aug 29, 2024 15:50:03.363858938 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.363889933 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.363944054 CEST	49720	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.363956928 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.364404917 CEST	443	49719	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.364434004 CEST	443	49719	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.364475965 CEST	49719	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.364475965 CEST	443	49719	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.364520073 CEST	49719	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.414365053 CEST	49720	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.429183960 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.429193020 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.429280043 CEST	49720	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.450174093 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.450181961 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.450242043 CEST	49720	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.450954914 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.451014996 CEST	49720	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.452132940 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.452200890 CEST	49720	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.480667114 CEST	49718	443	192.168.2.5	184.28.90.27
Aug 29, 2024 15:50:03.480686903 CEST	443	49718	184.28.90.27	192.168.2.5
Aug 29, 2024 15:50:03.515939951 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.516012907 CEST	49720	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.516458035 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.516520023 CEST	49720	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.536942005 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.537028074 CEST	49720	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.537914038 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.537978888 CEST	49720	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.538535118 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.538588047 CEST	49720	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.539429903 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.539482117 CEST	49720	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.539546013 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.539598942 CEST	49720	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.561172962 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.561249018 CEST	49720	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.562594891 CEST	443	49721	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.572592020 CEST	49721	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.572606087 CEST	443	49721	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.593383074 CEST	443	49721	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.593453884 CEST	49721	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.602735043 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.602809906 CEST	49720	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.620300055 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:03.623655081 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.623785973 CEST	49720	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.623949051 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.623996973 CEST	49720	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.624306917 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.624351978 CEST	49720	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.625021935 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.625070095 CEST	49720	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.625228882 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.625273943 CEST	49720	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.625333071 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.625375986 CEST	49720	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.627108097 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.627162933 CEST	49720	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.628071070 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.628118992 CEST	49720	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.628818035 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.628868103 CEST	49720	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.628910065 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.628961086 CEST	49720	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.629712105 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.629770041 CEST	49720	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.629817963 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.629870892 CEST	49720	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.648323059 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.648397923 CEST	49720	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.651474953 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:03.658757925 CEST	49724	443	192.168.2.5	104.18.11.207
Aug 29, 2024 15:50:03.658771992 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:03.658905983 CEST	49723	443	192.168.2.5	104.17.25.14
Aug 29, 2024 15:50:03.658914089 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:03.659662962 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:03.659710884 CEST	49724	443	192.168.2.5	104.18.11.207
Aug 29, 2024 15:50:03.659806967 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:03.659848928 CEST	49723	443	192.168.2.5	104.17.25.14
Aug 29, 2024 15:50:03.661375046 CEST	49721	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.661489010 CEST	443	49721	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.661979914 CEST	49723	443	192.168.2.5	104.17.25.14
Aug 29, 2024 15:50:03.662033081 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:03.662344933 CEST	49724	443	192.168.2.5	104.18.11.207
Aug 29, 2024 15:50:03.662396908 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:03.662688971 CEST	49721	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.662700891 CEST	443	49721	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.662810087 CEST	49723	443	192.168.2.5	104.17.25.14
Aug 29, 2024 15:50:03.662816048 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:03.663067102 CEST	49724	443	192.168.2.5	104.18.11.207
Aug 29, 2024 15:50:03.663072109 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:03.668908119 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.669028997 CEST	49720	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.693034887 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.693108082 CEST	49720	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.693176985 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.693237066 CEST	49720	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.710594893 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.710658073 CEST	49720	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.710731030 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.710778952 CEST	49720	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.710927963 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.710977077 CEST	49720	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.711107016 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.711157084 CEST	49720	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.711282015 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.711335897 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.711338043 CEST	49720	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.711347103 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.711369991 CEST	49720	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.711391926 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.711442947 CEST	49720	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.715074062 CEST	49719	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.715084076 CEST	443	49719	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.715531111 CEST	49720	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.716888905 CEST	49723	443	192.168.2.5	104.17.25.14
Aug 29, 2024 15:50:03.716909885 CEST	49724	443	192.168.2.5	104.18.11.207
Aug 29, 2024 15:50:03.716909885 CEST	49721	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.743388891 CEST	49720	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.743398905 CEST	443	49720	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.757189035 CEST	49726	443	192.168.2.5	184.28.90.27
Aug 29, 2024 15:50:03.757220030 CEST	443	49726	184.28.90.27	192.168.2.5
Aug 29, 2024 15:50:03.757364035 CEST	49726	443	192.168.2.5	184.28.90.27
Aug 29, 2024 15:50:03.757822990 CEST	49726	443	192.168.2.5	184.28.90.27
Aug 29, 2024 15:50:03.757833004 CEST	443	49726	184.28.90.27	192.168.2.5
Aug 29, 2024 15:50:03.771074057 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:03.771111965 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:03.771136045 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:03.771158934 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:03.771174908 CEST	49723	443	192.168.2.5	104.17.25.14
Aug 29, 2024 15:50:03.771183968 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:03.771202087 CEST	49723	443	192.168.2.5	104.17.25.14
Aug 29, 2024 15:50:03.771585941 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:03.771610022 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:03.771641016 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:03.771666050 CEST	49723	443	192.168.2.5	104.17.25.14
Aug 29, 2024 15:50:03.771672010 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:03.771688938 CEST	49723	443	192.168.2.5	104.17.25.14
Aug 29, 2024 15:50:03.774111032 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:03.774159908 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:03.774197102 CEST	49724	443	192.168.2.5	104.18.11.207
Aug 29, 2024 15:50:03.774203062 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:03.774285078 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:03.774307013 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:03.774328947 CEST	49724	443	192.168.2.5	104.18.11.207
Aug 29, 2024 15:50:03.774328947 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:03.774338961 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:03.774355888 CEST	49724	443	192.168.2.5	104.18.11.207
Aug 29, 2024 15:50:03.774897099 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:03.774919987 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:03.774939060 CEST	49724	443	192.168.2.5	104.18.11.207
Aug 29, 2024 15:50:03.774943113 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:03.774981976 CEST	49724	443	192.168.2.5	104.18.11.207
Aug 29, 2024 15:50:03.774985075 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:03.775862932 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:03.775890112 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:03.775909901 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:03.775928974 CEST	49723	443	192.168.2.5	104.17.25.14
Aug 29, 2024 15:50:03.775934935 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:03.775955915 CEST	49723	443	192.168.2.5	104.17.25.14
Aug 29, 2024 15:50:03.824461937 CEST	49724	443	192.168.2.5	104.18.11.207
Aug 29, 2024 15:50:03.824465990 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:03.824476004 CEST	49723	443	192.168.2.5	104.17.25.14
Aug 29, 2024 15:50:03.830988884 CEST	443	49721	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.831037998 CEST	443	49721	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.831085920 CEST	49721	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.831667900 CEST	49721	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:03.831676960 CEST	443	49721	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:03.859489918 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:03.859536886 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:03.859559059 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:03.859596968 CEST	49723	443	192.168.2.5	104.17.25.14
Aug 29, 2024 15:50:03.859658003 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:03.859687090 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:03.859726906 CEST	49723	443	192.168.2.5	104.17.25.14
Aug 29, 2024 15:50:03.859782934 CEST	49723	443	192.168.2.5	104.17.25.14
Aug 29, 2024 15:50:03.860011101 CEST	49723	443	192.168.2.5	104.17.25.14
Aug 29, 2024 15:50:03.860039949 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 29, 2024 15:50:03.860925913 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:03.860949993 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:03.860968113 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:03.860980988 CEST	49724	443	192.168.2.5	104.18.11.207
Aug 29, 2024 15:50:03.860985994 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:03.860995054 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:03.861018896 CEST	49724	443	192.168.2.5	104.18.11.207
Aug 29, 2024 15:50:03.861044884 CEST	49724	443	192.168.2.5	104.18.11.207
Aug 29, 2024 15:50:03.861247063 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:03.861490011 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:03.861509085 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:03.861551046 CEST	49724	443	192.168.2.5	104.18.11.207
Aug 29, 2024 15:50:03.861562967 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:03.861603022 CEST	49724	443	192.168.2.5	104.18.11.207
Aug 29, 2024 15:50:03.861649036 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:03.862447977 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:03.862474918 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:03.862494946 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:03.862517118 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:03.862540007 CEST	49724	443	192.168.2.5	104.18.11.207
Aug 29, 2024 15:50:03.862540007 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:03.862550020 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:03.862561941 CEST	49724	443	192.168.2.5	104.18.11.207
Aug 29, 2024 15:50:03.862581015 CEST	49724	443	192.168.2.5	104.18.11.207
Aug 29, 2024 15:50:03.862586021 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:03.862634897 CEST	49724	443	192.168.2.5	104.18.11.207
Aug 29, 2024 15:50:03.863287926 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:03.863388062 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:03.863409996 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:03.863430977 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:03.863442898 CEST	49724	443	192.168.2.5	104.18.11.207
Aug 29, 2024 15:50:03.863447905 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:03.863477945 CEST	49724	443	192.168.2.5	104.18.11.207
Aug 29, 2024 15:50:03.864147902 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:03.864213943 CEST	49724	443	192.168.2.5	104.18.11.207
Aug 29, 2024 15:50:03.864218950 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:03.918967962 CEST	49724	443	192.168.2.5	104.18.11.207
Aug 29, 2024 15:50:03.947768927 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:03.947812080 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:03.947833061 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:03.947874069 CEST	49724	443	192.168.2.5	104.18.11.207
Aug 29, 2024 15:50:03.947887897 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:03.947906971 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:03.947936058 CEST	49724	443	192.168.2.5	104.18.11.207
Aug 29, 2024 15:50:03.947953939 CEST	49724	443	192.168.2.5	104.18.11.207
Aug 29, 2024 15:50:03.948199987 CEST	49724	443	192.168.2.5	104.18.11.207
Aug 29, 2024 15:50:03.948210955 CEST	443	49724	104.18.11.207	192.168.2.5
Aug 29, 2024 15:50:04.227546930 CEST	49727	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:04.227581978 CEST	443	49727	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:04.227715969 CEST	49727	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:04.228101015 CEST	49727	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:04.228111982 CEST	443	49727	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:04.392797947 CEST	443	49726	184.28.90.27	192.168.2.5
Aug 29, 2024 15:50:04.392863035 CEST	49726	443	192.168.2.5	184.28.90.27
Aug 29, 2024 15:50:04.472904921 CEST	49728	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:04.472939968 CEST	443	49728	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:04.473007917 CEST	49728	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:04.473105907 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:04.473123074 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:04.473315954 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:04.473489046 CEST	49730	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:04.473495007 CEST	443	49730	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:04.473541021 CEST	49730	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:04.474102020 CEST	49728	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:04.474113941 CEST	443	49728	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:04.474617004 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:04.474627018 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:04.474987984 CEST	49730	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:04.474993944 CEST	443	49730	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:04.479165077 CEST	49726	443	192.168.2.5	184.28.90.27
Aug 29, 2024 15:50:04.479195118 CEST	443	49726	184.28.90.27	192.168.2.5
Aug 29, 2024 15:50:04.479392052 CEST	443	49726	184.28.90.27	192.168.2.5
Aug 29, 2024 15:50:04.480921984 CEST	49726	443	192.168.2.5	184.28.90.27
Aug 29, 2024 15:50:04.528491020 CEST	443	49726	184.28.90.27	192.168.2.5
Aug 29, 2024 15:50:04.669341087 CEST	443	49726	184.28.90.27	192.168.2.5
Aug 29, 2024 15:50:04.669394970 CEST	443	49726	184.28.90.27	192.168.2.5
Aug 29, 2024 15:50:04.669574022 CEST	49726	443	192.168.2.5	184.28.90.27
Aug 29, 2024 15:50:04.670917034 CEST	49726	443	192.168.2.5	184.28.90.27
Aug 29, 2024 15:50:04.670929909 CEST	443	49726	184.28.90.27	192.168.2.5
Aug 29, 2024 15:50:04.670939922 CEST	49726	443	192.168.2.5	184.28.90.27
Aug 29, 2024 15:50:04.670944929 CEST	443	49726	184.28.90.27	192.168.2.5
Aug 29, 2024 15:50:04.939502001 CEST	443	49727	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:04.940934896 CEST	49727	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:04.940953016 CEST	443	49727	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:04.941257000 CEST	443	49727	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:04.942646027 CEST	49727	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:04.942703962 CEST	443	49727	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:04.943031073 CEST	49727	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:04.988493919 CEST	443	49727	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.155716896 CEST	443	49728	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.169193029 CEST	49728	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.169222116 CEST	443	49728	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.170244932 CEST	443	49728	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.170316935 CEST	49728	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.173508883 CEST	49728	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.173563957 CEST	443	49728	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.173654079 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.174204111 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.174215078 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.174309969 CEST	49728	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.174319029 CEST	443	49728	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.175137043 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.175185919 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.175664902 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.175717115 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.175915003 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.175920963 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.177395105 CEST	443	49727	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.177417994 CEST	443	49727	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.177473068 CEST	49727	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.177500010 CEST	443	49727	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.178710938 CEST	443	49730	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.179013968 CEST	49730	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.179023027 CEST	443	49730	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.179981947 CEST	443	49730	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.180027008 CEST	49730	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.180341005 CEST	49730	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.180385113 CEST	443	49730	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.180705070 CEST	49730	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.180710077 CEST	443	49730	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.229162931 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.243206024 CEST	443	49727	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.243283033 CEST	443	49727	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.243294001 CEST	49727	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.243335009 CEST	443	49727	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.243350983 CEST	443	49727	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.243372917 CEST	49727	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.243396997 CEST	49727	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.243639946 CEST	49727	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.243655920 CEST	443	49727	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.252305984 CEST	49728	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.252310038 CEST	49730	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.389436960 CEST	443	49728	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.389453888 CEST	443	49728	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.389501095 CEST	49728	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.389519930 CEST	443	49728	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.389550924 CEST	49728	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.389555931 CEST	443	49728	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.389574051 CEST	443	49728	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.389604092 CEST	49728	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.390089035 CEST	49728	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.390099049 CEST	443	49728	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.412410021 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.412427902 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.412435055 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.412471056 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.412508011 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.412522078 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.412532091 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.463563919 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.468071938 CEST	443	49730	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.468142033 CEST	443	49730	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.468204021 CEST	49730	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.469268084 CEST	49730	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.469275951 CEST	443	49730	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.480108976 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.480119944 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.480158091 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.480178118 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.480221033 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.498614073 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.498621941 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.498692989 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.499459028 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.499465942 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.499531031 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.500210047 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.500217915 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.500281096 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.568339109 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.568347931 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.568417072 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.596415997 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.596424103 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.596508026 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.596667051 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.596729994 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.596745014 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.596750975 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.596786976 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.596936941 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.596990108 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.597883940 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.597942114 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.597992897 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.598043919 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.605897903 CEST	49731	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.605921984 CEST	443	49731	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.605978012 CEST	49731	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.606549025 CEST	49731	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.606564045 CEST	443	49731	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.610150099 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.610217094 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.654967070 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.655034065 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.683564901 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.683631897 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.683788061 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.683830976 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.684091091 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.684148073 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.684290886 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.684341908 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.685094118 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.685173988 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.685605049 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.685657978 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.685740948 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.685796022 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.686469078 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.686547041 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.686655045 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.686713934 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.687400103 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.687452078 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.688215971 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.688280106 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.697164059 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.697246075 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.717777967 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.717966080 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.741864920 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.741945028 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.770571947 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.770653963 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.770790100 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.770853043 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.770940065 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.770992994 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.771186113 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.771243095 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.771403074 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.771435976 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.771462917 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.771467924 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.771488905 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.771502972 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.772304058 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.772335052 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.772358894 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.772362947 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.772384882 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:05.772392988 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:05.772424936 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:06.284305096 CEST	443	49731	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:06.339623928 CEST	49731	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:07.169362068 CEST	49731	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:07.169384956 CEST	443	49731	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:07.169641972 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:07.169841051 CEST	443	49731	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:07.170274019 CEST	49731	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:07.170331955 CEST	443	49731	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:07.170433998 CEST	49731	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:07.212506056 CEST	443	49731	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:07.346515894 CEST	443	49731	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:07.346534967 CEST	443	49731	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:07.346549034 CEST	443	49731	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:07.346606970 CEST	49731	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:07.346630096 CEST	443	49731	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:07.350852966 CEST	49729	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:07.350867033 CEST	443	49729	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:07.399506092 CEST	49731	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:07.412144899 CEST	443	49731	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:07.412157059 CEST	443	49731	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:07.412200928 CEST	443	49731	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:07.412209034 CEST	443	49731	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:07.412242889 CEST	443	49731	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:07.412264109 CEST	49731	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:07.412329912 CEST	49731	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:07.712703943 CEST	49731	443	192.168.2.5	192.249.123.145
Aug 29, 2024 15:50:07.712719917 CEST	443	49731	192.249.123.145	192.168.2.5
Aug 29, 2024 15:50:11.999396086 CEST	443	49713	142.250.185.132	192.168.2.5
Aug 29, 2024 15:50:11.999454021 CEST	443	49713	142.250.185.132	192.168.2.5
Aug 29, 2024 15:50:11.999500990 CEST	49713	443	192.168.2.5	142.250.185.132
Aug 29, 2024 15:50:13.731832027 CEST	49713	443	192.168.2.5	142.250.185.132
Aug 29, 2024 15:50:13.731853962 CEST	443	49713	142.250.185.132	192.168.2.5
Aug 29, 2024 15:50:22.597644091 CEST	56395	53	192.168.2.5	1.1.1.1
Aug 29, 2024 15:50:22.602437019 CEST	53	56395	1.1.1.1	192.168.2.5
Aug 29, 2024 15:50:22.602502108 CEST	56395	53	192.168.2.5	1.1.1.1
Aug 29, 2024 15:50:22.602623940 CEST	56395	53	192.168.2.5	1.1.1.1
Aug 29, 2024 15:50:22.607352972 CEST	53	56395	1.1.1.1	192.168.2.5
Aug 29, 2024 15:50:23.056855917 CEST	53	56395	1.1.1.1	192.168.2.5
Aug 29, 2024 15:50:23.059473991 CEST	56395	53	192.168.2.5	1.1.1.1
Aug 29, 2024 15:50:23.064723015 CEST	53	56395	1.1.1.1	192.168.2.5
Aug 29, 2024 15:50:23.064807892 CEST	56395	53	192.168.2.5	1.1.1.1
Aug 29, 2024 15:51:01.481249094 CEST	56399	443	192.168.2.5	142.250.185.132
Aug 29, 2024 15:51:01.481285095 CEST	443	56399	142.250.185.132	192.168.2.5
Aug 29, 2024 15:51:01.481410980 CEST	56399	443	192.168.2.5	142.250.185.132
Aug 29, 2024 15:51:01.481755018 CEST	56399	443	192.168.2.5	142.250.185.132
Aug 29, 2024 15:51:01.481769085 CEST	443	56399	142.250.185.132	192.168.2.5
Aug 29, 2024 15:51:02.293737888 CEST	443	56399	142.250.185.132	192.168.2.5
Aug 29, 2024 15:51:02.294270039 CEST	56399	443	192.168.2.5	142.250.185.132
Aug 29, 2024 15:51:02.294296026 CEST	443	56399	142.250.185.132	192.168.2.5
Aug 29, 2024 15:51:02.294600010 CEST	443	56399	142.250.185.132	192.168.2.5
Aug 29, 2024 15:51:02.295325994 CEST	56399	443	192.168.2.5	142.250.185.132
Aug 29, 2024 15:51:02.295387983 CEST	443	56399	142.250.185.132	192.168.2.5
Aug 29, 2024 15:51:02.338788033 CEST	56399	443	192.168.2.5	142.250.185.132
Aug 29, 2024 15:51:12.128947020 CEST	443	56399	142.250.185.132	192.168.2.5
Aug 29, 2024 15:51:12.129009962 CEST	443	56399	142.250.185.132	192.168.2.5
Aug 29, 2024 15:51:12.129064083 CEST	56399	443	192.168.2.5	142.250.185.132
Aug 29, 2024 15:51:13.718291044 CEST	56399	443	192.168.2.5	142.250.185.132
Aug 29, 2024 15:51:13.718328953 CEST	443	56399	142.250.185.132	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 29, 2024 15:49:57.554188967 CEST	53	63547	1.1.1.1	192.168.2.5
Aug 29, 2024 15:49:57.556377888 CEST	53	64968	1.1.1.1	192.168.2.5
Aug 29, 2024 15:49:58.794259071 CEST	53	61994	1.1.1.1	192.168.2.5
Aug 29, 2024 15:49:58.812974930 CEST	58427	53	192.168.2.5	1.1.1.1
Aug 29, 2024 15:49:58.813102961 CEST	55439	53	192.168.2.5	1.1.1.1
Aug 29, 2024 15:49:58.996704102 CEST	53	55439	1.1.1.1	192.168.2.5
Aug 29, 2024 15:49:59.008147955 CEST	53	58427	1.1.1.1	192.168.2.5
Aug 29, 2024 15:50:01.439704895 CEST	50180	53	192.168.2.5	1.1.1.1
Aug 29, 2024 15:50:01.440599918 CEST	52386	53	192.168.2.5	1.1.1.1
Aug 29, 2024 15:50:01.446769953 CEST	53	50180	1.1.1.1	192.168.2.5
Aug 29, 2024 15:50:01.448337078 CEST	53	52386	1.1.1.1	192.168.2.5
Aug 29, 2024 15:50:01.478157997 CEST	57246	53	192.168.2.5	1.1.1.1
Aug 29, 2024 15:50:01.478483915 CEST	64948	53	192.168.2.5	1.1.1.1
Aug 29, 2024 15:50:01.483063936 CEST	50718	53	192.168.2.5	1.1.1.1
Aug 29, 2024 15:50:01.483617067 CEST	59833	53	192.168.2.5	1.1.1.1
Aug 29, 2024 15:50:01.485621929 CEST	53	64948	1.1.1.1	192.168.2.5
Aug 29, 2024 15:50:01.485752106 CEST	53	57246	1.1.1.1	192.168.2.5
Aug 29, 2024 15:50:01.489219904 CEST	53	56545	1.1.1.1	192.168.2.5
Aug 29, 2024 15:50:01.490771055 CEST	53	59833	1.1.1.1	192.168.2.5
Aug 29, 2024 15:50:01.493009090 CEST	53	50718	1.1.1.1	192.168.2.5
Aug 29, 2024 15:50:02.868094921 CEST	53	57421	1.1.1.1	192.168.2.5
Aug 29, 2024 15:50:03.140610933 CEST	62961	53	192.168.2.5	1.1.1.1
Aug 29, 2024 15:50:03.141808987 CEST	59835	53	192.168.2.5	1.1.1.1
Aug 29, 2024 15:50:03.147278070 CEST	53	62961	1.1.1.1	192.168.2.5
Aug 29, 2024 15:50:03.149260998 CEST	53	59835	1.1.1.1	192.168.2.5
Aug 29, 2024 15:50:03.163880110 CEST	51972	53	192.168.2.5	1.1.1.1
Aug 29, 2024 15:50:03.164740086 CEST	54322	53	192.168.2.5	1.1.1.1
Aug 29, 2024 15:50:03.171220064 CEST	53	51972	1.1.1.1	192.168.2.5
Aug 29, 2024 15:50:03.173399925 CEST	53	54322	1.1.1.1	192.168.2.5
Aug 29, 2024 15:50:03.185764074 CEST	53	52476	1.1.1.1	192.168.2.5
Aug 29, 2024 15:50:04.241935968 CEST	61387	53	192.168.2.5	1.1.1.1
Aug 29, 2024 15:50:04.242316008 CEST	63363	53	192.168.2.5	1.1.1.1
Aug 29, 2024 15:50:04.425807953 CEST	53	61387	1.1.1.1	192.168.2.5
Aug 29, 2024 15:50:04.427690983 CEST	53	63363	1.1.1.1	192.168.2.5
Aug 29, 2024 15:50:17.528722048 CEST	53	54803	1.1.1.1	192.168.2.5
Aug 29, 2024 15:50:22.597287893 CEST	53	58200	1.1.1.1	192.168.2.5
Aug 29, 2024 15:50:57.040177107 CEST	53	52116	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Aug 29, 2024 15:49:58.812974930 CEST	192.168.2.5	1.1.1.1	0x55b2	Standard query (0)	elc-path.com	A (IP address)	IN (0x0001)	false
Aug 29, 2024 15:49:58.813102961 CEST	192.168.2.5	1.1.1.1	0x140b	Standard query (0)	elc-path.com	65	IN (0x0001)	false
Aug 29, 2024 15:50:01.439704895 CEST	192.168.2.5	1.1.1.1	0x11e0	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Aug 29, 2024 15:50:01.440599918 CEST	192.168.2.5	1.1.1.1	0xc70c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Aug 29, 2024 15:50:01.478157997 CEST	192.168.2.5	1.1.1.1	0x58d6	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Aug 29, 2024 15:50:01.478483915 CEST	192.168.2.5	1.1.1.1	0x167a	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Aug 29, 2024 15:50:01.483063936 CEST	192.168.2.5	1.1.1.1	0xfb3f	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 29, 2024 15:50:01.483617067 CEST	192.168.2.5	1.1.1.1	0x85d8	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Aug 29, 2024 15:50:03.140610933 CEST	192.168.2.5	1.1.1.1	0x3ae1	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 29, 2024 15:50:03.141808987 CEST	192.168.2.5	1.1.1.1	0x9965	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Aug 29, 2024 15:50:03.163880110 CEST	192.168.2.5	1.1.1.1	0xd406	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Aug 29, 2024 15:50:03.164740086 CEST	192.168.2.5	1.1.1.1	0x9460	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Aug 29, 2024 15:50:04.241935968 CEST	192.168.2.5	1.1.1.1	0x5109	Standard query (0)	elc-path.com	A (IP address)	IN (0x0001)	false
Aug 29, 2024 15:50:04.242316008 CEST	192.168.2.5	1.1.1.1	0x817	Standard query (0)	elc-path.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Aug 29, 2024 15:49:59.008147955 CEST	1.1.1.1	192.168.2.5	0x55b2	No error (0)	elc-path.com		192.249.123.145	A (IP address)	IN (0x0001)	false
Aug 29, 2024 15:50:01.446769953 CEST	1.1.1.1	192.168.2.5	0x11e0	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Aug 29, 2024 15:50:01.448337078 CEST	1.1.1.1	192.168.2.5	0xc70c	No error (0)	www.google.com			65	IN (0x0001)	false
Aug 29, 2024 15:50:01.485621929 CEST	1.1.1.1	192.168.2.5	0x167a	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Aug 29, 2024 15:50:01.485752106 CEST	1.1.1.1	192.168.2.5	0x58d6	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Aug 29, 2024 15:50:01.485752106 CEST	1.1.1.1	192.168.2.5	0x58d6	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Aug 29, 2024 15:50:01.490771055 CEST	1.1.1.1	192.168.2.5	0x85d8	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Aug 29, 2024 15:50:01.493009090 CEST	1.1.1.1	192.168.2.5	0xfb3f	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Aug 29, 2024 15:50:01.493009090 CEST	1.1.1.1	192.168.2.5	0xfb3f	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Aug 29, 2024 15:50:03.147278070 CEST	1.1.1.1	192.168.2.5	0x3ae1	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Aug 29, 2024 15:50:03.147278070 CEST	1.1.1.1	192.168.2.5	0x3ae1	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Aug 29, 2024 15:50:03.149260998 CEST	1.1.1.1	192.168.2.5	0x9965	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Aug 29, 2024 15:50:03.171220064 CEST	1.1.1.1	192.168.2.5	0xd406	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Aug 29, 2024 15:50:03.171220064 CEST	1.1.1.1	192.168.2.5	0xd406	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Aug 29, 2024 15:50:03.173399925 CEST	1.1.1.1	192.168.2.5	0x9460	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Aug 29, 2024 15:50:04.425807953 CEST	1.1.1.1	192.168.2.5	0x5109	No error (0)	elc-path.com		192.249.123.145	A (IP address)	IN (0x0001)	false
Aug 29, 2024 15:50:11.114439964 CEST	1.1.1.1	192.168.2.5	0xbaa1	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Aug 29, 2024 15:50:11.114439964 CEST	1.1.1.1	192.168.2.5	0xbaa1	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Aug 29, 2024 15:50:11.599415064 CEST	1.1.1.1	192.168.2.5	0x80d7	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 15:50:11.599415064 CEST	1.1.1.1	192.168.2.5	0x80d7	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

elc-path.com

https:

maxcdn.bootstrapcdn.com

cdnjs.cloudflare.com

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49709	192.249.123.145	443	3008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 13:49:59 UTC	689	OUT	GET /pdfglobal2/docs89q9eqwwe/login.php HTTP/1.1 Host: elc-path.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 13:50:01 UTC	359	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 13:49:59 GMT Server: Apache Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=9d98dbccaec32948374c5e64a70679f2; path=/ Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-08-29 13:50:01 UTC	1753	IN	Data Raw: 36 64 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 69 67 6e 20 69 6e 20 74 6f 20 79 6f 75 72 20 4d 69 63 72 6f 73 6f 66 74 20 61 63 63 6f 75 6e 74 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 61 73 73 65 74 73 2f 69 6d 61 67 65 73 2f 66 61 76 69 63 6f 6e Data Ascii: 6d2<!DOCTYPE html><html lang="en"><head> <title>Sign in to your Microsoft account</title> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="shortcut icon" href="assets/images/favicon
2024-08-29 13:50:01 UTC	1041	IN	Data Raw: 34 30 61 0d 0a 32 30 32 34 20 4d 69 63 72 6f 73 6f 66 74 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 20 3d 20 27 77 61 3d 77 73 69 67 6e 69 6e 31 2e 30 26 72 70 73 6e 76 3d 31 33 26 63 74 3d 31 35 33 39 35 38 35 33 32 37 26 72 76 65 72 3d 37 2e 30 2e 36 37 33 37 2e 30 26 77 70 3d 4d 42 49 5f 53 53 4c 26 77 72 65 70 6c 79 3d 68 74 74 70 73 25 33 61 25 32 66 25 32 66 6f 75 74 6c 6f 6f 6b 2e 6c 69 76 65 2e 63 6f 6d 25 32 66 6f 77 61 25 32 66 25 33 66 6e 6c 70 25 33 64 31 25 32 36 52 70 73 43 73 72 66 53 74 61 74 65 25 33 64 37 31 35 64 34 34 61 32 2d 32 66 31 31 2d 34 32 38 32 2d 66 36 32 35 2d 61 30 36 36 36 37 39 65 39 36 65 32 26 69 64 3d 32 39 32 38 34 31 26 43 42 43 58 54 3d 6f 75 Data Ascii: 40a2024 Microsoft</p></div><script> location.hash = 'wa=wsignin1.0&rpsnv=13&ct=1539585327&rver=7.0.6737.0&wp=MBI_SSL&wreply=https%3a%2f%2foutlook.live.com%2fowa%2f%3fnlp%3d1%26RpsCsrfState%3d715d44a2-2f11-4282-f625-a066679e96e2&id=292841&CBCXT=ou
2024-08-29 13:50:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49710	192.249.123.145	443	3008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 13:50:01 UTC	654	OUT	GET /pdfglobal2/docs89q9eqwwe/assets/css/login.css HTTP/1.1 Host: elc-path.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://elc-path.com/pdfglobal2/docs89q9eqwwe/login.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=9d98dbccaec32948374c5e64a70679f2
2024-08-29 13:50:01 UTC	231	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 13:50:01 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sat, 12 Jan 2019 06:58:36 GMT Accept-Ranges: bytes Content-Length: 1965 Content-Type: text/css
2024-08-29 13:50:01 UTC	1965	IN	Data Raw: 62 6f 64 79 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2e 2e 2f 69 6d 61 67 65 73 2f 62 61 63 6b 67 72 6f 75 6e 64 2e 6a 70 67 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 66 69 78 65 64 20 63 65 6e 74 65 72 3b 0d 0a 7d 0d 0a 2e 72 6f 77 20 7b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 76 68 3b 0d 0a 7d 0d 0a 2e 63 61 72 64 20 7b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 32 35 70 78 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 3b 0d 0a 7d 0d 0a 2e 63 61 72 64 2d 62 6f 64 79 20 3e 20 69 6d 67 2c 0d 0a 2e 63 61 72 64 2d 62 6f 64 79 20 3e 20 68 34 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0d 0a 7d 0d 0a 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 20 7b 0d 0a 20 Data Ascii: body { background: url('../images/background.jpg') no-repeat fixed center;}.row { height: 100vh;}.card { padding: 25px; border-radius: 0;}.card-body > img,.card-body > h4 { margin-bottom: 20px;}.form-control {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49715	104.18.10.207	443	3008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 13:50:02 UTC	570	OUT	GET /bootstrap/4.1.3/css/bootstrap.min.css HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://elc-path.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 13:50:02 UTC	934	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 13:50:02 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"04aca1f4cd3ec3c05a75a879f3be75a3" Last-Modified: Mon, 25 Jan 2021 22:04:06 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 10/31/2023 18:59:19 CDN-EdgeStorageId: 1029 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 3f8d808ea21bb1e968cc6ea80b42e628 CDN-Cache: HIT CF-Cache-Status: HIT Age: 14591225 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8bad02009ece8cb4-EWR alt-svc: h3=":443"; ma=86400
2024-08-29 13:50:02 UTC	435	IN	Data Raw: 37 63 30 63 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 Data Ascii: 7c0c/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors * Copyright 2011-2018 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */:root{--blue:#007bff;--indigo:#661
2024-08-29 13:50:02 UTC	1369	IN	Data Raw: 70 72 69 6d 61 72 79 3a 23 30 30 37 62 66 66 3b 2d 2d 73 65 63 6f 6e 64 61 72 79 3a 23 36 63 37 35 37 64 3b 2d 2d 73 75 63 63 65 73 73 3a 23 32 38 61 37 34 35 3b 2d 2d 69 6e 66 6f 3a 23 31 37 61 32 62 38 3b 2d 2d 77 61 72 6e 69 6e 67 3a 23 66 66 63 31 30 37 3b 2d 2d 64 61 6e 67 65 72 3a 23 64 63 33 35 34 35 3b 2d 2d 6c 69 67 68 74 3a 23 66 38 66 39 66 61 3b 2d 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 73 3a 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 73 6d 3a 35 37 36 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6d 64 3a 37 36 38 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6c 67 3a 39 39 32 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 6c 3a 31 32 30 30 70 78 3b 2d 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 Data Ascii: primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family
2024-08-29 13:50:02 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 63 75 72 73 6f 72 3a 68 65 6c 70 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 7d 61 64 64 72 65 73 73 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 64 6c 2c 6f 6c 2c 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 7d 6f 6c 20 6f 6c 2c 6f 6c 20 75 6c 2c 75 6c 20 6f 6c 2c 75 6c 20 75 6c 7b 6d 61 72 67 69 6e 2d 62 Data Ascii: tion:underline;-webkit-text-decoration:underline dotted;text-decoration:underline dotted;cursor:help;border-bottom:0}address{margin-bottom:1rem;font-style:normal;line-height:inherit}dl,ol,ul{margin-top:0;margin-bottom:1rem}ol ol,ol ul,ul ol,ul ul{margin-b
2024-08-29 13:50:02 UTC	1369	IN	Data Raw: 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 7d 62 75 74 74 6f 6e 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 7d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 31 70 78 20 64 6f 74 74 65 64 3b 6f 75 74 6c 69 6e 65 3a 35 70 78 20 61 75 74 6f 20 2d 77 65 62 6b 69 74 2d 66 6f 63 75 73 2d 72 69 6e 67 2d 63 6f 6c 6f 72 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 7b 6f 76 65 72 Data Ascii: ay:inline-block;margin-bottom:.5rem}button{border-radius:0}button:focus{outline:1px dotted;outline:5px auto -webkit-focus-ring-color}button,input,optgroup,select,textarea{margin:0;font-family:inherit;font-size:inherit;line-height:inherit}button,input{over
2024-08-29 13:50:02 UTC	1369	IN	Data Raw: 65 72 7d 74 65 6d 70 6c 61 74 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 5b 68 69 64 64 65 6e 5d 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 68 31 2c 2e 68 32 2c 2e 68 33 2c 2e 68 34 2c 2e 68 35 2c 2e 68 36 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 68 31 2c 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 35 72 65 6d 7d 2e 68 32 2c 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 72 65 6d 7d 2e 68 33 2c 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 35 72 65 6d Data Ascii: er}template{display:none}[hidden]{display:none!important}.h1,.h2,.h3,.h4,.h5,.h6,h1,h2,h3,h4,h5,h6{margin-bottom:.5rem;font-family:inherit;font-weight:500;line-height:1.2;color:inherit}.h1,h1{font-size:2.5rem}.h2,h2{font-size:2rem}.h3,h3{font-size:1.75rem
2024-08-29 13:50:02 UTC	1369	IN	Data Raw: 75 72 65 2d 69 6d 67 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 7d 2e 66 69 67 75 72 65 2d 63 61 70 74 69 6f 6e 7b 66 6f 6e 74 2d 73 69 7a 65 3a 39 30 25 3b 63 6f 6c 6f 72 3a 23 36 63 37 35 37 64 7d 63 6f 64 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 65 38 33 65 38 63 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 61 3e 63 6f 64 65 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 6b 62 64 7b 70 61 64 64 69 6e 67 3a 2e 32 72 65 6d 20 2e 34 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e Data Ascii: ure-img{margin-bottom:.5rem;line-height:1}.figure-caption{font-size:90%;color:#6c757d}code{font-size:87.5%;color:#e83e8c;word-break:break-word}a>code{color:inherit}kbd{padding:.2rem .4rem;font-size:87.5%;color:#fff;background-color:#212529;border-radius:.
2024-08-29 13:50:02 UTC	1369	IN	Data Raw: 64 2d 31 30 2c 2e 63 6f 6c 2d 6d 64 2d 31 31 2c 2e 63 6f 6c 2d 6d 64 2d 31 32 2c 2e 63 6f 6c 2d 6d 64 2d 32 2c 2e 63 6f 6c 2d 6d 64 2d 33 2c 2e 63 6f 6c 2d 6d 64 2d 34 2c 2e 63 6f 6c 2d 6d 64 2d 35 2c 2e 63 6f 6c 2d 6d 64 2d 36 2c 2e 63 6f 6c 2d 6d 64 2d 37 2c 2e 63 6f 6c 2d 6d 64 2d 38 2c 2e 63 6f 6c 2d 6d 64 2d 39 2c 2e 63 6f 6c 2d 6d 64 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 73 6d 2c 2e 63 6f 6c 2d 73 6d 2d 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 30 2c 2e 63 6f 6c 2d 73 6d 2d 31 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 32 2c 2e 63 6f 6c 2d 73 6d 2d 32 2c 2e 63 6f 6c 2d 73 6d 2d 33 2c 2e 63 6f 6c 2d 73 6d 2d 34 2c 2e 63 6f 6c 2d 73 6d 2d 35 2c 2e 63 6f 6c 2d 73 6d 2d 36 2c 2e 63 6f 6c 2d 73 6d 2d 37 2c 2e 63 6f 6c 2d 73 6d 2d 38 2c 2e 63 6f 6c 2d 73 6d 2d 39 2c 2e 63 6f 6c Data Ascii: d-10,.col-md-11,.col-md-12,.col-md-2,.col-md-3,.col-md-4,.col-md-5,.col-md-6,.col-md-7,.col-md-8,.col-md-9,.col-md-auto,.col-sm,.col-sm-1,.col-sm-10,.col-sm-11,.col-sm-12,.col-sm-2,.col-sm-3,.col-sm-4,.col-sm-5,.col-sm-6,.col-sm-7,.col-sm-8,.col-sm-9,.col
2024-08-29 13:50:02 UTC	1369	IN	Data Raw: 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 31 32 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 6f 72 64 65 72 2d 66 69 72 73 74 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 2d 31 3b 6f 72 64 65 72 3a 2d 31 7d 2e 6f 72 64 65 72 2d 6c 61 73 74 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 33 3b 6f 72 64 65 72 3a 31 33 7d 2e 6f 72 64 65 72 2d 30 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 30 3b 6f 72 64 65 72 3a 30 7d 2e 6f 72 64 65 72 2d 31 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 3b 6f 72 64 65 72 3a 31 7d 2e 6f 72 64 65 72 2d 32 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 32 3b 6f 72 64 65 72 3a 32 7d 2e 6f 72 64 65 72 2d 33 7b 2d 6d 73 Data Ascii: 66667%}.col-12{-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.order-first{-ms-flex-order:-1;order:-1}.order-last{-ms-flex-order:13;order:13}.order-0{-ms-flex-order:0;order:0}.order-1{-ms-flex-order:1;order:1}.order-2{-ms-flex-order:2;order:2}.order-3{-ms
2024-08-29 13:50:02 UTC	1369	IN	Data Raw: 33 33 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 35 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 34 31 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 34 31 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 34 31 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 73 6d 2d 36 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 30 25 7d 2e 63 6f 6c 2d 73 6d 2d 37 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 35 38 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 35 38 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 38 7b 2d 6d 73 2d 66 6c 65 78 3a Data Ascii: 33.333333%;max-width:33.333333%}.col-sm-5{-ms-flex:0 0 41.666667%;flex:0 0 41.666667%;max-width:41.666667%}.col-sm-6{-ms-flex:0 0 50%;flex:0 0 50%;max-width:50%}.col-sm-7{-ms-flex:0 0 58.333333%;flex:0 0 58.333333%;max-width:58.333333%}.col-sm-8{-ms-flex:
2024-08-29 13:50:02 UTC	1369	IN	Data Raw: 6c 65 66 74 3a 35 30 25 7d 2e 6f 66 66 73 65 74 2d 73 6d 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 73 6d 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 73 6d 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 6f 66 66 73 65 74 2d 73 6d 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 73 6d 2d 31 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 31 2e 36 36 36 36 36 37 25 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 63 6f 6c 2d 6d 64 7b 2d 6d 73 2d 66 6c 65 78 2d 70 72 65 66 65 72 72 65 64 2d 73 69 7a 65 3a 30 3b 66 6c 65 78 2d 62 61 73 69 73 3a Data Ascii: left:50%}.offset-sm-7{margin-left:58.333333%}.offset-sm-8{margin-left:66.666667%}.offset-sm-9{margin-left:75%}.offset-sm-10{margin-left:83.333333%}.offset-sm-11{margin-left:91.666667%}}@media (min-width:768px){.col-md{-ms-flex-preferred-size:0;flex-basis:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49714	104.18.10.207	443	3008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 13:50:02 UTC	554	OUT	GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://elc-path.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 13:50:02 UTC	947	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 13:50:02 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"67176c242e1bdc20603c878dee836df3" Last-Modified: Mon, 25 Jan 2021 22:04:06 GMT CDN-ProxyVer: 1.03 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 12/08/2022 21:02:39 CDN-EdgeStorageId: 871 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 28e810a2a87ce111a8eb2ee66c2e0093 CDN-Cache: HIT CF-Cache-Status: HIT Age: 14581726 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8bad02009f640f81-EWR alt-svc: h3=":443"; ma=86400
2024-08-29 13:50:02 UTC	422	IN	Data Raw: 37 63 30 30 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7c00/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2024-08-29 13:50:02 UTC	1369	IN	Data Raw: 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2e 6b 65 79 2c Data Ascii: uery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,
2024-08-29 13:50:02 UTC	1369	IN	Data Raw: 57 6e 2c 55 6e 2c 71 6e 2c 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 65 3d 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 29 2e 6f 6e 65 28 6c 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 21 30 7d 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 7c 7c 6c 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 65 29 7d 2c 74 29 2c 74 68 69 73 7d 76 61 72 20 6c 3d 7b 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 3a 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 67 65 74 55 49 44 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 3b 74 Data Ascii: Wn,Un,qn,Fn=function(i){var e="transitionend";function t(t){var e=this,n=!1;return i(this).one(l.TRANSITION_END,function(){n=!0}),setTimeout(function(){n\|\|l.triggerTransitionEnd(e)},t),this}var l={TRANSITION_END:"bsTransitionEnd",getUID:function(t){for(;t
2024-08-29 13:50:02 UTC	1369	IN	Data Raw: 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 6c 7d 28 65 29 2c 4b 6e 3d 28 6e 3d 22 61 6c 65 72 74 22 2c 61 3d 22 2e 22 2b 28 6f 3d 22 62 73 2e 61 6c 65 72 74 22 29 2c 63 3d 28 72 3d 65 29 2e 66 6e 5b 6e 5d 2c 75 3d 7b 43 4c 4f 53 45 3a 22 63 6c 6f 73 65 22 2b 61 2c 43 4c 4f 53 45 44 3a 22 63 6c 6f 73 65 64 22 2b 61 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 61 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 66 3d 22 61 6c 65 72 74 22 2c 64 3d 22 66 61 64 65 22 2c 67 3d 22 73 68 6f 77 22 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 69 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 63 6c 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: rguments)}},l}(e),Kn=(n="alert",a="."+(o="bs.alert"),c=(r=e).fn[n],u={CLOSE:"close"+a,CLOSED:"closed"+a,CLICK_DATA_API:"click"+a+".data-api"},f="alert",d="fade",g="show",_=function(){function i(t){this._element=t}var t=i.prototype;return t.close=function(
2024-08-29 13:50:02 UTC	1369	IN	Data Raw: 77 20 5f 29 29 2c 72 2e 66 6e 5b 6e 5d 3d 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 72 2e 66 6e 5b 6e 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 5f 2c 72 2e 66 6e 5b 6e 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 66 6e 5b 6e 5d 3d 63 2c 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 5f 29 2c 4d 6e 3d 28 70 3d 22 62 75 74 74 6f 6e 22 2c 79 3d 22 2e 22 2b 28 76 3d 22 62 73 2e 62 75 74 74 6f 6e 22 29 2c 45 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 3d 28 6d 3d 65 29 2e 66 6e 5b 70 5d 2c 54 3d 22 61 63 74 69 76 65 22 2c 62 3d 22 62 74 6e 22 2c 49 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d 27 2c 41 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 62 Data Ascii: w _)),r.fn[n]=_._jQueryInterface,r.fn[n].Constructor=_,r.fn[n].noConflict=function(){return r.fn[n]=c,_._jQueryInterface},_),Mn=(p="button",y="."+(v="bs.button"),E=".data-api",C=(m=e).fn[p],T="active",b="btn",I='[data-toggle^="button"]',A='[data-toggle="b
2024-08-29 13:50:02 UTC	1369	IN	Data Raw: 28 29 3b 76 61 72 20 65 3d 74 2e 74 61 72 67 65 74 3b 6d 28 65 29 2e 68 61 73 43 6c 61 73 73 28 62 29 7c 7c 28 65 3d 6d 28 65 29 2e 63 6c 6f 73 65 73 74 28 4e 29 29 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 6d 28 65 29 2c 22 74 6f 67 67 6c 65 22 29 7d 29 2e 6f 6e 28 4f 2e 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 2c 49 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6d 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 4e 29 5b 30 5d 3b 6d 28 65 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 53 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 74 2e 74 79 70 65 29 29 7d 29 2c 6d 2e 66 6e 5b 70 5d 3d 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 6d 2e 66 6e 5b 70 5d 2e 43 6f Data Ascii: ();var e=t.target;m(e).hasClass(b)\|\|(e=m(e).closest(N)),k._jQueryInterface.call(m(e),"toggle")}).on(O.FOCUS_BLUR_DATA_API,I,function(t){var e=m(t.target).closest(N)[0];m(e).toggleClass(S,/^focus(in)?$/.test(t.type))}),m.fn[p]=k._jQueryInterface,m.fn[p].Co
2024-08-29 13:50:02 UTC	1369	IN	Data Raw: 65 6c 65 63 74 6f 72 28 6e 74 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 74 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 71 29 7d 2c 74 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 74 79 22 29 26 26 74 68 69 73 2e 6e 65 78 74 28 29 7d 2c 74 Data Ascii: elector(nt),this._addEventListeners()}var t=o.prototype;return t.next=function(){this._isSliding\|\|this._slide(q)},t.nextWhenVisible=function(){!document.hidden&&P(this._element).is(":visible")&&"hidden"!==P(this._element).css("visibility")&&this.next()},t
2024-08-29 13:50:02 UTC	1369	IN	Data Raw: 20 74 3d 6c 28 7b 7d 2c 57 2c 74 29 2c 46 6e 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 6a 2c 74 2c 55 29 2c 74 7d 2c 74 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6b 65 79 62 6f 61 72 64 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4b 45 59 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6b 65 79 64 6f 77 6e 28 74 29 7d 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 28 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4d 4f 55 53 45 45 4e 54 45 52 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e Data Ascii: t=l({},W,t),Fn.typeCheckConfig(j,t,U),t},t._addEventListeners=function(){var e=this;this._config.keyboard&&P(this._element).on(Q.KEYDOWN,function(t){return e._keydown(t)}),"hover"===this._config.pause&&(P(this._element).on(Q.MOUSEENTER,function(t){return
2024-08-29 13:50:02 UTC	1369	IN	Data Raw: 66 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 24 29 29 3b 50 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 50 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 72 2c 6f 3d 74 68 69 73 2c 73 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 Data Ascii: f(this._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll($));P(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&P(n).addClass(V)}},t._slide=function(t,e){var n,i,r,o=this,s=this._element.que
2024-08-29 13:50:02 UTC	1369	IN	Data Raw: 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 20 6d 65 74 68 6f 64 20 6e 61 6d 65 64 20 22 27 2b 6e 2b 27 22 27 29 3b 74 5b 6e 5d 28 29 7d 65 6c 73 65 20 65 2e 69 6e 74 65 72 76 61 6c 26 26 28 74 2e 70 61 75 73 65 28 29 2c 74 2e 63 79 63 6c 65 28 29 29 7d 29 7d 2c 6f 2e 5f 64 61 74 61 41 70 69 43 6c 69 63 6b 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 29 3b 69 66 28 65 29 7b 76 61 72 20 6e 3d 50 28 65 29 5b 30 5d 3b 69 66 28 6e 26 26 50 28 6e 29 2e 68 61 73 43 6c 61 73 73 28 42 Data Ascii: ring"==typeof n){if("undefined"==typeof t[n])throw new TypeError('No method named "'+n+'"');t[n]()}else e.interval&&(t.pause(),t.cycle())})},o._dataApiClickHandler=function(t){var e=Fn.getSelectorFromElement(this);if(e){var n=P(e)[0];if(n&&P(n).hasClass(B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49717	104.17.25.14	443	3008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 13:50:02 UTC	560	OUT	GET /ajax/libs/popper.js/1.14.3/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://elc-path.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 13:50:02 UTC	964	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 13:50:02 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4f71" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 578631 Expires: Tue, 19 Aug 2025 13:50:02 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fDn7EXyvN%2FbzQSRP1I4CmzudXm3lgtQZQ7o7XFHQntT2VDfcHjk%2Bh62EBmRF72jVe6MPcLntKHa8AWwVDbBmhxercvbRixA%2FJVLBAFGqUvrZmFjk9YGtky4cN%2FSlR%2FiPT9M6yB%2BI"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8bad02009d4b420a-EWR alt-svc: h3=":443"; ma=86400
2024-08-29 13:50:02 UTC	405	IN	Data Raw: 33 39 37 39 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 38 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 3979/* Copyright (C) Federico Zivolo 2018 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-08-29 13:50:02 UTC	1369	IN	Data Raw: 28 31 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 Data Ascii: (1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#docu
2024-08-29 13:50:02 UTC	1369	IN	Data Raw: 3a 27 74 6f 70 27 2c 6f 3d 27 74 6f 70 27 3d 3d 3d 74 3f 27 73 63 72 6f 6c 6c 54 6f 70 27 3a 27 73 63 72 6f 6c 6c 4c 65 66 74 27 2c 6e 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3b 69 66 28 27 42 4f 44 59 27 3d 3d 3d 6e 7c 7c 27 48 54 4d 4c 27 3d 3d 3d 6e 29 7b 76 61 72 20 69 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 72 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 73 63 72 6f 6c 6c 69 6e 67 45 6c 65 6d 65 6e 74 7c 7c 69 3b 72 65 74 75 72 6e 20 72 5b 6f 5d 7d 72 65 74 75 72 6e 20 65 5b 6f 5d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 Data Ascii: :'top',o='top'===t?'scrollTop':'scrollLeft',n=e.nodeName;if('BODY'===n\|\|'HTML'===n){var i=e.ownerDocument.documentElement,r=e.ownerDocument.scrollingElement\|\|i;return r[o]}return e[o]}function f(e,t){var o=2<arguments.length&&void 0!==arguments[2]&&argume
2024-08-29 13:50:02 UTC	1369	IN	Data Raw: 27 29 2c 68 2d 3d 6d 28 75 2c 27 79 27 29 2c 70 2e 77 69 64 74 68 2d 3d 66 2c 70 2e 68 65 69 67 68 74 2d 3d 68 7d 72 65 74 75 72 6e 20 67 28 70 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 6f 29 7b 76 61 72 20 69 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 70 3d 72 28 31 30 29 2c 73 3d 27 48 54 4d 4c 27 3d 3d 3d 6f 2e 6e 6f 64 65 4e 61 6d 65 2c 64 3d 75 28 65 29 2c 61 3d 75 28 6f 29 2c 6c 3d 6e 28 65 29 2c 6d 3d 74 28 6f 29 2c 68 3d 70 61 72 73 65 46 6c 6f 61 74 28 6d 2e 62 6f 72 64 65 72 54 6f 70 57 69 64 74 68 2c 31 30 29 2c 63 3d 70 61 72 73 65 46 6c 6f 61 74 28 6d 2e 62 6f 72 64 65 72 4c 65 66 74 57 69 64 74 68 2c 31 30 29 3b Data Ascii: '),h-=m(u,'y'),p.width-=f,p.height-=h}return g(p)}function b(e,o){var i=2<arguments.length&&void 0!==arguments[2]&&arguments[2],p=r(10),s='HTML'===o.nodeName,d=u(e),a=u(o),l=n(e),m=t(o),h=parseFloat(m.borderTopWidth,10),c=parseFloat(m.borderLeftWidth,10);
2024-08-29 13:50:02 UTC	1369	IN	Data Raw: 74 27 3d 3d 3d 72 29 73 3d 79 28 64 2c 70 29 3b 65 6c 73 65 7b 76 61 72 20 6c 3b 27 73 63 72 6f 6c 6c 50 61 72 65 6e 74 27 3d 3d 3d 72 3f 28 6c 3d 6e 28 6f 28 74 29 29 2c 27 42 4f 44 59 27 3d 3d 3d 6c 2e 6e 6f 64 65 4e 61 6d 65 26 26 28 6c 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 29 29 3a 27 77 69 6e 64 6f 77 27 3d 3d 3d 72 3f 6c 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3a 6c 3d 72 3b 76 61 72 20 66 3d 62 28 6c 2c 64 2c 70 29 3b 69 66 28 27 48 54 4d 4c 27 3d 3d 3d 6c 2e 6e 6f 64 65 4e 61 6d 65 26 26 21 77 28 64 29 29 7b 76 61 72 20 6d 3d 63 28 29 2c 68 3d 6d 2e 68 65 69 67 68 74 2c 67 3d 6d 2e 77 69 64 74 68 3b 73 2e 74 6f 70 2b 3d 66 2e 74 6f 70 Data Ascii: t'===r)s=y(d,p);else{var l;'scrollParent'===r?(l=n(o(t)),'BODY'===l.nodeName&&(l=e.ownerDocument.documentElement)):'window'===r?l=e.ownerDocument.documentElement:l=r;var f=b(l,d,p);if('HTML'===l.nodeName&&!w(d)){var m=c(),h=m.height,g=m.width;s.top+=f.top
2024-08-29 13:50:02 UTC	1369	IN	Data Raw: 65 29 7b 76 61 72 20 74 3d 7b 6c 65 66 74 3a 27 72 69 67 68 74 27 2c 72 69 67 68 74 3a 27 6c 65 66 74 27 2c 62 6f 74 74 6f 6d 3a 27 74 6f 70 27 2c 74 6f 70 3a 27 62 6f 74 74 6f 6d 27 7d 3b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 2f 6c 65 66 74 7c 72 69 67 68 74 7c 62 6f 74 74 6f 6d 7c 74 6f 70 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 5b 65 5d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 43 28 65 2c 74 2c 6f 29 7b 6f 3d 6f 2e 73 70 6c 69 74 28 27 2d 27 29 5b 30 5d 3b 76 61 72 20 6e 3d 53 28 65 29 2c 69 3d 7b 77 69 64 74 68 3a 6e 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 6e 2e 68 65 69 67 68 74 7d 2c 72 3d 2d 31 21 3d 3d 5b 27 72 69 67 68 74 27 2c 27 6c 65 66 74 27 5d 2e 69 6e 64 65 78 4f 66 28 6f 29 2c 70 3d 72 3f 27 74 6f 70 Data Ascii: e){var t={left:'right',right:'left',bottom:'top',top:'bottom'};return e.replace(/left\|right\|bottom\|top/g,function(e){return t[e]})}function C(e,t,o){o=o.split('-')[0];var n=S(e),i={width:n.width,height:n.height},r=-1!==['right','left'].indexOf(o),p=r?'top
2024-08-29 13:50:02 UTC	1369	IN	Data Raw: 69 6f 6e 46 69 78 65 64 2c 65 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 43 28 74 68 69 73 2e 70 6f 70 70 65 72 2c 65 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 2c 65 2e 70 6c 61 63 65 6d 65 6e 74 29 2c 65 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 2e 70 6f 73 69 74 69 6f 6e 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 70 6f 73 69 74 69 6f 6e 46 69 78 65 64 3f 27 66 69 78 65 64 27 3a 27 61 62 73 6f 6c 75 74 65 27 2c 65 3d 50 28 74 68 69 73 2e 6d 6f 64 69 66 69 65 72 73 2c 65 29 2c 74 68 69 73 2e 73 74 61 74 65 2e 69 73 43 72 65 61 74 65 64 3f 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6f 6e 55 70 64 61 74 65 28 65 29 3a 28 74 68 69 73 2e 73 74 61 74 65 2e 69 73 43 72 65 61 74 65 64 3d 21 30 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6f 6e 43 72 Data Ascii: ionFixed,e.offsets.popper=C(this.popper,e.offsets.reference,e.placement),e.offsets.popper.position=this.options.positionFixed?'fixed':'absolute',e=P(this.modifiers,e),this.state.isCreated?this.options.onUpdate(e):(this.state.isCreated=!0,this.options.onCr
2024-08-29 13:50:02 UTC	1369	IN	Data Raw: 29 2c 6f 2e 73 63 72 6f 6c 6c 45 6c 65 6d 65 6e 74 3d 72 2c 6f 2e 65 76 65 6e 74 73 45 6e 61 62 6c 65 64 3d 21 30 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 46 28 29 7b 74 68 69 73 2e 73 74 61 74 65 2e 65 76 65 6e 74 73 45 6e 61 62 6c 65 64 7c 7c 28 74 68 69 73 2e 73 74 61 74 65 3d 49 28 74 68 69 73 2e 72 65 66 65 72 65 6e 63 65 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2c 74 68 69 73 2e 73 74 61 74 65 2c 74 68 69 73 2e 73 63 68 65 64 75 6c 65 55 70 64 61 74 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 52 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 41 28 65 29 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 72 65 73 69 7a 65 27 2c 74 2e 75 70 64 61 74 65 42 6f 75 6e 64 29 2c 74 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 73 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 Data Ascii: ),o.scrollElement=r,o.eventsEnabled=!0,o}function F(){this.state.eventsEnabled\|\|(this.state=I(this.reference,this.options,this.state,this.scheduleUpdate))}function R(e,t){return A(e).removeEventListener('resize',t.updateBound),t.scrollParents.forEach(func
2024-08-29 13:50:02 UTC	1369	IN	Data Raw: 20 56 28 65 2c 74 2c 6f 2c 6e 29 7b 76 61 72 20 69 3d 65 2e 6d 61 74 63 68 28 2f 28 28 3f 3a 5c 2d 7c 5c 2b 29 3f 5c 64 2a 5c 2e 3f 5c 64 2a 29 28 2e 2a 29 2f 29 2c 72 3d 2b 69 5b 31 5d 2c 70 3d 69 5b 32 5d 3b 69 66 28 21 72 29 72 65 74 75 72 6e 20 65 3b 69 66 28 30 3d 3d 3d 70 2e 69 6e 64 65 78 4f 66 28 27 25 27 29 29 7b 76 61 72 20 73 3b 73 77 69 74 63 68 28 70 29 7b 63 61 73 65 27 25 70 27 3a 73 3d 6f 3b 62 72 65 61 6b 3b 63 61 73 65 27 25 27 3a 63 61 73 65 27 25 72 27 3a 64 65 66 61 75 6c 74 3a 73 3d 6e 3b 7d 76 61 72 20 64 3d 67 28 73 29 3b 72 65 74 75 72 6e 20 64 5b 74 5d 2f 31 30 30 2a 72 7d 69 66 28 27 76 68 27 3d 3d 3d 70 7c 7c 27 76 77 27 3d 3d 3d 70 29 7b 76 61 72 20 61 3b 72 65 74 75 72 6e 20 61 3d 27 76 68 27 3d 3d 3d 70 3f 24 28 64 6f 63 75 Data Ascii: V(e,t,o,n){var i=e.match(/((?:\-\|\+)?\d\.?\d)(.)/),r=+i[1],p=i[2];if(!r)return e;if(0===p.indexOf('%')){var s;switch(p){case'%p':s=o;break;case'%':case'%r':default:s=n;}var d=g(s);return d[t]/100r}if('vh'===p\|\|'vw'===p){var a;return a='vh'===p?$(docu
2024-08-29 13:50:02 UTC	1369	IN	Data Raw: 29 3a 27 74 6f 70 27 3d 3d 3d 64 3f 28 70 2e 6c 65 66 74 2b 3d 6f 5b 30 5d 2c 70 2e 74 6f 70 2d 3d 6f 5b 31 5d 29 3a 27 62 6f 74 74 6f 6d 27 3d 3d 3d 64 26 26 28 70 2e 6c 65 66 74 2b 3d 6f 5b 30 5d 2c 70 2e 74 6f 70 2b 3d 6f 5b 31 5d 29 2c 65 2e 70 6f 70 70 65 72 3d 70 2c 65 7d 66 6f 72 28 76 61 72 20 4a 3d 4d 61 74 68 2e 6d 69 6e 2c 51 3d 4d 61 74 68 2e 72 6f 75 6e 64 2c 5a 3d 4d 61 74 68 2e 66 6c 6f 6f 72 2c 24 3d 4d 61 74 68 2e 6d 61 78 2c 65 65 3d 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 2c 74 65 3d 5b 27 45 64 67 65 27 2c 27 54 72 69 64 65 6e 74 27 2c 27 46 69 72 65 66 6f 78 27 5d 2c 6f 65 3d 30 2c 6e 65 3d 30 3b 6e 65 3c 74 Data Ascii: ):'top'===d?(p.left+=o[0],p.top-=o[1]):'bottom'===d&&(p.left+=o[0],p.top+=o[1]),e.popper=p,e}for(var J=Math.min,Q=Math.round,Z=Math.floor,$=Math.max,ee='undefined'!=typeof window&&'undefined'!=typeof document,te=['Edge','Trident','Firefox'],oe=0,ne=0;ne<t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49718	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-08-29 13:50:03 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-29 13:50:03 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=157610 Date: Thu, 29 Aug 2024 13:50:03 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49720	192.249.123.145	443	3008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 13:50:03 UTC	719	OUT	GET /pdfglobal2/docs89q9eqwwe/assets/images/background.jpg HTTP/1.1 Host: elc-path.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://elc-path.com/pdfglobal2/docs89q9eqwwe/assets/css/login.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=9d98dbccaec32948374c5e64a70679f2
2024-08-29 13:50:03 UTC	235	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 13:50:03 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sat, 12 Jan 2019 06:54:42 GMT Accept-Ranges: bytes Content-Length: 283351 Content-Type: image/jpeg
2024-08-29 13:50:03 UTC	7957	IN	Data Raw: ff d8 ff e1 09 50 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e Data Ascii: Phttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syn
2024-08-29 13:50:03 UTC	8000	IN	Data Raw: e3 00 73 47 85 ed 8e 22 ae 08 c9 90 c4 cc 05 e3 84 3e 99 78 8c 0f a6 12 a0 76 e7 26 45 c4 a8 45 57 67 08 40 7a 63 ed 63 d8 e4 d8 dd 81 c5 96 80 01 07 83 78 c2 fd 30 ec 23 a7 18 69 af a6 2c b4 00 31 c0 5f a6 4a 63 93 63 64 b2 d1 08 5f 5a c1 60 e1 db 5d 46 10 17 d3 16 41 40 07 0f 1d 30 80 a7 26 c0 7b 9c 58 a1 40 c9 58 e1 7d f1 b6 93 df 25 8a 2a a3 f9 61 0b ed 96 6c 3e b5 90 21 c5 8a 2b 0b ed 86 87 a1 19 66 d3 87 61 c5 8a 2b a0 3d 72 6f 03 b6 5b b1 8f 63 8a 61 3e 98 b4 29 95 ef 1d 6b 9c 05 af b6 58 20 b3 d4 0c 26 12 07 6c b6 85 32 9e 4e 30 07 09 46 1c 9e 30 02 72 d8 09 50 47 5e 72 04 23 e9 90 5f e7 8c 6c 8a bc 80 a9 83 02 45 0c 05 1b ad 65 d5 63 df 01 43 79 6c 51 45 11 d8 e1 a3 8c ca e0 e0 a6 18 32 0a 6f 7c 94 7d f0 db 7b e4 b6 f7 c0 05 1f 7c 3b 4e 10 4f a9 Data Ascii: sG">xv&EEWg@zccx0#i,1_Jccd_Z`]FA@0&{X@X}%*al>!+fa+=ro[ca>)kX &l2N0F0rPG^r#_lEecCylQE2o\|}{\|;NO
2024-08-29 13:50:03 UTC	8000	IN	Data Raw: 29 dc 3d 72 6f 1e b8 14 5d bb 26 ec ab 70 f5 c8 1d 4f 71 82 d1 76 ec 3b b2 9d de f8 77 64 14 5b bb 26 ec ab 76 4d e0 75 23 02 8b b7 64 dd 94 f8 aa 3b 93 f4 19 3c 55 f7 fd 30 42 fd d8 77 66 6f 18 7a 1c 61 32 fb 8f cb 03 62 fd d9 37 65 42 45 3d ff 00 5c 21 bd f2 16 8b 37 61 bc 4d de f9 2f df 02 8b 37 64 dd 95 de 1b f7 c0 a2 cb c9 78 97 ef 92 f0 28 b2 f2 5e 57 78 6f 05 a1 f7 64 dd 89 78 70 28 7d d9 37 62 61 c0 a1 af 0d e2 5e 4b c5 8a 1e f0 de 26 4c 58 a1 f7 64 dd 89 93 02 8b 2f 25 e2 61 c5 8a 1e f0 de 57 86 c0 ea 40 fa e2 c5 0f bb 26 ec ac 1b e8 46 1b c5 96 8b 37 64 dd 95 86 5a bb 15 f5 c1 e2 c7 75 7f 9d 60 94 5d 78 6f 28 32 a0 17 60 fd 32 09 90 f7 23 eb 82 d1 7e ec 9b b1 01 bc 38 b1 43 de 4b c4 c9 92 c5 16 5e 4d d8 98 71 62 86 dd 87 76 2e 4c 0a 1a f0 de 26 Data Ascii: )=ro]&pOqv;wd[&vMu#d;<U0Bwfoza2b7eBE=\!7aM/7dx(^Wxodxp(}7ba^K&LXd/%aW@&F7dZu`]xo(2`2#~8CK^Mqbv.L&
2024-08-29 13:50:03 UTC	8000	IN	Data Raw: 22 1a a6 06 fa 73 8d 76 32 30 35 0f 5c 94 07 7c 16 07 5a 1f 5c 20 83 e9 90 13 8f 5c 37 ef 82 86 1a 18 04 e9 eb 92 fe b9 06 4a c0 08 6f ae 30 38 80 61 1f 5c 14 6b be ff 00 d3 27 4e f8 30 f5 c0 0d e1 e7 16 b2 73 80 36 1c 41 78 41 cc 81 ac 60 bc 98 08 f4 38 01 c9 80 01 ea 70 d6 00 47 d7 0f 27 00 15 93 9f 5c a0 3c e4 e7 25 1f 5c 3b 47 ae 42 90 5e 1e 72 0a 1d 30 e0 10 03 8d f5 c5 bf ae 4f c8 e0 0d 67 b0 c9 67 d7 10 92 3b 64 dc de 98 03 ee ac 1b b0 0d d9 29 bd 46 00 6f db 0e 2f e9 93 f4 c0 1b 77 be 40 72 00 0f 6c 60 06 01 03 7b e1 0c 7d f2 00 30 e6 4d 12 f2 5d f7 38 72 0f a6 00 a4 02 09 b2 00 ef 7d 33 9f 36 a2 46 66 45 3e 4b a0 47 71 f5 ce 9f e5 98 75 1a 56 de d2 27 42 6e b2 a2 33 26 4c 25 24 5e a0 e0 cd 99 0d 9c 97 82 be 99 33 20 d1 16 ae 48 c6 d3 4e a3 a0 6e Data Ascii: "sv205\\|Z\ \7Jo08a\k'N0s6AxA`8pG'\<%\;GB^r0Ogg;d)Fo/w@rl`{}0M]8r}36FfE>KGquV'Bn3&L%$^3 HNn
2024-08-29 13:50:03 UTC	8000	IN	Data Raw: 96 3b 98 92 7d 49 bc 24 d7 0b 80 02 4f b7 ae 69 24 8c dd 90 0f d3 df 01 60 0f 02 cf a9 c8 cc 4f b6 27 4c b4 02 49 3d 71 4e 1c 07 8c 10 07 01 c3 79 3b e5 02 e4 c3 58 30 42 62 e1 a3 82 b0 09 93 27 b6 4a ca 50 60 c6 e9 8b 83 20 c9 78 6a f1 70 03 93 26 0c a0 83 0e 4c 97 80 5d 1b b4 63 ca 7a f6 ed 9a 12 65 72 14 f9 5c f6 3d 0e 63 04 58 17 82 f9 c5 16 ce 95 50 24 9f cb 12 f3 3c 73 d5 2b f4 ec df fb b3 40 fe 99 92 92 f2 58 c9 c1 c9 80 4e 30 10 32 64 ca 06 0f 20 1b 43 90 be 97 96 47 ab 96 3e 09 dc 07 af 6c a2 f0 5e 01 d2 1a d4 61 6c c5 0f a1 cb 57 52 7e eb d8 1f 43 9c 8b c8 18 a9 b5 34 72 50 b3 b5 f6 99 07 56 af 7a c2 ba b3 74 df ad e7 20 4c e3 b9 1d ec 65 82 72 57 9f 31 be a3 ae 4c 4b 91 d4 3a b5 a2 57 a8 f5 18 46 a5 40 05 c8 07 e9 9c e0 e8 68 29 36 72 09 4d 12 Data Ascii: ;}I$Oi$`O'LI=qNy;X0Bb'JP` xjp&L]czer\=cXP$<s+@XN02d CG>l^alWR~C4rPVzt LerW1LK:WF@h)6rM
2024-08-29 13:50:03 UTC	8000	IN	Data Raw: d9 2c 76 fb a5 bf 17 ba e2 12 41 b5 b2 00 e6 c7 41 89 e8 3a 1c d3 a2 61 e2 85 76 da 87 e6 7f c2 3d 72 3e 0a b7 65 3c fa 11 78 2c 8b 03 36 ea 0c 32 98 a3 d0 86 67 42 43 33 75 3e d8 af a3 68 21 f1 b5 0c 14 1e 8a 82 c9 2d db 26 4b b9 71 7d 8c c1 86 d3 b8 73 db 00 34 6c 75 cb 62 68 15 0b 49 65 c7 ca 3b 64 d4 cc 93 4b e2 46 81 10 00 aa a3 f7 7f ce 5b dc 95 b5 95 72 a4 fd d3 90 92 6c 37 5c 25 40 20 1b ae a2 f1 9f 6e d5 65 50 a5 4f 2c 3b fa 71 94 82 0e 0f a6 38 00 8a 04 9f 5c 52 4b 90 6e cb 1e 49 e3 01 14 37 76 ba 18 03 30 23 96 17 66 b8 39 00 04 55 15 3e a4 e2 82 7d 2c e0 2c 4d e0 17 5c 91 80 08 f2 8e 2c 74 39 64 72 5a 0f c4 18 1a be d9 4a 87 8c 12 df 2b 0e 80 d9 fd 32 3c 8c e4 74 50 bd 2b 00 b6 50 ec a2 81 50 09 24 b7 03 28 aa e8 6f e9 90 b6 ed db 98 9a 1e 5b Data Ascii: ,vAA:av=r>e<x,62gBC3u>h!-&Kq}s4lubhIe;dKF[rl7\%@ nePO,;q8\RKnI7v0#f9U>},,M\,t9drZJ+2<tP+PP$(o[
2024-08-29 13:50:03 UTC	8000	IN	Data Raw: 3f 4c b6 42 c6 6b 71 b0 05 03 8a be be f8 a6 32 0d 70 48 e9 46 b9 c0 4a 13 61 f9 3d 88 aa fc f1 da 41 4b 44 56 0a 23 23 9e 49 e7 a7 39 51 04 12 0f 63 96 19 98 d7 6a 15 8f 1c 6a 48 2a 79 61 7c f5 c0 28 3b ba b0 fd 70 5d e6 a2 76 b1 46 16 47 20 e6 77 24 b5 9e b8 04 4a 27 9e bd b2 c2 a8 40 66 02 c7 51 59 4d e4 b3 8b 32 58 4a 00 6b af b8 c2 5d 4f ca 79 f6 ca 0e 0b c5 83 4a ea 36 12 54 95 dc 28 81 95 2b ec 27 6f 42 72 bc 37 58 b0 31 90 93 b8 f5 c8 64 62 3d 28 de 57 78 72 80 97 27 01 66 22 89 c9 93 00 80 91 f4 c9 78 32 60 a4 c9 87 6b 91 74 6b d6 b1 6b d6 f0 40 e2 e4 fa 64 c0 26 4c 99 32 82 64 c9 d3 26 01 30 61 00 9f 94 13 f4 18 ca 8c e4 85 1c 8f 5c 01 32 63 32 3a 8d c4 1d be b8 b8 03 c6 14 96 2c 01 a1 df 2e 28 84 53 01 f5 1d 72 98 cd 5f d3 2c 27 9a fa 60 15 88 Data Ascii: ?LBkq2pHFJa=AKDV##I9QcjjH*ya\|(;p]vFG w$J'@fQYM2XJk]OyJ6T(+'oBr7X1db=(Wxr'f"x2`ktkk@d&L2d&0a\2c2:,.(Sr_,'`
2024-08-29 13:50:03 UTC	8000	IN	Data Raw: 31 66 22 ec 13 7c e1 0e 07 3d 3d c6 56 0d 1e 3a 0e 0e 12 28 0e 78 03 8f 7c 03 42 31 1c 83 c3 75 19 67 07 a7 ca 7f a6 64 0c 0d 5f 6c b4 48 07 24 fe 55 d7 32 d1 a4 c4 20 82 46 10 38 e7 a6 49 39 62 cb c8 38 80 90 7d 33 44 1e c0 ed d7 a8 c7 07 8a 19 5d d0 fe e3 08 22 ba 74 c8 07 e3 df fd 32 74 a3 d3 12 cd f0 7f 23 84 f5 e7 fa e0 0f ef 82 8e 00 6b ae 12 6f ae 40 40 2a af 21 23 27 04 1f 5c 96 40 f6 ca 09 f9 e1 1d 70 64 ba c0 26 1b a2 08 eb 80 9c 60 10 fc d7 7f 5c 02 78 8c 7a f2 3d 0e 10 cb 44 73 cf be 3a 10 8d b9 40 3e c4 5e 09 8d 90 e4 7c dd f0 04 3d 2f 05 e4 14 47 27 18 46 58 85 8e d8 91 74 3a e0 0b 79 6c 27 93 88 51 94 5b 0a e6 b0 c6 40 26 f8 c1 4b 6f 20 3c 60 be b9 3a 8e 4e 52 0c 08 fa 9e d9 59 16 ed f5 c6 04 02 2f a6 54 4d b1 2a 48 04 e4 03 70 0f 42 7d fd Data Ascii: 1f"\|==V:(x\|B1ugd_lH$U2 F8I9b8}3D]"t2t#ko@@!#'\@pd&`\xz=Ds:@>^\|=/G'FXt:yl'Q[@&Ko <`:NRY/TMHpB}
2024-08-29 13:50:03 UTC	8000	IN	Data Raw: cf 24 5e 52 04 0a 16 00 a3 d4 1c 07 70 1d c8 ec 0e 3d 03 e5 26 89 fd 31 49 a2 43 02 0d fa e6 80 a1 80 34 07 15 8c 02 92 38 af cf 14 85 e4 00 6b fb 61 23 a5 5d 56 00 5c 0d cd 46 f9 e9 df 25 9e 79 04 e0 15 7e 6e c3 b6 12 45 d8 1d 3d 70 05 be 78 e3 18 90 00 be 4f a8 c9 42 ec 56 00 cc a7 d3 f2 c0 18 55 d0 36 30 81 c1 27 bf 17 e9 88 4d 9b aa bc 62 6d 7a f4 c1 49 b4 f0 6c 61 03 9b bf d3 14 10 3e b8 c1 8f e9 80 4a 00 9e 78 38 41 e0 8b 27 01 37 c8 ad c3 ad 64 26 c0 ba c8 02 68 1b 37 87 ca 47 7c 50 7a de 1b 15 62 87 38 01 e2 ae f0 02 31 ac 1a c5 23 9e 9c 60 12 fd 32 03 87 81 de b2 12 a6 b8 aa 1f ae 50 4b ac 37 90 6d a3 bb a9 1c 62 d1 c8 06 bc 96 70 88 9c 8f 6e b7 80 82 2e f8 3d af be 01 2f 0f 18 b4 47 07 83 86 fd 30 09 75 db 25 fa e4 36 2a f2 70 70 09 f4 c7 45 b6 Data Ascii: $^Rp=&1IC48ka#]V\F%y~nE=pxOBVU60'MbmzIla>Jx8A'7d&h7G\|Pzb81#`2PK7mbpn.=/G0u%6*ppE
2024-08-29 13:50:03 UTC	8000	IN	Data Raw: 13 8b 1f db 8c b9 fc 8a 5d 58 00 c3 6e d1 cd 9f bd fd 72 3c 5e 24 0a dd 1f 8f 2f cc 58 fa 7b 7a f3 9a 4d 77 32 50 75 0c 14 12 bb 43 7e 1a aa 5e bb 7d 31 f4 aa f2 b5 6e 54 53 7e 67 21 47 97 b5 fa e5 07 62 91 47 78 1d 88 ae 7f 7b 17 79 2a 12 ce d0 6e 8f 40 7d 6b 35 8d ad 89 66 e4 65 29 24 6b 6a f2 1e 08 63 b4 2f d3 bf f8 ca a7 56 5e 4b ee 6e 15 f9 24 12 be 5b b6 ea 72 81 23 20 dc ac 56 fa 91 97 c3 2b 35 25 06 04 15 20 ff 00 75 f7 e3 15 48 b6 29 32 08 c0 22 a8 d2 85 f9 a9 bf bf a6 5f 09 91 5d 90 82 47 4d a4 51 1e d5 db 33 b8 3b 80 47 dc cc 69 5b a0 23 ff 00 30 cb 21 d5 cd 13 2c 8a 7c c9 e6 0d dc 1f 5f aa e6 5d d6 c0 d6 a4 02 77 10 ae 79 a6 e2 f9 fb b9 a2 35 27 77 1b 9d 78 d8 7f f5 67 35 98 33 b3 b3 17 52 69 88 fb de f4 dd f3 5f 8b 2a 0d ec ee 26 e1 d5 98 00 Data Ascii: ]Xnr<^$/X{zMw2PuC~^}1nTS~g!GbGx{yn@}k5fe)$kjc/V^Kn$[r# V+5% uH)2"_]GMQ3;Gi[#0!,\|_]wy5'wxg53Ri_&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49719	192.249.123.145	443	3008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 13:50:03 UTC	702	OUT	GET /pdfglobal2/docs89q9eqwwe/assets/images/logo.svg HTTP/1.1 Host: elc-path.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://elc-path.com/pdfglobal2/docs89q9eqwwe/login.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=9d98dbccaec32948374c5e64a70679f2
2024-08-29 13:50:03 UTC	236	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 13:50:03 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sat, 12 Jan 2019 06:56:02 GMT Accept-Ranges: bytes Content-Length: 3651 Content-Type: image/svg+xml
2024-08-29 13:50:03 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49721	192.249.123.145	443	3008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 13:50:03 UTC	712	OUT	GET /pdfglobal2/docs89q9eqwwe/assets/images/ellipsis_white.svg HTTP/1.1 Host: elc-path.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://elc-path.com/pdfglobal2/docs89q9eqwwe/login.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=9d98dbccaec32948374c5e64a70679f2
2024-08-29 13:50:03 UTC	235	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 13:50:03 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sat, 12 Jan 2019 06:54:42 GMT Accept-Ranges: bytes Content-Length: 915 Content-Type: image/svg+xml
2024-08-29 13:50:03 UTC	915	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 66 66 66 66 66 66 22 20 64 3d 22 4d 31 2e 31 34 33 2c 36 2e 38 35 37 61 31 2e 31 30 37 2c 31 2e 31 30 37 2c 30 2c 30 2c 31 2c 2e 34 34 36 2e 30 38 39 2c 31 2e 31 36 34 2c 31 2e 31 36 34 2c 30 2c 30 2c 31 2c 2e 36 30 37 2e 36 30 37 2c 31 2e 31 36 31 2c 31 2e 31 36 31 2c 30 2c 30 2c 31 2c 30 2c 2e 38 39 33 2c 31 2e 31 36 34 2c 31 2e 31 36 34 2c 30 2c 30 2c 31 2d 2e 36 30 37 2e 36 30 37 2c 31 2e 31 30 37 2c 31 2e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" viewBox="0 0 16 16"><title>assets</title><path fill="#ffffff" d="M1.143,6.857a1.107,1.107,0,0,1,.446.089,1.164,1.164,0,0,1,.607.607,1.161,1.161,0,0,1,0,.893,1.164,1.164,0,0,1-.607.607,1.107,1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49723	104.17.25.14	443	3008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 13:50:03 UTC	388	OUT	GET /ajax/libs/popper.js/1.14.3/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 13:50:03 UTC	958	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 13:50:03 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4f71" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 578632 Expires: Tue, 19 Aug 2025 13:50:03 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8guOSYTwXwrr8XfrlldpN%2BYWTOkSevYstogVtu5ZIQl2TUXbcRXHdl4IF03ODnjXNwnCb9vhUicCjvazg5QsDN89jV%2FCkNhTxbdLWIv0o8aRqB6mYN6IC%2FnZAYXR68JN1O1dLQct"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8bad02093d186a53-EWR alt-svc: h3=":443"; ma=86400
2024-08-29 13:50:03 UTC	411	IN	Data Raw: 34 66 37 31 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 38 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4f71/* Copyright (C) Federico Zivolo 2018 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-08-29 13:50:03 UTC	1369	IN	Data Raw: 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 3a Data Ascii: .nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':
2024-08-29 13:50:03 UTC	1369	IN	Data Raw: 2c 6f 3d 27 74 6f 70 27 3d 3d 3d 74 3f 27 73 63 72 6f 6c 6c 54 6f 70 27 3a 27 73 63 72 6f 6c 6c 4c 65 66 74 27 2c 6e 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3b 69 66 28 27 42 4f 44 59 27 3d 3d 3d 6e 7c 7c 27 48 54 4d 4c 27 3d 3d 3d 6e 29 7b 76 61 72 20 69 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 72 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 73 63 72 6f 6c 6c 69 6e 67 45 6c 65 6d 65 6e 74 7c 7c 69 3b 72 65 74 75 72 6e 20 72 5b 6f 5d 7d 72 65 74 75 72 6e 20 65 5b 6f 5d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d Data Ascii: ,o='top'===t?'scrollTop':'scrollLeft',n=e.nodeName;if('BODY'===n\|\|'HTML'===n){var i=e.ownerDocument.documentElement,r=e.ownerDocument.scrollingElement\|\|i;return r[o]}return e[o]}function f(e,t){var o=2<arguments.length&&void 0!==arguments[2]&&arguments[2]
2024-08-29 13:50:03 UTC	1369	IN	Data Raw: 6d 28 75 2c 27 79 27 29 2c 70 2e 77 69 64 74 68 2d 3d 66 2c 70 2e 68 65 69 67 68 74 2d 3d 68 7d 72 65 74 75 72 6e 20 67 28 70 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 6f 29 7b 76 61 72 20 69 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 70 3d 72 28 31 30 29 2c 73 3d 27 48 54 4d 4c 27 3d 3d 3d 6f 2e 6e 6f 64 65 4e 61 6d 65 2c 64 3d 75 28 65 29 2c 61 3d 75 28 6f 29 2c 6c 3d 6e 28 65 29 2c 6d 3d 74 28 6f 29 2c 68 3d 70 61 72 73 65 46 6c 6f 61 74 28 6d 2e 62 6f 72 64 65 72 54 6f 70 57 69 64 74 68 2c 31 30 29 2c 63 3d 70 61 72 73 65 46 6c 6f 61 74 28 6d 2e 62 6f 72 64 65 72 4c 65 66 74 57 69 64 74 68 2c 31 30 29 3b 69 26 26 27 48 54 Data Ascii: m(u,'y'),p.width-=f,p.height-=h}return g(p)}function b(e,o){var i=2<arguments.length&&void 0!==arguments[2]&&arguments[2],p=r(10),s='HTML'===o.nodeName,d=u(e),a=u(o),l=n(e),m=t(o),h=parseFloat(m.borderTopWidth,10),c=parseFloat(m.borderLeftWidth,10);i&&'HT
2024-08-29 13:50:03 UTC	1369	IN	Data Raw: 29 73 3d 79 28 64 2c 70 29 3b 65 6c 73 65 7b 76 61 72 20 6c 3b 27 73 63 72 6f 6c 6c 50 61 72 65 6e 74 27 3d 3d 3d 72 3f 28 6c 3d 6e 28 6f 28 74 29 29 2c 27 42 4f 44 59 27 3d 3d 3d 6c 2e 6e 6f 64 65 4e 61 6d 65 26 26 28 6c 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 29 29 3a 27 77 69 6e 64 6f 77 27 3d 3d 3d 72 3f 6c 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3a 6c 3d 72 3b 76 61 72 20 66 3d 62 28 6c 2c 64 2c 70 29 3b 69 66 28 27 48 54 4d 4c 27 3d 3d 3d 6c 2e 6e 6f 64 65 4e 61 6d 65 26 26 21 77 28 64 29 29 7b 76 61 72 20 6d 3d 63 28 29 2c 68 3d 6d 2e 68 65 69 67 68 74 2c 67 3d 6d 2e 77 69 64 74 68 3b 73 2e 74 6f 70 2b 3d 66 2e 74 6f 70 2d 66 2e 6d 61 72 Data Ascii: )s=y(d,p);else{var l;'scrollParent'===r?(l=n(o(t)),'BODY'===l.nodeName&&(l=e.ownerDocument.documentElement)):'window'===r?l=e.ownerDocument.documentElement:l=r;var f=b(l,d,p);if('HTML'===l.nodeName&&!w(d)){var m=c(),h=m.height,g=m.width;s.top+=f.top-f.mar
2024-08-29 13:50:03 UTC	1369	IN	Data Raw: 20 74 3d 7b 6c 65 66 74 3a 27 72 69 67 68 74 27 2c 72 69 67 68 74 3a 27 6c 65 66 74 27 2c 62 6f 74 74 6f 6d 3a 27 74 6f 70 27 2c 74 6f 70 3a 27 62 6f 74 74 6f 6d 27 7d 3b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 2f 6c 65 66 74 7c 72 69 67 68 74 7c 62 6f 74 74 6f 6d 7c 74 6f 70 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 5b 65 5d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 43 28 65 2c 74 2c 6f 29 7b 6f 3d 6f 2e 73 70 6c 69 74 28 27 2d 27 29 5b 30 5d 3b 76 61 72 20 6e 3d 53 28 65 29 2c 69 3d 7b 77 69 64 74 68 3a 6e 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 6e 2e 68 65 69 67 68 74 7d 2c 72 3d 2d 31 21 3d 3d 5b 27 72 69 67 68 74 27 2c 27 6c 65 66 74 27 5d 2e 69 6e 64 65 78 4f 66 28 6f 29 2c 70 3d 72 3f 27 74 6f 70 27 3a 27 6c 65 66 Data Ascii: t={left:'right',right:'left',bottom:'top',top:'bottom'};return e.replace(/left\|right\|bottom\|top/g,function(e){return t[e]})}function C(e,t,o){o=o.split('-')[0];var n=S(e),i={width:n.width,height:n.height},r=-1!==['right','left'].indexOf(o),p=r?'top':'lef
2024-08-29 13:50:03 UTC	1369	IN	Data Raw: 65 64 2c 65 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 43 28 74 68 69 73 2e 70 6f 70 70 65 72 2c 65 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 2c 65 2e 70 6c 61 63 65 6d 65 6e 74 29 2c 65 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 2e 70 6f 73 69 74 69 6f 6e 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 70 6f 73 69 74 69 6f 6e 46 69 78 65 64 3f 27 66 69 78 65 64 27 3a 27 61 62 73 6f 6c 75 74 65 27 2c 65 3d 50 28 74 68 69 73 2e 6d 6f 64 69 66 69 65 72 73 2c 65 29 2c 74 68 69 73 2e 73 74 61 74 65 2e 69 73 43 72 65 61 74 65 64 3f 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6f 6e 55 70 64 61 74 65 28 65 29 3a 28 74 68 69 73 2e 73 74 61 74 65 2e 69 73 43 72 65 61 74 65 64 3d 21 30 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6f 6e 43 72 65 61 74 65 28 65 Data Ascii: ed,e.offsets.popper=C(this.popper,e.offsets.reference,e.placement),e.offsets.popper.position=this.options.positionFixed?'fixed':'absolute',e=P(this.modifiers,e),this.state.isCreated?this.options.onUpdate(e):(this.state.isCreated=!0,this.options.onCreate(e
2024-08-29 13:50:03 UTC	1369	IN	Data Raw: 72 6f 6c 6c 45 6c 65 6d 65 6e 74 3d 72 2c 6f 2e 65 76 65 6e 74 73 45 6e 61 62 6c 65 64 3d 21 30 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 46 28 29 7b 74 68 69 73 2e 73 74 61 74 65 2e 65 76 65 6e 74 73 45 6e 61 62 6c 65 64 7c 7c 28 74 68 69 73 2e 73 74 61 74 65 3d 49 28 74 68 69 73 2e 72 65 66 65 72 65 6e 63 65 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2c 74 68 69 73 2e 73 74 61 74 65 2c 74 68 69 73 2e 73 63 68 65 64 75 6c 65 55 70 64 61 74 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 52 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 41 28 65 29 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 72 65 73 69 7a 65 27 2c 74 2e 75 70 64 61 74 65 42 6f 75 6e 64 29 2c 74 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 73 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: rollElement=r,o.eventsEnabled=!0,o}function F(){this.state.eventsEnabled\|\|(this.state=I(this.reference,this.options,this.state,this.scheduleUpdate))}function R(e,t){return A(e).removeEventListener('resize',t.updateBound),t.scrollParents.forEach(function(e
2024-08-29 13:50:03 UTC	1369	IN	Data Raw: 2c 6f 2c 6e 29 7b 76 61 72 20 69 3d 65 2e 6d 61 74 63 68 28 2f 28 28 3f 3a 5c 2d 7c 5c 2b 29 3f 5c 64 2a 5c 2e 3f 5c 64 2a 29 28 2e 2a 29 2f 29 2c 72 3d 2b 69 5b 31 5d 2c 70 3d 69 5b 32 5d 3b 69 66 28 21 72 29 72 65 74 75 72 6e 20 65 3b 69 66 28 30 3d 3d 3d 70 2e 69 6e 64 65 78 4f 66 28 27 25 27 29 29 7b 76 61 72 20 73 3b 73 77 69 74 63 68 28 70 29 7b 63 61 73 65 27 25 70 27 3a 73 3d 6f 3b 62 72 65 61 6b 3b 63 61 73 65 27 25 27 3a 63 61 73 65 27 25 72 27 3a 64 65 66 61 75 6c 74 3a 73 3d 6e 3b 7d 76 61 72 20 64 3d 67 28 73 29 3b 72 65 74 75 72 6e 20 64 5b 74 5d 2f 31 30 30 2a 72 7d 69 66 28 27 76 68 27 3d 3d 3d 70 7c 7c 27 76 77 27 3d 3d 3d 70 29 7b 76 61 72 20 61 3b 72 65 74 75 72 6e 20 61 3d 27 76 68 27 3d 3d 3d 70 3f 24 28 64 6f 63 75 6d 65 6e 74 2e 64 Data Ascii: ,o,n){var i=e.match(/((?:\-\|\+)?\d\.?\d)(.)/),r=+i[1],p=i[2];if(!r)return e;if(0===p.indexOf('%')){var s;switch(p){case'%p':s=o;break;case'%':case'%r':default:s=n;}var d=g(s);return d[t]/100r}if('vh'===p\|\|'vw'===p){var a;return a='vh'===p?$(document.d
2024-08-29 13:50:03 UTC	1369	IN	Data Raw: 27 3d 3d 3d 64 3f 28 70 2e 6c 65 66 74 2b 3d 6f 5b 30 5d 2c 70 2e 74 6f 70 2d 3d 6f 5b 31 5d 29 3a 27 62 6f 74 74 6f 6d 27 3d 3d 3d 64 26 26 28 70 2e 6c 65 66 74 2b 3d 6f 5b 30 5d 2c 70 2e 74 6f 70 2b 3d 6f 5b 31 5d 29 2c 65 2e 70 6f 70 70 65 72 3d 70 2c 65 7d 66 6f 72 28 76 61 72 20 4a 3d 4d 61 74 68 2e 6d 69 6e 2c 51 3d 4d 61 74 68 2e 72 6f 75 6e 64 2c 5a 3d 4d 61 74 68 2e 66 6c 6f 6f 72 2c 24 3d 4d 61 74 68 2e 6d 61 78 2c 65 65 3d 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 2c 74 65 3d 5b 27 45 64 67 65 27 2c 27 54 72 69 64 65 6e 74 27 2c 27 46 69 72 65 66 6f 78 27 5d 2c 6f 65 3d 30 2c 6e 65 3d 30 3b 6e 65 3c 74 65 2e 6c 65 6e 67 Data Ascii: '===d?(p.left+=o[0],p.top-=o[1]):'bottom'===d&&(p.left+=o[0],p.top+=o[1]),e.popper=p,e}for(var J=Math.min,Q=Math.round,Z=Math.floor,$=Math.max,ee='undefined'!=typeof window&&'undefined'!=typeof document,te=['Edge','Trident','Firefox'],oe=0,ne=0;ne<te.leng

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49724	104.18.11.207	443	3008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 13:50:03 UTC	382	OUT	GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 13:50:03 UTC	947	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 13:50:03 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"67176c242e1bdc20603c878dee836df3" Last-Modified: Mon, 25 Jan 2021 22:04:06 GMT CDN-ProxyVer: 1.03 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 12/08/2022 21:02:39 CDN-EdgeStorageId: 871 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 28e810a2a87ce111a8eb2ee66c2e0093 CDN-Cache: HIT CF-Cache-Status: HIT Age: 14581727 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8bad02093ea64358-EWR alt-svc: h3=":443"; ma=86400
2024-08-29 13:50:03 UTC	422	IN	Data Raw: 37 63 30 30 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7c00/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2024-08-29 13:50:03 UTC	1369	IN	Data Raw: 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2e 6b 65 79 2c Data Ascii: uery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,
2024-08-29 13:50:03 UTC	1369	IN	Data Raw: 57 6e 2c 55 6e 2c 71 6e 2c 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 65 3d 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 29 2e 6f 6e 65 28 6c 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 21 30 7d 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 7c 7c 6c 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 65 29 7d 2c 74 29 2c 74 68 69 73 7d 76 61 72 20 6c 3d 7b 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 3a 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 67 65 74 55 49 44 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 3b 74 Data Ascii: Wn,Un,qn,Fn=function(i){var e="transitionend";function t(t){var e=this,n=!1;return i(this).one(l.TRANSITION_END,function(){n=!0}),setTimeout(function(){n\|\|l.triggerTransitionEnd(e)},t),this}var l={TRANSITION_END:"bsTransitionEnd",getUID:function(t){for(;t
2024-08-29 13:50:03 UTC	1369	IN	Data Raw: 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 6c 7d 28 65 29 2c 4b 6e 3d 28 6e 3d 22 61 6c 65 72 74 22 2c 61 3d 22 2e 22 2b 28 6f 3d 22 62 73 2e 61 6c 65 72 74 22 29 2c 63 3d 28 72 3d 65 29 2e 66 6e 5b 6e 5d 2c 75 3d 7b 43 4c 4f 53 45 3a 22 63 6c 6f 73 65 22 2b 61 2c 43 4c 4f 53 45 44 3a 22 63 6c 6f 73 65 64 22 2b 61 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 61 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 66 3d 22 61 6c 65 72 74 22 2c 64 3d 22 66 61 64 65 22 2c 67 3d 22 73 68 6f 77 22 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 69 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 63 6c 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: rguments)}},l}(e),Kn=(n="alert",a="."+(o="bs.alert"),c=(r=e).fn[n],u={CLOSE:"close"+a,CLOSED:"closed"+a,CLICK_DATA_API:"click"+a+".data-api"},f="alert",d="fade",g="show",_=function(){function i(t){this._element=t}var t=i.prototype;return t.close=function(
2024-08-29 13:50:03 UTC	1369	IN	Data Raw: 77 20 5f 29 29 2c 72 2e 66 6e 5b 6e 5d 3d 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 72 2e 66 6e 5b 6e 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 5f 2c 72 2e 66 6e 5b 6e 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 66 6e 5b 6e 5d 3d 63 2c 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 5f 29 2c 4d 6e 3d 28 70 3d 22 62 75 74 74 6f 6e 22 2c 79 3d 22 2e 22 2b 28 76 3d 22 62 73 2e 62 75 74 74 6f 6e 22 29 2c 45 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 3d 28 6d 3d 65 29 2e 66 6e 5b 70 5d 2c 54 3d 22 61 63 74 69 76 65 22 2c 62 3d 22 62 74 6e 22 2c 49 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d 27 2c 41 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 62 Data Ascii: w _)),r.fn[n]=_._jQueryInterface,r.fn[n].Constructor=_,r.fn[n].noConflict=function(){return r.fn[n]=c,_._jQueryInterface},_),Mn=(p="button",y="."+(v="bs.button"),E=".data-api",C=(m=e).fn[p],T="active",b="btn",I='[data-toggle^="button"]',A='[data-toggle="b
2024-08-29 13:50:03 UTC	1369	IN	Data Raw: 28 29 3b 76 61 72 20 65 3d 74 2e 74 61 72 67 65 74 3b 6d 28 65 29 2e 68 61 73 43 6c 61 73 73 28 62 29 7c 7c 28 65 3d 6d 28 65 29 2e 63 6c 6f 73 65 73 74 28 4e 29 29 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 6d 28 65 29 2c 22 74 6f 67 67 6c 65 22 29 7d 29 2e 6f 6e 28 4f 2e 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 2c 49 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6d 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 4e 29 5b 30 5d 3b 6d 28 65 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 53 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 74 2e 74 79 70 65 29 29 7d 29 2c 6d 2e 66 6e 5b 70 5d 3d 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 6d 2e 66 6e 5b 70 5d 2e 43 6f Data Ascii: ();var e=t.target;m(e).hasClass(b)\|\|(e=m(e).closest(N)),k._jQueryInterface.call(m(e),"toggle")}).on(O.FOCUS_BLUR_DATA_API,I,function(t){var e=m(t.target).closest(N)[0];m(e).toggleClass(S,/^focus(in)?$/.test(t.type))}),m.fn[p]=k._jQueryInterface,m.fn[p].Co
2024-08-29 13:50:03 UTC	1369	IN	Data Raw: 65 6c 65 63 74 6f 72 28 6e 74 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 74 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 71 29 7d 2c 74 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 74 79 22 29 26 26 74 68 69 73 2e 6e 65 78 74 28 29 7d 2c 74 Data Ascii: elector(nt),this._addEventListeners()}var t=o.prototype;return t.next=function(){this._isSliding\|\|this._slide(q)},t.nextWhenVisible=function(){!document.hidden&&P(this._element).is(":visible")&&"hidden"!==P(this._element).css("visibility")&&this.next()},t
2024-08-29 13:50:03 UTC	1369	IN	Data Raw: 20 74 3d 6c 28 7b 7d 2c 57 2c 74 29 2c 46 6e 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 6a 2c 74 2c 55 29 2c 74 7d 2c 74 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6b 65 79 62 6f 61 72 64 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4b 45 59 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6b 65 79 64 6f 77 6e 28 74 29 7d 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 28 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4d 4f 55 53 45 45 4e 54 45 52 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e Data Ascii: t=l({},W,t),Fn.typeCheckConfig(j,t,U),t},t._addEventListeners=function(){var e=this;this._config.keyboard&&P(this._element).on(Q.KEYDOWN,function(t){return e._keydown(t)}),"hover"===this._config.pause&&(P(this._element).on(Q.MOUSEENTER,function(t){return
2024-08-29 13:50:03 UTC	1369	IN	Data Raw: 66 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 24 29 29 3b 50 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 50 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 72 2c 6f 3d 74 68 69 73 2c 73 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 Data Ascii: f(this._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll($));P(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&P(n).addClass(V)}},t._slide=function(t,e){var n,i,r,o=this,s=this._element.que
2024-08-29 13:50:03 UTC	1369	IN	Data Raw: 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 20 6d 65 74 68 6f 64 20 6e 61 6d 65 64 20 22 27 2b 6e 2b 27 22 27 29 3b 74 5b 6e 5d 28 29 7d 65 6c 73 65 20 65 2e 69 6e 74 65 72 76 61 6c 26 26 28 74 2e 70 61 75 73 65 28 29 2c 74 2e 63 79 63 6c 65 28 29 29 7d 29 7d 2c 6f 2e 5f 64 61 74 61 41 70 69 43 6c 69 63 6b 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 29 3b 69 66 28 65 29 7b 76 61 72 20 6e 3d 50 28 65 29 5b 30 5d 3b 69 66 28 6e 26 26 50 28 6e 29 2e 68 61 73 43 6c 61 73 73 28 42 Data Ascii: ring"==typeof n){if("undefined"==typeof t[n])throw new TypeError('No method named "'+n+'"');t[n]()}else e.interval&&(t.pause(),t.cycle())})},o._dataApiClickHandler=function(t){var e=Fn.getSelectorFromElement(this);if(e){var n=P(e)[0];if(n&&P(n).hasClass(B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49726	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-08-29 13:50:04 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-29 13:50:04 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=157562 Date: Thu, 29 Aug 2024 13:50:04 GMT Content-Length: 55 Connection: close X-CID: 2
2024-08-29 13:50:04 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49727	192.249.123.145	443	3008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 13:50:04 UTC	705	OUT	GET /pdfglobal2/docs89q9eqwwe/assets/images/favicon.ico HTTP/1.1 Host: elc-path.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://elc-path.com/pdfglobal2/docs89q9eqwwe/login.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=9d98dbccaec32948374c5e64a70679f2
2024-08-29 13:50:05 UTC	236	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 13:50:05 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sat, 12 Jan 2019 06:54:42 GMT Accept-Ranges: bytes Content-Length: 17174 Content-Type: image/x-icon
2024-08-29 13:50:05 UTC	7956	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-08-29 13:50:05 UTC	8000	IN	Data Raw: 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 Data Ascii: UUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUU
2024-08-29 13:50:05 UTC	1218	IN	Data Raw: 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 99 99 99 99 99 99 99 70 03 33 33 33 33 33 33 33 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 aa aa aa aa aa aa aa 50 04 ee ee ee ee ee ee ee 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 Data Ascii: 33"""""""3333333p3333333Pfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49728	192.249.123.145	443	3008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 13:50:05 UTC	435	OUT	GET /pdfglobal2/docs89q9eqwwe/assets/images/logo.svg HTTP/1.1 Host: elc-path.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=9d98dbccaec32948374c5e64a70679f2
2024-08-29 13:50:05 UTC	236	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 13:50:05 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sat, 12 Jan 2019 06:56:02 GMT Accept-Ranges: bytes Content-Length: 3651 Content-Type: image/svg+xml
2024-08-29 13:50:05 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49729	192.249.123.145	443	3008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 13:50:05 UTC	441	OUT	GET /pdfglobal2/docs89q9eqwwe/assets/images/background.jpg HTTP/1.1 Host: elc-path.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=9d98dbccaec32948374c5e64a70679f2
2024-08-29 13:50:05 UTC	235	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 13:50:05 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sat, 12 Jan 2019 06:54:42 GMT Accept-Ranges: bytes Content-Length: 283351 Content-Type: image/jpeg
2024-08-29 13:50:05 UTC	7957	IN	Data Raw: ff d8 ff e1 09 50 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e Data Ascii: Phttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syn
2024-08-29 13:50:05 UTC	8000	IN	Data Raw: e3 00 73 47 85 ed 8e 22 ae 08 c9 90 c4 cc 05 e3 84 3e 99 78 8c 0f a6 12 a0 76 e7 26 45 c4 a8 45 57 67 08 40 7a 63 ed 63 d8 e4 d8 dd 81 c5 96 80 01 07 83 78 c2 fd 30 ec 23 a7 18 69 af a6 2c b4 00 31 c0 5f a6 4a 63 93 63 64 b2 d1 08 5f 5a c1 60 e1 db 5d 46 10 17 d3 16 41 40 07 0f 1d 30 80 a7 26 c0 7b 9c 58 a1 40 c9 58 e1 7d f1 b6 93 df 25 8a 2a a3 f9 61 0b ed 96 6c 3e b5 90 21 c5 8a 2b 0b ed 86 87 a1 19 66 d3 87 61 c5 8a 2b a0 3d 72 6f 03 b6 5b b1 8f 63 8a 61 3e 98 b4 29 95 ef 1d 6b 9c 05 af b6 58 20 b3 d4 0c 26 12 07 6c b6 85 32 9e 4e 30 07 09 46 1c 9e 30 02 72 d8 09 50 47 5e 72 04 23 e9 90 5f e7 8c 6c 8a bc 80 a9 83 02 45 0c 05 1b ad 65 d5 63 df 01 43 79 6c 51 45 11 d8 e1 a3 8c ca e0 e0 a6 18 32 0a 6f 7c 94 7d f0 db 7b e4 b6 f7 c0 05 1f 7c 3b 4e 10 4f a9 Data Ascii: sG">xv&EEWg@zccx0#i,1_Jccd_Z`]FA@0&{X@X}%*al>!+fa+=ro[ca>)kX &l2N0F0rPG^r#_lEecCylQE2o\|}{\|;NO
2024-08-29 13:50:05 UTC	8000	IN	Data Raw: 29 dc 3d 72 6f 1e b8 14 5d bb 26 ec ab 70 f5 c8 1d 4f 71 82 d1 76 ec 3b b2 9d de f8 77 64 14 5b bb 26 ec ab 76 4d e0 75 23 02 8b b7 64 dd 94 f8 aa 3b 93 f4 19 3c 55 f7 fd 30 42 fd d8 77 66 6f 18 7a 1c 61 32 fb 8f cb 03 62 fd d9 37 65 42 45 3d ff 00 5c 21 bd f2 16 8b 37 61 bc 4d de f9 2f df 02 8b 37 64 dd 95 de 1b f7 c0 a2 cb c9 78 97 ef 92 f0 28 b2 f2 5e 57 78 6f 05 a1 f7 64 dd 89 78 70 28 7d d9 37 62 61 c0 a1 af 0d e2 5e 4b c5 8a 1e f0 de 26 4c 58 a1 f7 64 dd 89 93 02 8b 2f 25 e2 61 c5 8a 1e f0 de 57 86 c0 ea 40 fa e2 c5 0f bb 26 ec ac 1b e8 46 1b c5 96 8b 37 64 dd 95 86 5a bb 15 f5 c1 e2 c7 75 7f 9d 60 94 5d 78 6f 28 32 a0 17 60 fd 32 09 90 f7 23 eb 82 d1 7e ec 9b b1 01 bc 38 b1 43 de 4b c4 c9 92 c5 16 5e 4d d8 98 71 62 86 dd 87 76 2e 4c 0a 1a f0 de 26 Data Ascii: )=ro]&pOqv;wd[&vMu#d;<U0Bwfoza2b7eBE=\!7aM/7dx(^Wxodxp(}7ba^K&LXd/%aW@&F7dZu`]xo(2`2#~8CK^Mqbv.L&
2024-08-29 13:50:05 UTC	8000	IN	Data Raw: 22 1a a6 06 fa 73 8d 76 32 30 35 0f 5c 94 07 7c 16 07 5a 1f 5c 20 83 e9 90 13 8f 5c 37 ef 82 86 1a 18 04 e9 eb 92 fe b9 06 4a c0 08 6f ae 30 38 80 61 1f 5c 14 6b be ff 00 d3 27 4e f8 30 f5 c0 0d e1 e7 16 b2 73 80 36 1c 41 78 41 cc 81 ac 60 bc 98 08 f4 38 01 c9 80 01 ea 70 d6 00 47 d7 0f 27 00 15 93 9f 5c a0 3c e4 e7 25 1f 5c 3b 47 ae 42 90 5e 1e 72 0a 1d 30 e0 10 03 8d f5 c5 bf ae 4f c8 e0 0d 67 b0 c9 67 d7 10 92 3b 64 dc de 98 03 ee ac 1b b0 0d d9 29 bd 46 00 6f db 0e 2f e9 93 f4 c0 1b 77 be 40 72 00 0f 6c 60 06 01 03 7b e1 0c 7d f2 00 30 e6 4d 12 f2 5d f7 38 72 0f a6 00 a4 02 09 b2 00 ef 7d 33 9f 36 a2 46 66 45 3e 4b a0 47 71 f5 ce 9f e5 98 75 1a 56 de d2 27 42 6e b2 a2 33 26 4c 25 24 5e a0 e0 cd 99 0d 9c 97 82 be 99 33 20 d1 16 ae 48 c6 d3 4e a3 a0 6e Data Ascii: "sv205\\|Z\ \7Jo08a\k'N0s6AxA`8pG'\<%\;GB^r0Ogg;d)Fo/w@rl`{}0M]8r}36FfE>KGquV'Bn3&L%$^3 HNn
2024-08-29 13:50:05 UTC	8000	IN	Data Raw: 96 3b 98 92 7d 49 bc 24 d7 0b 80 02 4f b7 ae 69 24 8c dd 90 0f d3 df 01 60 0f 02 cf a9 c8 cc 4f b6 27 4c b4 02 49 3d 71 4e 1c 07 8c 10 07 01 c3 79 3b e5 02 e4 c3 58 30 42 62 e1 a3 82 b0 09 93 27 b6 4a ca 50 60 c6 e9 8b 83 20 c9 78 6a f1 70 03 93 26 0c a0 83 0e 4c 97 80 5d 1b b4 63 ca 7a f6 ed 9a 12 65 72 14 f9 5c f6 3d 0e 63 04 58 17 82 f9 c5 16 ce 95 50 24 9f cb 12 f3 3c 73 d5 2b f4 ec df fb b3 40 fe 99 92 92 f2 58 c9 c1 c9 80 4e 30 10 32 64 ca 06 0f 20 1b 43 90 be 97 96 47 ab 96 3e 09 dc 07 af 6c a2 f0 5e 01 d2 1a d4 61 6c c5 0f a1 cb 57 52 7e eb d8 1f 43 9c 8b c8 18 a9 b5 34 72 50 b3 b5 f6 99 07 56 af 7a c2 ba b3 74 df ad e7 20 4c e3 b9 1d ec 65 82 72 57 9f 31 be a3 ae 4c 4b 91 d4 3a b5 a2 57 a8 f5 18 46 a5 40 05 c8 07 e9 9c e0 e8 68 29 36 72 09 4d 12 Data Ascii: ;}I$Oi$`O'LI=qNy;X0Bb'JP` xjp&L]czer\=cXP$<s+@XN02d CG>l^alWR~C4rPVzt LerW1LK:WF@h)6rM
2024-08-29 13:50:05 UTC	8000	IN	Data Raw: d9 2c 76 fb a5 bf 17 ba e2 12 41 b5 b2 00 e6 c7 41 89 e8 3a 1c d3 a2 61 e2 85 76 da 87 e6 7f c2 3d 72 3e 0a b7 65 3c fa 11 78 2c 8b 03 36 ea 0c 32 98 a3 d0 86 67 42 43 33 75 3e d8 af a3 68 21 f1 b5 0c 14 1e 8a 82 c9 2d db 26 4b b9 71 7d 8c c1 86 d3 b8 73 db 00 34 6c 75 cb 62 68 15 0b 49 65 c7 ca 3b 64 d4 cc 93 4b e2 46 81 10 00 aa a3 f7 7f ce 5b dc 95 b5 95 72 a4 fd d3 90 92 6c 37 5c 25 40 20 1b ae a2 f1 9f 6e d5 65 50 a5 4f 2c 3b fa 71 94 82 0e 0f a6 38 00 8a 04 9f 5c 52 4b 90 6e cb 1e 49 e3 01 14 37 76 ba 18 03 30 23 96 17 66 b8 39 00 04 55 15 3e a4 e2 82 7d 2c e0 2c 4d e0 17 5c 91 80 08 f2 8e 2c 74 39 64 72 5a 0f c4 18 1a be d9 4a 87 8c 12 df 2b 0e 80 d9 fd 32 3c 8c e4 74 50 bd 2b 00 b6 50 ec a2 81 50 09 24 b7 03 28 aa e8 6f e9 90 b6 ed db 98 9a 1e 5b Data Ascii: ,vAA:av=r>e<x,62gBC3u>h!-&Kq}s4lubhIe;dKF[rl7\%@ nePO,;q8\RKnI7v0#f9U>},,M\,t9drZJ+2<tP+PP$(o[
2024-08-29 13:50:05 UTC	8000	IN	Data Raw: 3f 4c b6 42 c6 6b 71 b0 05 03 8a be be f8 a6 32 0d 70 48 e9 46 b9 c0 4a 13 61 f9 3d 88 aa fc f1 da 41 4b 44 56 0a 23 23 9e 49 e7 a7 39 51 04 12 0f 63 96 19 98 d7 6a 15 8f 1c 6a 48 2a 79 61 7c f5 c0 28 3b ba b0 fd 70 5d e6 a2 76 b1 46 16 47 20 e6 77 24 b5 9e b8 04 4a 27 9e bd b2 c2 a8 40 66 02 c7 51 59 4d e4 b3 8b 32 58 4a 00 6b af b8 c2 5d 4f ca 79 f6 ca 0e 0b c5 83 4a ea 36 12 54 95 dc 28 81 95 2b ec 27 6f 42 72 bc 37 58 b0 31 90 93 b8 f5 c8 64 62 3d 28 de 57 78 72 80 97 27 01 66 22 89 c9 93 00 80 91 f4 c9 78 32 60 a4 c9 87 6b 91 74 6b d6 b1 6b d6 f0 40 e2 e4 fa 64 c0 26 4c 99 32 82 64 c9 d3 26 01 30 61 00 9f 94 13 f4 18 ca 8c e4 85 1c 8f 5c 01 32 63 32 3a 8d c4 1d be b8 b8 03 c6 14 96 2c 01 a1 df 2e 28 84 53 01 f5 1d 72 98 cd 5f d3 2c 27 9a fa 60 15 88 Data Ascii: ?LBkq2pHFJa=AKDV##I9QcjjH*ya\|(;p]vFG w$J'@fQYM2XJk]OyJ6T(+'oBr7X1db=(Wxr'f"x2`ktkk@d&L2d&0a\2c2:,.(Sr_,'`
2024-08-29 13:50:05 UTC	8000	IN	Data Raw: 31 66 22 ec 13 7c e1 0e 07 3d 3d c6 56 0d 1e 3a 0e 0e 12 28 0e 78 03 8f 7c 03 42 31 1c 83 c3 75 19 67 07 a7 ca 7f a6 64 0c 0d 5f 6c b4 48 07 24 fe 55 d7 32 d1 a4 c4 20 82 46 10 38 e7 a6 49 39 62 cb c8 38 80 90 7d 33 44 1e c0 ed d7 a8 c7 07 8a 19 5d d0 fe e3 08 22 ba 74 c8 07 e3 df fd 32 74 a3 d3 12 cd f0 7f 23 84 f5 e7 fa e0 0f ef 82 8e 00 6b ae 12 6f ae 40 40 2a af 21 23 27 04 1f 5c 96 40 f6 ca 09 f9 e1 1d 70 64 ba c0 26 1b a2 08 eb 80 9c 60 10 fc d7 7f 5c 02 78 8c 7a f2 3d 0e 10 cb 44 73 cf be 3a 10 8d b9 40 3e c4 5e 09 8d 90 e4 7c dd f0 04 3d 2f 05 e4 14 47 27 18 46 58 85 8e d8 91 74 3a e0 0b 79 6c 27 93 88 51 94 5b 0a e6 b0 c6 40 26 f8 c1 4b 6f 20 3c 60 be b9 3a 8e 4e 52 0c 08 fa 9e d9 59 16 ed f5 c6 04 02 2f a6 54 4d b1 2a 48 04 e4 03 70 0f 42 7d fd Data Ascii: 1f"\|==V:(x\|B1ugd_lH$U2 F8I9b8}3D]"t2t#ko@@!#'\@pd&`\xz=Ds:@>^\|=/G'FXt:yl'Q[@&Ko <`:NRY/TMHpB}
2024-08-29 13:50:05 UTC	8000	IN	Data Raw: cf 24 5e 52 04 0a 16 00 a3 d4 1c 07 70 1d c8 ec 0e 3d 03 e5 26 89 fd 31 49 a2 43 02 0d fa e6 80 a1 80 34 07 15 8c 02 92 38 af cf 14 85 e4 00 6b fb 61 23 a5 5d 56 00 5c 0d cd 46 f9 e9 df 25 9e 79 04 e0 15 7e 6e c3 b6 12 45 d8 1d 3d 70 05 be 78 e3 18 90 00 be 4f a8 c9 42 ec 56 00 cc a7 d3 f2 c0 18 55 d0 36 30 81 c1 27 bf 17 e9 88 4d 9b aa bc 62 6d 7a f4 c1 49 b4 f0 6c 61 03 9b bf d3 14 10 3e b8 c1 8f e9 80 4a 00 9e 78 38 41 e0 8b 27 01 37 c8 ad c3 ad 64 26 c0 ba c8 02 68 1b 37 87 ca 47 7c 50 7a de 1b 15 62 87 38 01 e2 ae f0 02 31 ac 1a c5 23 9e 9c 60 12 fd 32 03 87 81 de b2 12 a6 b8 aa 1f ae 50 4b ac 37 90 6d a3 bb a9 1c 62 d1 c8 06 bc 96 70 88 9c 8f 6e b7 80 82 2e f8 3d af be 01 2f 0f 18 b4 47 07 83 86 fd 30 09 75 db 25 fa e4 36 2a f2 70 70 09 f4 c7 45 b6 Data Ascii: $^Rp=&1IC48ka#]V\F%y~nE=pxOBVU60'MbmzIla>Jx8A'7d&h7G\|Pzb81#`2PK7mbpn.=/G0u%6*ppE
2024-08-29 13:50:05 UTC	8000	IN	Data Raw: 13 8b 1f db 8c b9 fc 8a 5d 58 00 c3 6e d1 cd 9f bd fd 72 3c 5e 24 0a dd 1f 8f 2f cc 58 fa 7b 7a f3 9a 4d 77 32 50 75 0c 14 12 bb 43 7e 1a aa 5e bb 7d 31 f4 aa f2 b5 6e 54 53 7e 67 21 47 97 b5 fa e5 07 62 91 47 78 1d 88 ae 7f 7b 17 79 2a 12 ce d0 6e 8f 40 7d 6b 35 8d ad 89 66 e4 65 29 24 6b 6a f2 1e 08 63 b4 2f d3 bf f8 ca a7 56 5e 4b ee 6e 15 f9 24 12 be 5b b6 ea 72 81 23 20 dc ac 56 fa 91 97 c3 2b 35 25 06 04 15 20 ff 00 75 f7 e3 15 48 b6 29 32 08 c0 22 a8 d2 85 f9 a9 bf bf a6 5f 09 91 5d 90 82 47 4d a4 51 1e d5 db 33 b8 3b 80 47 dc cc 69 5b a0 23 ff 00 30 cb 21 d5 cd 13 2c 8a 7c c9 e6 0d dc 1f 5f aa e6 5d d6 c0 d6 a4 02 77 10 ae 79 a6 e2 f9 fb b9 a2 35 27 77 1b 9d 78 d8 7f f5 67 35 98 33 b3 b3 17 52 69 88 fb de f4 dd f3 5f 8b 2a 0d ec ee 26 e1 d5 98 00 Data Ascii: ]Xnr<^$/X{zMw2PuC~^}1nTS~g!GbGx{yn@}k5fe)$kjc/V^Kn$[r# V+5% uH)2"_]GMQ3;Gi[#0!,\|_]wy5'wxg53Ri_&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49730	192.249.123.145	443	3008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 13:50:05 UTC	445	OUT	GET /pdfglobal2/docs89q9eqwwe/assets/images/ellipsis_white.svg HTTP/1.1 Host: elc-path.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=9d98dbccaec32948374c5e64a70679f2
2024-08-29 13:50:05 UTC	235	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 13:50:05 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sat, 12 Jan 2019 06:54:42 GMT Accept-Ranges: bytes Content-Length: 915 Content-Type: image/svg+xml
2024-08-29 13:50:05 UTC	915	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 66 66 66 66 66 66 22 20 64 3d 22 4d 31 2e 31 34 33 2c 36 2e 38 35 37 61 31 2e 31 30 37 2c 31 2e 31 30 37 2c 30 2c 30 2c 31 2c 2e 34 34 36 2e 30 38 39 2c 31 2e 31 36 34 2c 31 2e 31 36 34 2c 30 2c 30 2c 31 2c 2e 36 30 37 2e 36 30 37 2c 31 2e 31 36 31 2c 31 2e 31 36 31 2c 30 2c 30 2c 31 2c 30 2c 2e 38 39 33 2c 31 2e 31 36 34 2c 31 2e 31 36 34 2c 30 2c 30 2c 31 2d 2e 36 30 37 2e 36 30 37 2c 31 2e 31 30 37 2c 31 2e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" viewBox="0 0 16 16"><title>assets</title><path fill="#ffffff" d="M1.143,6.857a1.107,1.107,0,0,1,.446.089,1.164,1.164,0,0,1,.607.607,1.161,1.161,0,0,1,0,.893,1.164,1.164,0,0,1-.607.607,1.107,1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49731	192.249.123.145	443	3008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 13:50:07 UTC	438	OUT	GET /pdfglobal2/docs89q9eqwwe/assets/images/favicon.ico HTTP/1.1 Host: elc-path.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=9d98dbccaec32948374c5e64a70679f2
2024-08-29 13:50:07 UTC	236	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 13:50:07 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sat, 12 Jan 2019 06:54:42 GMT Accept-Ranges: bytes Content-Length: 17174 Content-Type: image/x-icon
2024-08-29 13:50:07 UTC	7956	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-08-29 13:50:07 UTC	8000	IN	Data Raw: 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 Data Ascii: UUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUU
2024-08-29 13:50:07 UTC	1218	IN	Data Raw: 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 99 99 99 99 99 99 99 70 03 33 33 33 33 33 33 33 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 aa aa aa aa aa aa aa 50 04 ee ee ee ee ee ee ee 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 Data Ascii: 33"""""""3333333p3333333Pfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff

Target ID:	0
Start time:	09:49:51
Start date:	29/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	09:49:55
Start date:	29/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1948 --field-trial-handle=1892,i,1456892703543471323,7420831319488466678,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	09:49:57
Start date:	29/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://elc-path.com/pdfglobal2/docs89q9eqwwe/login.php#wa=wsignin1.0&rpsnv=13&ct=1539585327&rver=7.0.6737.0&wp=MBI_SSL&wreply=https%3a%2f%2foutlook.live.com%2fowa%2f%3fnlp%3d1%26RpsCsrfState%3d715d44a2-2f11-4282-f625-a066679e96e2&id=292841&CBCXT=out&lw=1&fl=dob%2cflname%2cwld&cobrandid=90015"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Static File Info

Network Behavior

Suricata IDS Alerts