Edit tour

Windows Analysis Report
https://meta.com-businesshelp.com/index.php?appeal&mcp_token=eyjwawqiojewmzewmzq1mjy4otkynswic2lkijo3odg3njgynjixmzqyndmwlcjheci6imixzdfkmgq5mjawzdm4njhkmtg1m2njywe5ngnjmwjkiiwidhmioje3mjq5odc1odysimv4cci6mtcynzqwnjc4nn0.g1r0zoidsulijizzpul__xu_ezru3nkvbuiwksxr0pk

Overview

General Information

Sample URL:	https://meta.com-businesshelp.com/index.php?appeal&mcp_token=eyjwawqiojewmzewmzq1mjy4otkynswic2lkijo3odg3njgynjixmzqyndmwlcjheci6imixzdfkmgq5mjawzdm4njhkmtg1m2njywe5ngnjmwjkiiwidhmioje3mjq5odc1odysimv
Analysis ID:	1501604
Infos:

Detection

Score:	23
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Phishing site detected (based on favicon image match)

Detected non-DNS traffic on DNS port

Form action URLs do not match main URL

HTML body contains low number of good links

HTML body with high number of embedded images detected

Stores files to the Windows start menu directory

Suspicious form URL found

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6704 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://meta.com-businesshelp.com/index.php?appeal&mcp_token=eyjwawqiojewmzewmzq1mjy4otkynswic2lkijo3odg3njgynjixmzqyndmwlcjheci6imixzdfkmgq5mjawzdm4njhkmtg1m2njywe5ngnjmwjkiiwidhmioje3mjq5odc1odysimv4cci6mtcynzqwnjc4nn0.g1r0zoidsulijizzpul__xu_ezru3nkvbuiwksxr0pk MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 528 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2160 --field-trial-handle=1952,i,5005524996599749835,3718445484579524720,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Phishing site detected (based on favicon image match)

Source: https://meta.com-businesshelp.com/index.php?appeal&mcp_token=eyjwawqiojewmzewmzq1mjy4otkynswic2lkijo3odg3njgynjixmzqyndmwlcjheci6imixzdfkmgq5mjawzdm4njhkmtg1m2njywe5ngnjmwjkiiwidhmioje3mjq5odc1odysimv4cci6mtcynzqwnjc4nn0.g1r0zoidsulijizzpul__xu_ezru3nkvbuiwksxr0pk

Matcher: Template: facebook matched with high similarity

Source: https://meta.com-businesshelp.com/index.php?appeal&mcp_token=eyjwawqiojewmzewmzq1mjy4otkynswic2lkijo3odg3njgynjixmzqyndmwlcjheci6imixzdfkmgq5mjawzdm4njhkmtg1m2njywe5ngnjmwjkiiwidhmioje3mjq5odc1odysimv4cci6mtcynzqwnjc4nn0.g1r0zoidsulijizzpul__xu_ezru3nkvbuiwksxr0pk	HTTP Parser: Form action: https://www.facebook.com/help/search com-businesshelp facebook
Source: https://meta.com-businesshelp.com/index.php?appeal&mcp_token=eyjwawqiojewmzewmzq1mjy4otkynswic2lkijo3odg3njgynjixmzqyndmwlcjheci6imixzdfkmgq5mjawzdm4njhkmtg1m2njywe5ngnjmwjkiiwidhmioje3mjq5odc1odysimv4cci6mtcynzqwnjc4nn0.g1r0zoidsulijizzpul__xu_ezru3nkvbuiwksxr0pk	HTTP Parser: Form action: https://www.facebook.com/help/search com-businesshelp facebook

HTTP Parser: Number of links: 0

HTTP Parser: Total embedded image size: 72689

Source: https://meta.com-businesshelp.com/index.php?appeal&mcp_token=eyjwawqiojewmzewmzq1mjy4otkynswic2lkijo3odg3njgynjixmzqyndmwlcjheci6imixzdfkmgq5mjawzdm4njhkmtg1m2njywe5ngnjmwjkiiwidhmioje3mjq5odc1odysimv4cci6mtcynzqwnjc4nn0.g1r0zoidsulijizzpul__xu_ezru3nkvbuiwksxr0pk	HTTP Parser: Form action: process.php
Source: https://meta.com-businesshelp.com/index.php?appeal&mcp_token=eyjwawqiojewmzewmzq1mjy4otkynswic2lkijo3odg3njgynjixmzqyndmwlcjheci6imixzdfkmgq5mjawzdm4njhkmtg1m2njywe5ngnjmwjkiiwidhmioje3mjq5odc1odysimv4cci6mtcynzqwnjc4nn0.g1r0zoidsulijizzpul__xu_ezru3nkvbuiwksxr0pk	HTTP Parser: Form action: process.php

Source: https://meta.com-businesshelp.com/index.php?appeal&mcp_token=eyjwawqiojewmzewmzq1mjy4otkynswic2lkijo3odg3njgynjixmzqyndmwlcjheci6imixzdfkmgq5mjawzdm4njhkmtg1m2njywe5ngnjmwjkiiwidhmioje3mjq5odc1odysimv4cci6mtcynzqwnjc4nn0.g1r0zoidsulijizzpul__xu_ezru3nkvbuiwksxr0pk	HTTP Parser: No <meta name="author".. found
Source: https://meta.com-businesshelp.com/index.php?appeal&mcp_token=eyjwawqiojewmzewmzq1mjy4otkynswic2lkijo3odg3njgynjixmzqyndmwlcjheci6imixzdfkmgq5mjawzdm4njhkmtg1m2njywe5ngnjmwjkiiwidhmioje3mjq5odc1odysimv4cci6mtcynzqwnjc4nn0.g1r0zoidsulijizzpul__xu_ezru3nkvbuiwksxr0pk	HTTP Parser: No <meta name="author".. found

Source: https://meta.com-businesshelp.com/index.php?appeal&mcp_token=eyjwawqiojewmzewmzq1mjy4otkynswic2lkijo3odg3njgynjixmzqyndmwlcjheci6imixzdfkmgq5mjawzdm4njhkmtg1m2njywe5ngnjmwjkiiwidhmioje3mjq5odc1odysimv4cci6mtcynzqwnjc4nn0.g1r0zoidsulijizzpul__xu_ezru3nkvbuiwksxr0pk	HTTP Parser: No <meta name="copyright".. found
Source: https://meta.com-businesshelp.com/index.php?appeal&mcp_token=eyjwawqiojewmzewmzq1mjy4otkynswic2lkijo3odg3njgynjixmzqyndmwlcjheci6imixzdfkmgq5mjawzdm4njhkmtg1m2njywe5ngnjmwjkiiwidhmioje3mjq5odc1odysimv4cci6mtcynzqwnjc4nn0.g1r0zoidsulijizzpul__xu_ezru3nkvbuiwksxr0pk	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.137.106.217:443 -> 192.168.2.16:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.160.20:443 -> 192.168.2.16:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.137.106.217:443 -> 192.168.2.16:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.137.106.217:443 -> 192.168.2.16:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.137.106.217:443 -> 192.168.2.16:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.137.106.217:443 -> 192.168.2.16:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.137.106.217:443 -> 192.168.2.16:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.242.39.171:443 -> 192.168.2.16:58681 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.16:58683 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.16:58684 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.16:58685 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.16:58680 -> 162.159.36.2:53

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 52.137.106.217
Source: unknown	TCP traffic detected without corresponding DNS query: 52.137.106.217
Source: unknown	TCP traffic detected without corresponding DNS query: 52.137.106.217
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.137.106.217
Source: unknown	TCP traffic detected without corresponding DNS query: 52.137.106.217
Source: unknown	TCP traffic detected without corresponding DNS query: 52.137.106.217
Source: unknown	TCP traffic detected without corresponding DNS query: 52.137.106.217
Source: unknown	TCP traffic detected without corresponding DNS query: 52.137.106.217

Source: global traffic	HTTP traffic detected: GET /index.php?appeal&mcp_token=eyjwawqiojewmzewmzq1mjy4otkynswic2lkijo3odg3njgynjixmzqyndmwlcjheci6imixzdfkmgq5mjawzdm4njhkmtg1m2njywe5ngnjmwjkiiwidhmioje3mjq5odc1odysimv4cci6mtcynzqwnjc4nn0.g1r0zoidsulijizzpul__xu_ezru3nkvbuiwksxr0pk HTTP/1.1Host: meta.com-businesshelp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/main.css HTTP/1.1Host: meta.com-businesshelp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://meta.com-businesshelp.com/index.php?appeal&mcp_token=eyjwawqiojewmzewmzq1mjy4otkynswic2lkijo3odg3njgynjixmzqyndmwlcjheci6imixzdfkmgq5mjawzdm4njhkmtg1m2njywe5ngnjmwjkiiwidhmioje3mjq5odc1odysimv4cci6mtcynzqwnjc4nn0.g1r0zoidsulijizzpul__xu_ezru3nkvbuiwksxr0pkAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=etc2hgh99mff6l1clnntmk6fuu
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/3.6.2/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://meta.com-businesshelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/bootstrap@5.2.3/dist/js/bootstrap.bundle.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://meta.com-businesshelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/3.6.2/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/unidentified-avatar.jfif HTTP/1.1Host: meta.com-businesshelp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=etc2hgh99mff6l1clnntmk6fuu
Source: global traffic	HTTP traffic detected: GET /webshim/1.12.4/extras/modernizr-custom.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /webshim/1.12.4/polyfiller.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widgets/latest/dropdown.js HTTP/1.1Host: cdn.gtranslate.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/?revision=646225600660159&name=desktop-creating-an-account-banner&density=1 HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://meta.com-businesshelp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widgets/latest/dropdown.js HTTP/1.1Host: cdn.gtranslate.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/unidentified-avatar.jfif HTTP/1.1Host: meta.com-businesshelp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=etc2hgh99mff6l1clnntmk6fuu
Source: global traffic	HTTP traffic detected: GET /assets/?revision=646225600660159&name=desktop-creating-an-account-banner&density=1 HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /webshim/1.12.4/shims/styles/shim.css HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /webshim/1.12.4/shims/form-core.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /webshim/1.12.4/shims/form-validation.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /webshim/1.12.4/shims/plugins/jquery.ui.position.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=5zmaD92Ty9SkAdA&MD=U9L85pl6 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /clientwebservice/ping HTTP/1.1Connection: Keep-AliveUser-Agent: DNS resiliency checker/1.0Host: fe3cr.delivery.mp.microsoft.com
Source: global traffic	HTTP traffic detected: GET /sls/ping HTTP/1.1Connection: Keep-AliveUser-Agent: DNS resiliency checker/1.0Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=5zmaD92Ty9SkAdA&MD=U9L85pl6 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=5zmaD92Ty9SkAdA&MD=U9L85pl6 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com

Source: global traffic	DNS traffic detected: DNS query: meta.com-businesshelp.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: static.xx.fbcdn.net
Source: global traffic	DNS traffic detected: DNS query: cdn.gtranslate.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: 171.39.242.20.in-addr.arpa
Source: global traffic	DNS traffic detected: DNS query: 183.59.114.20.in-addr.arpa

Source: unknown

HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 4710Host: login.live.com

Source: chromecache_90.1.dr, chromecache_93.1.dr	String found in binary or memory: http://api.jqueryui.com/position/
Source: chromecache_90.1.dr, chromecache_93.1.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_90.1.dr, chromecache_93.1.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_85.1.dr, chromecache_84.1.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_85.1.dr, chromecache_84.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_85.1.dr, chromecache_84.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_88.1.dr, chromecache_82.1.dr	String found in binary or memory: https://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58683 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58687 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58682 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58681 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58685 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58685
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58684
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58687
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58681
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58683
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58682
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58684 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.137.106.217:443 -> 192.168.2.16:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.160.20:443 -> 192.168.2.16:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.137.106.217:443 -> 192.168.2.16:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.137.106.217:443 -> 192.168.2.16:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.137.106.217:443 -> 192.168.2.16:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.137.106.217:443 -> 192.168.2.16:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.137.106.217:443 -> 192.168.2.16:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.242.39.171:443 -> 192.168.2.16:58681 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.16:58683 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.16:58684 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.16:58685 version: TLS 1.2

Source: classification engine

Classification label: sus23.phis.win@14/45@25/13

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://meta.com-businesshelp.com/index.php?appeal&mcp_token=eyjwawqiojewmzewmzq1mjy4otkynswic2lkijo3odg3njgynjixmzqyndmwlcjheci6imixzdfkmgq5mjawzdm4njhkmtg1m2njywe5ngnjmwjkiiwidhmioje3mjq5odc1odysimv4cci6mtcynzqwnjc4nn0.g1r0zoidsulijizzpul__xu_ezru3nkvbuiwksxr0pk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2160 --field-trial-handle=1952,i,5005524996599749835,3718445484579524720,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2160 --field-trial-handle=1952,i,5005524996599749835,3718445484579524720,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	3 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://meta.com-businesshelp.com/index.php?appeal&mcp_token=eyjwawqiojewmzewmzq1mjy4otkynswic2lkijo3odg3njgynjixmzqyndmwlcjheci6imixzdfkmgq5mjawzdm4njhkmtg1m2njywe5ngnjmwjkiiwidhmioje3mjq5odc1odysimv4cci6mtcynzqwnjc4nn0.g1r0zoidsulijizzpul__xu_ezru3nkvbuiwksxr0pk	0%	Avira URL Cloud	safe
https://meta.com-businesshelp.com/index.php?appeal&mcp_token=eyjwawqiojewmzewmzq1mjy4otkynswic2lkijo3odg3njgynjixmzqyndmwlcjheci6imixzdfkmgq5mjawzdm4njhkmtg1m2njywe5ngnjmwjkiiwidhmioje3mjq5odc1odysimv4cci6mtcynzqwnjc4nn0.g1r0zoidsulijizzpul__xu_ezru3nkvbuiwksxr0pk	0%	Virustotal		Browse

Source	Detection	Scanner	Link
scontent.xx.fbcdn.net	0%	Virustotal	Browse
183.59.114.20.in-addr.arpa	1%	Virustotal	Browse
www.google.com	0%	Virustotal	Browse
cdn.jsdelivr.net	0%	Virustotal	Browse
cdn.gtranslate.net	0%	Virustotal	Browse
171.39.242.20.in-addr.arpa	0%	Virustotal	Browse
static.xx.fbcdn.net	0%	Virustotal	Browse
jsdelivr.map.fastly.net	0%	Virustotal	Browse
cdnjs.cloudflare.com	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label	Link
http://jquery.org/license	0%	URL Reputation	safe
http://jqueryui.com	0%	URL Reputation	safe
http://api.jqueryui.com/position/	0%	URL Reputation	safe
https://getbootstrap.com/)	0%	URL Reputation	safe
https://github.com/twbs/bootstrap/graphs/contributors)	0%	Avira URL Cloud	safe
https://cdn.jsdelivr.net/webshim/1.12.4/shims/plugins/jquery.ui.position.js	0%	Avira URL Cloud	safe
https://github.com/twbs/bootstrap/blob/main/LICENSE)	0%	Avira URL Cloud	safe
https://cdn.jsdelivr.net/webshim/1.12.4/shims/styles/shim.css	0%	Avira URL Cloud	safe
https://cdn.gtranslate.net/widgets/latest/dropdown.js	0%	Avira URL Cloud	safe
https://github.com/twbs/bootstrap/graphs/contributors)	0%	Virustotal		Browse
https://meta.com-businesshelp.com/assets/main.css	0%	Avira URL Cloud	safe
https://meta.com-businesshelp.com/assets/unidentified-avatar.jfif	0%	Avira URL Cloud	safe
https://github.com/twbs/bootstrap/blob/main/LICENSE)	0%	Virustotal		Browse
https://cdn.jsdelivr.net/webshim/1.12.4/shims/form-core.js	0%	Avira URL Cloud	safe
https://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2	0%	Avira URL Cloud	safe
https://cdn.jsdelivr.net/webshim/1.12.4/polyfiller.js	0%	Avira URL Cloud	safe
https://cdn.gtranslate.net/widgets/latest/dropdown.js	0%	Virustotal		Browse
https://cdn.jsdelivr.net/webshim/1.12.4/shims/form-validation.js	0%	Avira URL Cloud	safe
https://cdn.jsdelivr.net/webshim/1.12.4/extras/modernizr-custom.js	0%	Avira URL Cloud	safe
https://cdnjs.cloudflare.com/ajax/libs/jquery/3.6.2/jquery.min.js	0%	Avira URL Cloud	safe
https://cdn.jsdelivr.net/npm/bootstrap@5.2.3/dist/js/bootstrap.bundle.min.js	0%	Avira URL Cloud	safe
https://static.xx.fbcdn.net/assets/?revision=646225600660159&name=desktop-creating-an-account-banner&density=1	0%	Avira URL Cloud	safe
https://cdn.jsdelivr.net/npm/bootstrap@5.2.3/dist/js/bootstrap.bundle.min.js	0%	Virustotal		Browse
https://cdn.jsdelivr.net/webshim/1.12.4/polyfiller.js	0%	Virustotal		Browse
https://cdnjs.cloudflare.com/ajax/libs/jquery/3.6.2/jquery.min.js	0%	Virustotal		Browse
https://cdn.jsdelivr.net/webshim/1.12.4/extras/modernizr-custom.js	0%	Virustotal		Browse
https://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
jsdelivr.map.fastly.net	151.101.129.229	true	false	0%, Virustotal, Browse	unknown
scontent.xx.fbcdn.net	157.240.253.1	true	false	0%, Virustotal, Browse	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	0%, Virustotal, Browse	unknown
www.google.com	142.250.185.68	true	false	0%, Virustotal, Browse	unknown
meta.com-businesshelp.com	188.114.96.3	true	false		unknown
cdn.gtranslate.net	104.26.13.42	true	false	0%, Virustotal, Browse	unknown
cdn.jsdelivr.net	unknown	unknown	false	0%, Virustotal, Browse	unknown
183.59.114.20.in-addr.arpa	unknown	unknown	false	1%, Virustotal, Browse	unknown
171.39.242.20.in-addr.arpa	unknown	unknown	false	0%, Virustotal, Browse	unknown
static.xx.fbcdn.net	unknown	unknown	false	0%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cdn.jsdelivr.net/webshim/1.12.4/shims/plugins/jquery.ui.position.js	false	Avira URL Cloud: safe	unknown
https://cdn.jsdelivr.net/webshim/1.12.4/shims/styles/shim.css	false	Avira URL Cloud: safe	unknown
https://cdn.gtranslate.net/widgets/latest/dropdown.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://meta.com-businesshelp.com/assets/main.css	false	Avira URL Cloud: safe	unknown
https://meta.com-businesshelp.com/assets/unidentified-avatar.jfif	false	Avira URL Cloud: safe	unknown
https://cdn.jsdelivr.net/webshim/1.12.4/shims/form-core.js	false	Avira URL Cloud: safe	unknown
https://cdn.jsdelivr.net/webshim/1.12.4/polyfiller.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://cdn.jsdelivr.net/webshim/1.12.4/shims/form-validation.js	false	Avira URL Cloud: safe	unknown
https://meta.com-businesshelp.com/index.php?appeal&mcp_token=eyjwawqiojewmzewmzq1mjy4otkynswic2lkijo3odg3njgynjixmzqyndmwlcjheci6imixzdfkmgq5mjawzdm4njhkmtg1m2njywe5ngnjmwjkiiwidhmioje3mjq5odc1odysimv4cci6mtcynzqwnjc4nn0.g1r0zoidsulijizzpul__xu_ezru3nkvbuiwksxr0pk	true		unknown
https://cdn.jsdelivr.net/webshim/1.12.4/extras/modernizr-custom.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/jquery/3.6.2/jquery.min.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://cdn.jsdelivr.net/npm/bootstrap@5.2.3/dist/js/bootstrap.bundle.min.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://static.xx.fbcdn.net/assets/?revision=646225600660159&name=desktop-creating-an-account-banner&density=1	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_85.1.dr, chromecache_84.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://jquery.org/license	chromecache_90.1.dr, chromecache_93.1.dr	false	URL Reputation: safe	unknown
https://github.com/twbs/bootstrap/blob/main/LICENSE)	chromecache_85.1.dr, chromecache_84.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://jqueryui.com	chromecache_90.1.dr, chromecache_93.1.dr	false	URL Reputation: safe	unknown
http://api.jqueryui.com/position/	chromecache_90.1.dr, chromecache_93.1.dr	false	URL Reputation: safe	unknown
https://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2	chromecache_88.1.dr, chromecache_82.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://getbootstrap.com/)	chromecache_85.1.dr, chromecache_84.1.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.17.24.14	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.185.68	www.google.com	United States	15169	GOOGLEUS	false
151.101.129.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
172.217.18.4	unknown	United States	15169	GOOGLEUS	false
172.67.68.204	unknown	United States	13335	CLOUDFLARENETUS	false
157.240.251.9	unknown	United States	32934	FACEBOOKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.26.13.42	cdn.gtranslate.net	United States	13335	CLOUDFLARENETUS	false
188.114.97.3	unknown	European Union	13335	CLOUDFLARENETUS	false
157.240.253.1	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
188.114.96.3	meta.com-businesshelp.com	European Union	13335	CLOUDFLARENETUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1501604
Start date and time:	2024-08-30 07:37:06 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 23s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://meta.com-businesshelp.com/index.php?appeal&mcp_token=eyjwawqiojewmzewmzq1mjy4otkynswic2lkijo3odg3njgynjixmzqyndmwlcjheci6imixzdfkmgq5mjawzdm4njhkmtg1m2njywe5ngnjmwjkiiwidhmioje3mjq5odc1odysimv4cci6mtcynzqwnjc4nn0.g1r0zoidsulijizzpul__xu_ezru3nkvbuiwksxr0pk
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	SUS
Classification:	sus23.phis.win@14/45@25/13
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.16.195, 142.250.185.206, 74.125.206.84, 34.104.35.123, 104.18.187.31, 104.18.186.31, 142.250.185.74, 142.250.185.202, 172.217.16.202, 142.250.184.234, 172.217.18.106, 216.58.206.42, 172.217.18.10, 216.58.212.138, 142.250.184.202, 216.58.206.74, 142.250.186.170, 142.250.185.106, 142.250.185.138, 142.250.185.170, 142.250.186.106, 142.250.186.138, 142.250.184.227, 216.58.206.78, 142.250.185.142, 216.58.212.174
Excluded domains from analysis (whitelisted): clients1.google.com, cdn.jsdelivr.net.cdn.cloudflare.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ajax.googleapis.com, settings-win.data.microsoft.com, clientservices.googleapis.com, dns.msftncsi.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, login.live.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Aug 30 04:37:37 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9935590112214245
Encrypted:	false
SSDEEP:	48:8xkdKT2ewOHEidAKZdA1FehwiZUklqehgy+3:8Pvwd/y
MD5:	442A618FB86EBD13385297ABB96C6700
SHA1:	2E633E67AE1C253DFB8471FC78337F53C868E9AE
SHA-256:	0B76F6C9115D016F3A3FFEBBB4D53502E07F13A7CE6398D38E89E3D11EF0A8C2
SHA-512:	A73A8C76FECB9308C27D62E66A37FF113127DFC3C581A0989E2D498DADD6F719427E465C1451C7E55037B4F8CDE622A2603386558A66FAA2BA7E8A3DC14A621C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,...........N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y.,....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.,....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.,....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.,..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.,...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..........."I.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Aug 30 04:37:37 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	4.008169842490913
Encrypted:	false
SSDEEP:	48:85jdKT2ewOHEidAKZdA1seh/iZUkAQkqehvy+2:854vwT9QWy
MD5:	EB958723AC89D9CACA3E0CD46A8ED2CD
SHA1:	95C17985C4860E6358DD3F16DB1D0B71A55A33A4
SHA-256:	A05424BF56F2CF48F2FAD7FF73C3CCB9D557A419080F8B47B96AEFB7BAA6E8D4
SHA-512:	F6ACE508B44B3FAE3E2EB5F0947627931B0C7D1E77EE17BD82EC30A98EBE9798B92AF8E4E51DFE97D04DB3D00E9655AE1C972193B7ABEC02B0C612CF90FFD873
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....0....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y.,....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.,....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.,....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.,..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.,...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..........."I.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.013597235021789
Encrypted:	false
SSDEEP:	48:8gdKT2eAHEidAKZdA14meh7sFiZUkmgqeh7sly+BX:8hvVnLy
MD5:	AA92E2F41E68508916B09C03DAEA1EBA
SHA1:	C58849DF94B1A016C8A81179357F860E81D4F6A0
SHA-256:	F6AA5014352E9B184BE864954F03AF5310A331793FA02429D02867B031DDD4F2
SHA-512:	9C5085B1FC265672AA2771F185F23AF917CD4469061CF38CBFF55897F105F5CF7D812F81BAC31A4BD8DA4619012B2210AF47457DAAE7F26DAABD94049AF19F43
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y.,....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.,....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.,....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.,..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..........."I.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Aug 30 04:37:37 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	4.008081901952424
Encrypted:	false
SSDEEP:	48:8udKT2ewOHEidAKZdA1TehDiZUkwqehTy+R:8XvwgNy
MD5:	C588027E782457227592C324066022BB
SHA1:	6A9B852B26F2C50D93E249C3D022F55AE365A0FF
SHA-256:	B7B5CBBA0BC4F6ED0979EF4676E0009FE4E377A5932DEEEA2A37B183E02C76DA
SHA-512:	E0849F6B04510369083AB278AB5CE840CBF2000091F887F31B4DB3029F475F743505C06ACF3A4EB65251CBA5AF51B339C4A50C946F1727CF6110935BF69656FC
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,..........N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y.,....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.,....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.,....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.,..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.,...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..........."I.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Aug 30 04:37:37 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.995556090864051
Encrypted:	false
SSDEEP:	48:8hndKT2ewOHEidAKZdA1dehBiZUk1W1qehBy+C:8h8vwg9hy
MD5:	A2A1676E5E434BC49DCEABF33AA6078C
SHA1:	E9CE4192DD28A1E2802F21C56C715E6DE177D076
SHA-256:	F06F7EC19C671BB34939EBC6754687E0E8FB79FA16BE3882AEB45A7B8890CBDA
SHA-512:	0FFBA8CF2B4B4A4CBD9A853607AD52809FF519E97B3C36DF2D4F634B433FAB992703A7DAF20DC3829C2C8B7BCD280B0C6A72429045AA2FCC9D27DC412729CDB8
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....+.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y.,....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.,....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.,....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.,..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.,...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..........."I.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Aug 30 04:37:37 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.003615789944233
Encrypted:	false
SSDEEP:	48:8jdKT2ewOHEidAKZdA1duTeehOuTbbiZUk5OjqehOuTbLy+yT+:84vwyTfTbxWOvTbLy7T
MD5:	29E6BF4E1E273E28D406C18674D4BA36
SHA1:	F1256A55892F0630F0E7EF9DA19DB19EA09ECD29
SHA-256:	C81E81E75402089D354E68D6BB0915BB86BCFF0CEB3A8709E0F18E5697980E2D
SHA-512:	FB78FAA82040C6C0D74763DD26491B395EAB1DFD339CEBF5DA07E614238B88E94C94813B3B875E74E1B9136947D13E12221BBF91B0520C0226CA74FE0505A53B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....N.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y.,....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.,....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.,....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.,..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.,...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..........."I.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15969), with no line terminators
Category:	downloaded
Size (bytes):	15969
Entropy (8bit):	5.198410132994456
Encrypted:	false
SSDEEP:	384:HnRaLq1wgUucTYCnwIqO0Qq4E75uMb2wL8vbzNBkcCM4cyu7fkT7vCMXK:HRVwgZctnbEtuMb2wQfsdpcfkT7vdK
MD5:	124F1FA754BB3EE8B9CC88AD41F94E52
SHA1:	6513CF29DCAA9E8BAB13345C86D43148517CACCD
SHA-256:	6C82248AE73F44221791EFD2316A037158FA8D216CA28914EC01B073F84E0F1D
SHA-512:	3B7D7BC0FA49984F4E25EE7D2758C8FD729F6A4DCF3C9F1EC935E0215CC21843C0BE83DD360543A49207714A296504DC4779BBE250F7538AA2CEAEF6D436E695
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/webshim/1.12.4/shims/form-validation.js
Preview:	webshims.register("form-validation",function(a,b,c,d,e,f){"use strict";var g="webkitURL"in c,h=Modernizr.formvalidation&&!b.bugs.bustedValidity,i=g&&h,j=i&&parseFloat((navigator.userAgent.match(/Safari\/([\d\.]+)/)\|\|["","999999"])[1],10),k=f.iVal;k.fieldWrapper\|\|(k.fieldWrapper=":not(span), :not(label), :not(em), :not(strong), :not(p)");var l=k.errorClass\|\|(k.errorClass="user-error"),m=k.successClass\|\|"user-success",n=k.errorWrapperClass\|\|(k.errorWrapperClass="ws-invalid"),o=k.successWrapperClass\|\|(k.successWrapperClass="ws-success"),p=k.errorBoxClass\|\|(k.errorBoxClass="ws-errorbox"),q=k.errorMessageClass\|\|(k.errorMessageClass="ws-errormessage"),r={checkbox:1,radio:1},s=b.loader,t=s.addModule,u=a([]),v=function(){return!a.prop(this,"form")},w=function(b){b=a(b);var c,e,f=u;return"radio"==b[0].type&&(e=b.prop("form"),c=b[0].name,f=c?e?a(e).jProp(c):a(d.getElementsByName(c)).filter(v):b,f=f.filter('[type="radio"]')),f},x=function(b,c){var d;return a.each(b,function(b,e){return e?(d=b+a.p

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1600 x 424, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	31709
Entropy (8bit):	7.769531917650097
Encrypted:	false
SSDEEP:	768:YM2KY7PKMJUbQuk2MHgyXztTlCqCnrDhBnWzHXb:sCMJJukiaz1lu/hZWv
MD5:	EDE180AC652AE72B6BA133B28660942E
SHA1:	737CB69356A86C262C7F170AAB5AF457E9242B96
SHA-256:	5B4980DA8550EE082F141A8030C2068129D8FCB1D18E3C4FB1C5039D930FC2CE
SHA-512:	53CDD206842F79D0CEE439D410C6D1E210DB7DC9B3E9A7BA965AD52333EEB7ECA8EA42EC34166C2E3A6A9487BCED0A8E17DC0F6B219164CD9D06610656D6356D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...........).....pHYs...........~... .IDATx....p\.u........(..$J.$Y.(.").J.m.P.g.....f.N...k..dS.........$3...'..\.......E...oY .{.._.HJ.E..D.. .....z.\..j.xt......4....[.y...S.L&......... J.9......... j.@........@.............!...........C.........."...........D........................9. ........ r.@........@.............!...........C.........."...........D........................9. ........ r.@........@.............!...........C.........."...........D........................9. ........ r.@........@.rJ......<u.ADR....KD..Q.e{.......d2.)....b....j..g.Uq..............p .....b.....".J...@F4.i..}....`#.....b...q.>..... +C..n...l....C......"...`.j.....ml!.........C.....~.....A..9Z...".....b....Z...y.. g5:..m..`"......s...g......C.......@C.+.........!...........v....<...... V..r....ay......s..c.6..'.e....pttL....r......+*..;..o.....>. .jt.z..q.....@....xYv.......?..L..4L.....B..u......o...q...q.....n2..x.........^\|..p"..%...6..7..Y.._...

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89942
Entropy (8bit):	5.290841420152801
Encrypted:	false
SSDEEP:	1536:uNjxXUcrnxD9o5EZxkMVC6YLtg7HtDuU3zh8cmnPMEgWzJvBQUmkm4M5gPtcNRQK:uhqmCU3zhINzfmR4lb3e34UQ47GKL
MD5:	E3CCB7FB2A471B100E7ED8183C55EF25
SHA1:	0801A72AEB865769B6051770BBC5F9485882F998
SHA-256:	DA4AD864A87FFCF71C851B5DF87F95CB242867F7B711CAE4C6133CC9CC0048F0
SHA-512:	B561E5BAD167B86D02EA7411969BEB121138429906D679F630E50C5A651E45E3E5E1EDC0922D1507A5B5BF7A0B8C5B5DD2154EB5143D3C7A527CDEAEEBF41791
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/jquery/3.6.2/jquery.min.js
Preview:	/! jQuery v3.6.2 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,y=n.hasOwnProperty,a=y.toString,l=a.call(Object),v={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},S=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|S).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4665), with no line terminators
Category:	downloaded
Size (bytes):	4665
Entropy (8bit):	5.178466907527464
Encrypted:	false
SSDEEP:	96:MwB7mjg/V8yFNHG2ePbDhK3cPOR42GWa5fhIrUW:MwNig/V8yFNm2OKfvgfhIQW
MD5:	6A13947BB29EB5FD9DA9F5A4CD1CF90C
SHA1:	C6F52FBA72420CA169F3D8767AFF7DA4E12899FD
SHA-256:	AF7485C245BB889F84D304FE8621A1E0523F92F9F3223A767A8A02AC3A33E637
SHA-512:	519A1F2E54E4AFBC73BAA057CCA9D6598797DD87793BC97B930F5B3E94E2070CDC38E7C2E5638545A426966B21BE8CB56395F09510AE5A860856CD204DA0E53E
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/webshim/1.12.4/shims/form-core.js
Preview:	webshims.register("form-core",function(a,b,c,d,e,f){"use strict";b.capturingEventPrevented=function(b){if(!b._isPolyfilled){var c=b.isDefaultPrevented,d=b.preventDefault;b.preventDefault=function(){return clearTimeout(a.data(b.target,b.type+"DefaultPrevented")),a.data(b.target,b.type+"DefaultPrevented",setTimeout(function(){a.removeData(b.target,b.type+"DefaultPrevented")},30)),d.apply(this,arguments)},b.isDefaultPrevented=function(){return!(!c.apply(this,arguments)&&!a.data(b.target,b.type+"DefaultPrevented"))},b._isPolyfilled=!0}},Modernizr.formvalidation&&!b.bugs.bustedValidity&&b.capturingEvents(["invalid"],!0);var g=function(b){return(a.prop(b,"validity")\|\|{valid:1}).valid},h=function(){var c=["form-validation"];f.lazyCustomMessages&&(f.customMessages=!0,c.push("form-message")),f.customDatalist&&(f.fD=!0,c.push("form-datalist")),f.addValidators&&c.push("form-validators"),b.reTest(c),a(d).off(".lazyloadvalidation")},i=/^(?:form\|fieldset)$/i,j=function(b){var c=!1;return a(b).jProp(

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4665), with no line terminators
Category:	dropped
Size (bytes):	4665
Entropy (8bit):	5.178466907527464
Encrypted:	false
SSDEEP:	96:MwB7mjg/V8yFNHG2ePbDhK3cPOR42GWa5fhIrUW:MwNig/V8yFNm2OKfvgfhIQW
MD5:	6A13947BB29EB5FD9DA9F5A4CD1CF90C
SHA1:	C6F52FBA72420CA169F3D8767AFF7DA4E12899FD
SHA-256:	AF7485C245BB889F84D304FE8621A1E0523F92F9F3223A767A8A02AC3A33E637
SHA-512:	519A1F2E54E4AFBC73BAA057CCA9D6598797DD87793BC97B930F5B3E94E2070CDC38E7C2E5638545A426966B21BE8CB56395F09510AE5A860856CD204DA0E53E
Malicious:	false
Reputation:	low
Preview:	webshims.register("form-core",function(a,b,c,d,e,f){"use strict";b.capturingEventPrevented=function(b){if(!b._isPolyfilled){var c=b.isDefaultPrevented,d=b.preventDefault;b.preventDefault=function(){return clearTimeout(a.data(b.target,b.type+"DefaultPrevented")),a.data(b.target,b.type+"DefaultPrevented",setTimeout(function(){a.removeData(b.target,b.type+"DefaultPrevented")},30)),d.apply(this,arguments)},b.isDefaultPrevented=function(){return!(!c.apply(this,arguments)&&!a.data(b.target,b.type+"DefaultPrevented"))},b._isPolyfilled=!0}},Modernizr.formvalidation&&!b.bugs.bustedValidity&&b.capturingEvents(["invalid"],!0);var g=function(b){return(a.prop(b,"validity")\|\|{valid:1}).valid},h=function(){var c=["form-validation"];f.lazyCustomMessages&&(f.customMessages=!0,c.push("form-message")),f.customDatalist&&(f.fD=!0,c.push("form-datalist")),f.addValidators&&c.push("form-validators"),b.reTest(c),a(d).off(".lazyloadvalidation")},i=/^(?:form\|fieldset)$/i,j=function(b){var c=!1;return a(b).jProp(

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 512x512, components 3
Category:	downloaded
Size (bytes):	10168
Entropy (8bit):	7.41804729567533
Encrypted:	false
SSDEEP:	192:zrjjjjjjjubbbZjcgMpmuuuuuupVuuuuuub2GB7YCzgSMq58tG2mmmmmmmmTHWE2:zmbbbZIgMpusAgSMqOtdmmmmmmmmM1V3
MD5:	4E70FD17402CB2EC6D4DDD18AF827C74
SHA1:	4F596E7C03C3AEDBD2476893B915AE7257711098
SHA-256:	8570DA32A63B2F7DBA8618E78BB58CBEA15AB15415CD406D7053ECAB993C58D5
SHA-512:	D20B95DB1928CFDDD2816F0EEA8C4696BEE72BC9D0CA2990DC803DA23C2F6C96C3813A812CFFFB1E9FAF915620DADDC92BEC2960C5F0C69EDCCA6872814B26BC
Malicious:	false
Reputation:	low
URL:	https://meta.com-businesshelp.com/assets/unidentified-avatar.jfif
Preview:	......JFIF.....`.`.....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..."..M.m....".m.h.r(..F..\.2)6..."..M.m...".m.h.r(..F..\.2)6..."..M.m...".m.h.r(..F..\.2)6..."..M.m...".m.h.r(..F..\.2)6..."..M.m...".m.h.r(..F..\.2)6..."..M.m...".m.h.r(..F..\.2)6..."..M.m...".m.h.r(..F..\.2)6..."..M.m...".m.h.r(..F..\.2)6....M.m.`..M.m..-..h.E.Z)6....Rm.m..h..F.,..I...X...m.h..E&.6.`..M.m..-..h.E.Z)6....Rm.m..h..F.,..I...X...m.h..

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14985), with no line terminators
Category:	dropped
Size (bytes):	14985
Entropy (8bit):	5.346597392884663
Encrypted:	false
SSDEEP:	384:MkJqnE1j+RH74i0PAxtC6XU9f8/4LGsA9R:MkJ31j643Pa06XU9f8/5sWR
MD5:	A4FD5AFBF57B5323F66B89860FBE6CDC
SHA1:	DCBC5AD54FB8FB200261B3330EB3605CB0374C91
SHA-256:	DBCE16F6D4AAD5450CF8B436A8E8556FE665AA336B6FE5FFD85ED637D1740901
SHA-512:	6095EDA3538A4F5E66F3FE65517512DB77C667D7D4C2C54110C4AC8C37309E201477BCF36E2CC92653E4A041E2129397C738EFD79A519D1342B845F64202DD97
Malicious:	false
Reputation:	low
Preview:	!function(a){var b=function(){window.asyncWebshims\|\|(window.asyncWebshims={cfg:[],ready:[]})},c=function(){window.jQuery&&(a(jQuery),a=function(){return window.webshims})};window.webshims={setOptions:function(){b(),window.asyncWebshims.cfg.push(arguments)},ready:function(){b(),window.asyncWebshims.ready.push(arguments)},activeLang:function(a){b(),window.asyncWebshims.lang=a},polyfill:function(a){b(),window.asyncWebshims.polyfill=a},_curScript:function(){var a,b,c,d=document.currentScript;if(!d){try{throw new Error("")}catch(e){c=(e.sourceURL\|\|e.stack\|\|"").split("\n"),c=((c[c.length-1]\|\|c[c.length-2]\|\|"").match(/(?:fil\|htt\|wid\|abo\|app\|res)(.)+/i)\|\|[""])[0].replace(/[\:\s$]+[\d\:$\(\s]+$/,"")}for(a=document.scripts\|\|document.getElementsByTagName("script"),b=0;b<a.length&&(!a[b].getAttribute("src")\|\|(d=a[b],"interactive"!=a[b].readyState&&c!=a[b].src));b++);}return d}()},window.webshim=window.webshims,window.webshims.timer=setInterval(c,0),c(),"function"==typeof define&&define.amd&&defi

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6590)
Category:	downloaded
Size (bytes):	11743
Entropy (8bit):	5.367231050189755
Encrypted:	false
SSDEEP:	192:kPzCvSMaV0ZATrR092MmQZcNt36XvuUkTxgYjijKDmfLwiWNoO22dHc:qzCKMPZATN09S0mtqXGqLGDMA22G
MD5:	C4B827BA72BDCFD5F4A5A53DFB9B66E4
SHA1:	21119919A0493831E96DA72D01F206ECA1A83A07
SHA-256:	89A6C4CE214F93B712D98AE8CEB927A55B91DC4FF2A668A97F28D125B372D51E
SHA-512:	4C29C23A03862CF2F6AE8E981C118728C2A454E27153B82354490DF9D928A050CE97DC4F246D496FE5057889EC141CB3AA36E27B58854E4EB61C8F0C84D05D47
Malicious:	false
Reputation:	low
URL:	https://cdn.gtranslate.net/widgets/latest/dropdown.js
Preview:	/!Copyright (C) GTranslate Inc./(function(){var gt=window.gtranslateSettings\|\|{};gt=gt[document.currentScript.getAttribute('data-gt-widget-id')]\|\|gt;var lang_array_english={"af":"Afrikaans","sq":"Albanian","am":"Amharic","ar":"Arabic","hy":"Armenian","az":"Azerbaijani","eu":"Basque","be":"Belarusian","bn":"Bengali","bs":"Bosnian","bg":"Bulgarian","ca":"Catalan","ceb":"Cebuano","ny":"Chichewa","zh-CN":"Chinese (Simplified)","zh-TW":"Chinese (Traditional)","co":"Corsican","hr":"Croatian","cs":"Czech","da":"Danish","nl":"Dutch","en":"English","eo":"Esperanto","et":"Estonian","tl":"Filipino","fi":"Finnish","fr":"French","fy":"Frisian","gl":"Galician","ka":"Georgian","de":"German","el":"Greek","gu":"Gujarati","ht":"Haitian Creole","ha":"Hausa","haw":"Hawaiian","iw":"Hebrew","hi":"Hindi","hmn":"Hmong","hu":"Hungarian","is":"Icelandic","ig":"Igbo","id":"Indonesian","ga":"Irish","it":"Italian","ja":"Japanese","jw":"Javanese","kn":"Kannada","kk":"Kazakh","km":"Khmer","ko":"Korean","ku":"Kurdi

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	76
Entropy (8bit):	4.776696756494574
Encrypted:	false
SSDEEP:	3:xPWBhn/WI7oSfAP7FnuX5jhnSvQ0iCR:xPWBhneI7PfAP7ijovd
MD5:	0EB4ED6A389547140EB697A738734C5B
SHA1:	0B07100DEE9BCD7834E55523B5A9CE3210DFACD6
SHA-256:	6B5188B2EAFAE1FBE69D27FBB514DFDE0597D0BE37ED1F01A14BC04D1D363962
SHA-512:	EE1B40B34344C5DD1414F56969B362E6B93F2D9C28115A66A652308777CF370848785D55D59D7F0AD8A2B57FB3191A376A3631406B2D478BAD152D85E2F29223
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISMwkHP9HIpsyzOBIFDe0jNlwSBQ1ZsmkfEgUND2q7OhIFDaqhtrMSBQ3hRl8DEgUNz2LUkA==?alt=proto
Preview:	CjYKBw3tIzZcGgAKBw1ZsmkfGgAKBw0Pars6GgAKBw2qobazGgAKBw3hRl8DGgAKBw3PYtSQGgA=

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65299)
Category:	downloaded
Size (bytes):	80420
Entropy (8bit):	5.182949713414269
Encrypted:	false
SSDEEP:	1536:p4SMTGR2t4n+3ifBHJR9WbUHk3j8YY+PwRM3CGJI9BqQM6kF:b4Fj8GPwRM3CiI9Bt8
MD5:	B75AE000439862B6A97D2129C85680E8
SHA1:	90D15036EF48FCB336A135BAE812B45669F19044
SHA-256:	9520018FA5D81F4E4DC9D06AFB576F90CBBABA209CFCC6CB60E1464647F7890B
SHA-512:	8BD7047C9C14C158843C529D0B57A7CF86511818FC610A3A401C854C5F766171E2EF0682AB27B1BD10FBE52E4D553B12893BFBACA5AA1BD639785C6646C3A7D0
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/bootstrap@5.2.3/dist/js/bootstrap.bundle.min.js
Preview:	/!. Bootstrap v5.2.3 (https://getbootstrap.com/). * Copyright 2011-2022 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap=e()}(this,(function(){"use strict";const t="transitionend",e=t=>{let e=t.getAttribute("data-bs-target");if(!e\|\|"#"===e){let i=t.getAttribute("href");if(!i\|\|!i.includes("#")&&!i.startsWith("."))return null;i.includes("#")&&!i.startsWith("#")&&(i=`#${i.split("#")[1]}`),e=i&&"#"!==i?i.trim():null}return e},i=t=>{const i=e(t);return i&&document.querySelector(i)?i:null},n=t=>{const i=e(t);return i?document.querySelector(i):null},s=e=>{e.dispatchEvent(new Event(t))},o=t=>!(!t\|\|"object"!=typeof t)&&(void 0!==t.jquery&&(t=t[0]),void 0!==t.nodeType),r=t=>o(t)?t.jquer

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65299)
Category:	dropped
Size (bytes):	80420
Entropy (8bit):	5.182949713414269
Encrypted:	false
SSDEEP:	1536:p4SMTGR2t4n+3ifBHJR9WbUHk3j8YY+PwRM3CGJI9BqQM6kF:b4Fj8GPwRM3CiI9Bt8
MD5:	B75AE000439862B6A97D2129C85680E8
SHA1:	90D15036EF48FCB336A135BAE812B45669F19044
SHA-256:	9520018FA5D81F4E4DC9D06AFB576F90CBBABA209CFCC6CB60E1464647F7890B
SHA-512:	8BD7047C9C14C158843C529D0B57A7CF86511818FC610A3A401C854C5F766171E2EF0682AB27B1BD10FBE52E4D553B12893BFBACA5AA1BD639785C6646C3A7D0
Malicious:	false
Reputation:	low
Preview:	/!. Bootstrap v5.2.3 (https://getbootstrap.com/). * Copyright 2011-2022 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap=e()}(this,(function(){"use strict";const t="transitionend",e=t=>{let e=t.getAttribute("data-bs-target");if(!e\|\|"#"===e){let i=t.getAttribute("href");if(!i\|\|!i.includes("#")&&!i.startsWith("."))return null;i.includes("#")&&!i.startsWith("#")&&(i=`#${i.split("#")[1]}`),e=i&&"#"!==i?i.trim():null}return e},i=t=>{const i=e(t);return i&&document.querySelector(i)?i:null},n=t=>{const i=e(t);return i?document.querySelector(i):null},s=e=>{e.dispatchEvent(new Event(t))},o=t=>!(!t\|\|"object"!=typeof t)&&(void 0!==t.jquery&&(t=t[0]),void 0!==t.nodeType),r=t=>o(t)?t.jquer

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (6050), with no line terminators
Category:	downloaded
Size (bytes):	6050
Entropy (8bit):	5.293468446962577
Encrypted:	false
SSDEEP:	96:Cjmg85xw0628A+ubusABQX7bhoqbBFTtZEvXYWAWIl8xPoNIkryY:m85q7289uB7bJbfJZMYWABl8xAWkT
MD5:	33041DEFED55364C074BB13480B5B570
SHA1:	8C2C4B8F3450A93BB911DB1D18DBFDF06B0E75D9
SHA-256:	B37B9B7FF9212118B628E8DE65184A154AABAF093744B194C8CD936A9E16CF46
SHA-512:	71A755BF3FD5A92FCD0C3E1986CC19AE27B8700ED63DFA9CAD69068732F5C10DB4FE8987397BE5A64A8A2928A1BA1F9D44324DA54633E0C6E3FF3A06E38D78ED
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/webshim/1.12.4/extras/modernizr-custom.js
Preview:	window.Modernizr=function(a,b,c){function d(a){r.cssText=a}function e(a,b){return typeof a===b}function f(a,b){return!!~(""+a).indexOf(b)}function g(a,b){for(var d in a){var e=a[d];if(!f(e,"-")&&r[e]!==c)return"pfx"==b?e:!0}return!1}function h(a,b,d){for(var f in a){var g=b[a[f]];if(g!==c)return d===!1?a[f]:e(g,"function")?g.bind(d\|\|b):g}return!1}function i(a,b,c){var d=a.charAt(0).toUpperCase()+a.slice(1),f=(a+" "+w.join(d+" ")+d).split(" ");return e(b,"string")\|\|e(b,"undefined")?g(f,b):(f=(a+" "+x.join(d+" ")+d).split(" "),h(f,b,c))}function j(){n.input=function(c){for(var d=0,e=c.length;e>d;d++)A[c[d]]=!!(c[d]in s);return A.list&&(A.list=!(!b.createElement("datalist")\|\|!a.HTMLDataListElement)),A}("autocomplete autofocus list placeholder max min multiple pattern required step".split(" ")),n.inputtypes=function(a){for(var d,e,f,g=0,h=a.length;h>g;g++)s.setAttribute("type",e=a[g]),d="text"!==s.type,d&&(s.value=t,s.style.cssText="position:absolute;visibility:hidden;",/^range$/.test(e)&&

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11103), with no line terminators
Category:	downloaded
Size (bytes):	11103
Entropy (8bit):	4.98925023573315
Encrypted:	false
SSDEEP:	96:88qvd92WfgWsys+Lx686y8VYvmrxBr7oQ3nLKuiXPIc4DVe7uAgym/3gUjagoHax:8BhsN+Lk6YimrxBr793LKuiU/lEO
MD5:	9E907522A817808A52EBB6F6B35952FF
SHA1:	BF0CFDE00F7275F5E8736116AE7B4254CEDA4D3F
SHA-256:	B2E30525C52899D73AA8B3505C858799FA803E21DA1057D395C6310E5C0216E3
SHA-512:	B163D22FEC495E12DB85BEE11D558935B2DBA461714557E944172500C99475C26664B568AB9171E5A8E597054E4B46C9F073047129591C77646E80219D192D3C
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/webshim/1.12.4/shims/styles/shim.css
Preview:	.ws-popover{-moz-box-sizing:content-box;box-sizing:content-box}.ws-popover ,.ws-popover:before,.ws-popover:after,.ws-popover :after,.ws-popover :before{-moz-box-sizing:content-box;box-sizing:content-box}.ws-important-hide{display:none!important;visibility:hidden!important;position:absolute;top:-999999px}[hidden]{display:none}article,aside,canvas,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio{display:none;height:0;width:0;overflow:hidden}video{overflow:hidden}video,audio[controls],audio.webshims-controls{display:inline-block;min-height:45px;min-width:40px}video>,audio>{visibility:hidden}.no-swf video>,.no-swf audio>*{visibility:inherit}.polyfill-mediaelement>iframe{border:0;padding:0;margin:0;width:100%;height:100%}.flashblocker-assumed{min-height:20px;min-width:20px;z-index:99999}.cue-display{position:absolute!important;margin:0;padding:0!important;max-width:100%!important;max-height:100%!important;border:0!important;background:none!impo

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6590)
Category:	dropped
Size (bytes):	11743
Entropy (8bit):	5.367231050189755
Encrypted:	false
SSDEEP:	192:kPzCvSMaV0ZATrR092MmQZcNt36XvuUkTxgYjijKDmfLwiWNoO22dHc:qzCKMPZATN09S0mtqXGqLGDMA22G
MD5:	C4B827BA72BDCFD5F4A5A53DFB9B66E4
SHA1:	21119919A0493831E96DA72D01F206ECA1A83A07
SHA-256:	89A6C4CE214F93B712D98AE8CEB927A55B91DC4FF2A668A97F28D125B372D51E
SHA-512:	4C29C23A03862CF2F6AE8E981C118728C2A454E27153B82354490DF9D928A050CE97DC4F246D496FE5057889EC141CB3AA36E27B58854E4EB61C8F0C84D05D47
Malicious:	false
Reputation:	low
Preview:	/!Copyright (C) GTranslate Inc./(function(){var gt=window.gtranslateSettings\|\|{};gt=gt[document.currentScript.getAttribute('data-gt-widget-id')]\|\|gt;var lang_array_english={"af":"Afrikaans","sq":"Albanian","am":"Amharic","ar":"Arabic","hy":"Armenian","az":"Azerbaijani","eu":"Basque","be":"Belarusian","bn":"Bengali","bs":"Bosnian","bg":"Bulgarian","ca":"Catalan","ceb":"Cebuano","ny":"Chichewa","zh-CN":"Chinese (Simplified)","zh-TW":"Chinese (Traditional)","co":"Corsican","hr":"Croatian","cs":"Czech","da":"Danish","nl":"Dutch","en":"English","eo":"Esperanto","et":"Estonian","tl":"Filipino","fi":"Finnish","fr":"French","fy":"Frisian","gl":"Galician","ka":"Georgian","de":"German","el":"Greek","gu":"Gujarati","ht":"Haitian Creole","ha":"Hausa","haw":"Hawaiian","iw":"Hebrew","hi":"Hindi","hmn":"Hmong","hu":"Hungarian","is":"Icelandic","ig":"Igbo","id":"Indonesian","ga":"Irish","it":"Italian","ja":"Japanese","jw":"Javanese","kn":"Kannada","kk":"Kazakh","km":"Khmer","ko":"Korean","ku":"Kurdi

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 512x512, components 3
Category:	dropped
Size (bytes):	10168
Entropy (8bit):	7.41804729567533
Encrypted:	false
SSDEEP:	192:zrjjjjjjjubbbZjcgMpmuuuuuupVuuuuuub2GB7YCzgSMq58tG2mmmmmmmmTHWE2:zmbbbZIgMpusAgSMqOtdmmmmmmmmM1V3
MD5:	4E70FD17402CB2EC6D4DDD18AF827C74
SHA1:	4F596E7C03C3AEDBD2476893B915AE7257711098
SHA-256:	8570DA32A63B2F7DBA8618E78BB58CBEA15AB15415CD406D7053ECAB993C58D5
SHA-512:	D20B95DB1928CFDDD2816F0EEA8C4696BEE72BC9D0CA2990DC803DA23C2F6C96C3813A812CFFFB1E9FAF915620DADDC92BEC2960C5F0C69EDCCA6872814B26BC
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..."..M.m....".m.h.r(..F..\.2)6..."..M.m...".m.h.r(..F..\.2)6..."..M.m...".m.h.r(..F..\.2)6..."..M.m...".m.h.r(..F..\.2)6..."..M.m...".m.h.r(..F..\.2)6..."..M.m...".m.h.r(..F..\.2)6..."..M.m...".m.h.r(..F..\.2)6..."..M.m...".m.h.r(..F..\.2)6....M.m.`..M.m..-..h.E.Z)6....Rm.m..h..F.,..I...X...m.h..E&.6.`..M.m..-..h.E.Z)6....Rm.m..h..F.,..I...X...m.h..

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6174)
Category:	dropped
Size (bytes):	6400
Entropy (8bit):	5.327356787472015
Encrypted:	false
SSDEEP:	96:R2Yy+YknoKzaKkqXh/+L8dtR0gmAWwo3E7z6d5db2GhN46F+kFx9q4UPUlutvHhi:RjDaKkGogsqpe5F7F2pZB1nn291
MD5:	70EBD294F00A67F4436CA38830DB543F
SHA1:	C0FE1791485B9032672AC7C64C27D7F357E84009
SHA-256:	1ADD4D2BC793A76766EE330D1AF9A2B35C58D125E6C1C8A9540127A5E22A0A43
SHA-512:	94C5F6BE0CF0EEC6F9A917EEBD5BF18A35A4B087F9DDB95355349575187D16B9D5AEB9166B082A0EF69581908D77F07A0B82BB416BC8BE6CB30BE49BE6F06F09
Malicious:	false
Reputation:	low
Preview:	/!. jQuery UI Position 1.10.3. * http://jqueryui.com. . Copyright 2013 jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. . http://api.jqueryui.com/position/. /.!function(a,b){function c(a,b,c){return[parseFloat(a[0])(n.test(a[0])?b/100:1),parseFloat(a[1])*(n.test(a[1])?c/100:1)]}function d(b,c){return parseInt(a.css(b,c),10)\|\|0}function e(b){var c=b[0];return 9===c.nodeType?{width:b.width(),height:b.height(),offset:{top:0,left:0}}:a.isWindow(c)?{width:b.width(),height:b.height(),offset:{top:b.scrollTop(),left:b.scrollLeft()}}:c.preventDefault?{width:0,height:0,offset:{top:c.pageY,left:c.pageX}}:{width:b.outerWidth(),height:b.outerHeight(),offset:b.offset()}}a.ui=a.ui\|\|{};var f,g=Math.max,h=Math.abs,i=Math.round,j=/left\|center\|right/,k=/top\|center\|bottom/,l=/[\+\-]\d+(\.[\d]+)?%?/,m=/^\w+/,n=/%$/,o=a.fn.position;a.position={scrollbarWidth:function(){if(f!==b)return f;var c,d,e=a("<div style='display:block;width:50px;heig

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	89942
Entropy (8bit):	5.290841420152801
Encrypted:	false
SSDEEP:	1536:uNjxXUcrnxD9o5EZxkMVC6YLtg7HtDuU3zh8cmnPMEgWzJvBQUmkm4M5gPtcNRQK:uhqmCU3zhINzfmR4lb3e34UQ47GKL
MD5:	E3CCB7FB2A471B100E7ED8183C55EF25
SHA1:	0801A72AEB865769B6051770BBC5F9485882F998
SHA-256:	DA4AD864A87FFCF71C851B5DF87F95CB242867F7B711CAE4C6133CC9CC0048F0
SHA-512:	B561E5BAD167B86D02EA7411969BEB121138429906D679F630E50C5A651E45E3E5E1EDC0922D1507A5B5BF7A0B8C5B5DD2154EB5143D3C7A527CDEAEEBF41791
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.6.2 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,y=n.hasOwnProperty,a=y.toString,l=a.call(Object),v={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},S=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|S).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32038)
Category:	dropped
Size (bytes):	95992
Entropy (8bit):	5.391333957965341
Encrypted:	false
SSDEEP:	1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmm:R+41ZqLTW8xRrqSb8qGH77da98Hr3
MD5:	F03E5A3BF534F4A738BC350631FD05BD
SHA1:	37B1DB88B57438F1072A8EBC7559C909C9D3A682
SHA-256:	AEC3D419D50F05781A96F223E18289AEB52598B5DB39BE82A7B71DC67D6A7947
SHA-512:	8EEEAEFB86CF5F9D09426814F7B60E1805E644CAC3F5AB382C4D393DD0B7AB272C1909A31A57E6D38D5ACF207555F097A64A6DD62F60A97093E97BB184126D2A
Malicious:	false
Reputation:	low
Preview:	/! jQuery v1.11.3 \| (c) 2005, 2015 jQuery Foundation, Inc. \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k={},l="1.11.3",m=function(a,b){return new m.fn.init(a,b)},n=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,o=/^-ms-/,p=/-([\da-z])/gi,q=function(a,b){return b.toUpperCase()};m.fn=m.prototype={jquery:l,constructor:m,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=m.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return m.each(this,a,b)},map:function(a){return this.pushStack(m.map(this,function(b,c){ret

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6174)
Category:	downloaded
Size (bytes):	6400
Entropy (8bit):	5.327356787472015
Encrypted:	false
SSDEEP:	96:R2Yy+YknoKzaKkqXh/+L8dtR0gmAWwo3E7z6d5db2GhN46F+kFx9q4UPUlutvHhi:RjDaKkGogsqpe5F7F2pZB1nn291
MD5:	70EBD294F00A67F4436CA38830DB543F
SHA1:	C0FE1791485B9032672AC7C64C27D7F357E84009
SHA-256:	1ADD4D2BC793A76766EE330D1AF9A2B35C58D125E6C1C8A9540127A5E22A0A43
SHA-512:	94C5F6BE0CF0EEC6F9A917EEBD5BF18A35A4B087F9DDB95355349575187D16B9D5AEB9166B082A0EF69581908D77F07A0B82BB416BC8BE6CB30BE49BE6F06F09
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/webshim/1.12.4/shims/plugins/jquery.ui.position.js
Preview:	/!. jQuery UI Position 1.10.3. * http://jqueryui.com. . Copyright 2013 jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. . http://api.jqueryui.com/position/. /.!function(a,b){function c(a,b,c){return[parseFloat(a[0])(n.test(a[0])?b/100:1),parseFloat(a[1])*(n.test(a[1])?c/100:1)]}function d(b,c){return parseInt(a.css(b,c),10)\|\|0}function e(b){var c=b[0];return 9===c.nodeType?{width:b.width(),height:b.height(),offset:{top:0,left:0}}:a.isWindow(c)?{width:b.width(),height:b.height(),offset:{top:b.scrollTop(),left:b.scrollLeft()}}:c.preventDefault?{width:0,height:0,offset:{top:c.pageY,left:c.pageX}}:{width:b.outerWidth(),height:b.outerHeight(),offset:b.offset()}}a.ui=a.ui\|\|{};var f,g=Math.max,h=Math.abs,i=Math.round,j=/left\|center\|right/,k=/top\|center\|bottom/,l=/[\+\-]\d+(\.[\d]+)?%?/,m=/^\w+/,n=/%$/,o=a.fn.position;a.position={scrollbarWidth:function(){if(f!==b)return f;var c,d,e=a("<div style='display:block;width:50px;heig

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15969), with no line terminators
Category:	dropped
Size (bytes):	15969
Entropy (8bit):	5.198410132994456
Encrypted:	false
SSDEEP:	384:HnRaLq1wgUucTYCnwIqO0Qq4E75uMb2wL8vbzNBkcCM4cyu7fkT7vCMXK:HRVwgZctnbEtuMb2wQfsdpcfkT7vdK
MD5:	124F1FA754BB3EE8B9CC88AD41F94E52
SHA1:	6513CF29DCAA9E8BAB13345C86D43148517CACCD
SHA-256:	6C82248AE73F44221791EFD2316A037158FA8D216CA28914EC01B073F84E0F1D
SHA-512:	3B7D7BC0FA49984F4E25EE7D2758C8FD729F6A4DCF3C9F1EC935E0215CC21843C0BE83DD360543A49207714A296504DC4779BBE250F7538AA2CEAEF6D436E695
Malicious:	false
Reputation:	low
Preview:	webshims.register("form-validation",function(a,b,c,d,e,f){"use strict";var g="webkitURL"in c,h=Modernizr.formvalidation&&!b.bugs.bustedValidity,i=g&&h,j=i&&parseFloat((navigator.userAgent.match(/Safari\/([\d\.]+)/)\|\|["","999999"])[1],10),k=f.iVal;k.fieldWrapper\|\|(k.fieldWrapper=":not(span), :not(label), :not(em), :not(strong), :not(p)");var l=k.errorClass\|\|(k.errorClass="user-error"),m=k.successClass\|\|"user-success",n=k.errorWrapperClass\|\|(k.errorWrapperClass="ws-invalid"),o=k.successWrapperClass\|\|(k.successWrapperClass="ws-success"),p=k.errorBoxClass\|\|(k.errorBoxClass="ws-errorbox"),q=k.errorMessageClass\|\|(k.errorMessageClass="ws-errormessage"),r={checkbox:1,radio:1},s=b.loader,t=s.addModule,u=a([]),v=function(){return!a.prop(this,"form")},w=function(b){b=a(b);var c,e,f=u;return"radio"==b[0].type&&(e=b.prop("form"),c=b[0].name,f=c?e?a(e).jProp(c):a(d.getElementsByName(c)).filter(v):b,f=f.filter('[type="radio"]')),f},x=function(b,c){var d;return a.each(b,function(b,e){return e?(d=b+a.p

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14985), with no line terminators
Category:	downloaded
Size (bytes):	14985
Entropy (8bit):	5.346597392884663
Encrypted:	false
SSDEEP:	384:MkJqnE1j+RH74i0PAxtC6XU9f8/4LGsA9R:MkJ31j643Pa06XU9f8/5sWR
MD5:	A4FD5AFBF57B5323F66B89860FBE6CDC
SHA1:	DCBC5AD54FB8FB200261B3330EB3605CB0374C91
SHA-256:	DBCE16F6D4AAD5450CF8B436A8E8556FE665AA336B6FE5FFD85ED637D1740901
SHA-512:	6095EDA3538A4F5E66F3FE65517512DB77C667D7D4C2C54110C4AC8C37309E201477BCF36E2CC92653E4A041E2129397C738EFD79A519D1342B845F64202DD97
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/webshim/1.12.4/polyfiller.js
Preview:	!function(a){var b=function(){window.asyncWebshims\|\|(window.asyncWebshims={cfg:[],ready:[]})},c=function(){window.jQuery&&(a(jQuery),a=function(){return window.webshims})};window.webshims={setOptions:function(){b(),window.asyncWebshims.cfg.push(arguments)},ready:function(){b(),window.asyncWebshims.ready.push(arguments)},activeLang:function(a){b(),window.asyncWebshims.lang=a},polyfill:function(a){b(),window.asyncWebshims.polyfill=a},_curScript:function(){var a,b,c,d=document.currentScript;if(!d){try{throw new Error("")}catch(e){c=(e.sourceURL\|\|e.stack\|\|"").split("\n"),c=((c[c.length-1]\|\|c[c.length-2]\|\|"").match(/(?:fil\|htt\|wid\|abo\|app\|res)(.)+/i)\|\|[""])[0].replace(/[\:\s$]+[\d\:$\(\s]+$/,"")}for(a=document.scripts\|\|document.getElementsByTagName("script"),b=0;b<a.length&&(!a[b].getAttribute("src")\|\|(d=a[b],"interactive"!=a[b].readyState&&c!=a[b].src));b++);}return d}()},window.webshim=window.webshims,window.webshims.timer=setInterval(c,0),c(),"function"==typeof define&&define.amd&&defi

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	20824
Entropy (8bit):	4.885151735629484
Encrypted:	false
SSDEEP:	192:wPMJS9gNeICW1kABrqADc8DCiwhpLZ+Xjngvl5e0sbhsf5hsfMhsfbhsfHyYGtao:K2JKICiZ/VCZZ0cCEHE
MD5:	EC052A1882C8B76DECB84A4B2003000E
SHA1:	7C68E7755F9EF841D1D6AFE0DD5140B0F7E6E1B8
SHA-256:	AE4D68315359B4ADC4D071F43B303EA839EE65D9D8133EDBAB93FDA4FEBCE81F
SHA-512:	863F4F3BA12A5BEEE952BF34AE97054A63D5A07C236FBC082DE6045B18B52BBD56F93AD760A1AFE071C502A349D2F5FA7E141E530032949812D8E5510579CD06
Malicious:	false
Reputation:	low
URL:	https://meta.com-businesshelp.com/assets/main.css
Preview:	.html, body {. height: 100%;. margin: 0;.}..body {. display: flex;. flex-direction: column;.}...wrapper {. flex: 1;. display: flex;. flex-direction: column;.}..main {. flex: 1;.}..footer {. background-color: #f0f0f0; . padding: 10px;.}...*,:before,:after {. box-sizing: border-box;. border-width: 0;. border-style: solid;. border-color: #e5e7eb.}..:before,:after {. --tw-content: "".}..html {. line-height: 1.5;. -webkit-text-size-adjust: 100%;. -moz-tab-size: 4;. -o-tab-size: 4;. tab-size: 4;. font-family: ui-sans-serif,system-ui,-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica Neue,Arial,Noto Sans,sans-serif,"Apple Color Emoji","Segoe UI Emoji",Segoe UI Symbol,"Noto Color Emoji".}..body {. width: 100%;. margin: 0;. line-height: inherit.}..hr {. height: 0;. color: inherit;. border-top-width: 1px.}..abbr:where([title]) {. -webkit-text-decoration: underline dotted;. text-decoration: underline do

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1600 x 424, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	31709
Entropy (8bit):	7.769531917650097
Encrypted:	false
SSDEEP:	768:YM2KY7PKMJUbQuk2MHgyXztTlCqCnrDhBnWzHXb:sCMJJukiaz1lu/hZWv
MD5:	EDE180AC652AE72B6BA133B28660942E
SHA1:	737CB69356A86C262C7F170AAB5AF457E9242B96
SHA-256:	5B4980DA8550EE082F141A8030C2068129D8FCB1D18E3C4FB1C5039D930FC2CE
SHA-512:	53CDD206842F79D0CEE439D410C6D1E210DB7DC9B3E9A7BA965AD52333EEB7ECA8EA42EC34166C2E3A6A9487BCED0A8E17DC0F6B219164CD9D06610656D6356D
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/assets/?revision=646225600660159&name=desktop-creating-an-account-banner&density=1
Preview:	.PNG........IHDR...@...........).....pHYs...........~... .IDATx....p\.u........(..$J.$Y.(.").J.m.P.g.....f.N...k..dS.........$3...'..\.......E...oY .{.._.HJ.E..D.. .....z.\..j.xt......4....[.y...S.L&......... J.9......... j.@........@.............!...........C.........."...........D........................9. ........ r.@........@.............!...........C.........."...........D........................9. ........ r.@........@.............!...........C.........."...........D........................9. ........ r.@........@.rJ......<u.ADR....KD..Q.e{.......d2.)....b....j..g.Uq..............p .....b.....".J...@F4.i..}....`#.....b...q.>..... +C..n...l....C......"...`.j.....ml!.........C.....~.....A..9Z...".....b....Z...y.. g5:..m..`"......s...g......C.......@C.+.........!...........v....<...... V..r....ay......s..c.6..'.e....pttL....r......+*..;..o.....>. .jt.z..q.....@....xYv.......?..L..4L.....B..u......o...q...q.....n2..x.........^\|..p"..%...6..7..Y.._...

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32038)
Category:	downloaded
Size (bytes):	95992
Entropy (8bit):	5.391333957965341
Encrypted:	false
SSDEEP:	1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmm:R+41ZqLTW8xRrqSb8qGH77da98Hr3
MD5:	F03E5A3BF534F4A738BC350631FD05BD
SHA1:	37B1DB88B57438F1072A8EBC7559C909C9D3A682
SHA-256:	AEC3D419D50F05781A96F223E18289AEB52598B5DB39BE82A7B71DC67D6A7947
SHA-512:	8EEEAEFB86CF5F9D09426814F7B60E1805E644CAC3F5AB382C4D393DD0B7AB272C1909A31A57E6D38D5ACF207555F097A64A6DD62F60A97093E97BB184126D2A
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js
Preview:	/! jQuery v1.11.3 \| (c) 2005, 2015 jQuery Foundation, Inc. \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k={},l="1.11.3",m=function(a,b){return new m.fn.init(a,b)},n=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,o=/^-ms-/,p=/-([\da-z])/gi,q=function(a,b){return b.toUpperCase()};m.fn=m.prototype={jquery:l,constructor:m,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=m.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return m.each(this,a,b)},map:function(a){return this.pushStack(m.map(this,function(b,c){ret

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (6050), with no line terminators
Category:	dropped
Size (bytes):	6050
Entropy (8bit):	5.293468446962577
Encrypted:	false
SSDEEP:	96:Cjmg85xw0628A+ubusABQX7bhoqbBFTtZEvXYWAWIl8xPoNIkryY:m85q7289uB7bJbfJZMYWABl8xAWkT
MD5:	33041DEFED55364C074BB13480B5B570
SHA1:	8C2C4B8F3450A93BB911DB1D18DBFDF06B0E75D9
SHA-256:	B37B9B7FF9212118B628E8DE65184A154AABAF093744B194C8CD936A9E16CF46
SHA-512:	71A755BF3FD5A92FCD0C3E1986CC19AE27B8700ED63DFA9CAD69068732F5C10DB4FE8987397BE5A64A8A2928A1BA1F9D44324DA54633E0C6E3FF3A06E38D78ED
Malicious:	false
Reputation:	low
Preview:	window.Modernizr=function(a,b,c){function d(a){r.cssText=a}function e(a,b){return typeof a===b}function f(a,b){return!!~(""+a).indexOf(b)}function g(a,b){for(var d in a){var e=a[d];if(!f(e,"-")&&r[e]!==c)return"pfx"==b?e:!0}return!1}function h(a,b,d){for(var f in a){var g=b[a[f]];if(g!==c)return d===!1?a[f]:e(g,"function")?g.bind(d\|\|b):g}return!1}function i(a,b,c){var d=a.charAt(0).toUpperCase()+a.slice(1),f=(a+" "+w.join(d+" ")+d).split(" ");return e(b,"string")\|\|e(b,"undefined")?g(f,b):(f=(a+" "+x.join(d+" ")+d).split(" "),h(f,b,c))}function j(){n.input=function(c){for(var d=0,e=c.length;e>d;d++)A[c[d]]=!!(c[d]in s);return A.list&&(A.list=!(!b.createElement("datalist")\|\|!a.HTMLDataListElement)),A}("autocomplete autofocus list placeholder max min multiple pattern required step".split(" ")),n.inputtypes=function(a){for(var d,e,f,g=0,h=a.length;h>g;g++)s.setAttribute("type",e=a[g]),d="text"!==s.type,d&&(s.value=t,s.style.cssText="position:absolute;visibility:hidden;",/^range$/.test(e)&&

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 30, 2024 07:37:36.342884064 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:36.342921019 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:36.342979908 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:36.343333006 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:36.343346119 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:36.803683996 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:36.804086924 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:36.804102898 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:36.805485964 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:36.805568933 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:36.807454109 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:36.807517052 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:36.808372974 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:36.808386087 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:36.855596066 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.072175980 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.072213888 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.072241068 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.072266102 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.072264910 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.072288036 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.072316885 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.072319984 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.072359085 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.072366953 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.072693110 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.072737932 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.072746038 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.077222109 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.077253103 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.077280998 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.077290058 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.077300072 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.077347040 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.084517002 CEST	49709	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.084563971 CEST	443	49709	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.084649086 CEST	49709	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.084880114 CEST	49709	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.084892988 CEST	443	49709	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.093668938 CEST	49710	443	192.168.2.16	104.17.25.14
Aug 30, 2024 07:37:39.093699932 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.093784094 CEST	49710	443	192.168.2.16	104.17.25.14
Aug 30, 2024 07:37:39.093966007 CEST	49710	443	192.168.2.16	104.17.25.14
Aug 30, 2024 07:37:39.093976974 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.094342947 CEST	49711	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:39.094382048 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.094444036 CEST	49711	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:39.094610929 CEST	49711	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:39.094624996 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.121602058 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.158754110 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.158808947 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.158967972 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.158977032 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.177344084 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.177373886 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.177416086 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.177443981 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.177501917 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.177501917 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.177510977 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.177568913 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.177766085 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.178199053 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.178231001 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.178247929 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.178256035 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.178294897 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.178303003 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.178309917 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.178359032 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.178364992 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.179086924 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.179119110 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.179137945 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.179143906 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.179177999 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.179192066 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.179198027 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.179239035 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.180030107 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.180157900 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.180186987 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.180203915 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.180213928 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.180254936 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.180260897 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.232714891 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.232988119 CEST	49673	443	192.168.2.16	204.79.197.203
Aug 30, 2024 07:37:39.245517015 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.245614052 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.245649099 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.245757103 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.245764017 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.245807886 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.263891935 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.263957024 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.283493042 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.283694029 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.283830881 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.283874035 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.283894062 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.283901930 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.283915997 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.284801960 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.284837961 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.284862995 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.284871101 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.284904957 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.284926891 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.285705090 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.285764933 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.285774946 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.285780907 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.285810947 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.285830021 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.286699057 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.286758900 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.286770105 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.286819935 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.287623882 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.287679911 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.288577080 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.288624048 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.288633108 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.288639069 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.288696051 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.289511919 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.289582014 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.289592981 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.289649963 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.332292080 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.332331896 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.332499027 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.332499027 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.332506895 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.370433092 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.370481968 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.370515108 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.370614052 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.370614052 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.370614052 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.370635986 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.370692015 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.396411896 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.396452904 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.396496058 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.396528006 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.396594048 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.396594048 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.396594048 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.396594048 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.396603107 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.396728039 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.396763086 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.396763086 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.396773100 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.396821976 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.396857977 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.396893024 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.396913052 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.396919012 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.396929979 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.396935940 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.396954060 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.396959066 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.396991014 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.397634983 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.397686958 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.397690058 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.397696972 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.397730112 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.397732019 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.397743940 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.397773027 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.397814989 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.397849083 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.397866964 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.397872925 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.397901058 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.398576975 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.398618937 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.398631096 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.398637056 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.398675919 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.398729086 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.398782969 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.398789883 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.398832083 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.401443958 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.401460886 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.401492119 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.401518106 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.401525974 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.401561975 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.401607990 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.401664019 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.401670933 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.419229984 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.419250965 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.419281960 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.419291973 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.419300079 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.419450045 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.419450045 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.457181931 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.457200050 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.457230091 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.457266092 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.457297087 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.457391977 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.457391977 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.457391977 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.457401991 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.457443953 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.478832960 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.478852034 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.478873968 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.479028940 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.479028940 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.479041100 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.496392965 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.496407986 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.496567011 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.496579885 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.496634007 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.496757030 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.496790886 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.496813059 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.496819019 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.496845007 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.496963024 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.496977091 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.497014046 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.497023106 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.497046947 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.497066975 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.497114897 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.497121096 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.497162104 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.501180887 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.501199007 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.501270056 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.501281023 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.501291037 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.501318932 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.501343966 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.501352072 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.501363039 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.506136894 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.506156921 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.506217957 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.506227970 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.536725044 CEST	49673	443	192.168.2.16	204.79.197.203
Aug 30, 2024 07:37:39.543093920 CEST	443	49709	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.543426991 CEST	49709	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.543445110 CEST	443	49709	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.543750048 CEST	443	49709	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.544042110 CEST	49709	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.544075966 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.544095039 CEST	443	49709	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.544107914 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.544137955 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.544146061 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.544183969 CEST	49709	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.544447899 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.550308943 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.550501108 CEST	49710	443	192.168.2.16	104.17.25.14
Aug 30, 2024 07:37:39.550514936 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.551398039 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.551466942 CEST	49710	443	192.168.2.16	104.17.25.14
Aug 30, 2024 07:37:39.552330017 CEST	49710	443	192.168.2.16	104.17.25.14
Aug 30, 2024 07:37:39.552381992 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.552450895 CEST	49710	443	192.168.2.16	104.17.25.14
Aug 30, 2024 07:37:39.552457094 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.558203936 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.558450937 CEST	49711	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:39.558471918 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.559362888 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.559433937 CEST	49711	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:39.560625076 CEST	49711	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:39.560682058 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.560805082 CEST	49711	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:39.560812950 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.565676928 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.565712929 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.565738916 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.565746069 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.565756083 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.565781116 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.583174944 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.583190918 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.583225012 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.583257914 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.583267927 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.583298922 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.583317995 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.583807945 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.583827972 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.583862066 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.583892107 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.583899021 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.583928108 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.583940983 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.584333897 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.584348917 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.584398985 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.584414005 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.584419966 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.584450006 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.584470034 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.584506035 CEST	443	49709	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.584598064 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.584647894 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.584697962 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.584707022 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.584733009 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.584775925 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.584786892 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.584830046 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.593154907 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.593173027 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.593250990 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.593257904 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.593334913 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.598594904 CEST	49709	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.598711014 CEST	49710	443	192.168.2.16	104.17.25.14
Aug 30, 2024 07:37:39.613614082 CEST	49711	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:39.631031036 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.631052971 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.631284952 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.631293058 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.631345987 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.652653933 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.652693033 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.652734041 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.652740955 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.652790070 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.656431913 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.656929970 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.656991005 CEST	49711	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:39.657001019 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.657046080 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.657078028 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.657092094 CEST	49711	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:39.657098055 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.657120943 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.657140970 CEST	49711	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:39.657147884 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.657187939 CEST	49711	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:39.657804966 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.657847881 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.657890081 CEST	49711	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:39.657896996 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.666994095 CEST	443	49709	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.667027950 CEST	443	49709	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.667068958 CEST	443	49709	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.667083979 CEST	49709	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.667092085 CEST	443	49709	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.667120934 CEST	443	49709	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.667140007 CEST	49709	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.667145014 CEST	443	49709	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.667181969 CEST	49709	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.667181969 CEST	443	49709	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.667191982 CEST	443	49709	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.667243004 CEST	49709	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.667247057 CEST	443	49709	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.667702913 CEST	443	49709	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.667749882 CEST	49709	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.667752981 CEST	443	49709	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.667761087 CEST	443	49709	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.667798042 CEST	49709	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.670062065 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.670084953 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.670155048 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.670161963 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.670207977 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.670599937 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.670615911 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.670659065 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.670665979 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.670679092 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.670703888 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.671021938 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.671042919 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.671093941 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.671103001 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.671143055 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.671297073 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.671329975 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.671369076 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.671375990 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.671416044 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.671581030 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.671596050 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.671634912 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.671642065 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.671674013 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.671694994 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.671837091 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.671854019 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.671900988 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.671907902 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.671952009 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.672312975 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.672367096 CEST	49711	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:39.672379017 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.678041935 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.678085089 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.678129911 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.678160906 CEST	49710	443	192.168.2.16	104.17.25.14
Aug 30, 2024 07:37:39.678160906 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.678173065 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.678205967 CEST	49710	443	192.168.2.16	104.17.25.14
Aug 30, 2024 07:37:39.678231001 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.678275108 CEST	49710	443	192.168.2.16	104.17.25.14
Aug 30, 2024 07:37:39.678950071 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.679008007 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.679032087 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.679055929 CEST	49710	443	192.168.2.16	104.17.25.14
Aug 30, 2024 07:37:39.679064035 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.679117918 CEST	49710	443	192.168.2.16	104.17.25.14
Aug 30, 2024 07:37:39.679862022 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.679878950 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.679954052 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.679961920 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.680011034 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.682821989 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.717775106 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.717798948 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.717839003 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.717902899 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.717912912 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.717931986 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.717952013 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.725600958 CEST	49710	443	192.168.2.16	104.17.25.14
Aug 30, 2024 07:37:39.725604057 CEST	49711	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:39.725610971 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.739675045 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.739701033 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.739897013 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.739907026 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.739959002 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.745392084 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.745479107 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.745528936 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.745537996 CEST	49711	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:39.745549917 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.745592117 CEST	49711	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:39.745598078 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.746375084 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.746423006 CEST	49711	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:39.746429920 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.746722937 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.746758938 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.746773005 CEST	49711	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:39.746781111 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.746810913 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.746819973 CEST	49711	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:39.746825933 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.746870995 CEST	49711	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:39.746879101 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.747612953 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.747641087 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.747668028 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.747679949 CEST	49711	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:39.747689009 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.747709990 CEST	49711	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:39.748409986 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.748439074 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.748460054 CEST	49711	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:39.748469114 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.748497963 CEST	49711	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:39.748503923 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.749294043 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.749325991 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.749347925 CEST	49711	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:39.749353886 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.749389887 CEST	49711	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:39.754292011 CEST	443	49709	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.754367113 CEST	443	49709	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.754394054 CEST	443	49709	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.754420996 CEST	49709	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.754430056 CEST	443	49709	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.754472971 CEST	49709	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.754478931 CEST	443	49709	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.754507065 CEST	443	49709	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.754549026 CEST	49709	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.754729033 CEST	49709	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.754740000 CEST	443	49709	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.757256985 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.757281065 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.757327080 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.757333994 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.757361889 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.757384062 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.757782936 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.757801056 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.757863045 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.757869959 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.757875919 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.757894993 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.757920027 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.758116961 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.758157015 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.758183956 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.758189917 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.758200884 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.758229971 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.758438110 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.758457899 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.758486986 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.758497953 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.758503914 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.758533955 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.758572102 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.758812904 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.758829117 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.758882046 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.758894920 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.758944988 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.764894962 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.764921904 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.764959097 CEST	49710	443	192.168.2.16	104.17.25.14
Aug 30, 2024 07:37:39.764967918 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.765014887 CEST	49710	443	192.168.2.16	104.17.25.14
Aug 30, 2024 07:37:39.765028954 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.765113115 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.765140057 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.765153885 CEST	49710	443	192.168.2.16	104.17.25.14
Aug 30, 2024 07:37:39.765158892 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.765182972 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.765197992 CEST	49710	443	192.168.2.16	104.17.25.14
Aug 30, 2024 07:37:39.765203953 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.765248060 CEST	49710	443	192.168.2.16	104.17.25.14
Aug 30, 2024 07:37:39.765974998 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.766024113 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.766063929 CEST	49710	443	192.168.2.16	104.17.25.14
Aug 30, 2024 07:37:39.766068935 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.766472101 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.766525984 CEST	49710	443	192.168.2.16	104.17.25.14
Aug 30, 2024 07:37:39.766530037 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.766779900 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.766829967 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.766963005 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.766998053 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.767024040 CEST	49710	443	192.168.2.16	104.17.25.14
Aug 30, 2024 07:37:39.767025948 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.767035007 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.767076015 CEST	49710	443	192.168.2.16	104.17.25.14
Aug 30, 2024 07:37:39.767081976 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.767119884 CEST	49710	443	192.168.2.16	104.17.25.14
Aug 30, 2024 07:37:39.767123938 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.767695904 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.767726898 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.767743111 CEST	49710	443	192.168.2.16	104.17.25.14
Aug 30, 2024 07:37:39.767748117 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.767788887 CEST	49710	443	192.168.2.16	104.17.25.14
Aug 30, 2024 07:37:39.767792940 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.804749966 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.804770947 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.804811954 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.804872990 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.804900885 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.805032969 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.821604013 CEST	49710	443	192.168.2.16	104.17.25.14
Aug 30, 2024 07:37:39.821610928 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.826589108 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.826622009 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.826644897 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.826662064 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.826674938 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.826699018 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.826745033 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.834275961 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.834287882 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.834319115 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.834352970 CEST	49711	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:39.834361076 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.834374905 CEST	49711	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:39.834392071 CEST	49711	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:39.836067915 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.836107969 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.836138010 CEST	49711	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:39.836143017 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.836160898 CEST	49711	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:39.836182117 CEST	49711	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:39.836395025 CEST	49711	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:39.836406946 CEST	443	49711	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:39.844234943 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.844260931 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.844326019 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.844337940 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.844366074 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.844775915 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.844796896 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.844837904 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.844845057 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.844873905 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.844995022 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.845007896 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.845065117 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.845072985 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.845113039 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.845144033 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.845163107 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.845169067 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.845201969 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.845642090 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.845659971 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.845710993 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.845719099 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.845767975 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.851846933 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.851897955 CEST	49710	443	192.168.2.16	104.17.25.14
Aug 30, 2024 07:37:39.851903915 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.851939917 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.851983070 CEST	49710	443	192.168.2.16	104.17.25.14
Aug 30, 2024 07:37:39.851985931 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.851994991 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.852036953 CEST	49710	443	192.168.2.16	104.17.25.14
Aug 30, 2024 07:37:39.852061987 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.852068901 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.852113008 CEST	49710	443	192.168.2.16	104.17.25.14
Aug 30, 2024 07:37:39.852813959 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.852819920 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.852852106 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.852879047 CEST	49710	443	192.168.2.16	104.17.25.14
Aug 30, 2024 07:37:39.852885008 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.852894068 CEST	49710	443	192.168.2.16	104.17.25.14
Aug 30, 2024 07:37:39.852920055 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.852972031 CEST	49710	443	192.168.2.16	104.17.25.14
Aug 30, 2024 07:37:39.852977991 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.853018999 CEST	49710	443	192.168.2.16	104.17.25.14
Aug 30, 2024 07:37:39.853872061 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.853903055 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.853926897 CEST	49710	443	192.168.2.16	104.17.25.14
Aug 30, 2024 07:37:39.853929996 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.853946924 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.853960991 CEST	49710	443	192.168.2.16	104.17.25.14
Aug 30, 2024 07:37:39.853979111 CEST	49710	443	192.168.2.16	104.17.25.14
Aug 30, 2024 07:37:39.853981972 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.853998899 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.854027033 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.854053020 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.854060888 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.854083061 CEST	49710	443	192.168.2.16	104.17.25.14
Aug 30, 2024 07:37:39.854089022 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.854100943 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.854135036 CEST	49710	443	192.168.2.16	104.17.25.14
Aug 30, 2024 07:37:39.854654074 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.854711056 CEST	49710	443	192.168.2.16	104.17.25.14
Aug 30, 2024 07:37:39.854713917 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.854741096 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.854753017 CEST	49710	443	192.168.2.16	104.17.25.14
Aug 30, 2024 07:37:39.854779005 CEST	49710	443	192.168.2.16	104.17.25.14
Aug 30, 2024 07:37:39.854922056 CEST	49710	443	192.168.2.16	104.17.25.14
Aug 30, 2024 07:37:39.854933023 CEST	443	49710	104.17.25.14	192.168.2.16
Aug 30, 2024 07:37:39.865693092 CEST	49713	443	192.168.2.16	104.17.24.14
Aug 30, 2024 07:37:39.865725994 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:39.865796089 CEST	49713	443	192.168.2.16	104.17.24.14
Aug 30, 2024 07:37:39.865982056 CEST	49713	443	192.168.2.16	104.17.24.14
Aug 30, 2024 07:37:39.866004944 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:39.891565084 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.891583920 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.891680002 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.891705036 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.891849995 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.913372993 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.913395882 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.913568974 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.913589001 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.913645029 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.931219101 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.931241989 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.931421995 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.931442976 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.931504011 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.931669950 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.931688070 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.931742907 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.931750059 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.931777000 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.931796074 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.931802988 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.931827068 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.931874990 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.932076931 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.932090998 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.932142019 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.932148933 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.932192087 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.940553904 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.940576077 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.940670967 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.940686941 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.940710068 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.940716028 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.940733910 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.940740108 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.940747976 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.940773964 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.940815926 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.978621960 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.978745937 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.980926991 CEST	49714	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.980958939 CEST	443	49714	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:39.981045961 CEST	49714	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.981298923 CEST	49714	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:39.981311083 CEST	443	49714	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:40.000022888 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:40.000049114 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:40.000145912 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:40.000159979 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:40.000319958 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:40.000344038 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:40.000372887 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:40.000380993 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:40.000416040 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:40.011641979 CEST	49716	443	192.168.2.16	157.240.253.1
Aug 30, 2024 07:37:40.011651993 CEST	443	49716	157.240.253.1	192.168.2.16
Aug 30, 2024 07:37:40.011728048 CEST	49716	443	192.168.2.16	157.240.253.1
Aug 30, 2024 07:37:40.011962891 CEST	49716	443	192.168.2.16	157.240.253.1
Aug 30, 2024 07:37:40.011971951 CEST	443	49716	157.240.253.1	192.168.2.16
Aug 30, 2024 07:37:40.018002987 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:40.018023968 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:40.018115997 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:40.018137932 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:40.018172026 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:40.018220901 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:40.018228054 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:40.018281937 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:40.018287897 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:40.018316031 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:40.018354893 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:40.018364906 CEST	443	49705	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:40.018389940 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:40.018389940 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:40.018404961 CEST	49705	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:40.127440929 CEST	49717	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:40.127461910 CEST	443	49717	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:40.127520084 CEST	49717	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:40.127944946 CEST	49718	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:40.127954006 CEST	443	49718	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:40.128004074 CEST	49718	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:40.129257917 CEST	49717	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:40.129275084 CEST	443	49717	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:40.129770994 CEST	49718	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:40.129781961 CEST	443	49718	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:40.137202978 CEST	49721	443	192.168.2.16	104.26.13.42
Aug 30, 2024 07:37:40.137227058 CEST	443	49721	104.26.13.42	192.168.2.16
Aug 30, 2024 07:37:40.137274981 CEST	49721	443	192.168.2.16	104.26.13.42
Aug 30, 2024 07:37:40.137556076 CEST	49721	443	192.168.2.16	104.26.13.42
Aug 30, 2024 07:37:40.137567997 CEST	443	49721	104.26.13.42	192.168.2.16
Aug 30, 2024 07:37:40.137595892 CEST	49673	443	192.168.2.16	204.79.197.203
Aug 30, 2024 07:37:40.318794966 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.319004059 CEST	49713	443	192.168.2.16	104.17.24.14
Aug 30, 2024 07:37:40.319022894 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.320135117 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.320198059 CEST	49713	443	192.168.2.16	104.17.24.14
Aug 30, 2024 07:37:40.322791100 CEST	49713	443	192.168.2.16	104.17.24.14
Aug 30, 2024 07:37:40.322890997 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.322962999 CEST	49713	443	192.168.2.16	104.17.24.14
Aug 30, 2024 07:37:40.322973967 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.372644901 CEST	49713	443	192.168.2.16	104.17.24.14
Aug 30, 2024 07:37:40.446583986 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.446619987 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.446664095 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.446685076 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.446698904 CEST	49713	443	192.168.2.16	104.17.24.14
Aug 30, 2024 07:37:40.446708918 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.446734905 CEST	49713	443	192.168.2.16	104.17.24.14
Aug 30, 2024 07:37:40.446737051 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.446780920 CEST	49713	443	192.168.2.16	104.17.24.14
Aug 30, 2024 07:37:40.446794987 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.446839094 CEST	49713	443	192.168.2.16	104.17.24.14
Aug 30, 2024 07:37:40.447231054 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.447556019 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.447597980 CEST	49713	443	192.168.2.16	104.17.24.14
Aug 30, 2024 07:37:40.447604895 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.456546068 CEST	443	49714	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:40.458086014 CEST	49714	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:40.458098888 CEST	443	49714	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:40.458374023 CEST	443	49714	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:40.459337950 CEST	49714	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:40.459391117 CEST	443	49714	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:40.459484100 CEST	49714	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:40.499598980 CEST	49713	443	192.168.2.16	104.17.24.14
Aug 30, 2024 07:37:40.499625921 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.504507065 CEST	443	49714	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:40.533083916 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.533111095 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.533135891 CEST	49713	443	192.168.2.16	104.17.24.14
Aug 30, 2024 07:37:40.533148050 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.533189058 CEST	49713	443	192.168.2.16	104.17.24.14
Aug 30, 2024 07:37:40.533195019 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.533263922 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.533293962 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.533307076 CEST	49713	443	192.168.2.16	104.17.24.14
Aug 30, 2024 07:37:40.533313036 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.533349037 CEST	49713	443	192.168.2.16	104.17.24.14
Aug 30, 2024 07:37:40.533354998 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.534060001 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.534087896 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.534111023 CEST	49713	443	192.168.2.16	104.17.24.14
Aug 30, 2024 07:37:40.534118891 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.534159899 CEST	49713	443	192.168.2.16	104.17.24.14
Aug 30, 2024 07:37:40.534506083 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.534624100 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.534660101 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.534668922 CEST	49713	443	192.168.2.16	104.17.24.14
Aug 30, 2024 07:37:40.534674883 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.534709930 CEST	49713	443	192.168.2.16	104.17.24.14
Aug 30, 2024 07:37:40.534715891 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.535422087 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.535449982 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.535470963 CEST	49713	443	192.168.2.16	104.17.24.14
Aug 30, 2024 07:37:40.535475969 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.535486937 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.535531044 CEST	49713	443	192.168.2.16	104.17.24.14
Aug 30, 2024 07:37:40.535537004 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.535579920 CEST	49713	443	192.168.2.16	104.17.24.14
Aug 30, 2024 07:37:40.535584927 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.536305904 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.536355972 CEST	49713	443	192.168.2.16	104.17.24.14
Aug 30, 2024 07:37:40.536362886 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.578605890 CEST	49713	443	192.168.2.16	104.17.24.14
Aug 30, 2024 07:37:40.578632116 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.582036972 CEST	443	49717	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:40.582278013 CEST	49717	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:40.582288980 CEST	443	49717	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:40.582673073 CEST	443	49717	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:40.582966089 CEST	49717	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:40.583033085 CEST	443	49717	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:40.583086967 CEST	49717	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:40.590034008 CEST	443	49718	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:40.590218067 CEST	49718	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:40.590231895 CEST	443	49718	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:40.590645075 CEST	443	49718	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:40.590934038 CEST	49718	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:40.591013908 CEST	49718	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:40.591017008 CEST	443	49718	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:40.595933914 CEST	443	49721	104.26.13.42	192.168.2.16
Aug 30, 2024 07:37:40.596127987 CEST	49721	443	192.168.2.16	104.26.13.42
Aug 30, 2024 07:37:40.596138000 CEST	443	49721	104.26.13.42	192.168.2.16
Aug 30, 2024 07:37:40.597016096 CEST	443	49721	104.26.13.42	192.168.2.16
Aug 30, 2024 07:37:40.597093105 CEST	49721	443	192.168.2.16	104.26.13.42
Aug 30, 2024 07:37:40.597948074 CEST	49721	443	192.168.2.16	104.26.13.42
Aug 30, 2024 07:37:40.597997904 CEST	443	49721	104.26.13.42	192.168.2.16
Aug 30, 2024 07:37:40.598114014 CEST	49721	443	192.168.2.16	104.26.13.42
Aug 30, 2024 07:37:40.598119974 CEST	443	49721	104.26.13.42	192.168.2.16
Aug 30, 2024 07:37:40.619606018 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.619632959 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.619659901 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.619664907 CEST	49713	443	192.168.2.16	104.17.24.14
Aug 30, 2024 07:37:40.619699001 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.619715929 CEST	49713	443	192.168.2.16	104.17.24.14
Aug 30, 2024 07:37:40.620022058 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.620028019 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.620074034 CEST	49713	443	192.168.2.16	104.17.24.14
Aug 30, 2024 07:37:40.620086908 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.620373964 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.620414972 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.620441914 CEST	49713	443	192.168.2.16	104.17.24.14
Aug 30, 2024 07:37:40.620459080 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.620470047 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.620477915 CEST	49713	443	192.168.2.16	104.17.24.14
Aug 30, 2024 07:37:40.620523930 CEST	49713	443	192.168.2.16	104.17.24.14
Aug 30, 2024 07:37:40.620528936 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.620575905 CEST	49713	443	192.168.2.16	104.17.24.14
Aug 30, 2024 07:37:40.620990038 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.621045113 CEST	49713	443	192.168.2.16	104.17.24.14
Aug 30, 2024 07:37:40.621067047 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.621110916 CEST	49713	443	192.168.2.16	104.17.24.14
Aug 30, 2024 07:37:40.621124029 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.621135950 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.621171951 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.621174097 CEST	49713	443	192.168.2.16	104.17.24.14
Aug 30, 2024 07:37:40.621181011 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.621217012 CEST	49713	443	192.168.2.16	104.17.24.14
Aug 30, 2024 07:37:40.621861935 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.621913910 CEST	49713	443	192.168.2.16	104.17.24.14
Aug 30, 2024 07:37:40.621925116 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.621947050 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.621963978 CEST	49713	443	192.168.2.16	104.17.24.14
Aug 30, 2024 07:37:40.621997118 CEST	49713	443	192.168.2.16	104.17.24.14
Aug 30, 2024 07:37:40.622145891 CEST	49713	443	192.168.2.16	104.17.24.14
Aug 30, 2024 07:37:40.622160912 CEST	443	49713	104.17.24.14	192.168.2.16
Aug 30, 2024 07:37:40.628494024 CEST	443	49717	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:40.636492968 CEST	443	49718	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:40.641582966 CEST	49721	443	192.168.2.16	104.26.13.42
Aug 30, 2024 07:37:40.641629934 CEST	49718	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:40.642386913 CEST	443	49716	157.240.253.1	192.168.2.16
Aug 30, 2024 07:37:40.642601967 CEST	49716	443	192.168.2.16	157.240.253.1
Aug 30, 2024 07:37:40.642608881 CEST	443	49716	157.240.253.1	192.168.2.16
Aug 30, 2024 07:37:40.643568993 CEST	443	49716	157.240.253.1	192.168.2.16
Aug 30, 2024 07:37:40.643625975 CEST	49716	443	192.168.2.16	157.240.253.1
Aug 30, 2024 07:37:40.644866943 CEST	49716	443	192.168.2.16	157.240.253.1
Aug 30, 2024 07:37:40.644921064 CEST	443	49716	157.240.253.1	192.168.2.16
Aug 30, 2024 07:37:40.645246983 CEST	49716	443	192.168.2.16	157.240.253.1
Aug 30, 2024 07:37:40.645251989 CEST	443	49716	157.240.253.1	192.168.2.16
Aug 30, 2024 07:37:40.689631939 CEST	49716	443	192.168.2.16	157.240.253.1
Aug 30, 2024 07:37:40.725950003 CEST	443	49721	104.26.13.42	192.168.2.16
Aug 30, 2024 07:37:40.725986004 CEST	443	49721	104.26.13.42	192.168.2.16
Aug 30, 2024 07:37:40.726011038 CEST	443	49721	104.26.13.42	192.168.2.16
Aug 30, 2024 07:37:40.726037025 CEST	443	49721	104.26.13.42	192.168.2.16
Aug 30, 2024 07:37:40.726066113 CEST	49721	443	192.168.2.16	104.26.13.42
Aug 30, 2024 07:37:40.726073027 CEST	443	49721	104.26.13.42	192.168.2.16
Aug 30, 2024 07:37:40.726116896 CEST	49721	443	192.168.2.16	104.26.13.42
Aug 30, 2024 07:37:40.726121902 CEST	443	49721	104.26.13.42	192.168.2.16
Aug 30, 2024 07:37:40.726183891 CEST	49721	443	192.168.2.16	104.26.13.42
Aug 30, 2024 07:37:40.726563931 CEST	443	49721	104.26.13.42	192.168.2.16
Aug 30, 2024 07:37:40.727018118 CEST	443	49721	104.26.13.42	192.168.2.16
Aug 30, 2024 07:37:40.727066994 CEST	443	49721	104.26.13.42	192.168.2.16
Aug 30, 2024 07:37:40.727066994 CEST	49721	443	192.168.2.16	104.26.13.42
Aug 30, 2024 07:37:40.727077007 CEST	443	49721	104.26.13.42	192.168.2.16
Aug 30, 2024 07:37:40.727111101 CEST	49721	443	192.168.2.16	104.26.13.42
Aug 30, 2024 07:37:40.727114916 CEST	443	49721	104.26.13.42	192.168.2.16
Aug 30, 2024 07:37:40.727145910 CEST	443	49721	104.26.13.42	192.168.2.16
Aug 30, 2024 07:37:40.727186918 CEST	49721	443	192.168.2.16	104.26.13.42
Aug 30, 2024 07:37:40.727802992 CEST	49721	443	192.168.2.16	104.26.13.42
Aug 30, 2024 07:37:40.727813959 CEST	443	49721	104.26.13.42	192.168.2.16
Aug 30, 2024 07:37:40.743959904 CEST	49722	443	192.168.2.16	172.67.68.204
Aug 30, 2024 07:37:40.744010925 CEST	443	49722	172.67.68.204	192.168.2.16
Aug 30, 2024 07:37:40.744074106 CEST	49722	443	192.168.2.16	172.67.68.204
Aug 30, 2024 07:37:40.744294882 CEST	49722	443	192.168.2.16	172.67.68.204
Aug 30, 2024 07:37:40.744307995 CEST	443	49722	172.67.68.204	192.168.2.16
Aug 30, 2024 07:37:40.831353903 CEST	443	49714	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:40.831389904 CEST	443	49714	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:40.831415892 CEST	443	49714	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:40.831443071 CEST	443	49714	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:40.831450939 CEST	49714	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:40.831459045 CEST	443	49714	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:40.831486940 CEST	49714	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:40.832103968 CEST	443	49714	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:40.832133055 CEST	443	49714	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:40.832159042 CEST	49714	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:40.832160950 CEST	443	49714	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:40.832170010 CEST	443	49714	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:40.832205057 CEST	49714	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:40.832210064 CEST	443	49714	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:40.832254887 CEST	49714	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:40.832428932 CEST	49714	443	192.168.2.16	188.114.96.3
Aug 30, 2024 07:37:40.832437992 CEST	443	49714	188.114.96.3	192.168.2.16
Aug 30, 2024 07:37:40.844847918 CEST	443	49717	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:40.844917059 CEST	443	49717	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:40.844949007 CEST	443	49717	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:40.844980001 CEST	443	49717	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:40.845012903 CEST	49717	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:40.845017910 CEST	443	49717	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:40.845026970 CEST	443	49717	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:40.845045090 CEST	49717	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:40.845065117 CEST	49717	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:40.845071077 CEST	443	49717	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:40.845089912 CEST	443	49717	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:40.845136881 CEST	49717	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:40.845565081 CEST	49717	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:40.845573902 CEST	443	49717	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:40.847929001 CEST	49724	443	192.168.2.16	188.114.97.3
Aug 30, 2024 07:37:40.847950935 CEST	443	49724	188.114.97.3	192.168.2.16
Aug 30, 2024 07:37:40.848048925 CEST	49724	443	192.168.2.16	188.114.97.3
Aug 30, 2024 07:37:40.848239899 CEST	49724	443	192.168.2.16	188.114.97.3
Aug 30, 2024 07:37:40.848253012 CEST	443	49724	188.114.97.3	192.168.2.16
Aug 30, 2024 07:37:40.855895042 CEST	443	49718	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:40.855984926 CEST	443	49718	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:40.856024981 CEST	443	49718	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:40.856030941 CEST	49718	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:40.856038094 CEST	443	49718	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:40.856069088 CEST	49718	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:40.856074095 CEST	443	49718	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:40.856600046 CEST	443	49718	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:40.856637955 CEST	443	49718	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:40.856652021 CEST	49718	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:40.856657028 CEST	443	49718	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:40.856693029 CEST	49718	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:40.856698036 CEST	443	49718	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:40.857485056 CEST	443	49718	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:40.857534885 CEST	49718	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:40.857541084 CEST	443	49718	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:40.870179892 CEST	443	49718	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:40.870243073 CEST	49718	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:40.870429993 CEST	49718	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:40.870434999 CEST	443	49718	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:40.912154913 CEST	443	49716	157.240.253.1	192.168.2.16
Aug 30, 2024 07:37:40.912218094 CEST	443	49716	157.240.253.1	192.168.2.16
Aug 30, 2024 07:37:40.912278891 CEST	49716	443	192.168.2.16	157.240.253.1
Aug 30, 2024 07:37:40.912286043 CEST	443	49716	157.240.253.1	192.168.2.16
Aug 30, 2024 07:37:40.958690882 CEST	49716	443	192.168.2.16	157.240.253.1
Aug 30, 2024 07:37:41.001041889 CEST	443	49716	157.240.253.1	192.168.2.16
Aug 30, 2024 07:37:41.001053095 CEST	443	49716	157.240.253.1	192.168.2.16
Aug 30, 2024 07:37:41.001085043 CEST	443	49716	157.240.253.1	192.168.2.16
Aug 30, 2024 07:37:41.001096964 CEST	443	49716	157.240.253.1	192.168.2.16
Aug 30, 2024 07:37:41.001113892 CEST	443	49716	157.240.253.1	192.168.2.16
Aug 30, 2024 07:37:41.001133919 CEST	49716	443	192.168.2.16	157.240.253.1
Aug 30, 2024 07:37:41.001142979 CEST	443	49716	157.240.253.1	192.168.2.16
Aug 30, 2024 07:37:41.001190901 CEST	49716	443	192.168.2.16	157.240.253.1
Aug 30, 2024 07:37:41.037651062 CEST	443	49716	157.240.253.1	192.168.2.16
Aug 30, 2024 07:37:41.037662029 CEST	443	49716	157.240.253.1	192.168.2.16
Aug 30, 2024 07:37:41.037714958 CEST	443	49716	157.240.253.1	192.168.2.16
Aug 30, 2024 07:37:41.037746906 CEST	443	49716	157.240.253.1	192.168.2.16
Aug 30, 2024 07:37:41.037764072 CEST	49716	443	192.168.2.16	157.240.253.1
Aug 30, 2024 07:37:41.037781954 CEST	443	49716	157.240.253.1	192.168.2.16
Aug 30, 2024 07:37:41.037817955 CEST	49716	443	192.168.2.16	157.240.253.1
Aug 30, 2024 07:37:41.037842989 CEST	49716	443	192.168.2.16	157.240.253.1
Aug 30, 2024 07:37:41.038069010 CEST	49716	443	192.168.2.16	157.240.253.1
Aug 30, 2024 07:37:41.038084030 CEST	443	49716	157.240.253.1	192.168.2.16
Aug 30, 2024 07:37:41.050918102 CEST	49726	443	192.168.2.16	157.240.251.9
Aug 30, 2024 07:37:41.050978899 CEST	443	49726	157.240.251.9	192.168.2.16
Aug 30, 2024 07:37:41.051054955 CEST	49726	443	192.168.2.16	157.240.251.9
Aug 30, 2024 07:37:41.051248074 CEST	49726	443	192.168.2.16	157.240.251.9
Aug 30, 2024 07:37:41.051266909 CEST	443	49726	157.240.251.9	192.168.2.16
Aug 30, 2024 07:37:41.132550001 CEST	49727	443	192.168.2.16	142.250.185.68
Aug 30, 2024 07:37:41.132596016 CEST	443	49727	142.250.185.68	192.168.2.16
Aug 30, 2024 07:37:41.132662058 CEST	49727	443	192.168.2.16	142.250.185.68
Aug 30, 2024 07:37:41.132848024 CEST	49727	443	192.168.2.16	142.250.185.68
Aug 30, 2024 07:37:41.132860899 CEST	443	49727	142.250.185.68	192.168.2.16
Aug 30, 2024 07:37:41.197202921 CEST	443	49722	172.67.68.204	192.168.2.16
Aug 30, 2024 07:37:41.197488070 CEST	49722	443	192.168.2.16	172.67.68.204
Aug 30, 2024 07:37:41.197520018 CEST	443	49722	172.67.68.204	192.168.2.16
Aug 30, 2024 07:37:41.198642969 CEST	443	49722	172.67.68.204	192.168.2.16
Aug 30, 2024 07:37:41.198709965 CEST	49722	443	192.168.2.16	172.67.68.204
Aug 30, 2024 07:37:41.199132919 CEST	49722	443	192.168.2.16	172.67.68.204
Aug 30, 2024 07:37:41.199188948 CEST	443	49722	172.67.68.204	192.168.2.16
Aug 30, 2024 07:37:41.199367046 CEST	49722	443	192.168.2.16	172.67.68.204
Aug 30, 2024 07:37:41.199373960 CEST	443	49722	172.67.68.204	192.168.2.16
Aug 30, 2024 07:37:41.239620924 CEST	49722	443	192.168.2.16	172.67.68.204
Aug 30, 2024 07:37:41.298255920 CEST	49731	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:41.298283100 CEST	443	49731	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:41.298372030 CEST	49731	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:41.298620939 CEST	49731	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:41.298629045 CEST	443	49731	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:41.300615072 CEST	49732	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:41.300637007 CEST	443	49732	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:41.300709009 CEST	49732	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:41.301048040 CEST	49732	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:41.301059961 CEST	443	49732	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:41.301536083 CEST	443	49724	188.114.97.3	192.168.2.16
Aug 30, 2024 07:37:41.301747084 CEST	49724	443	192.168.2.16	188.114.97.3
Aug 30, 2024 07:37:41.301783085 CEST	443	49724	188.114.97.3	192.168.2.16
Aug 30, 2024 07:37:41.302648067 CEST	443	49724	188.114.97.3	192.168.2.16
Aug 30, 2024 07:37:41.302711964 CEST	49724	443	192.168.2.16	188.114.97.3
Aug 30, 2024 07:37:41.303071976 CEST	49724	443	192.168.2.16	188.114.97.3
Aug 30, 2024 07:37:41.303128958 CEST	443	49724	188.114.97.3	192.168.2.16
Aug 30, 2024 07:37:41.303293943 CEST	49724	443	192.168.2.16	188.114.97.3
Aug 30, 2024 07:37:41.303302050 CEST	443	49724	188.114.97.3	192.168.2.16
Aug 30, 2024 07:37:41.347394943 CEST	443	49722	172.67.68.204	192.168.2.16
Aug 30, 2024 07:37:41.347449064 CEST	443	49722	172.67.68.204	192.168.2.16
Aug 30, 2024 07:37:41.347476959 CEST	443	49722	172.67.68.204	192.168.2.16
Aug 30, 2024 07:37:41.347497940 CEST	49722	443	192.168.2.16	172.67.68.204
Aug 30, 2024 07:37:41.347503901 CEST	443	49722	172.67.68.204	192.168.2.16
Aug 30, 2024 07:37:41.347515106 CEST	443	49722	172.67.68.204	192.168.2.16
Aug 30, 2024 07:37:41.347582102 CEST	443	49722	172.67.68.204	192.168.2.16
Aug 30, 2024 07:37:41.347595930 CEST	49722	443	192.168.2.16	172.67.68.204
Aug 30, 2024 07:37:41.347611904 CEST	443	49722	172.67.68.204	192.168.2.16
Aug 30, 2024 07:37:41.347625017 CEST	49722	443	192.168.2.16	172.67.68.204
Aug 30, 2024 07:37:41.348133087 CEST	443	49722	172.67.68.204	192.168.2.16
Aug 30, 2024 07:37:41.348160982 CEST	443	49722	172.67.68.204	192.168.2.16
Aug 30, 2024 07:37:41.348176003 CEST	49722	443	192.168.2.16	172.67.68.204
Aug 30, 2024 07:37:41.348181963 CEST	443	49722	172.67.68.204	192.168.2.16
Aug 30, 2024 07:37:41.348227024 CEST	49722	443	192.168.2.16	172.67.68.204
Aug 30, 2024 07:37:41.348232985 CEST	443	49722	172.67.68.204	192.168.2.16
Aug 30, 2024 07:37:41.348248959 CEST	443	49722	172.67.68.204	192.168.2.16
Aug 30, 2024 07:37:41.348289967 CEST	49722	443	192.168.2.16	172.67.68.204
Aug 30, 2024 07:37:41.348407984 CEST	49722	443	192.168.2.16	172.67.68.204
Aug 30, 2024 07:37:41.348423004 CEST	443	49722	172.67.68.204	192.168.2.16
Aug 30, 2024 07:37:41.349605083 CEST	49673	443	192.168.2.16	204.79.197.203
Aug 30, 2024 07:37:41.349612951 CEST	49724	443	192.168.2.16	188.114.97.3
Aug 30, 2024 07:37:41.655261993 CEST	443	49724	188.114.97.3	192.168.2.16
Aug 30, 2024 07:37:41.655296087 CEST	443	49724	188.114.97.3	192.168.2.16
Aug 30, 2024 07:37:41.655323029 CEST	443	49724	188.114.97.3	192.168.2.16
Aug 30, 2024 07:37:41.655345917 CEST	443	49724	188.114.97.3	192.168.2.16
Aug 30, 2024 07:37:41.655369043 CEST	443	49724	188.114.97.3	192.168.2.16
Aug 30, 2024 07:37:41.655386925 CEST	443	49724	188.114.97.3	192.168.2.16
Aug 30, 2024 07:37:41.655428886 CEST	49724	443	192.168.2.16	188.114.97.3
Aug 30, 2024 07:37:41.655473948 CEST	443	49724	188.114.97.3	192.168.2.16
Aug 30, 2024 07:37:41.655493975 CEST	49724	443	192.168.2.16	188.114.97.3
Aug 30, 2024 07:37:41.655816078 CEST	443	49724	188.114.97.3	192.168.2.16
Aug 30, 2024 07:37:41.655864000 CEST	49724	443	192.168.2.16	188.114.97.3
Aug 30, 2024 07:37:41.655864000 CEST	443	49724	188.114.97.3	192.168.2.16
Aug 30, 2024 07:37:41.656102896 CEST	49724	443	192.168.2.16	188.114.97.3
Aug 30, 2024 07:37:41.657747030 CEST	49724	443	192.168.2.16	188.114.97.3
Aug 30, 2024 07:37:41.657784939 CEST	443	49724	188.114.97.3	192.168.2.16
Aug 30, 2024 07:37:41.685220003 CEST	443	49726	157.240.251.9	192.168.2.16
Aug 30, 2024 07:37:41.685473919 CEST	49726	443	192.168.2.16	157.240.251.9
Aug 30, 2024 07:37:41.685508966 CEST	443	49726	157.240.251.9	192.168.2.16
Aug 30, 2024 07:37:41.686433077 CEST	443	49726	157.240.251.9	192.168.2.16
Aug 30, 2024 07:37:41.686503887 CEST	49726	443	192.168.2.16	157.240.251.9
Aug 30, 2024 07:37:41.686789989 CEST	49726	443	192.168.2.16	157.240.251.9
Aug 30, 2024 07:37:41.686851025 CEST	443	49726	157.240.251.9	192.168.2.16
Aug 30, 2024 07:37:41.686923981 CEST	49726	443	192.168.2.16	157.240.251.9
Aug 30, 2024 07:37:41.686934948 CEST	443	49726	157.240.251.9	192.168.2.16
Aug 30, 2024 07:37:41.732671022 CEST	49726	443	192.168.2.16	157.240.251.9
Aug 30, 2024 07:37:41.762411118 CEST	443	49727	142.250.185.68	192.168.2.16
Aug 30, 2024 07:37:41.762784958 CEST	49727	443	192.168.2.16	142.250.185.68
Aug 30, 2024 07:37:41.762815952 CEST	443	49727	142.250.185.68	192.168.2.16
Aug 30, 2024 07:37:41.763851881 CEST	443	49727	142.250.185.68	192.168.2.16
Aug 30, 2024 07:37:41.763932943 CEST	49727	443	192.168.2.16	142.250.185.68
Aug 30, 2024 07:37:41.765036106 CEST	49727	443	192.168.2.16	142.250.185.68
Aug 30, 2024 07:37:41.765103102 CEST	443	49727	142.250.185.68	192.168.2.16
Aug 30, 2024 07:37:41.769450903 CEST	443	49731	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:41.769726038 CEST	49731	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:41.769737959 CEST	443	49731	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:41.770029068 CEST	443	49731	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:41.770405054 CEST	49731	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:41.770458937 CEST	443	49731	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:41.770548105 CEST	49731	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:41.775403023 CEST	443	49732	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:41.775655985 CEST	49732	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:41.775671959 CEST	443	49732	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:41.775958061 CEST	443	49732	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:41.776241064 CEST	49732	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:41.776292086 CEST	443	49732	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:41.776331902 CEST	49732	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:41.812696934 CEST	49727	443	192.168.2.16	142.250.185.68
Aug 30, 2024 07:37:41.812738895 CEST	443	49727	142.250.185.68	192.168.2.16
Aug 30, 2024 07:37:41.816497087 CEST	443	49731	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:41.816528082 CEST	443	49732	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:41.828664064 CEST	49732	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:41.860662937 CEST	49727	443	192.168.2.16	142.250.185.68
Aug 30, 2024 07:37:41.880574942 CEST	443	49732	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:41.880640984 CEST	443	49732	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:41.880671024 CEST	443	49732	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:41.880705118 CEST	443	49732	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:41.880759001 CEST	443	49732	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:41.880772114 CEST	49732	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:41.880825043 CEST	49732	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:41.881839037 CEST	49732	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:41.881855011 CEST	443	49732	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:41.928384066 CEST	49689	80	192.168.2.16	192.229.211.108
Aug 30, 2024 07:37:41.961577892 CEST	443	49726	157.240.251.9	192.168.2.16
Aug 30, 2024 07:37:41.961632013 CEST	443	49726	157.240.251.9	192.168.2.16
Aug 30, 2024 07:37:41.961745024 CEST	49726	443	192.168.2.16	157.240.251.9
Aug 30, 2024 07:37:41.961767912 CEST	443	49726	157.240.251.9	192.168.2.16
Aug 30, 2024 07:37:41.961855888 CEST	49726	443	192.168.2.16	157.240.251.9
Aug 30, 2024 07:37:42.041018963 CEST	443	49731	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:42.041074991 CEST	443	49731	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:42.041101933 CEST	443	49731	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:42.041141987 CEST	443	49731	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:42.041172028 CEST	49731	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:42.041183949 CEST	443	49731	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:42.041205883 CEST	49731	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:42.041712999 CEST	443	49731	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:42.041738987 CEST	443	49731	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:42.041791916 CEST	49731	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:42.041796923 CEST	443	49731	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:42.041834116 CEST	49731	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:42.042124987 CEST	443	49731	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:42.046622038 CEST	443	49731	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:42.046695948 CEST	49731	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:42.046863079 CEST	49731	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:42.046875000 CEST	443	49731	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:42.049860001 CEST	443	49726	157.240.251.9	192.168.2.16
Aug 30, 2024 07:37:42.049870968 CEST	443	49726	157.240.251.9	192.168.2.16
Aug 30, 2024 07:37:42.049917936 CEST	443	49726	157.240.251.9	192.168.2.16
Aug 30, 2024 07:37:42.049983025 CEST	49726	443	192.168.2.16	157.240.251.9
Aug 30, 2024 07:37:42.050062895 CEST	443	49726	157.240.251.9	192.168.2.16
Aug 30, 2024 07:37:42.050103903 CEST	49726	443	192.168.2.16	157.240.251.9
Aug 30, 2024 07:37:42.060873985 CEST	49735	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:42.060962915 CEST	443	49735	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:42.061096907 CEST	49735	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:42.061419964 CEST	49735	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:42.061439991 CEST	443	49735	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:42.078022003 CEST	443	49726	157.240.251.9	192.168.2.16
Aug 30, 2024 07:37:42.078039885 CEST	443	49726	157.240.251.9	192.168.2.16
Aug 30, 2024 07:37:42.078144073 CEST	49726	443	192.168.2.16	157.240.251.9
Aug 30, 2024 07:37:42.078160048 CEST	443	49726	157.240.251.9	192.168.2.16
Aug 30, 2024 07:37:42.078656912 CEST	49726	443	192.168.2.16	157.240.251.9
Aug 30, 2024 07:37:42.078710079 CEST	443	49726	157.240.251.9	192.168.2.16
Aug 30, 2024 07:37:42.078792095 CEST	49726	443	192.168.2.16	157.240.251.9
Aug 30, 2024 07:37:42.666165113 CEST	443	49735	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:42.666471958 CEST	49735	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:42.666482925 CEST	443	49735	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:42.666836023 CEST	443	49735	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:42.667120934 CEST	49735	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:42.667181969 CEST	443	49735	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:42.667248011 CEST	49735	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:42.708506107 CEST	443	49735	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:42.717607975 CEST	49735	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:42.770071030 CEST	443	49735	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:42.770245075 CEST	443	49735	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:42.770296097 CEST	443	49735	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:42.770320892 CEST	49735	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:42.770328999 CEST	443	49735	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:42.770364046 CEST	443	49735	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:42.770368099 CEST	49735	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:42.770379066 CEST	443	49735	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:42.770421028 CEST	49735	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:42.770960093 CEST	443	49735	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:42.771019936 CEST	443	49735	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:42.771059036 CEST	49735	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:42.771065950 CEST	443	49735	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:42.775084972 CEST	443	49735	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:42.775116920 CEST	443	49735	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:42.775144100 CEST	443	49735	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:42.775166988 CEST	49735	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:42.775175095 CEST	443	49735	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:42.775202036 CEST	49735	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:42.775501013 CEST	49735	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:42.775536060 CEST	443	49735	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:42.775594950 CEST	49735	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:42.789663076 CEST	49737	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:42.789669991 CEST	443	49737	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:42.789731979 CEST	49737	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:42.789943933 CEST	49737	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:42.789953947 CEST	443	49737	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:43.270853996 CEST	443	49737	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:43.271030903 CEST	49737	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:43.271049023 CEST	443	49737	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:43.272136927 CEST	443	49737	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:43.272197962 CEST	49737	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:43.272447109 CEST	49737	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:43.272521973 CEST	443	49737	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:43.272531986 CEST	49737	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:43.316500902 CEST	443	49737	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:43.317626953 CEST	49737	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:43.317636967 CEST	443	49737	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:43.365647078 CEST	49737	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:43.544953108 CEST	443	49737	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:43.545056105 CEST	443	49737	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:43.545089006 CEST	443	49737	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:43.545118093 CEST	49737	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:43.545129061 CEST	443	49737	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:43.545170069 CEST	443	49737	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:43.545186996 CEST	49737	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:43.545193911 CEST	443	49737	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:43.545233011 CEST	443	49737	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:43.545233965 CEST	49737	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:43.545274019 CEST	49737	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:43.545881033 CEST	49737	443	192.168.2.16	151.101.129.229
Aug 30, 2024 07:37:43.545895100 CEST	443	49737	151.101.129.229	192.168.2.16
Aug 30, 2024 07:37:43.763603926 CEST	49673	443	192.168.2.16	204.79.197.203
Aug 30, 2024 07:37:45.441267967 CEST	49741	443	192.168.2.16	184.28.90.27
Aug 30, 2024 07:37:45.441314936 CEST	443	49741	184.28.90.27	192.168.2.16
Aug 30, 2024 07:37:45.441399097 CEST	49741	443	192.168.2.16	184.28.90.27
Aug 30, 2024 07:37:45.442773104 CEST	49741	443	192.168.2.16	184.28.90.27
Aug 30, 2024 07:37:45.442790985 CEST	443	49741	184.28.90.27	192.168.2.16
Aug 30, 2024 07:37:46.086503983 CEST	443	49741	184.28.90.27	192.168.2.16
Aug 30, 2024 07:37:46.086612940 CEST	49741	443	192.168.2.16	184.28.90.27
Aug 30, 2024 07:37:46.089246988 CEST	49741	443	192.168.2.16	184.28.90.27
Aug 30, 2024 07:37:46.089257956 CEST	443	49741	184.28.90.27	192.168.2.16
Aug 30, 2024 07:37:46.089495897 CEST	443	49741	184.28.90.27	192.168.2.16
Aug 30, 2024 07:37:46.127504110 CEST	49741	443	192.168.2.16	184.28.90.27
Aug 30, 2024 07:37:46.172498941 CEST	443	49741	184.28.90.27	192.168.2.16
Aug 30, 2024 07:37:46.357031107 CEST	443	49741	184.28.90.27	192.168.2.16
Aug 30, 2024 07:37:46.357094049 CEST	443	49741	184.28.90.27	192.168.2.16
Aug 30, 2024 07:37:46.357145071 CEST	49741	443	192.168.2.16	184.28.90.27
Aug 30, 2024 07:37:46.357207060 CEST	49741	443	192.168.2.16	184.28.90.27
Aug 30, 2024 07:37:46.357225895 CEST	443	49741	184.28.90.27	192.168.2.16
Aug 30, 2024 07:37:46.357235909 CEST	49741	443	192.168.2.16	184.28.90.27
Aug 30, 2024 07:37:46.357240915 CEST	443	49741	184.28.90.27	192.168.2.16
Aug 30, 2024 07:37:46.397526979 CEST	49742	443	192.168.2.16	13.85.23.86
Aug 30, 2024 07:37:46.397586107 CEST	443	49742	13.85.23.86	192.168.2.16
Aug 30, 2024 07:37:46.397684097 CEST	49742	443	192.168.2.16	13.85.23.86
Aug 30, 2024 07:37:46.398880005 CEST	49742	443	192.168.2.16	13.85.23.86
Aug 30, 2024 07:37:46.398895025 CEST	443	49742	13.85.23.86	192.168.2.16
Aug 30, 2024 07:37:46.399852037 CEST	49743	443	192.168.2.16	184.28.90.27
Aug 30, 2024 07:37:46.399859905 CEST	443	49743	184.28.90.27	192.168.2.16
Aug 30, 2024 07:37:46.399938107 CEST	49743	443	192.168.2.16	184.28.90.27
Aug 30, 2024 07:37:46.400187969 CEST	49743	443	192.168.2.16	184.28.90.27
Aug 30, 2024 07:37:46.400198936 CEST	443	49743	184.28.90.27	192.168.2.16
Aug 30, 2024 07:37:47.042107105 CEST	443	49743	184.28.90.27	192.168.2.16
Aug 30, 2024 07:37:47.042201042 CEST	49743	443	192.168.2.16	184.28.90.27
Aug 30, 2024 07:37:47.043349981 CEST	49743	443	192.168.2.16	184.28.90.27
Aug 30, 2024 07:37:47.043359995 CEST	443	49743	184.28.90.27	192.168.2.16
Aug 30, 2024 07:37:47.043584108 CEST	443	49743	184.28.90.27	192.168.2.16
Aug 30, 2024 07:37:47.044675112 CEST	49743	443	192.168.2.16	184.28.90.27
Aug 30, 2024 07:37:47.088510990 CEST	443	49743	184.28.90.27	192.168.2.16
Aug 30, 2024 07:37:47.092029095 CEST	443	49742	13.85.23.86	192.168.2.16
Aug 30, 2024 07:37:47.092159033 CEST	49742	443	192.168.2.16	13.85.23.86
Aug 30, 2024 07:37:47.094743013 CEST	49742	443	192.168.2.16	13.85.23.86
Aug 30, 2024 07:37:47.094750881 CEST	443	49742	13.85.23.86	192.168.2.16
Aug 30, 2024 07:37:47.094991922 CEST	443	49742	13.85.23.86	192.168.2.16
Aug 30, 2024 07:37:47.141637087 CEST	49742	443	192.168.2.16	13.85.23.86
Aug 30, 2024 07:37:47.148868084 CEST	49742	443	192.168.2.16	13.85.23.86
Aug 30, 2024 07:37:47.192509890 CEST	443	49742	13.85.23.86	192.168.2.16
Aug 30, 2024 07:37:47.319129944 CEST	443	49743	184.28.90.27	192.168.2.16
Aug 30, 2024 07:37:47.319210052 CEST	443	49743	184.28.90.27	192.168.2.16
Aug 30, 2024 07:37:47.319256067 CEST	49743	443	192.168.2.16	184.28.90.27
Aug 30, 2024 07:37:47.320008993 CEST	49743	443	192.168.2.16	184.28.90.27
Aug 30, 2024 07:37:47.320034027 CEST	443	49743	184.28.90.27	192.168.2.16
Aug 30, 2024 07:37:47.320046902 CEST	49743	443	192.168.2.16	184.28.90.27
Aug 30, 2024 07:37:47.320054054 CEST	443	49743	184.28.90.27	192.168.2.16
Aug 30, 2024 07:37:47.377845049 CEST	443	49742	13.85.23.86	192.168.2.16
Aug 30, 2024 07:37:47.377863884 CEST	443	49742	13.85.23.86	192.168.2.16
Aug 30, 2024 07:37:47.377870083 CEST	443	49742	13.85.23.86	192.168.2.16
Aug 30, 2024 07:37:47.377878904 CEST	443	49742	13.85.23.86	192.168.2.16
Aug 30, 2024 07:37:47.377911091 CEST	443	49742	13.85.23.86	192.168.2.16
Aug 30, 2024 07:37:47.377943039 CEST	49742	443	192.168.2.16	13.85.23.86
Aug 30, 2024 07:37:47.377964020 CEST	443	49742	13.85.23.86	192.168.2.16
Aug 30, 2024 07:37:47.377976894 CEST	49742	443	192.168.2.16	13.85.23.86
Aug 30, 2024 07:37:47.378021002 CEST	49742	443	192.168.2.16	13.85.23.86
Aug 30, 2024 07:37:47.378372908 CEST	443	49742	13.85.23.86	192.168.2.16
Aug 30, 2024 07:37:47.378432989 CEST	49742	443	192.168.2.16	13.85.23.86
Aug 30, 2024 07:37:47.378439903 CEST	443	49742	13.85.23.86	192.168.2.16
Aug 30, 2024 07:37:47.378451109 CEST	443	49742	13.85.23.86	192.168.2.16
Aug 30, 2024 07:37:47.378489017 CEST	49742	443	192.168.2.16	13.85.23.86
Aug 30, 2024 07:37:47.391509056 CEST	49742	443	192.168.2.16	13.85.23.86
Aug 30, 2024 07:37:47.391519070 CEST	443	49742	13.85.23.86	192.168.2.16
Aug 30, 2024 07:37:47.391535997 CEST	49742	443	192.168.2.16	13.85.23.86
Aug 30, 2024 07:37:47.391540051 CEST	443	49742	13.85.23.86	192.168.2.16
Aug 30, 2024 07:37:47.396933079 CEST	49678	443	192.168.2.16	20.189.173.10
Aug 30, 2024 07:37:47.712779999 CEST	49678	443	192.168.2.16	20.189.173.10
Aug 30, 2024 07:37:48.313628912 CEST	49678	443	192.168.2.16	20.189.173.10
Aug 30, 2024 07:37:48.322330952 CEST	49744	443	192.168.2.16	52.137.106.217
Aug 30, 2024 07:37:48.322371006 CEST	443	49744	52.137.106.217	192.168.2.16
Aug 30, 2024 07:37:48.322468042 CEST	49744	443	192.168.2.16	52.137.106.217
Aug 30, 2024 07:37:48.323282003 CEST	49744	443	192.168.2.16	52.137.106.217
Aug 30, 2024 07:37:48.323301077 CEST	443	49744	52.137.106.217	192.168.2.16
Aug 30, 2024 07:37:48.569639921 CEST	49673	443	192.168.2.16	204.79.197.203
Aug 30, 2024 07:37:49.130074978 CEST	443	49744	52.137.106.217	192.168.2.16
Aug 30, 2024 07:37:49.130156994 CEST	49744	443	192.168.2.16	52.137.106.217
Aug 30, 2024 07:37:49.131728888 CEST	49744	443	192.168.2.16	52.137.106.217
Aug 30, 2024 07:37:49.131747007 CEST	443	49744	52.137.106.217	192.168.2.16
Aug 30, 2024 07:37:49.131947994 CEST	443	49744	52.137.106.217	192.168.2.16
Aug 30, 2024 07:37:49.177633047 CEST	49744	443	192.168.2.16	52.137.106.217
Aug 30, 2024 07:37:49.192047119 CEST	49744	443	192.168.2.16	52.137.106.217
Aug 30, 2024 07:37:49.192091942 CEST	443	49744	52.137.106.217	192.168.2.16
Aug 30, 2024 07:37:49.192157030 CEST	49744	443	192.168.2.16	52.137.106.217
Aug 30, 2024 07:37:49.250238895 CEST	49745	443	192.168.2.16	20.190.160.20
Aug 30, 2024 07:37:49.250258923 CEST	443	49745	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:49.250353098 CEST	49745	443	192.168.2.16	20.190.160.20
Aug 30, 2024 07:37:49.250571966 CEST	49745	443	192.168.2.16	20.190.160.20
Aug 30, 2024 07:37:49.250587940 CEST	443	49745	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:49.528640032 CEST	49678	443	192.168.2.16	20.189.173.10
Aug 30, 2024 07:37:50.035609961 CEST	443	49745	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:50.035734892 CEST	49745	443	192.168.2.16	20.190.160.20
Aug 30, 2024 07:37:50.045867920 CEST	49745	443	192.168.2.16	20.190.160.20
Aug 30, 2024 07:37:50.045883894 CEST	443	49745	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:50.046066046 CEST	443	49745	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:50.046550989 CEST	49745	443	192.168.2.16	20.190.160.20
Aug 30, 2024 07:37:50.046550989 CEST	49745	443	192.168.2.16	20.190.160.20
Aug 30, 2024 07:37:50.046585083 CEST	443	49745	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:50.460966110 CEST	443	49745	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:50.460984945 CEST	443	49745	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:50.461009026 CEST	443	49745	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:50.461076021 CEST	49745	443	192.168.2.16	20.190.160.20
Aug 30, 2024 07:37:50.461086988 CEST	443	49745	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:50.461098909 CEST	443	49745	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:50.461117029 CEST	49745	443	192.168.2.16	20.190.160.20
Aug 30, 2024 07:37:50.461150885 CEST	49745	443	192.168.2.16	20.190.160.20
Aug 30, 2024 07:37:50.461407900 CEST	49745	443	192.168.2.16	20.190.160.20
Aug 30, 2024 07:37:50.461407900 CEST	49745	443	192.168.2.16	20.190.160.20
Aug 30, 2024 07:37:50.461422920 CEST	443	49745	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:50.461430073 CEST	443	49745	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:50.479561090 CEST	49746	443	192.168.2.16	52.137.106.217
Aug 30, 2024 07:37:50.479629993 CEST	443	49746	52.137.106.217	192.168.2.16
Aug 30, 2024 07:37:50.479861975 CEST	49746	443	192.168.2.16	52.137.106.217
Aug 30, 2024 07:37:50.480040073 CEST	49746	443	192.168.2.16	52.137.106.217
Aug 30, 2024 07:37:50.480053902 CEST	443	49746	52.137.106.217	192.168.2.16
Aug 30, 2024 07:37:51.284511089 CEST	443	49746	52.137.106.217	192.168.2.16
Aug 30, 2024 07:37:51.284646988 CEST	49746	443	192.168.2.16	52.137.106.217
Aug 30, 2024 07:37:51.285842896 CEST	49746	443	192.168.2.16	52.137.106.217
Aug 30, 2024 07:37:51.285852909 CEST	443	49746	52.137.106.217	192.168.2.16
Aug 30, 2024 07:37:51.286063910 CEST	443	49746	52.137.106.217	192.168.2.16
Aug 30, 2024 07:37:51.290369034 CEST	49746	443	192.168.2.16	52.137.106.217
Aug 30, 2024 07:37:51.290410042 CEST	443	49746	52.137.106.217	192.168.2.16
Aug 30, 2024 07:37:51.290508986 CEST	443	49746	52.137.106.217	192.168.2.16
Aug 30, 2024 07:37:51.290582895 CEST	49746	443	192.168.2.16	52.137.106.217
Aug 30, 2024 07:37:51.290582895 CEST	49746	443	192.168.2.16	52.137.106.217
Aug 30, 2024 07:37:51.351733923 CEST	49747	443	192.168.2.16	20.190.160.20
Aug 30, 2024 07:37:51.351784945 CEST	443	49747	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:51.351890087 CEST	49747	443	192.168.2.16	20.190.160.20
Aug 30, 2024 07:37:51.352076054 CEST	49747	443	192.168.2.16	20.190.160.20
Aug 30, 2024 07:37:51.352091074 CEST	443	49747	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:51.669439077 CEST	443	49727	142.250.185.68	192.168.2.16
Aug 30, 2024 07:37:51.669509888 CEST	443	49727	142.250.185.68	192.168.2.16
Aug 30, 2024 07:37:51.669629097 CEST	49727	443	192.168.2.16	142.250.185.68
Aug 30, 2024 07:37:51.878954887 CEST	49680	80	192.168.2.16	192.229.211.108
Aug 30, 2024 07:37:51.942756891 CEST	49678	443	192.168.2.16	20.189.173.10
Aug 30, 2024 07:37:52.147245884 CEST	443	49747	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:52.147799969 CEST	49747	443	192.168.2.16	20.190.160.20
Aug 30, 2024 07:37:52.147834063 CEST	443	49747	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:52.148493052 CEST	49747	443	192.168.2.16	20.190.160.20
Aug 30, 2024 07:37:52.148493052 CEST	49747	443	192.168.2.16	20.190.160.20
Aug 30, 2024 07:37:52.148503065 CEST	443	49747	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:52.148514986 CEST	443	49747	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:52.182790041 CEST	49680	80	192.168.2.16	192.229.211.108
Aug 30, 2024 07:37:52.519237041 CEST	49727	443	192.168.2.16	142.250.185.68
Aug 30, 2024 07:37:52.519272089 CEST	443	49727	142.250.185.68	192.168.2.16
Aug 30, 2024 07:37:52.535087109 CEST	443	49747	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:52.535110950 CEST	443	49747	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:52.535152912 CEST	443	49747	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:52.535294056 CEST	49747	443	192.168.2.16	20.190.160.20
Aug 30, 2024 07:37:52.535294056 CEST	49747	443	192.168.2.16	20.190.160.20
Aug 30, 2024 07:37:52.535315990 CEST	443	49747	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:52.535465956 CEST	49747	443	192.168.2.16	20.190.160.20
Aug 30, 2024 07:37:52.535473108 CEST	443	49747	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:52.535482883 CEST	49747	443	192.168.2.16	20.190.160.20
Aug 30, 2024 07:37:52.535500050 CEST	443	49747	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:52.535553932 CEST	443	49747	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:52.552136898 CEST	49748	443	192.168.2.16	52.137.106.217
Aug 30, 2024 07:37:52.552170038 CEST	443	49748	52.137.106.217	192.168.2.16
Aug 30, 2024 07:37:52.552397013 CEST	49748	443	192.168.2.16	52.137.106.217
Aug 30, 2024 07:37:52.552479029 CEST	49748	443	192.168.2.16	52.137.106.217
Aug 30, 2024 07:37:52.552494049 CEST	443	49748	52.137.106.217	192.168.2.16
Aug 30, 2024 07:37:52.789697886 CEST	49680	80	192.168.2.16	192.229.211.108
Aug 30, 2024 07:37:53.323436975 CEST	443	49748	52.137.106.217	192.168.2.16
Aug 30, 2024 07:37:53.323591948 CEST	49748	443	192.168.2.16	52.137.106.217
Aug 30, 2024 07:37:53.324829102 CEST	49748	443	192.168.2.16	52.137.106.217
Aug 30, 2024 07:37:53.324845076 CEST	443	49748	52.137.106.217	192.168.2.16
Aug 30, 2024 07:37:53.325077057 CEST	443	49748	52.137.106.217	192.168.2.16
Aug 30, 2024 07:37:53.326149940 CEST	49748	443	192.168.2.16	52.137.106.217
Aug 30, 2024 07:37:53.326195002 CEST	443	49748	52.137.106.217	192.168.2.16
Aug 30, 2024 07:37:53.326245070 CEST	49748	443	192.168.2.16	52.137.106.217
Aug 30, 2024 07:37:53.379654884 CEST	49749	443	192.168.2.16	20.190.160.20
Aug 30, 2024 07:37:53.379695892 CEST	443	49749	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:53.379798889 CEST	49749	443	192.168.2.16	20.190.160.20
Aug 30, 2024 07:37:53.379940987 CEST	49749	443	192.168.2.16	20.190.160.20
Aug 30, 2024 07:37:53.379956007 CEST	443	49749	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:54.003884077 CEST	49680	80	192.168.2.16	192.229.211.108
Aug 30, 2024 07:37:54.182305098 CEST	443	49749	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:54.183034897 CEST	49749	443	192.168.2.16	20.190.160.20
Aug 30, 2024 07:37:54.183088064 CEST	443	49749	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:54.183526039 CEST	49749	443	192.168.2.16	20.190.160.20
Aug 30, 2024 07:37:54.183538914 CEST	443	49749	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:54.183566093 CEST	49749	443	192.168.2.16	20.190.160.20
Aug 30, 2024 07:37:54.183574915 CEST	443	49749	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:54.529655933 CEST	443	49749	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:54.529673100 CEST	443	49749	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:54.529719114 CEST	443	49749	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:54.529762983 CEST	443	49749	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:54.529941082 CEST	49749	443	192.168.2.16	20.190.160.20
Aug 30, 2024 07:37:54.529941082 CEST	49749	443	192.168.2.16	20.190.160.20
Aug 30, 2024 07:37:54.530195951 CEST	49749	443	192.168.2.16	20.190.160.20
Aug 30, 2024 07:37:54.530214071 CEST	443	49749	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:54.530224085 CEST	49749	443	192.168.2.16	20.190.160.20
Aug 30, 2024 07:37:54.530230045 CEST	443	49749	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:54.548940897 CEST	49750	443	192.168.2.16	52.137.106.217
Aug 30, 2024 07:37:54.548990011 CEST	443	49750	52.137.106.217	192.168.2.16
Aug 30, 2024 07:37:54.549093962 CEST	49750	443	192.168.2.16	52.137.106.217
Aug 30, 2024 07:37:54.549294949 CEST	49750	443	192.168.2.16	52.137.106.217
Aug 30, 2024 07:37:54.549312115 CEST	443	49750	52.137.106.217	192.168.2.16
Aug 30, 2024 07:37:55.320518970 CEST	443	49750	52.137.106.217	192.168.2.16
Aug 30, 2024 07:37:55.320656061 CEST	49750	443	192.168.2.16	52.137.106.217
Aug 30, 2024 07:37:55.321945906 CEST	49750	443	192.168.2.16	52.137.106.217
Aug 30, 2024 07:37:55.321958065 CEST	443	49750	52.137.106.217	192.168.2.16
Aug 30, 2024 07:37:55.322196007 CEST	443	49750	52.137.106.217	192.168.2.16
Aug 30, 2024 07:37:55.323332071 CEST	49750	443	192.168.2.16	52.137.106.217
Aug 30, 2024 07:37:55.323374987 CEST	443	49750	52.137.106.217	192.168.2.16
Aug 30, 2024 07:37:55.323426962 CEST	49750	443	192.168.2.16	52.137.106.217
Aug 30, 2024 07:37:55.381285906 CEST	49751	443	192.168.2.16	20.190.160.20
Aug 30, 2024 07:37:55.381320953 CEST	443	49751	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:55.381409883 CEST	49751	443	192.168.2.16	20.190.160.20
Aug 30, 2024 07:37:55.381546974 CEST	49751	443	192.168.2.16	20.190.160.20
Aug 30, 2024 07:37:55.381561995 CEST	443	49751	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:56.192389011 CEST	443	49751	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:56.192903996 CEST	49751	443	192.168.2.16	20.190.160.20
Aug 30, 2024 07:37:56.192924023 CEST	443	49751	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:56.193521023 CEST	49751	443	192.168.2.16	20.190.160.20
Aug 30, 2024 07:37:56.193526983 CEST	443	49751	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:56.193546057 CEST	49751	443	192.168.2.16	20.190.160.20
Aug 30, 2024 07:37:56.193552971 CEST	443	49751	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:56.413760900 CEST	49680	80	192.168.2.16	192.229.211.108
Aug 30, 2024 07:37:56.567470074 CEST	443	49751	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:56.567487955 CEST	443	49751	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:56.567523003 CEST	443	49751	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:56.567558050 CEST	443	49751	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:56.567559958 CEST	49751	443	192.168.2.16	20.190.160.20
Aug 30, 2024 07:37:56.567611933 CEST	49751	443	192.168.2.16	20.190.160.20
Aug 30, 2024 07:37:56.567873001 CEST	49751	443	192.168.2.16	20.190.160.20
Aug 30, 2024 07:37:56.567893028 CEST	443	49751	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:56.567905903 CEST	49751	443	192.168.2.16	20.190.160.20
Aug 30, 2024 07:37:56.567910910 CEST	443	49751	20.190.160.20	192.168.2.16
Aug 30, 2024 07:37:56.584532976 CEST	49752	443	192.168.2.16	52.137.106.217
Aug 30, 2024 07:37:56.584567070 CEST	443	49752	52.137.106.217	192.168.2.16
Aug 30, 2024 07:37:56.584660053 CEST	49752	443	192.168.2.16	52.137.106.217
Aug 30, 2024 07:37:56.584883928 CEST	49752	443	192.168.2.16	52.137.106.217
Aug 30, 2024 07:37:56.584901094 CEST	443	49752	52.137.106.217	192.168.2.16
Aug 30, 2024 07:37:56.747709990 CEST	49678	443	192.168.2.16	20.189.173.10
Aug 30, 2024 07:37:57.376527071 CEST	443	49752	52.137.106.217	192.168.2.16
Aug 30, 2024 07:37:57.376605034 CEST	49752	443	192.168.2.16	52.137.106.217
Aug 30, 2024 07:37:57.377810001 CEST	49752	443	192.168.2.16	52.137.106.217
Aug 30, 2024 07:37:57.377821922 CEST	443	49752	52.137.106.217	192.168.2.16
Aug 30, 2024 07:37:57.378020048 CEST	443	49752	52.137.106.217	192.168.2.16
Aug 30, 2024 07:37:57.379096031 CEST	49752	443	192.168.2.16	52.137.106.217
Aug 30, 2024 07:37:57.379133940 CEST	443	49752	52.137.106.217	192.168.2.16
Aug 30, 2024 07:37:57.379193068 CEST	49752	443	192.168.2.16	52.137.106.217
Aug 30, 2024 07:37:57.643857956 CEST	49753	443	192.168.2.16	52.137.106.217
Aug 30, 2024 07:37:57.643913031 CEST	443	49753	52.137.106.217	192.168.2.16
Aug 30, 2024 07:37:57.644013882 CEST	49753	443	192.168.2.16	52.137.106.217
Aug 30, 2024 07:37:57.644239902 CEST	49753	443	192.168.2.16	52.137.106.217
Aug 30, 2024 07:37:57.644254923 CEST	443	49753	52.137.106.217	192.168.2.16
Aug 30, 2024 07:37:58.183667898 CEST	49673	443	192.168.2.16	204.79.197.203
Aug 30, 2024 07:37:58.436052084 CEST	443	49753	52.137.106.217	192.168.2.16
Aug 30, 2024 07:37:58.436135054 CEST	49753	443	192.168.2.16	52.137.106.217
Aug 30, 2024 07:37:58.437414885 CEST	49753	443	192.168.2.16	52.137.106.217
Aug 30, 2024 07:37:58.437427044 CEST	443	49753	52.137.106.217	192.168.2.16
Aug 30, 2024 07:37:58.437629938 CEST	443	49753	52.137.106.217	192.168.2.16
Aug 30, 2024 07:37:58.438662052 CEST	49753	443	192.168.2.16	52.137.106.217
Aug 30, 2024 07:37:58.438698053 CEST	443	49753	52.137.106.217	192.168.2.16
Aug 30, 2024 07:37:58.438750982 CEST	49753	443	192.168.2.16	52.137.106.217
Aug 30, 2024 07:38:00.620181084 CEST	58680	53	192.168.2.16	162.159.36.2
Aug 30, 2024 07:38:00.624984980 CEST	53	58680	162.159.36.2	192.168.2.16
Aug 30, 2024 07:38:00.625063896 CEST	58680	53	192.168.2.16	162.159.36.2
Aug 30, 2024 07:38:00.629928112 CEST	53	58680	162.159.36.2	192.168.2.16
Aug 30, 2024 07:38:01.078551054 CEST	58680	53	192.168.2.16	162.159.36.2
Aug 30, 2024 07:38:01.083566904 CEST	53	58680	162.159.36.2	192.168.2.16
Aug 30, 2024 07:38:01.083617926 CEST	58680	53	192.168.2.16	162.159.36.2
Aug 30, 2024 07:38:01.096541882 CEST	58681	443	192.168.2.16	20.242.39.171
Aug 30, 2024 07:38:01.096647024 CEST	443	58681	20.242.39.171	192.168.2.16
Aug 30, 2024 07:38:01.096729994 CEST	58681	443	192.168.2.16	20.242.39.171
Aug 30, 2024 07:38:01.097075939 CEST	58681	443	192.168.2.16	20.242.39.171
Aug 30, 2024 07:38:01.097088099 CEST	443	58681	20.242.39.171	192.168.2.16
Aug 30, 2024 07:38:01.220698118 CEST	49680	80	192.168.2.16	192.229.211.108
Aug 30, 2024 07:38:01.690888882 CEST	443	58681	20.242.39.171	192.168.2.16
Aug 30, 2024 07:38:01.691093922 CEST	58681	443	192.168.2.16	20.242.39.171
Aug 30, 2024 07:38:01.692476988 CEST	58681	443	192.168.2.16	20.242.39.171
Aug 30, 2024 07:38:01.692491055 CEST	443	58681	20.242.39.171	192.168.2.16
Aug 30, 2024 07:38:01.692708969 CEST	443	58681	20.242.39.171	192.168.2.16
Aug 30, 2024 07:38:01.693685055 CEST	58681	443	192.168.2.16	20.242.39.171
Aug 30, 2024 07:38:01.740497112 CEST	443	58681	20.242.39.171	192.168.2.16
Aug 30, 2024 07:38:01.802383900 CEST	443	58681	20.242.39.171	192.168.2.16
Aug 30, 2024 07:38:01.802438021 CEST	443	58681	20.242.39.171	192.168.2.16
Aug 30, 2024 07:38:01.802614927 CEST	58681	443	192.168.2.16	20.242.39.171
Aug 30, 2024 07:38:01.802614927 CEST	58681	443	192.168.2.16	20.242.39.171
Aug 30, 2024 07:38:01.802614927 CEST	58681	443	192.168.2.16	20.242.39.171
Aug 30, 2024 07:38:01.833754063 CEST	58682	443	192.168.2.16	13.85.23.86
Aug 30, 2024 07:38:01.833789110 CEST	443	58682	13.85.23.86	192.168.2.16
Aug 30, 2024 07:38:01.833853960 CEST	58682	443	192.168.2.16	13.85.23.86
Aug 30, 2024 07:38:01.834155083 CEST	58682	443	192.168.2.16	13.85.23.86
Aug 30, 2024 07:38:01.834167004 CEST	443	58682	13.85.23.86	192.168.2.16
Aug 30, 2024 07:38:02.115704060 CEST	58681	443	192.168.2.16	20.242.39.171
Aug 30, 2024 07:38:02.115726948 CEST	443	58681	20.242.39.171	192.168.2.16
Aug 30, 2024 07:38:02.387870073 CEST	58682	443	192.168.2.16	13.85.23.86
Aug 30, 2024 07:38:02.407988071 CEST	58683	443	192.168.2.16	20.114.59.183
Aug 30, 2024 07:38:02.408006907 CEST	443	58683	20.114.59.183	192.168.2.16
Aug 30, 2024 07:38:02.408083916 CEST	58683	443	192.168.2.16	20.114.59.183
Aug 30, 2024 07:38:02.408406973 CEST	58683	443	192.168.2.16	20.114.59.183
Aug 30, 2024 07:38:02.408418894 CEST	443	58683	20.114.59.183	192.168.2.16
Aug 30, 2024 07:38:03.189418077 CEST	443	58683	20.114.59.183	192.168.2.16
Aug 30, 2024 07:38:03.189532042 CEST	58683	443	192.168.2.16	20.114.59.183
Aug 30, 2024 07:38:03.193362951 CEST	58683	443	192.168.2.16	20.114.59.183
Aug 30, 2024 07:38:03.193373919 CEST	443	58683	20.114.59.183	192.168.2.16
Aug 30, 2024 07:38:03.193624020 CEST	443	58683	20.114.59.183	192.168.2.16
Aug 30, 2024 07:38:03.194730043 CEST	58683	443	192.168.2.16	20.114.59.183
Aug 30, 2024 07:38:03.240504026 CEST	443	58683	20.114.59.183	192.168.2.16
Aug 30, 2024 07:38:03.433343887 CEST	443	58683	20.114.59.183	192.168.2.16
Aug 30, 2024 07:38:03.433420897 CEST	443	58683	20.114.59.183	192.168.2.16
Aug 30, 2024 07:38:03.433587074 CEST	58683	443	192.168.2.16	20.114.59.183
Aug 30, 2024 07:38:03.433587074 CEST	58683	443	192.168.2.16	20.114.59.183
Aug 30, 2024 07:38:03.433587074 CEST	58683	443	192.168.2.16	20.114.59.183
Aug 30, 2024 07:38:03.742786884 CEST	58683	443	192.168.2.16	20.114.59.183
Aug 30, 2024 07:38:03.742834091 CEST	443	58683	20.114.59.183	192.168.2.16
Aug 30, 2024 07:38:04.502866030 CEST	58684	443	192.168.2.16	40.127.169.103
Aug 30, 2024 07:38:04.502892017 CEST	443	58684	40.127.169.103	192.168.2.16
Aug 30, 2024 07:38:04.502986908 CEST	58684	443	192.168.2.16	40.127.169.103
Aug 30, 2024 07:38:04.503307104 CEST	58684	443	192.168.2.16	40.127.169.103
Aug 30, 2024 07:38:04.503320932 CEST	443	58684	40.127.169.103	192.168.2.16
Aug 30, 2024 07:38:05.263142109 CEST	443	58684	40.127.169.103	192.168.2.16
Aug 30, 2024 07:38:05.263253927 CEST	58684	443	192.168.2.16	40.127.169.103
Aug 30, 2024 07:38:05.264431953 CEST	58684	443	192.168.2.16	40.127.169.103
Aug 30, 2024 07:38:05.264440060 CEST	443	58684	40.127.169.103	192.168.2.16
Aug 30, 2024 07:38:05.264653921 CEST	443	58684	40.127.169.103	192.168.2.16
Aug 30, 2024 07:38:05.265734911 CEST	58684	443	192.168.2.16	40.127.169.103
Aug 30, 2024 07:38:05.308507919 CEST	443	58684	40.127.169.103	192.168.2.16
Aug 30, 2024 07:38:05.585297108 CEST	443	58684	40.127.169.103	192.168.2.16
Aug 30, 2024 07:38:05.585314989 CEST	443	58684	40.127.169.103	192.168.2.16
Aug 30, 2024 07:38:05.585328102 CEST	443	58684	40.127.169.103	192.168.2.16
Aug 30, 2024 07:38:05.585381985 CEST	58684	443	192.168.2.16	40.127.169.103
Aug 30, 2024 07:38:05.585390091 CEST	443	58684	40.127.169.103	192.168.2.16
Aug 30, 2024 07:38:05.585438013 CEST	58684	443	192.168.2.16	40.127.169.103
Aug 30, 2024 07:38:05.585808039 CEST	443	58684	40.127.169.103	192.168.2.16
Aug 30, 2024 07:38:05.585866928 CEST	58684	443	192.168.2.16	40.127.169.103
Aug 30, 2024 07:38:05.585871935 CEST	443	58684	40.127.169.103	192.168.2.16
Aug 30, 2024 07:38:05.586004972 CEST	443	58684	40.127.169.103	192.168.2.16
Aug 30, 2024 07:38:05.586056948 CEST	58684	443	192.168.2.16	40.127.169.103
Aug 30, 2024 07:38:05.587471008 CEST	58684	443	192.168.2.16	40.127.169.103
Aug 30, 2024 07:38:05.587482929 CEST	443	58684	40.127.169.103	192.168.2.16
Aug 30, 2024 07:38:05.587492943 CEST	58684	443	192.168.2.16	40.127.169.103
Aug 30, 2024 07:38:05.587496996 CEST	443	58684	40.127.169.103	192.168.2.16
Aug 30, 2024 07:38:05.744025946 CEST	58685	443	192.168.2.16	40.127.169.103
Aug 30, 2024 07:38:05.744057894 CEST	443	58685	40.127.169.103	192.168.2.16
Aug 30, 2024 07:38:05.744129896 CEST	58685	443	192.168.2.16	40.127.169.103
Aug 30, 2024 07:38:05.744488955 CEST	58685	443	192.168.2.16	40.127.169.103
Aug 30, 2024 07:38:05.744498014 CEST	443	58685	40.127.169.103	192.168.2.16
Aug 30, 2024 07:38:06.359749079 CEST	49678	443	192.168.2.16	20.189.173.10
Aug 30, 2024 07:38:06.707623959 CEST	443	58685	40.127.169.103	192.168.2.16
Aug 30, 2024 07:38:06.707734108 CEST	58685	443	192.168.2.16	40.127.169.103
Aug 30, 2024 07:38:06.708848953 CEST	58685	443	192.168.2.16	40.127.169.103
Aug 30, 2024 07:38:06.708858013 CEST	443	58685	40.127.169.103	192.168.2.16
Aug 30, 2024 07:38:06.709079027 CEST	443	58685	40.127.169.103	192.168.2.16
Aug 30, 2024 07:38:06.709991932 CEST	58685	443	192.168.2.16	40.127.169.103
Aug 30, 2024 07:38:06.752525091 CEST	443	58685	40.127.169.103	192.168.2.16
Aug 30, 2024 07:38:07.036931038 CEST	443	58685	40.127.169.103	192.168.2.16
Aug 30, 2024 07:38:07.036952972 CEST	443	58685	40.127.169.103	192.168.2.16
Aug 30, 2024 07:38:07.036966085 CEST	443	58685	40.127.169.103	192.168.2.16
Aug 30, 2024 07:38:07.037039995 CEST	58685	443	192.168.2.16	40.127.169.103
Aug 30, 2024 07:38:07.037050009 CEST	443	58685	40.127.169.103	192.168.2.16
Aug 30, 2024 07:38:07.037111998 CEST	58685	443	192.168.2.16	40.127.169.103
Aug 30, 2024 07:38:07.038168907 CEST	443	58685	40.127.169.103	192.168.2.16
Aug 30, 2024 07:38:07.038201094 CEST	443	58685	40.127.169.103	192.168.2.16
Aug 30, 2024 07:38:07.038227081 CEST	58685	443	192.168.2.16	40.127.169.103
Aug 30, 2024 07:38:07.038233995 CEST	443	58685	40.127.169.103	192.168.2.16
Aug 30, 2024 07:38:07.038252115 CEST	443	58685	40.127.169.103	192.168.2.16
Aug 30, 2024 07:38:07.038260937 CEST	58685	443	192.168.2.16	40.127.169.103
Aug 30, 2024 07:38:07.038302898 CEST	58685	443	192.168.2.16	40.127.169.103
Aug 30, 2024 07:38:07.040021896 CEST	58685	443	192.168.2.16	40.127.169.103
Aug 30, 2024 07:38:07.040033102 CEST	443	58685	40.127.169.103	192.168.2.16
Aug 30, 2024 07:38:07.040096045 CEST	58685	443	192.168.2.16	40.127.169.103
Aug 30, 2024 07:38:07.040100098 CEST	443	58685	40.127.169.103	192.168.2.16
Aug 30, 2024 07:38:10.830713987 CEST	49680	80	192.168.2.16	192.229.211.108
Aug 30, 2024 07:38:23.923996925 CEST	49698	80	192.168.2.16	199.232.210.172
Aug 30, 2024 07:38:23.924083948 CEST	49699	80	192.168.2.16	199.232.210.172
Aug 30, 2024 07:38:23.929222107 CEST	80	49698	199.232.210.172	192.168.2.16
Aug 30, 2024 07:38:23.929327011 CEST	49698	80	192.168.2.16	199.232.210.172
Aug 30, 2024 07:38:23.929485083 CEST	80	49699	199.232.210.172	192.168.2.16
Aug 30, 2024 07:38:23.929573059 CEST	49699	80	192.168.2.16	199.232.210.172
Aug 30, 2024 07:38:41.192962885 CEST	58687	443	192.168.2.16	172.217.18.4
Aug 30, 2024 07:38:41.193008900 CEST	443	58687	172.217.18.4	192.168.2.16
Aug 30, 2024 07:38:41.193084002 CEST	58687	443	192.168.2.16	172.217.18.4
Aug 30, 2024 07:38:41.193377972 CEST	58687	443	192.168.2.16	172.217.18.4
Aug 30, 2024 07:38:41.193392992 CEST	443	58687	172.217.18.4	192.168.2.16
Aug 30, 2024 07:38:41.819081068 CEST	443	58687	172.217.18.4	192.168.2.16
Aug 30, 2024 07:38:41.819415092 CEST	58687	443	192.168.2.16	172.217.18.4
Aug 30, 2024 07:38:41.819443941 CEST	443	58687	172.217.18.4	192.168.2.16
Aug 30, 2024 07:38:41.819786072 CEST	443	58687	172.217.18.4	192.168.2.16
Aug 30, 2024 07:38:41.820174932 CEST	58687	443	192.168.2.16	172.217.18.4
Aug 30, 2024 07:38:41.820260048 CEST	443	58687	172.217.18.4	192.168.2.16
Aug 30, 2024 07:38:41.870914936 CEST	58687	443	192.168.2.16	172.217.18.4
Aug 30, 2024 07:38:51.740413904 CEST	443	58687	172.217.18.4	192.168.2.16
Aug 30, 2024 07:38:51.740489960 CEST	443	58687	172.217.18.4	192.168.2.16
Aug 30, 2024 07:38:51.740550041 CEST	58687	443	192.168.2.16	172.217.18.4
Aug 30, 2024 07:38:52.531963110 CEST	58687	443	192.168.2.16	172.217.18.4
Aug 30, 2024 07:38:52.531995058 CEST	443	58687	172.217.18.4	192.168.2.16
Aug 30, 2024 07:39:14.668013096 CEST	49701	80	192.168.2.16	192.229.221.95
Aug 30, 2024 07:39:14.673202038 CEST	80	49701	192.229.221.95	192.168.2.16
Aug 30, 2024 07:39:14.673455000 CEST	49701	80	192.168.2.16	192.229.221.95

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 30, 2024 07:37:36.330557108 CEST	53	50820	1.1.1.1	192.168.2.16
Aug 30, 2024 07:37:36.333034039 CEST	52869	53	192.168.2.16	1.1.1.1
Aug 30, 2024 07:37:36.333194971 CEST	61560	53	192.168.2.16	1.1.1.1
Aug 30, 2024 07:37:36.342077971 CEST	53	61560	1.1.1.1	192.168.2.16
Aug 30, 2024 07:37:36.342355013 CEST	53	52869	1.1.1.1	192.168.2.16
Aug 30, 2024 07:37:36.353377104 CEST	53	59524	1.1.1.1	192.168.2.16
Aug 30, 2024 07:37:37.335793972 CEST	53	51870	1.1.1.1	192.168.2.16
Aug 30, 2024 07:37:39.085715055 CEST	56338	53	192.168.2.16	1.1.1.1
Aug 30, 2024 07:37:39.085858107 CEST	60847	53	192.168.2.16	1.1.1.1
Aug 30, 2024 07:37:39.086097956 CEST	53838	53	192.168.2.16	1.1.1.1
Aug 30, 2024 07:37:39.086213112 CEST	54377	53	192.168.2.16	1.1.1.1
Aug 30, 2024 07:37:39.092801094 CEST	53	56338	1.1.1.1	192.168.2.16
Aug 30, 2024 07:37:39.092861891 CEST	53	54377	1.1.1.1	192.168.2.16
Aug 30, 2024 07:37:39.093297005 CEST	53	60847	1.1.1.1	192.168.2.16
Aug 30, 2024 07:37:39.093951941 CEST	53	53838	1.1.1.1	192.168.2.16
Aug 30, 2024 07:37:39.840578079 CEST	53601	53	192.168.2.16	1.1.1.1
Aug 30, 2024 07:37:39.840712070 CEST	55642	53	192.168.2.16	1.1.1.1
Aug 30, 2024 07:37:39.847451925 CEST	53	55642	1.1.1.1	192.168.2.16
Aug 30, 2024 07:37:39.857127905 CEST	63716	53	192.168.2.16	1.1.1.1
Aug 30, 2024 07:37:39.857270002 CEST	57075	53	192.168.2.16	1.1.1.1
Aug 30, 2024 07:37:39.863677025 CEST	53	63716	1.1.1.1	192.168.2.16
Aug 30, 2024 07:37:39.865272999 CEST	53	57075	1.1.1.1	192.168.2.16
Aug 30, 2024 07:37:40.004271030 CEST	56982	53	192.168.2.16	1.1.1.1
Aug 30, 2024 07:37:40.004429102 CEST	50919	53	192.168.2.16	1.1.1.1
Aug 30, 2024 07:37:40.011043072 CEST	53	56982	1.1.1.1	192.168.2.16
Aug 30, 2024 07:37:40.011145115 CEST	53	50919	1.1.1.1	192.168.2.16
Aug 30, 2024 07:37:40.125314951 CEST	64545	53	192.168.2.16	1.1.1.1
Aug 30, 2024 07:37:40.125721931 CEST	57000	53	192.168.2.16	1.1.1.1
Aug 30, 2024 07:37:40.135345936 CEST	53	64545	1.1.1.1	192.168.2.16
Aug 30, 2024 07:37:40.135360003 CEST	53	57000	1.1.1.1	192.168.2.16
Aug 30, 2024 07:37:40.135384083 CEST	53	53807	1.1.1.1	192.168.2.16
Aug 30, 2024 07:37:40.736008883 CEST	56983	53	192.168.2.16	1.1.1.1
Aug 30, 2024 07:37:40.736145020 CEST	62794	53	192.168.2.16	1.1.1.1
Aug 30, 2024 07:37:40.743113041 CEST	53	56983	1.1.1.1	192.168.2.16
Aug 30, 2024 07:37:40.743551970 CEST	53	62794	1.1.1.1	192.168.2.16
Aug 30, 2024 07:37:40.835081100 CEST	54499	53	192.168.2.16	1.1.1.1
Aug 30, 2024 07:37:40.835218906 CEST	54904	53	192.168.2.16	1.1.1.1
Aug 30, 2024 07:37:40.845546007 CEST	53	54499	1.1.1.1	192.168.2.16
Aug 30, 2024 07:37:40.847484112 CEST	53	54904	1.1.1.1	192.168.2.16
Aug 30, 2024 07:37:41.043751001 CEST	51654	53	192.168.2.16	1.1.1.1
Aug 30, 2024 07:37:41.043909073 CEST	52025	53	192.168.2.16	1.1.1.1
Aug 30, 2024 07:37:41.050304890 CEST	53	51654	1.1.1.1	192.168.2.16
Aug 30, 2024 07:37:41.050405979 CEST	53	52025	1.1.1.1	192.168.2.16
Aug 30, 2024 07:37:41.124660015 CEST	56180	53	192.168.2.16	1.1.1.1
Aug 30, 2024 07:37:41.124810934 CEST	53543	53	192.168.2.16	1.1.1.1
Aug 30, 2024 07:37:41.131326914 CEST	53	56180	1.1.1.1	192.168.2.16
Aug 30, 2024 07:37:41.131822109 CEST	53	53543	1.1.1.1	192.168.2.16
Aug 30, 2024 07:37:41.287225008 CEST	53	53091	1.1.1.1	192.168.2.16
Aug 30, 2024 07:37:41.327965975 CEST	53	62504	1.1.1.1	192.168.2.16
Aug 30, 2024 07:37:54.363111019 CEST	53	61590	1.1.1.1	192.168.2.16
Aug 30, 2024 07:38:00.619685888 CEST	53	49685	162.159.36.2	192.168.2.16
Aug 30, 2024 07:38:01.087681055 CEST	59108	53	192.168.2.16	1.1.1.1
Aug 30, 2024 07:38:01.094788074 CEST	53	59108	1.1.1.1	192.168.2.16
Aug 30, 2024 07:38:02.398847103 CEST	56213	53	192.168.2.16	1.1.1.1
Aug 30, 2024 07:38:02.406598091 CEST	53	56213	1.1.1.1	192.168.2.16
Aug 30, 2024 07:38:41.185049057 CEST	64323	53	192.168.2.16	1.1.1.1
Aug 30, 2024 07:38:41.191943884 CEST	53	64323	1.1.1.1	192.168.2.16
Aug 30, 2024 07:38:43.570847988 CEST	138	138	192.168.2.16	192.168.2.255

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Aug 30, 2024 07:37:36.333034039 CEST	192.168.2.16	1.1.1.1	0x824e	Standard query (0)	meta.com-businesshelp.com	A (IP address)	IN (0x0001)	false
Aug 30, 2024 07:37:36.333194971 CEST	192.168.2.16	1.1.1.1	0xc3d8	Standard query (0)	meta.com-businesshelp.com	65	IN (0x0001)	false
Aug 30, 2024 07:37:39.085715055 CEST	192.168.2.16	1.1.1.1	0xfd15	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 30, 2024 07:37:39.085858107 CEST	192.168.2.16	1.1.1.1	0xfddc	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Aug 30, 2024 07:37:39.086097956 CEST	192.168.2.16	1.1.1.1	0x20f0	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Aug 30, 2024 07:37:39.086213112 CEST	192.168.2.16	1.1.1.1	0x64a	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Aug 30, 2024 07:37:39.840578079 CEST	192.168.2.16	1.1.1.1	0xbec3	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Aug 30, 2024 07:37:39.840712070 CEST	192.168.2.16	1.1.1.1	0x1785	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Aug 30, 2024 07:37:39.857127905 CEST	192.168.2.16	1.1.1.1	0xffbe	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 30, 2024 07:37:39.857270002 CEST	192.168.2.16	1.1.1.1	0x3060	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Aug 30, 2024 07:37:40.004271030 CEST	192.168.2.16	1.1.1.1	0xcf3c	Standard query (0)	static.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Aug 30, 2024 07:37:40.004429102 CEST	192.168.2.16	1.1.1.1	0x4645	Standard query (0)	static.xx.fbcdn.net	65	IN (0x0001)	false
Aug 30, 2024 07:37:40.125314951 CEST	192.168.2.16	1.1.1.1	0x26f1	Standard query (0)	cdn.gtranslate.net	A (IP address)	IN (0x0001)	false
Aug 30, 2024 07:37:40.125721931 CEST	192.168.2.16	1.1.1.1	0x8c80	Standard query (0)	cdn.gtranslate.net	65	IN (0x0001)	false
Aug 30, 2024 07:37:40.736008883 CEST	192.168.2.16	1.1.1.1	0x2d0b	Standard query (0)	cdn.gtranslate.net	A (IP address)	IN (0x0001)	false
Aug 30, 2024 07:37:40.736145020 CEST	192.168.2.16	1.1.1.1	0x6e7e	Standard query (0)	cdn.gtranslate.net	65	IN (0x0001)	false
Aug 30, 2024 07:37:40.835081100 CEST	192.168.2.16	1.1.1.1	0xd607	Standard query (0)	meta.com-businesshelp.com	A (IP address)	IN (0x0001)	false
Aug 30, 2024 07:37:40.835218906 CEST	192.168.2.16	1.1.1.1	0xf925	Standard query (0)	meta.com-businesshelp.com	65	IN (0x0001)	false
Aug 30, 2024 07:37:41.043751001 CEST	192.168.2.16	1.1.1.1	0x74df	Standard query (0)	static.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Aug 30, 2024 07:37:41.043909073 CEST	192.168.2.16	1.1.1.1	0x8be7	Standard query (0)	static.xx.fbcdn.net	65	IN (0x0001)	false
Aug 30, 2024 07:37:41.124660015 CEST	192.168.2.16	1.1.1.1	0x51e7	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Aug 30, 2024 07:37:41.124810934 CEST	192.168.2.16	1.1.1.1	0x2a17	Standard query (0)	www.google.com	65	IN (0x0001)	false
Aug 30, 2024 07:38:01.087681055 CEST	192.168.2.16	1.1.1.1	0x1a2d	Standard query (0)	171.39.242.20.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Aug 30, 2024 07:38:02.398847103 CEST	192.168.2.16	1.1.1.1	0xa151	Standard query (0)	183.59.114.20.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Aug 30, 2024 07:38:41.185049057 CEST	192.168.2.16	1.1.1.1	0xfe57	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Aug 30, 2024 07:37:36.342077971 CEST	1.1.1.1	192.168.2.16	0xc3d8	No error (0)	meta.com-businesshelp.com			65	IN (0x0001)	false
Aug 30, 2024 07:37:36.342355013 CEST	1.1.1.1	192.168.2.16	0x824e	No error (0)	meta.com-businesshelp.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Aug 30, 2024 07:37:36.342355013 CEST	1.1.1.1	192.168.2.16	0x824e	No error (0)	meta.com-businesshelp.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Aug 30, 2024 07:37:39.092801094 CEST	1.1.1.1	192.168.2.16	0xfd15	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Aug 30, 2024 07:37:39.092801094 CEST	1.1.1.1	192.168.2.16	0xfd15	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Aug 30, 2024 07:37:39.092861891 CEST	1.1.1.1	192.168.2.16	0x64a	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 07:37:39.093297005 CEST	1.1.1.1	192.168.2.16	0xfddc	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Aug 30, 2024 07:37:39.093951941 CEST	1.1.1.1	192.168.2.16	0x20f0	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 07:37:39.093951941 CEST	1.1.1.1	192.168.2.16	0x20f0	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Aug 30, 2024 07:37:39.093951941 CEST	1.1.1.1	192.168.2.16	0x20f0	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Aug 30, 2024 07:37:39.093951941 CEST	1.1.1.1	192.168.2.16	0x20f0	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Aug 30, 2024 07:37:39.093951941 CEST	1.1.1.1	192.168.2.16	0x20f0	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Aug 30, 2024 07:37:39.847451925 CEST	1.1.1.1	192.168.2.16	0x1785	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 07:37:39.847465992 CEST	1.1.1.1	192.168.2.16	0xbec3	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 07:37:39.863677025 CEST	1.1.1.1	192.168.2.16	0xffbe	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Aug 30, 2024 07:37:39.863677025 CEST	1.1.1.1	192.168.2.16	0xffbe	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Aug 30, 2024 07:37:39.865272999 CEST	1.1.1.1	192.168.2.16	0x3060	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Aug 30, 2024 07:37:40.011043072 CEST	1.1.1.1	192.168.2.16	0xcf3c	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 07:37:40.011043072 CEST	1.1.1.1	192.168.2.16	0xcf3c	No error (0)	scontent.xx.fbcdn.net		157.240.253.1	A (IP address)	IN (0x0001)	false
Aug 30, 2024 07:37:40.011145115 CEST	1.1.1.1	192.168.2.16	0x4645	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 07:37:40.011145115 CEST	1.1.1.1	192.168.2.16	0x4645	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Aug 30, 2024 07:37:40.011145115 CEST	1.1.1.1	192.168.2.16	0x4645	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Aug 30, 2024 07:37:40.135345936 CEST	1.1.1.1	192.168.2.16	0x26f1	No error (0)	cdn.gtranslate.net		104.26.13.42	A (IP address)	IN (0x0001)	false
Aug 30, 2024 07:37:40.135345936 CEST	1.1.1.1	192.168.2.16	0x26f1	No error (0)	cdn.gtranslate.net		104.26.12.42	A (IP address)	IN (0x0001)	false
Aug 30, 2024 07:37:40.135345936 CEST	1.1.1.1	192.168.2.16	0x26f1	No error (0)	cdn.gtranslate.net		172.67.68.204	A (IP address)	IN (0x0001)	false
Aug 30, 2024 07:37:40.135360003 CEST	1.1.1.1	192.168.2.16	0x8c80	No error (0)	cdn.gtranslate.net			65	IN (0x0001)	false
Aug 30, 2024 07:37:40.743113041 CEST	1.1.1.1	192.168.2.16	0x2d0b	No error (0)	cdn.gtranslate.net		172.67.68.204	A (IP address)	IN (0x0001)	false
Aug 30, 2024 07:37:40.743113041 CEST	1.1.1.1	192.168.2.16	0x2d0b	No error (0)	cdn.gtranslate.net		104.26.12.42	A (IP address)	IN (0x0001)	false
Aug 30, 2024 07:37:40.743113041 CEST	1.1.1.1	192.168.2.16	0x2d0b	No error (0)	cdn.gtranslate.net		104.26.13.42	A (IP address)	IN (0x0001)	false
Aug 30, 2024 07:37:40.743551970 CEST	1.1.1.1	192.168.2.16	0x6e7e	No error (0)	cdn.gtranslate.net			65	IN (0x0001)	false
Aug 30, 2024 07:37:40.845546007 CEST	1.1.1.1	192.168.2.16	0xd607	No error (0)	meta.com-businesshelp.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Aug 30, 2024 07:37:40.845546007 CEST	1.1.1.1	192.168.2.16	0xd607	No error (0)	meta.com-businesshelp.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Aug 30, 2024 07:37:40.847484112 CEST	1.1.1.1	192.168.2.16	0xf925	No error (0)	meta.com-businesshelp.com			65	IN (0x0001)	false
Aug 30, 2024 07:37:41.050304890 CEST	1.1.1.1	192.168.2.16	0x74df	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 07:37:41.050304890 CEST	1.1.1.1	192.168.2.16	0x74df	No error (0)	scontent.xx.fbcdn.net		157.240.251.9	A (IP address)	IN (0x0001)	false
Aug 30, 2024 07:37:41.050405979 CEST	1.1.1.1	192.168.2.16	0x8be7	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 30, 2024 07:37:41.050405979 CEST	1.1.1.1	192.168.2.16	0x8be7	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Aug 30, 2024 07:37:41.050405979 CEST	1.1.1.1	192.168.2.16	0x8be7	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Aug 30, 2024 07:37:41.131326914 CEST	1.1.1.1	192.168.2.16	0x51e7	No error (0)	www.google.com		142.250.185.68	A (IP address)	IN (0x0001)	false
Aug 30, 2024 07:37:41.131822109 CEST	1.1.1.1	192.168.2.16	0x2a17	No error (0)	www.google.com			65	IN (0x0001)	false
Aug 30, 2024 07:38:01.094788074 CEST	1.1.1.1	192.168.2.16	0x1a2d	Name error (3)	171.39.242.20.in-addr.arpa	none	none	PTR (Pointer record)	IN (0x0001)	false
Aug 30, 2024 07:38:02.406598091 CEST	1.1.1.1	192.168.2.16	0xa151	Name error (3)	183.59.114.20.in-addr.arpa	none	none	PTR (Pointer record)	IN (0x0001)	false
Aug 30, 2024 07:38:41.191943884 CEST	1.1.1.1	192.168.2.16	0xfe57	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

meta.com-businesshelp.com

https:

cdnjs.cloudflare.com

cdn.jsdelivr.net

static.xx.fbcdn.net

cdn.gtranslate.net

fs.microsoft.com

slscr.update.microsoft.com

fe3cr.delivery.mp.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49705	188.114.96.3	443	528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 05:37:36 UTC	898	OUT	GET /index.php?appeal&mcp_token=eyjwawqiojewmzewmzq1mjy4otkynswic2lkijo3odg3njgynjixmzqyndmwlcjheci6imixzdfkmgq5mjawzdm4njhkmtg1m2njywe5ngnjmwjkiiwidhmioje3mjq5odc1odysimv4cci6mtcynzqwnjc4nn0.g1r0zoidsulijizzpul__xu_ezru3nkvbuiwksxr0pk HTTP/1.1 Host: meta.com-businesshelp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 05:37:39 UTC	781	IN	HTTP/1.1 200 OK Date: Fri, 30 Aug 2024 05:37:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=etc2hgh99mff6l1clnntmk6fuu; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ptnvGzmij0ioBzM6%2FGzpvQN%2BQOKK602lLajoBhOrkPeGNB1SojdyZHHLVzXjlRTp7tpXS7PDCtGxlyi53gC4AGN25LO8R3Vq%2ByRticqFqmY%2FS63V%2BC7iboNlzlHrrm5KZW5s%2F4JVe6NCQ7ow"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8bb26e0d7c880f47-EWR alt-svc: h3=":443"; ma=86400
2024-08-30 05:37:39 UTC	588	IN	Data Raw: 31 62 65 64 0d 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 20 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 20 69 64 3d 66 61 63 65 62 6f 6f 6b 20 63 6c 61 73 73 3e 0a 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 66 6f 72 6d 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 73 65 6c 65 63 74 7b 70 61 64 64 69 6e 67 3a 32 70 78 7d 69 6e 70 75 74 2c 73 65 6c 65 63 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 31 63 31 65 32 31 7d 68 74 6d 6c 7b 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 7d 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 62 36 62 62 63 31 3b 64 69 72 Data Ascii: 1bed<!DOCTYPE html> <html lang=en id=facebook class> <meta charset=utf-8> <style>form{margin:0;padding:0}select{padding:2px}input,select{background-color:#fff;color:#1c1e21}html{touch-action:manipulation}body{background:#fff;color:#b6bbc1;dir
2024-08-30 05:37:39 UTC	1369	IN	Data Raw: 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 30 3b 68 65 69 67 68 74 3a 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 63 6c 65 61 72 66 69 78 7b 7a 6f 6f 6d 3a 31 7d 2a 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 23 36 30 36 37 37 30 7d 2a 3a 66 6f 63 75 73 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 23 62 65 63 33 63 39 7d 62 6f 64 79 7b 6f 76 65 72 66 6c 6f 77 2d 79 3a 73 63 72 6f 6c 6c 7d 3c 2f 73 74 79 6c 65 3e 0a 20 20 20 20 3c 74 69 74 6c 65 20 69 64 3d 70 61 67 65 54 69 74 6c 65 3e 4d 65 74 61 20 53 75 70 70 6f 72 74 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d Data Ascii: lay:block;font-size:0;height:0;line-height:0;visibility:hidden}.clearfix{zoom:1}::-webkit-input-placeholder{color:#606770}:focus::-webkit-input-placeholder{color:#bec3c9}body{overflow-y:scroll}</style> <title id=pageTitle>Meta Support</title> <m
2024-08-30 05:37:39 UTC	1369	IN	Data Raw: 43 50 4d 41 7a 51 35 6b 41 51 58 2f 36 46 31 50 70 2f 65 2b 54 4b 6f 30 63 41 31 6e 2b 49 48 57 2b 57 59 4f 45 71 34 35 4f 44 66 33 35 77 61 71 76 4d 34 4f 33 41 79 52 6b 45 49 34 6d 32 6d 71 32 58 51 38 35 4d 73 54 2b 48 44 58 52 36 72 64 45 39 6b 4f 61 33 75 47 2f 6d 49 32 75 74 71 46 4c 61 57 66 71 4b 70 30 76 63 7a 7a 58 7a 58 69 4b 45 53 45 4a 43 62 4f 2b 4b 4e 58 66 4e 5a 45 4a 73 53 52 34 32 41 71 42 68 46 2b 34 7a 64 63 78 67 59 65 63 30 73 4f 58 4a 74 37 36 58 2f 55 2b 2f 2f 6d 37 71 47 4c 49 71 41 4d 4a 67 78 6a 67 78 66 30 6b 71 74 33 65 31 49 4d 54 2f 43 58 30 4e 68 63 79 66 68 74 79 4e 69 2b 79 61 41 48 65 45 74 65 41 67 6f 63 6d 77 4d 31 4a 4d 6d 55 5a 54 74 79 35 63 6e 6e 2b 69 58 2b 65 66 37 79 2b 39 72 72 74 70 4b 4d 6a 62 79 78 2f 57 6e Data Ascii: CPMAzQ5kAQX/6F1Pp/e+TKo0cA1n+IHW+WYOEq45ODf35waqvM4O3AyRkEI4m2mq2XQ85MsT+HDXR6rdE9kOa3uG/mI2utqFLaWfqKp0vczzXzXiKESEJCbO+KNXfNZEJsSR42AqBhF+4zdcxgYec0sOXJt76X/U+//m7qGLIqAMJgxjgxf0kqt3e1IMT/CX0NhcyfhtyNi+yaAHeEteAgocmwM1JMmUZTty5cnn+iX+ef7y+9rrtpKMjbyx/Wn
2024-08-30 05:37:39 UTC	1369	IN	Data Raw: 39 56 39 72 31 54 31 33 71 75 53 69 68 4a 42 55 70 47 6d 4e 41 46 51 4d 79 4d 6b 73 41 65 59 49 4a 58 6f 74 68 44 68 71 42 75 6e 46 43 53 59 53 45 38 41 65 6a 4a 4f 36 65 65 59 64 76 39 34 35 36 56 33 66 37 48 2b 6d 31 57 4f 71 37 2f 59 72 6a 4c 2f 77 4e 2f 37 6e 7a 71 31 72 55 38 62 42 2f 53 34 76 52 4d 36 55 39 70 39 36 56 52 4b 35 34 54 68 66 6b 76 77 6a 34 30 4e 4b 4d 63 77 38 50 79 6e 2b 71 32 64 75 30 61 37 4d 39 34 6f 79 42 56 66 33 57 36 70 6f 69 4f 6b 71 71 61 6f 72 4c 47 38 30 74 4e 59 50 33 6d 54 4c 57 38 4b 2b 75 47 63 4e 64 6c 45 66 61 49 77 4d 5a 52 55 64 4b 47 6a 78 45 76 38 4c 43 46 57 49 58 5a 51 55 55 50 5a 55 5a 51 31 2f 76 39 72 61 70 58 65 68 30 2f 53 49 43 6d 32 42 5a 52 37 6a 61 61 7a 37 71 79 44 6b 4b 54 6b 6d 6d 32 50 63 76 49 42 Data Ascii: 9V9r1T13quSihJBUpGmNAFQMyMksAeYIJXothDhqBunFCSYSE8AejJO6eeYdv9456V3f7H+m1WOq7/YrjL/wN/7nzq1rU8bB/S4vRM6U9p96VRK54Thfkvwj40NKMcw8Pyn+q2du0a7M94oyBVf3W6poiOkqqaorLG80tNYP3mTLW8K+uGcNdlEfaIwMZRUdKGjxEv8LCFWIXZQUUPZUZQ1/v9rapXeh0/SICm2BZR7jaaz7qyDkKTkmm2PcvIB
2024-08-30 05:37:39 UTC	1369	IN	Data Raw: 31 65 55 61 33 34 30 63 6d 5a 49 73 66 6a 56 43 5a 58 4b 43 6e 61 59 6d 6b 35 58 68 41 6c 32 57 71 7a 4f 78 7a 4c 75 73 46 38 6e 49 51 38 58 32 37 33 70 2b 65 58 31 37 64 33 41 42 45 6d 6c 48 45 68 6c 54 62 57 2b 52 44 62 75 75 33 48 65 64 33 50 2b 2f 30 41 49 6b 77 6f 34 30 49 71 62 53 7a 62 63 54 30 2f 43 4b 4d 34 53 62 4f 38 4b 4b 75 36 61 62 74 65 34 42 36 58 78 78 63 4b 52 78 35 74 74 74 70 44 61 44 39 2f 38 66 4c 74 75 2f 64 4d 59 34 64 46 67 71 52 45 73 55 76 39 4a 67 49 4d 79 63 41 51 49 30 32 4a 46 71 73 51 4b 4c 41 65 46 42 53 73 2b 67 59 55 46 46 7a 39 45 67 51 4b 58 76 6f 67 42 41 71 2b 50 51 30 49 46 50 78 2b 46 53 67 6f 5a 4d 58 66 51 44 70 7a 63 6c 42 31 50 46 35 67 44 4a 72 41 4a 4a 58 58 30 7a 33 73 41 70 64 55 32 51 6d 4c 57 65 33 37 45 Data Ascii: 1eUa340cmZIsfjVCZXKCnaYmk5XhAl2WqzOxzLusF8nIQ8X273p+eX17d3ABEmlHEhlTbW+RDbuu3Hed3P+/0AIkwo40IqbSzbcT0/CKM4SbO8KKu6abte4B6XxxcKRx5tttpDaD9/8fLtu/dMY4dFgqREsUv9JgIMycAQI02JFqsQKLAeFBSs+gYUFFz9EgQKXvogBAq+PQ0IFPx+FSgoZMXfQDpzclB1PF5gDJrAJJXX0z3sApdU2QmLWe37E
2024-08-30 05:37:39 UTC	1093	IN	Data Raw: 6b 69 68 46 52 6a 74 30 78 54 4e 68 32 37 4d 45 36 73 6d 63 74 36 39 52 65 2f 4a 4e 31 5a 71 2f 73 74 58 56 75 54 2f 61 68 64 57 6d 33 2b 31 65 73 61 2f 61 6a 72 42 76 32 6b 39 64 6d 33 62 53 66 32 61 38 73 49 79 6e 6c 4a 6d 44 6d 67 6d 58 4d 57 62 61 63 52 57 48 4a 58 77 79 32 6b 73 55 70 61 79 30 4a 72 79 57 72 66 41 31 4c 55 61 4e 32 71 56 71 31 4c 74 30 4f 75 35 5a 68 6a 7a 33 4c 4a 74 53 35 48 4e 32 74 73 52 78 70 2b 59 36 31 41 6f 4f 74 30 4f 68 4c 6a 65 30 53 76 4b 31 78 63 6b 65 54 38 6c 30 63 7a 4a 35 30 66 64 63 76 68 74 33 39 53 33 74 61 69 74 37 77 4c 57 72 7a 2b 2b 58 61 51 79 74 58 4c 33 78 77 32 49 61 2f 45 76 76 37 48 32 45 6a 45 43 66 6d 6a 72 7a 41 56 37 35 64 76 6f 4e 36 76 2f 30 4e 36 45 50 6f 49 38 54 4d 69 62 69 42 42 38 69 46 4e 2f Data Ascii: kihFRjt0xTNh27ME6smct69Re/JN1Zq/stXVuT/ahdWm3+1esa/ajrBv2k9dm3bSf2a8sIynlJmDmgmXMWbacRWHJXwy2ksUpay0JryWrfA1LUaN2qVq1Lt0Ou5Zhjz3LJtS5HN2tsRxp+Y61AoOt0OhLje0SvK1xckeT8l0czJ50fdcvht39S3tait7wLWrz++XaQytXL3xw2Ia/Evv7H2EjECfmjrzAV75dvoN6v/0N6EPoI8TMibiBB8iFN/
2024-08-30 05:37:39 UTC	1369	IN	Data Raw: 32 63 33 31 0d 0a 4a 38 35 6e 66 31 37 32 69 62 78 67 6a 53 67 45 4c 73 66 54 78 70 77 6d 75 53 49 65 58 2f 4f 61 6b 4e 67 55 41 4a 31 4b 78 63 30 31 38 31 45 53 77 66 71 56 47 70 46 64 51 4f 36 67 54 31 67 67 5a 5a 77 36 78 4a 31 44 52 71 46 6a 53 50 57 67 51 74 6f 31 5a 52 6d 36 52 64 31 6a 37 70 6b 48 57 4d 75 69 43 46 57 52 77 5a 6b 41 31 71 47 74 77 30 70 47 6c 6f 30 37 43 6d 34 55 30 6a 4f 6b 79 74 54 4b 74 4d 72 38 79 6f 7a 4b 7a 4d 71 73 79 75 7a 41 6e 6d 42 76 4f 43 2b 63 47 43 59 43 47 79 4b 46 75 63 4a 59 51 73 69 5a 59 47 79 34 4c 6c 77 59 70 67 5a 62 41 71 57 52 32 73 53 64 59 6d 36 35 4c 31 79 59 5a 73 59 37 51 35 32 4a 38 63 53 49 37 56 6e 4d 68 4f 5a 6d 65 51 68 38 47 6a 37 45 6e 54 30 38 71 7a 70 75 65 56 46 30 30 76 4b 36 2b 44 74 38 48 Data Ascii: 2c31J85nf172ibxgjSgELsfTxpwmuSIeX/OakNgUAJ1Kxc0181ESwfqVGpFdQO6gT1ggZZw6xJ1DRqFjSPWgQto1ZRm6Rd1j7pkHWMuiCFWRwZkA1qGtw0pGlo07Cm4U0jOkytTKtMr8yozKzMqsyuzAnmBvOC+cGCYCGyKFucJYQsiZYGy4LlwYpgZbAqWR2sSdYm65L1yYZsY7Q52J8cSI7VnMhOZmeQh8Gj7EnT08qzpueVF00vK6+Dt8H
2024-08-30 05:37:39 UTC	1369	IN	Data Raw: 53 62 31 4c 4c 64 78 4d 6b 39 52 70 66 58 6b 4c 43 53 58 57 4a 65 57 79 30 38 4b 58 4f 45 44 68 50 36 67 63 65 61 64 4e 35 5a 61 59 4e 32 33 71 37 36 63 78 6c 31 59 4c 31 34 76 4c 53 30 5a 66 48 4f 42 54 51 47 57 50 6c 4a 6c 55 47 34 72 79 78 76 4a 73 2f 54 32 4a 52 6d 47 76 2b 6f 73 57 54 6f 76 50 79 6c 77 68 57 76 34 53 74 39 78 46 44 79 47 69 43 6a 62 53 38 4b 6f 64 54 39 2b 32 43 4e 6c 38 54 48 4a 69 62 34 72 79 30 42 44 51 36 31 72 41 64 64 56 6c 4b 2f 36 41 4a 76 7a 65 37 53 2b 46 51 6d 7a 4b 78 71 53 67 36 55 6a 73 53 7a 79 32 6b 6f 75 57 31 5a 36 58 32 75 4e 62 4a 71 75 36 49 71 7a 52 6c 78 69 77 72 69 41 6b 4a 4a 30 75 35 2b 32 6d 65 65 69 75 39 57 34 76 63 49 37 4c 68 36 6a 4e 6a 57 78 2b 6b 6b 6a 47 71 76 48 4a 68 4b 6f 51 45 55 64 54 61 56 39 Data Ascii: Sb1LLdxMk9RpfXkLCSXWJeWy08KXOEDhP6gceadN5ZaYN23q76cxl1YL14vLS0ZfHOBTQGWPlJlUG4ryxvJs/T2JRmGv+osWTovPylwhWv4St9xFDyGiCjbS8KodT9+2CNl8THJib4ry0BDQ61rAddVlK/6AJvze7S+FQmzKxqSg6UjsSzy2kouW1Z6X2uNbJqu6IqzRlxiwriAkJJ0u5+2meeiu9W4vcI7Lh6jNjWx+kkjGqvHJhKoQEUdTaV9
2024-08-30 05:37:39 UTC	1369	IN	Data Raw: 6d 59 6b 4c 32 36 6d 77 36 31 7a 34 58 46 4a 4b 58 67 33 6e 53 67 42 79 6c 52 33 31 59 4b 63 62 41 30 38 68 35 4c 78 52 32 32 4e 31 52 72 4e 6e 75 53 4f 6c 6f 72 33 4e 31 36 65 56 4e 45 36 67 54 53 63 78 46 47 50 4c 52 65 51 49 37 36 39 32 5a 6b 48 32 4a 61 2b 33 37 4f 78 75 76 66 6a 78 6a 6c 64 64 59 47 32 51 57 59 74 46 45 34 32 7a 75 54 50 41 65 50 78 6a 61 74 56 4c 73 71 41 4e 47 39 76 72 2b 77 62 51 76 4b 56 63 36 70 56 4f 46 6d 30 68 5a 58 51 6b 67 49 74 35 70 71 68 47 37 4e 38 6f 54 6c 45 2f 69 79 37 43 41 6d 36 32 34 78 59 55 2f 4e 62 6d 49 37 63 54 72 49 6f 59 53 6d 37 4b 56 69 78 49 57 4a 32 4f 6e 6c 6b 64 4d 6a 49 45 2f 6d 37 6e 6f 6b 6c 34 4e 53 57 6a 47 72 47 70 7a 34 79 61 54 71 36 4f 76 4f 51 44 56 46 41 75 57 35 71 67 6e 4f 6b 57 4d 32 42 Data Ascii: mYkL26mw61z4XFJKXg3nSgBylR31YKcbA08h5LxR22N1RrNnuSOlor3N16eVNE6gTScxFGPLReQI7692ZkH2Ja+37OxuvfjxjlddYG2QWYtFE42zuTPAePxjatVLsqANG9vr+wbQvKVc6pVOFm0hZXQkgIt5pqhG7N8oTlE/iy7CAm624xYU/NbmI7cTrIoYSm7KVixIWJ2OnlkdMjIE/m7nokl4NSWjGrGpz4yaTq6OvOQDVFAuW5qgnOkWM2B
2024-08-30 05:37:39 UTC	1369	IN	Data Raw: 65 4c 68 57 66 45 58 34 6e 48 33 71 42 54 70 65 6d 34 4f 35 54 6f 71 66 73 63 45 58 6f 41 69 55 43 4c 4b 6c 35 69 41 68 78 48 43 45 7a 4e 34 66 44 44 58 4f 48 59 73 30 68 52 4b 74 31 50 4b 51 51 62 70 46 6a 55 4f 52 4f 61 44 30 46 6f 37 61 69 37 64 34 47 57 62 6b 76 68 34 61 43 53 6f 6e 69 50 73 46 41 68 57 72 30 30 2f 65 2b 32 72 6a 54 48 42 69 44 5a 77 78 4c 72 37 42 38 48 4b 78 44 51 72 38 6f 53 4b 55 30 2f 35 77 35 79 57 78 44 6a 41 51 2f 69 4f 6c 7a 38 66 67 36 6b 34 35 59 33 61 74 52 44 37 7a 44 72 62 34 64 5a 2b 38 47 44 32 69 58 47 7a 76 63 54 74 67 69 6e 57 7a 61 78 62 62 42 53 4e 69 45 42 2f 56 58 57 56 54 62 79 52 4b 54 44 72 65 44 52 67 41 73 39 46 70 6b 4c 64 5a 73 4b 4f 63 73 70 72 71 53 34 4b 57 52 50 68 6f 66 2b 35 4e 73 7a 78 39 52 78 67 Data Ascii: eLhWfEX4nH3qBTpem4O5ToqfscEXoAiUCLKl5iAhxHCEzN4fDDXOHYs0hRKt1PKQQbpFjUOROaD0Fo7ai7d4GWbkvh4aCSoniPsFAhWr00/e+2rjTHBiDZwxLr7B8HKxDQr8oSKU0/5w5yWxDjAQ/iOlz8fg6k45Y3atRD7zDrb4dZ+8GD2iXGzvcTtginWzaxbbBSNiEB/VXWVTbyRKTDreDRgAs9FpkLdZsKOcsprqS4KWRPhof+5Nszx9Rxg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49709	188.114.96.3	443	528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 05:37:39 UTC	840	OUT	GET /assets/main.css HTTP/1.1 Host: meta.com-businesshelp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://meta.com-businesshelp.com/index.php?appeal&mcp_token=eyjwawqiojewmzewmzq1mjy4otkynswic2lkijo3odg3njgynjixmzqyndmwlcjheci6imixzdfkmgq5mjawzdm4njhkmtg1m2njywe5ngnjmwjkiiwidhmioje3mjq5odc1odysimv4cci6mtcynzqwnjc4nn0.g1r0zoidsulijizzpul__xu_ezru3nkvbuiwksxr0pk Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=etc2hgh99mff6l1clnntmk6fuu
2024-08-30 05:37:39 UTC	682	IN	HTTP/1.1 200 OK Date: Fri, 30 Aug 2024 05:37:39 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Last-Modified: Mon, 20 Nov 2023 13:40:56 GMT ETag: W/"655b61e8-5158" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5501 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IGc%2FW5H1rv1F8T3Ygn9fYXLImKSdNq%2BNEW2d%2F2PsX3Q4i0jJNoR%2F047ipsWLZ41JS%2B5G4AZOgBAXVLATpDBobRo4UBv00q3ygzTB%2FxyamyeyWeJFfTmWUqCccz4ncnrfQAe45tAN6wFNDmPO"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8bb26e1e99f1c33e-EWR alt-svc: h3=":443"; ma=86400
2024-08-30 05:37:39 UTC	687	IN	Data Raw: 35 31 35 38 0d 0a 0a 68 74 6d 6c 2c 20 62 6f 64 79 20 7b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 7d 0a 0a 62 6f 64 79 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 7d 0a 0a 2e 77 72 61 70 70 65 72 20 7b 0a 20 20 20 20 66 6c 65 78 3a 20 31 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 7d 0a 0a 6d 61 69 6e 20 7b 0a 20 20 20 20 66 6c 65 78 3a 20 31 3b 0a 7d 0a 0a 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 30 66 30 66 30 3b 20 0a 20 20 20 20 Data Ascii: 5158html, body { height: 100%; margin: 0;}body { display: flex; flex-direction: column;}.wrapper { flex: 1; display: flex; flex-direction: column;}main { flex: 1;}footer { background-color: #f0f0f0;
2024-08-30 05:37:39 UTC	1369	IN	Data Raw: 73 65 72 69 66 2c 22 41 70 70 6c 65 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 22 2c 22 53 65 67 6f 65 20 55 49 20 45 6d 6f 6a 69 22 2c 53 65 67 6f 65 20 55 49 20 53 79 6d 62 6f 6c 2c 22 4e 6f 74 6f 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 22 0a 7d 0a 0a 62 6f 64 79 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 69 6e 68 65 72 69 74 0a 7d 0a 0a 68 72 20 7b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 30 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 77 69 64 74 68 3a 20 31 70 78 0a 7d 0a 0a 61 62 62 72 3a 77 68 65 72 65 28 5b 74 69 74 6c 65 5d 29 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 Data Ascii: serif,"Apple Color Emoji","Segoe UI Emoji",Segoe UI Symbol,"Noto Color Emoji"}body { width: 100%; margin: 0; line-height: inherit}hr { height: 0; color: inherit; border-top-width: 1px}abbr:where([title]) { -webkit-text
2024-08-30 05:37:39 UTC	1369	IN	Data Raw: 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 61 73 65 6c 69 6e 65 0a 7d 0a 0a 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 6e 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 2c 3a 3a 2d 77 65 62 6b 69 74 2d 6f 75 74 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 20 7b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 61 75 74 6f 0a 7d 0a 0a 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 74 65 78 74 66 69 65 6c 64 3b 0a 20 20 20 20 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 20 2d 32 70 78 0a 7d 0a 0a 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 64 65 63 6f 72 61 74 69 6f 6e 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 6e 6f 6e 65 0a 7d 0a 0a 3a 3a 2d 77 65 62 Data Ascii: vertical-align: baseline}::-webkit-inner-spin-button,::-webkit-outer-spin-button { height: auto}[type=search] { -webkit-appearance: textfield; outline-offset: -2px}::-webkit-search-decoration { -webkit-appearance: none}::-web
2024-08-30 05:37:39 UTC	1369	IN	Data Raw: 68 2d 7a 6f 6f 6d 3a 20 3b 0a 20 20 20 20 2d 2d 74 77 2d 73 63 72 6f 6c 6c 2d 73 6e 61 70 2d 73 74 72 69 63 74 6e 65 73 73 3a 20 70 72 6f 78 69 6d 69 74 79 3b 0a 20 20 20 20 2d 2d 74 77 2d 6f 72 64 69 6e 61 6c 3a 20 3b 0a 20 20 20 20 2d 2d 74 77 2d 73 6c 61 73 68 65 64 2d 7a 65 72 6f 3a 20 3b 0a 20 20 20 20 2d 2d 74 77 2d 6e 75 6d 65 72 69 63 2d 66 69 67 75 72 65 3a 20 3b 0a 20 20 20 20 2d 2d 74 77 2d 6e 75 6d 65 72 69 63 2d 73 70 61 63 69 6e 67 3a 20 3b 0a 20 20 20 20 2d 2d 74 77 2d 6e 75 6d 65 72 69 63 2d 66 72 61 63 74 69 6f 6e 3a 20 3b 0a 20 20 20 20 2d 2d 74 77 2d 72 69 6e 67 2d 69 6e 73 65 74 3a 20 3b 0a 20 20 20 20 2d 2d 74 77 2d 72 69 6e 67 2d 6f 66 66 73 65 74 2d 77 69 64 74 68 3a 20 30 70 78 3b 0a 20 20 20 20 2d 2d 74 77 2d 72 69 6e 67 2d 6f 66 Data Ascii: h-zoom: ; --tw-scroll-snap-strictness: proximity; --tw-ordinal: ; --tw-slashed-zero: ; --tw-numeric-figure: ; --tw-numeric-spacing: ; --tw-numeric-fraction: ; --tw-ring-inset: ; --tw-ring-offset-width: 0px; --tw-ring-of
2024-08-30 05:37:39 UTC	1369	IN	Data Raw: 0a 7d 0a 0a 2e 66 69 78 65 64 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 0a 7d 0a 0a 2e 61 62 73 6f 6c 75 74 65 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 0a 7d 0a 0a 2e 72 65 6c 61 74 69 76 65 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 0a 7d 0a 0a 2e 69 6e 73 65 74 2d 30 20 7b 0a 20 20 20 20 74 6f 70 3a 20 30 70 78 3b 0a 20 20 20 20 72 69 67 68 74 3a 20 30 70 78 3b 0a 20 20 20 20 62 6f 74 74 6f 6d 3a 20 30 70 78 3b 0a 20 20 20 20 6c 65 66 74 3a 20 30 70 78 0a 7d 0a 0a 2e 72 69 67 68 74 2d 30 20 7b 0a 20 20 20 20 72 69 67 68 74 3a 20 30 70 78 0a 7d 0a 0a 2e 74 6f 70 2d 30 20 7b 0a 20 20 20 20 74 6f 70 3a 20 30 70 78 0a 7d 0a 0a 2e 6c 65 66 74 2d 30 20 7b 0a 20 20 20 20 Data Ascii: }.fixed { position: fixed}.absolute { position: absolute}.relative { position: relative}.inset-0 { top: 0px; right: 0px; bottom: 0px; left: 0px}.right-0 { right: 0px}.top-0 { top: 0px}.left-0 {
2024-08-30 05:37:39 UTC	1369	IN	Data Raw: 0a 7d 0a 0a 2e 6d 6c 2d 34 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 72 65 6d 0a 7d 0a 0a 2e 62 6c 6f 63 6b 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 0a 7d 0a 0a 2e 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 0a 7d 0a 0a 2e 66 6c 65 78 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 0a 7d 0a 0a 2e 69 6e 6c 69 6e 65 2d 66 6c 65 78 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 66 6c 65 78 0a 7d 0a 0a 2e 67 72 69 64 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 67 72 69 64 0a 7d 0a 0a 2e 68 69 64 64 65 6e 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 0a 7d 0a 0a 2e 68 2d 61 75 74 6f 20 7b 0a Data Ascii: }.ml-4 { margin-left: 1rem}.block { display: block}.inline-block { display: inline-block}.flex { display: flex}.inline-flex { display: inline-flex}.grid { display: grid}.hidden { display: none}.h-auto {
2024-08-30 05:37:39 UTC	1369	IN	Data Raw: 28 76 61 72 28 2d 2d 74 77 2d 72 6f 74 61 74 65 29 29 20 73 6b 65 77 28 76 61 72 28 2d 2d 74 77 2d 73 6b 65 77 2d 78 29 29 20 73 6b 65 77 59 28 76 61 72 28 2d 2d 74 77 2d 73 6b 65 77 2d 79 29 29 20 73 63 61 6c 65 58 28 76 61 72 28 2d 2d 74 77 2d 73 63 61 6c 65 2d 78 29 29 20 73 63 61 6c 65 59 28 76 61 72 28 2d 2d 74 77 2d 73 63 61 6c 65 2d 79 29 29 0a 7d 0a 0a 2e 73 63 61 6c 65 2d 31 30 30 20 7b 0a 20 20 20 20 2d 2d 74 77 2d 73 63 61 6c 65 2d 78 3a 20 31 3b 0a 20 20 20 20 2d 2d 74 77 2d 73 63 61 6c 65 2d 79 3a 20 31 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 76 61 72 28 2d 2d 74 77 2d 74 72 61 6e 73 6c 61 74 65 2d 78 29 2c 76 61 72 28 2d 2d 74 77 2d 74 72 61 6e 73 6c 61 74 65 2d 79 29 29 20 72 6f 74 61 74 65 28 76 61 Data Ascii: (var(--tw-rotate)) skew(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y))}.scale-100 { --tw-scale-x: 1; --tw-scale-y: 1; transform: translate(var(--tw-translate-x),var(--tw-translate-y)) rotate(va
2024-08-30 05:37:39 UTC	1369	IN	Data Raw: 64 0a 7d 0a 0a 2e 6a 75 73 74 69 66 79 2d 63 65 6e 74 65 72 20 7b 0a 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 0a 7d 0a 0a 2e 6a 75 73 74 69 66 79 2d 62 65 74 77 65 65 6e 20 7b 0a 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 73 70 61 63 65 2d 62 65 74 77 65 65 6e 0a 7d 0a 0a 2e 6a 75 73 74 69 66 79 2d 69 74 65 6d 73 2d 63 65 6e 74 65 72 20 7b 0a 20 20 20 20 6a 75 73 74 69 66 79 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 0a 7d 0a 0a 2e 67 61 70 2d 36 20 7b 0a 20 20 20 20 67 61 70 3a 20 31 2e 35 72 65 6d 0a 7d 0a 0a 2e 67 61 70 2d 38 20 7b 0a 20 20 20 20 67 61 70 3a 20 32 72 65 6d 0a 7d 0a 0a 2e 73 70 61 63 65 2d 79 2d 36 3e 3a 6e 6f 74 28 5b 68 69 64 64 65 6e 5d 29 7e 3a 6e 6f 74 28 5b 68 69 64 64 65 Data Ascii: d}.justify-center { justify-content: center}.justify-between { justify-content: space-between}.justify-items-center { justify-items: center}.gap-6 { gap: 1.5rem}.gap-8 { gap: 2rem}.space-y-6>:not([hidden])~:not([hidde
2024-08-30 05:37:39 UTC	1369	IN	Data Raw: 0a 2e 62 6f 72 64 65 72 2d 74 72 61 6e 73 70 61 72 65 6e 74 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 0a 7d 0a 0a 2e 62 6f 72 64 65 72 2d 62 6c 75 65 2d 37 30 30 20 7b 0a 20 20 20 20 2d 2d 74 77 2d 62 6f 72 64 65 72 2d 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 72 67 62 28 32 39 20 37 38 20 32 31 36 20 2f 20 76 61 72 28 2d 2d 74 77 2d 62 6f 72 64 65 72 2d 6f 70 61 63 69 74 79 29 29 0a 7d 0a 0a 2e 62 67 2d 77 68 69 74 65 20 7b 0a 20 20 20 20 2d 2d 74 77 2d 62 67 2d 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 28 32 35 35 20 32 35 35 20 32 35 35 20 2f 20 76 61 72 28 2d 2d 74 77 2d 62 67 2d 6f Data Ascii: .border-transparent { border-color: transparent}.border-blue-700 { --tw-border-opacity: 1; border-color: rgb(29 78 216 / var(--tw-border-opacity))}.bg-white { --tw-bg-opacity: 1; background-color: rgb(255 255 255 / var(--tw-bg-o
2024-08-30 05:37:39 UTC	1369	IN	Data Raw: 20 20 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 2e 35 72 65 6d 0a 7d 0a 0a 2e 70 79 2d 31 32 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 33 72 65 6d 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 33 72 65 6d 0a 7d 0a 0a 2e 70 79 2d 33 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 2e 37 35 72 65 6d 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 2e 37 35 72 65 6d 0a 7d 0a 0a 2e 70 78 2d 31 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 2e 32 35 72 65 6d 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 2e 32 35 72 65 6d 0a 7d 0a 0a 2e 70 62 2d 31 32 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 33 72 65 6d 0a 7d 0a 0a 2e 70 62 Data Ascii: padding-right: 1.5rem}.py-12 { padding-top: 3rem; padding-bottom: 3rem}.py-3 { padding-top: .75rem; padding-bottom: .75rem}.px-1 { padding-left: .25rem; padding-right: .25rem}.pb-12 { padding-bottom: 3rem}.pb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49710	104.17.25.14	443	528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 05:37:39 UTC	565	OUT	GET /ajax/libs/jquery/3.6.2/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://meta.com-businesshelp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 05:37:39 UTC	959	IN	HTTP/1.1 200 OK Date: Fri, 30 Aug 2024 05:37:39 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"63989504-79d4" Last-Modified: Tue, 13 Dec 2022 15:06:44 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 73883 Expires: Wed, 20 Aug 2025 05:37:39 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aAomCyP0fBmQcGXD1o5JgqlVO5b6H%2FwfdOeLRDZnzwZoHQ5QNP2MsRZVJxVU1lhOpXLUqvZVgyuOvjIxK%2FNJAmmmyxIELc0wu0dEtA7tqZSqKoi8U7%2BwKVI%2BisgAa1BvseyoS2L6"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8bb26e1eaa6218c0-EWR alt-svc: h3=":443"; ma=86400
2024-08-30 05:37:39 UTC	410	IN	Data Raw: 33 39 37 39 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 32 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f Data Ascii: 3979/! jQuery v3.6.2 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Erro
2024-08-30 05:37:39 UTC	1369	IN	Data Raw: 74 6f 74 79 70 65 4f 66 2c 73 3d 74 2e 73 6c 69 63 65 2c 67 3d 74 2e 66 6c 61 74 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 66 6c 61 74 2e 63 61 6c 6c 28 65 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 65 29 7d 2c 75 3d 74 2e 70 75 73 68 2c 69 3d 74 2e 69 6e 64 65 78 4f 66 2c 6e 3d 7b 7d 2c 6f 3d 6e 2e 74 6f 53 74 72 69 6e 67 2c 79 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 61 3d 79 2e 74 6f 53 74 72 69 6e 67 2c 6c 3d 61 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 76 3d 7b 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 Data Ascii: totypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,y=n.hasOwnProperty,a=y.toString,l=a.call(Object),v={},m=function(e){return"function"==typeof e&&"number"!=typeof
2024-08-30 05:37:39 UTC	1369	IN	Data Raw: 61 73 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 71 28 2d 31 29 7d 2c 65 76 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 45 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 74 2b 31 29 25 32 7d 29 29 7d 2c 6f 64 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 45 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 25 32 7d 29 29 7d 2c 65 71 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 6e 3d 2b 65 2b 28 65 3c 30 3f 74 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e Data Ascii: ast:function(){return this.eq(-1)},even:function(){return this.pushStack(E.grep(this,function(e,t){return(t+1)%2}))},odd:function(){return this.pushStack(E.grep(this,function(e,t){return t%2}))},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return this.
2024-08-30 05:37:39 UTC	1369	IN	Data Raw: 61 6c 6c 28 65 5b 72 5d 2c 72 2c 65 5b 72 5d 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 65 7d 2c 6d 61 6b 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 28 70 28 4f 62 6a 65 63 74 28 65 29 29 3f 45 2e 6d 65 72 67 65 28 6e 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 5b 65 5d 3a 65 29 3a 75 2e 63 61 6c 6c 28 6e 2c 65 29 29 2c 6e 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 2d 31 3a 69 2e 63 61 6c 6c 28 74 2c 65 2c 6e 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 3d 65 Data Ascii: all(e[r],r,e[r]))break;return e},makeArray:function(e,t){var n=t\|\|[];return null!=e&&(p(Object(e))?E.merge(n,"string"==typeof e?[e]:e):u.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:i.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=e
2024-08-30 05:37:39 UTC	1369	IN	Data Raw: 3d 29 22 2b 4d 2b 22 2a 28 3f 3a 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 7c 28 22 2b 49 2b 22 29 29 7c 29 22 2b 4d 2b 22 2a 5c 5c 5d 22 2c 46 3d 22 3a 28 22 2b 49 2b 22 29 28 3f 3a 5c 5c 28 28 28 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 29 7c 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 28 29 5b 5c 5c 5d 5d 7c 22 2b 57 2b 22 29 2a 29 7c 2e 2a 29 5c 5c 29 7c 29 22 2c 24 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 2b 22 2c 22 67 22 29 2c 42 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c 5c Data Ascii: =)"+M+"(?:'((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\"\|("+I+"))\|)"+M+"\\]",F=":("+I+")(?:\$(('((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\")\|((?:\\\\.\|[^\\\\()[\\]]\|"+W+"))\|.)\$\|)",$=new RegExp(M+"+","g"),B=new RegExp("^"+M+"+\|((?:^\|[^\\\\
2024-08-30 05:37:39 UTC	1369	IN	Data Raw: 28 31 36 29 2b 22 20 22 3a 22 5c 5c 22 2b 65 7d 2c 6f 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 54 28 29 7d 2c 61 65 3d 62 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 26 26 22 66 69 65 6c 64 73 65 74 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 7b 64 69 72 3a 22 70 61 72 65 6e 74 4e 6f 64 65 22 2c 6e 65 78 74 3a 22 6c 65 67 65 6e 64 22 7d 29 3b 74 72 79 7b 48 2e 61 70 70 6c 79 28 74 3d 4f 2e 63 61 6c 6c 28 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 74 5b 70 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 5d 2e 6e 6f 64 65 54 79 70 65 7d 63 61 74 63 68 28 65 29 7b 48 3d 7b 61 70 70 6c 79 3a 74 2e 6c 65 6e 67 Data Ascii: (16)+" ":"\\"+e},oe=function(){T()},ae=be(function(e){return!0===e.disabled&&"fieldset"===e.nodeName.toLowerCase()},{dir:"parentNode",next:"legend"});try{H.apply(t=O.call(p.childNodes),p.childNodes),t[p.childNodes.length].nodeType}catch(e){H={apply:t.leng
2024-08-30 05:37:39 UTC	1369	IN	Data Raw: 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 7d 7d 7d 72 65 74 75 72 6e 20 67 28 74 2e 72 65 70 6c 61 63 65 28 42 2c 22 24 31 22 29 2c 65 2c 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 75 65 28 29 7b 76 61 72 20 72 3d 5b 5d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 72 2e 70 75 73 68 28 74 2b 22 20 22 29 3e 62 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 5b 72 2e 73 68 69 66 74 28 29 5d 2c 65 5b 74 2b 22 20 22 5d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 65 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 45 5d 3d 21 30 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 76 61 72 20 74 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 Data Ascii: emoveAttribute("id")}}}return g(t.replace(B,"$1"),e,n,r)}function ue(){var r=[];return function e(t,n){return r.push(t+" ")>b.cacheLength&&delete e[r.shift()],e[t+" "]=n}}function le(e){return e[E]=!0,e}function ce(e){var t=C.createElement("fieldset");try
2024-08-30 05:37:39 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 21 59 2e 74 65 73 74 28 74 7c 7c 6e 26 26 6e 2e 6e 6f 64 65 4e 61 6d 65 7c 7c 22 48 54 4d 4c 22 29 7d 2c 54 3d 73 65 2e 73 65 74 44 6f 63 75 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 2c 72 3d 65 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 3a 70 3b 72 65 74 75 72 6e 20 72 21 3d 43 26 26 39 3d 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 26 26 72 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 28 61 3d 28 43 3d 72 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 53 3d 21 69 28 43 29 2c 70 21 3d 43 26 26 28 6e 3d 43 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 6e 2e 74 6f 70 21 3d 3d 6e 26 26 28 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 Data Ascii: return!Y.test(t\|\|n&&n.nodeName\|\|"HTML")},T=se.setDocument=function(e){var t,n,r=e?e.ownerDocument\|\|e:p;return r!=C&&9===r.nodeType&&r.documentElement&&(a=(C=r).documentElement,S=!i(C),p!=C&&(n=C.defaultView)&&n.top!==n&&(n.addEventListener?n.addEventListe
2024-08-30 05:37:39 UTC	1369	IN	Data Raw: 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 53 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 6e 3d 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 29 26 26 6e 2e 76 61 6c 75 65 3d 3d 3d 65 29 72 65 74 75 72 6e 5b 6f 5d 3b 69 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 65 29 2c 72 3d 30 3b 77 68 69 6c 65 28 6f 3d 69 5b 72 2b 2b 5d 29 69 66 28 28 6e 3d 6f 2e 67 65 74 41 74 74 72 69 62 75 74 Data Ascii: ("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&S){var n,r,i,o=t.getElementById(e);if(o){if((n=o.getAttributeNode("id"))&&n.value===e)return[o];i=t.getElementsByName(e),r=0;while(o=i[r++])if((n=o.getAttribut
2024-08-30 05:37:39 UTC	1369	IN	Data Raw: 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 45 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 79 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 79 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 6f 70 74 69 6f 6e 2f 3e 3c 2f 73 65 6c 65 63 74 3e 22 3b 76 61 72 20 74 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 74 2e 73 65 74 41 74 74 72 69 62 75 Data Ascii: lectorAll("a#"+E+"+*").length\|\|y.push(".#.+[+~]"),e.querySelectorAll("\\\f"),y.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='disabled'></a><select disabled='disabled'><option/></select>";var t=C.createElement("input");t.setAttribu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49711	151.101.129.229	443	528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 05:37:39 UTC	576	OUT	GET /npm/bootstrap@5.2.3/dist/js/bootstrap.bundle.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://meta.com-businesshelp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 05:37:39 UTC	776	IN	HTTP/1.1 200 OK Connection: close Content-Length: 80420 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 5.2.3 X-JSD-Version-Type: version ETag: W/"13a24-kNFQNu9I/LM2oTW66BK0VmnxkEQ" Accept-Ranges: bytes Age: 1310377 Date: Fri, 30 Aug 2024 05:37:39 GMT X-Served-By: cache-fra-etou8220135-FRA, cache-ewr-kewr1740053-EWR X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-08-30 05:37:39 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 35 2e 32 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 32 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 Data Ascii: /! Bootstrap v5.2.3 (https://getbootstrap.com/) * Copyright 2011-2022 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,e){"ob
2024-08-30 05:37:39 UTC	1378	IN	Data Raw: 45 4d 45 4e 54 5f 4e 4f 44 45 7c 7c 21 21 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 28 76 6f 69 64 20 30 21 3d 3d 74 2e 64 69 73 61 62 6c 65 64 3f 74 2e 64 69 73 61 62 6c 65 64 3a 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 26 26 22 66 61 6c 73 65 22 21 3d 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 29 2c 63 3d 74 3d 3e 7b 69 66 28 21 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 61 74 74 61 63 68 53 68 61 64 6f 77 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 52 6f 6f 74 4e 6f 64 65 29 7b 63 6f 6e 73 74 20 65 3d 74 2e 67 65 Data Ascii: EMENT_NODE\|\|!!t.classList.contains("disabled")\|\|(void 0!==t.disabled?t.disabled:t.hasAttribute("disabled")&&"false"!==t.getAttribute("disabled")),c=t=>{if(!document.documentElement.attachShadow)return null;if("function"==typeof t.getRootNode){const e=t.ge
2024-08-30 05:37:39 UTC	1378	IN	Data Raw: 3a 74 5b 30 5d 3a 28 6f 2b 3d 69 3f 31 3a 2d 31 2c 6e 26 26 28 6f 3d 28 6f 2b 73 29 25 73 29 2c 74 5b 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 6f 2c 73 2d 31 29 29 5d 29 7d 2c 76 3d 2f 5b 5e 2e 5d 2a 28 3f 3d 5c 2e 2e 2a 29 5c 2e 7c 2e 2a 2f 2c 79 3d 2f 5c 2e 2e 2a 2f 2c 77 3d 2f 3a 3a 5c 64 2b 24 2f 2c 41 3d 7b 7d 3b 6c 65 74 20 45 3d 31 3b 63 6f 6e 73 74 20 54 3d 7b 6d 6f 75 73 65 65 6e 74 65 72 3a 22 6d 6f 75 73 65 6f 76 65 72 22 2c 6d 6f 75 73 65 6c 65 61 76 65 3a 22 6d 6f 75 73 65 6f 75 74 22 7d 2c 43 3d 6e 65 77 20 53 65 74 28 5b 22 63 6c 69 63 6b 22 2c 22 64 62 6c 63 6c 69 63 6b 22 2c 22 6d 6f 75 73 65 75 70 22 2c 22 6d 6f 75 73 65 64 6f 77 6e 22 2c 22 63 6f 6e 74 65 78 74 6d 65 6e 75 22 2c 22 6d 6f 75 73 65 77 68 65 65 6c 22 2c Data Ascii: :t[0]:(o+=i?1:-1,n&&(o=(o+s)%s),t[Math.max(0,Math.min(o,s-1))])},v=/[^.](?=\..)\.\|./,y=/\../,w=/::\d+$/,A={};let E=1;const T={mouseenter:"mouseover",mouseleave:"mouseout"},C=new Set(["click","dblclick","mouseup","mousedown","contextmenu","mousewheel",
2024-08-30 05:37:39 UTC	1378	IN	Data Raw: 3b 63 6f 6e 73 74 20 64 3d 4f 28 72 2c 65 2e 72 65 70 6c 61 63 65 28 76 2c 22 22 29 29 2c 75 3d 6f 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 6e 28 73 29 7b 63 6f 6e 73 74 20 6f 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3b 66 6f 72 28 6c 65 74 7b 74 61 72 67 65 74 3a 72 7d 3d 73 3b 72 26 26 72 21 3d 3d 74 68 69 73 3b 72 3d 72 2e 70 61 72 65 6e 74 4e 6f 64 65 29 66 6f 72 28 63 6f 6e 73 74 20 61 20 6f 66 20 6f 29 69 66 28 61 3d 3d 3d 72 29 72 65 74 75 72 6e 20 6a 28 73 2c 7b 64 65 6c 65 67 61 74 65 54 61 72 67 65 74 3a 72 7d 29 2c 6e 2e 6f 6e 65 4f 66 66 26 26 50 2e 6f 66 66 28 74 2c 73 2e 74 79 70 65 2c 65 2c 69 29 2c 69 2e 61 70 70 6c 79 28 72 2c 5b 73 5d 29 7d 7d 28 74 2c 69 Data Ascii: ;const d=O(r,e.replace(v,"")),u=o?function(t,e,i){return function n(s){const o=t.querySelectorAll(e);for(let{target:r}=s;r&&r!==this;r=r.parentNode)for(const a of o)if(a===r)return j(s,{delegateTarget:r}),n.oneOff&&P.off(t,s.type,e,i),i.apply(r,[s])}}(t,i
2024-08-30 05:37:39 UTC	1378	IN	Data Raw: 21 73 2e 69 73 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 28 29 2c 61 3d 73 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 29 3b 6c 65 74 20 6c 3d 6e 65 77 20 45 76 65 6e 74 28 65 2c 7b 62 75 62 62 6c 65 73 3a 6f 2c 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 3b 72 65 74 75 72 6e 20 6c 3d 6a 28 6c 2c 69 29 2c 61 26 26 6c 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 72 26 26 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6c 29 2c 6c 2e 64 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 26 26 73 26 26 73 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 6c 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 6a 28 74 2c 65 29 7b 66 6f 72 28 63 6f 6e 73 74 5b 69 2c 6e 5d 6f 66 20 4f 62 6a 65 63 74 2e 65 6e 74 Data Ascii: !s.isImmediatePropagationStopped(),a=s.isDefaultPrevented());let l=new Event(e,{bubbles:o,cancelable:!0});return l=j(l,i),a&&l.preventDefault(),r&&t.dispatchEvent(l),l.defaultPrevented&&s&&s.preventDefault(),l}};function j(t,e){for(const[i,n]of Object.ent
2024-08-30 05:37:39 UTC	1378	IN	Data Raw: 61 74 61 73 65 74 5b 6e 5d 29 7d 72 65 74 75 72 6e 20 65 7d 2c 67 65 74 44 61 74 61 41 74 74 72 69 62 75 74 65 3a 28 74 2c 65 29 3d 3e 24 28 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 60 64 61 74 61 2d 62 73 2d 24 7b 57 28 65 29 7d 60 29 29 7d 3b 63 6c 61 73 73 20 46 7b 73 74 61 74 69 63 20 67 65 74 20 44 65 66 61 75 6c 74 28 29 7b 72 65 74 75 72 6e 7b 7d 7d 73 74 61 74 69 63 20 67 65 74 20 44 65 66 61 75 6c 74 54 79 70 65 28 29 7b 72 65 74 75 72 6e 7b 7d 7d 73 74 61 74 69 63 20 67 65 74 20 4e 41 4d 45 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 27 59 6f 75 20 68 61 76 65 20 74 6f 20 69 6d 70 6c 65 6d 65 6e 74 20 74 68 65 20 73 74 61 74 69 63 20 6d 65 74 68 6f 64 20 22 4e 41 4d 45 22 2c 20 66 6f 72 20 65 61 63 68 20 63 6f 6d 70 6f 6e 65 6e Data Ascii: ataset[n])}return e},getDataAttribute:(t,e)=>$(t.getAttribute(`data-bs-${W(e)}`))};class F{static get Default(){return{}}static get DefaultType(){return{}}static get NAME(){throw new Error('You have to implement the static method "NAME", for each componen
2024-08-30 05:37:39 UTC	1378	IN	Data Raw: 63 6f 6e 66 69 67 41 66 74 65 72 4d 65 72 67 65 28 74 29 2c 74 68 69 73 2e 5f 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 74 29 2c 74 7d 73 74 61 74 69 63 20 67 65 74 49 6e 73 74 61 6e 63 65 28 74 29 7b 72 65 74 75 72 6e 20 48 2e 67 65 74 28 72 28 74 29 2c 74 68 69 73 2e 44 41 54 41 5f 4b 45 59 29 7d 73 74 61 74 69 63 20 67 65 74 4f 72 43 72 65 61 74 65 49 6e 73 74 61 6e 63 65 28 74 2c 65 3d 7b 7d 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 49 6e 73 74 61 6e 63 65 28 74 29 7c 7c 6e 65 77 20 74 68 69 73 28 74 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 3a 6e 75 6c 6c 29 7d 73 74 61 74 69 63 20 67 65 74 20 56 45 52 53 49 4f 4e 28 29 7b 72 65 74 75 72 6e 22 35 2e 32 2e 33 22 7d 73 74 61 74 69 63 20 67 65 74 20 44 41 54 41 5f 4b Data Ascii: configAfterMerge(t),this._typeCheckConfig(t),t}static getInstance(t){return H.get(r(t),this.DATA_KEY)}static getOrCreateInstance(t,e={}){return this.getInstance(t)\|\|new this(t,"object"==typeof e?e:null)}static get VERSION(){return"5.2.3"}static get DATA_K
2024-08-30 05:37:39 UTC	1378	IN	Data Raw: 65 28 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 70 72 65 73 73 65 64 22 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 74 6f 67 67 6c 65 28 22 61 63 74 69 76 65 22 29 29 7d 73 74 61 74 69 63 20 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 65 3d 4b 2e 67 65 74 4f 72 43 72 65 61 74 65 49 6e 73 74 61 6e 63 65 28 74 68 69 73 29 3b 22 74 6f 67 67 6c 65 22 3d 3d 3d 74 26 26 65 5b 74 5d 28 29 7d 29 29 7d 7d 50 2e 6f 6e 28 64 6f 63 75 6d 65 6e 74 2c 22 63 6c 69 63 6b 2e 62 73 2e 62 75 74 74 6f 6e 2e 64 61 74 61 2d 61 70 69 22 2c 56 2c 28 74 3d 3e 7b 74 2e 70 Data Ascii: e(){this._element.setAttribute("aria-pressed",this._element.classList.toggle("active"))}static jQueryInterface(t){return this.each((function(){const e=K.getOrCreateInstance(this);"toggle"===t&&e[t]()}))}}P.on(document,"click.bs.button.data-api",V,(t=>{t.p
2024-08-30 05:37:39 UTC	1378	IN	Data Raw: 73 2e 5f 63 6f 6e 66 69 67 3d 74 68 69 73 2e 5f 67 65 74 43 6f 6e 66 69 67 28 65 29 2c 74 68 69 73 2e 5f 64 65 6c 74 61 58 3d 30 2c 74 68 69 73 2e 5f 73 75 70 70 6f 72 74 50 6f 69 6e 74 65 72 45 76 65 6e 74 73 3d 42 6f 6f 6c 65 61 6e 28 77 69 6e 64 6f 77 2e 50 6f 69 6e 74 65 72 45 76 65 6e 74 29 2c 74 68 69 73 2e 5f 69 6e 69 74 45 76 65 6e 74 73 28 29 29 7d 73 74 61 74 69 63 20 67 65 74 20 44 65 66 61 75 6c 74 28 29 7b 72 65 74 75 72 6e 20 58 7d 73 74 61 74 69 63 20 67 65 74 20 44 65 66 61 75 6c 74 54 79 70 65 28 29 7b 72 65 74 75 72 6e 20 59 7d 73 74 61 74 69 63 20 67 65 74 20 4e 41 4d 45 28 29 7b 72 65 74 75 72 6e 22 73 77 69 70 65 22 7d 64 69 73 70 6f 73 65 28 29 7b 50 2e 6f 66 66 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 22 2e 62 73 2e 73 77 69 70 Data Ascii: s._config=this._getConfig(e),this._deltaX=0,this._supportPointerEvents=Boolean(window.PointerEvent),this._initEvents())}static get Default(){return X}static get DefaultType(){return Y}static get NAME(){return"swipe"}dispose(){P.off(this._element,".bs.swip
2024-08-30 05:37:39 UTC	1378	IN	Data Raw: 78 74 22 2c 4a 3d 22 70 72 65 76 22 2c 5a 3d 22 6c 65 66 74 22 2c 74 74 3d 22 72 69 67 68 74 22 2c 65 74 3d 22 73 6c 69 64 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 69 74 3d 22 63 61 72 6f 75 73 65 6c 22 2c 6e 74 3d 22 61 63 74 69 76 65 22 2c 73 74 3d 7b 41 72 72 6f 77 4c 65 66 74 3a 74 74 2c 41 72 72 6f 77 52 69 67 68 74 3a 5a 7d 2c 6f 74 3d 7b 69 6e 74 65 72 76 61 6c 3a 35 65 33 2c 6b 65 79 62 6f 61 72 64 3a 21 30 2c 70 61 75 73 65 3a 22 68 6f 76 65 72 22 2c 72 69 64 65 3a 21 31 2c 74 6f 75 63 68 3a 21 30 2c 77 72 61 70 3a 21 30 7d 2c 72 74 3d 7b 69 6e 74 65 72 76 61 6c 3a 22 28 6e 75 6d 62 65 72 7c 62 6f 6f 6c 65 61 6e 29 22 2c 6b 65 79 62 6f 61 72 64 3a 22 62 6f 6f 6c 65 61 6e 22 2c 70 61 75 73 65 3a 22 28 73 74 72 69 6e 67 7c 62 6f 6f 6c 65 61 6e 29 Data Ascii: xt",J="prev",Z="left",tt="right",et="slid.bs.carousel",it="carousel",nt="active",st={ArrowLeft:tt,ArrowRight:Z},ot={interval:5e3,keyboard:!0,pause:"hover",ride:!1,touch:!0,wrap:!0},rt={interval:"(number\|boolean)",keyboard:"boolean",pause:"(string\|boolean)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49713	104.17.24.14	443	528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 05:37:40 UTC	380	OUT	GET /ajax/libs/jquery/3.6.2/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 05:37:40 UTC	957	IN	HTTP/1.1 200 OK Date: Fri, 30 Aug 2024 05:37:40 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"63989504-79d4" Last-Modified: Tue, 13 Dec 2022 15:06:44 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 73884 Expires: Wed, 20 Aug 2025 05:37:40 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Pska4ByA%2Bn0rareC0bL4Gdl12PAL3WGEHH79x5OgKzAeSTLhfcPXB4kqlvLYcEwUFYyOUrv7lngskRaAv%2FamPSHyo%2B5eXsLHSK9Oc7xGdITXAaRIPnHLCQr13UxJ0vL3jtwjQkLC"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8bb26e237e1143ac-EWR alt-svc: h3=":443"; ma=86400
2024-08-30 05:37:40 UTC	412	IN	Data Raw: 33 39 37 39 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 32 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f Data Ascii: 3979/! jQuery v3.6.2 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Erro
2024-08-30 05:37:40 UTC	1369	IN	Data Raw: 74 79 70 65 4f 66 2c 73 3d 74 2e 73 6c 69 63 65 2c 67 3d 74 2e 66 6c 61 74 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 66 6c 61 74 2e 63 61 6c 6c 28 65 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 65 29 7d 2c 75 3d 74 2e 70 75 73 68 2c 69 3d 74 2e 69 6e 64 65 78 4f 66 2c 6e 3d 7b 7d 2c 6f 3d 6e 2e 74 6f 53 74 72 69 6e 67 2c 79 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 61 3d 79 2e 74 6f 53 74 72 69 6e 67 2c 6c 3d 61 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 76 3d 7b 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 65 Data Ascii: typeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,y=n.hasOwnProperty,a=y.toString,l=a.call(Object),v={},m=function(e){return"function"==typeof e&&"number"!=typeof e
2024-08-30 05:37:40 UTC	1369	IN	Data Raw: 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 71 28 2d 31 29 7d 2c 65 76 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 45 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 74 2b 31 29 25 32 7d 29 29 7d 2c 6f 64 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 45 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 25 32 7d 29 29 7d 2c 65 71 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 6e 3d 2b 65 2b 28 65 3c 30 3f 74 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 Data Ascii: t:function(){return this.eq(-1)},even:function(){return this.pushStack(E.grep(this,function(e,t){return(t+1)%2}))},odd:function(){return this.pushStack(E.grep(this,function(e,t){return t%2}))},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return this.pu
2024-08-30 05:37:40 UTC	1369	IN	Data Raw: 6c 28 65 5b 72 5d 2c 72 2c 65 5b 72 5d 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 65 7d 2c 6d 61 6b 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 28 70 28 4f 62 6a 65 63 74 28 65 29 29 3f 45 2e 6d 65 72 67 65 28 6e 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 5b 65 5d 3a 65 29 3a 75 2e 63 61 6c 6c 28 6e 2c 65 29 29 2c 6e 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 2d 31 3a 69 2e 63 61 6c 6c 28 74 2c 65 2c 6e 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 3d 65 2e 6c Data Ascii: l(e[r],r,e[r]))break;return e},makeArray:function(e,t){var n=t\|\|[];return null!=e&&(p(Object(e))?E.merge(n,"string"==typeof e?[e]:e):u.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:i.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=e.l
2024-08-30 05:37:40 UTC	1369	IN	Data Raw: 22 2b 4d 2b 22 2a 28 3f 3a 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 7c 28 22 2b 49 2b 22 29 29 7c 29 22 2b 4d 2b 22 2a 5c 5c 5d 22 2c 46 3d 22 3a 28 22 2b 49 2b 22 29 28 3f 3a 5c 5c 28 28 28 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 29 7c 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 28 29 5b 5c 5c 5d 5d 7c 22 2b 57 2b 22 29 2a 29 7c 2e 2a 29 5c 5c 29 7c 29 22 2c 24 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 2b 22 2c 22 67 22 29 2c 42 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c 5c 5d 29 Data Ascii: "+M+"(?:'((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\"\|("+I+"))\|)"+M+"\\]",F=":("+I+")(?:\$(('((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\")\|((?:\\\\.\|[^\\\\()[\\]]\|"+W+"))\|.)\$\|)",$=new RegExp(M+"+","g"),B=new RegExp("^"+M+"+\|((?:^\|[^\\\\])
2024-08-30 05:37:40 UTC	1369	IN	Data Raw: 36 29 2b 22 20 22 3a 22 5c 5c 22 2b 65 7d 2c 6f 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 54 28 29 7d 2c 61 65 3d 62 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 26 26 22 66 69 65 6c 64 73 65 74 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 7b 64 69 72 3a 22 70 61 72 65 6e 74 4e 6f 64 65 22 2c 6e 65 78 74 3a 22 6c 65 67 65 6e 64 22 7d 29 3b 74 72 79 7b 48 2e 61 70 70 6c 79 28 74 3d 4f 2e 63 61 6c 6c 28 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 74 5b 70 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 5d 2e 6e 6f 64 65 54 79 70 65 7d 63 61 74 63 68 28 65 29 7b 48 3d 7b 61 70 70 6c 79 3a 74 2e 6c 65 6e 67 74 68 Data Ascii: 6)+" ":"\\"+e},oe=function(){T()},ae=be(function(e){return!0===e.disabled&&"fieldset"===e.nodeName.toLowerCase()},{dir:"parentNode",next:"legend"});try{H.apply(t=O.call(p.childNodes),p.childNodes),t[p.childNodes.length].nodeType}catch(e){H={apply:t.length
2024-08-30 05:37:40 UTC	1369	IN	Data Raw: 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 7d 7d 7d 72 65 74 75 72 6e 20 67 28 74 2e 72 65 70 6c 61 63 65 28 42 2c 22 24 31 22 29 2c 65 2c 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 75 65 28 29 7b 76 61 72 20 72 3d 5b 5d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 72 2e 70 75 73 68 28 74 2b 22 20 22 29 3e 62 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 5b 72 2e 73 68 69 66 74 28 29 5d 2c 65 5b 74 2b 22 20 22 5d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 65 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 45 5d 3d 21 30 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 76 61 72 20 74 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 Data Ascii: oveAttribute("id")}}}return g(t.replace(B,"$1"),e,n,r)}function ue(){var r=[];return function e(t,n){return r.push(t+" ")>b.cacheLength&&delete e[r.shift()],e[t+" "]=n}}function le(e){return e[E]=!0,e}function ce(e){var t=C.createElement("fieldset");try{r
2024-08-30 05:37:40 UTC	1369	IN	Data Raw: 74 75 72 6e 21 59 2e 74 65 73 74 28 74 7c 7c 6e 26 26 6e 2e 6e 6f 64 65 4e 61 6d 65 7c 7c 22 48 54 4d 4c 22 29 7d 2c 54 3d 73 65 2e 73 65 74 44 6f 63 75 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 2c 72 3d 65 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 3a 70 3b 72 65 74 75 72 6e 20 72 21 3d 43 26 26 39 3d 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 26 26 72 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 28 61 3d 28 43 3d 72 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 53 3d 21 69 28 43 29 2c 70 21 3d 43 26 26 28 6e 3d 43 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 6e 2e 74 6f 70 21 3d 3d 6e 26 26 28 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 Data Ascii: turn!Y.test(t\|\|n&&n.nodeName\|\|"HTML")},T=se.setDocument=function(e){var t,n,r=e?e.ownerDocument\|\|e:p;return r!=C&&9===r.nodeType&&r.documentElement&&(a=(C=r).documentElement,S=!i(C),p!=C&&(n=C.defaultView)&&n.top!==n&&(n.addEventListener?n.addEventListene
2024-08-30 05:37:40 UTC	1369	IN	Data Raw: 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 53 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 6e 3d 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 29 26 26 6e 2e 76 61 6c 75 65 3d 3d 3d 65 29 72 65 74 75 72 6e 5b 6f 5d 3b 69 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 65 29 2c 72 3d 30 3b 77 68 69 6c 65 28 6f 3d 69 5b 72 2b 2b 5d 29 69 66 28 28 6e 3d 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e Data Ascii: id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&S){var n,r,i,o=t.getElementById(e);if(o){if((n=o.getAttributeNode("id"))&&n.value===e)return[o];i=t.getElementsByName(e),r=0;while(o=i[r++])if((n=o.getAttributeN
2024-08-30 05:37:40 UTC	1369	IN	Data Raw: 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 45 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 79 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 79 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 6f 70 74 69 6f 6e 2f 3e 3c 2f 73 65 6c 65 63 74 3e 22 3b 76 61 72 20 74 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 Data Ascii: ctorAll("a#"+E+"+*").length\|\|y.push(".#.+[+~]"),e.querySelectorAll("\\\f"),y.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='disabled'></a><select disabled='disabled'><option/></select>";var t=C.createElement("input");t.setAttribute

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49714	188.114.96.3	443	528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 05:37:40 UTC	627	OUT	GET /assets/unidentified-avatar.jfif HTTP/1.1 Host: meta.com-businesshelp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=etc2hgh99mff6l1clnntmk6fuu
2024-08-30 05:37:40 UTC	663	IN	HTTP/1.1 200 OK Date: Fri, 30 Aug 2024 05:37:40 GMT Content-Type: image/jpeg Content-Length: 10168 Connection: close Last-Modified: Mon, 20 Nov 2023 13:40:56 GMT ETag: "27b8-60a95a2ae4a00" Accept-Ranges: bytes CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oGuQt10z%2BOKwWVMkhEPaBwRbAReLRm24%2Buy8t9jPmhG63IqGRgfPkORUWkTN8KeB4mibBKDa63KkvIUsPZ3rjHyUC2OTNVt5Y%2BZTycy%2FOGZMvd6wXmNhVjvdqD2jCcf8kt72UTTTu49t8MxL"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8bb26e246ddc435b-EWR alt-svc: h3=":443"; ma=86400
2024-08-30 05:37:40 UTC	706	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 02 00 02 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC"}!1AQa"q2
2024-08-30 05:37:40 UTC	1369	IN	Data Raw: 68 01 72 28 c8 a4 db 46 da 00 5c 8a 32 29 36 d1 b6 80 17 22 8c 8a 4d b4 6d a0 05 c8 a3 22 93 6d 1b 68 01 72 28 c8 a4 db 46 da 00 5c 8a 32 29 36 d1 b6 80 17 22 8c 8a 4d b4 6d a0 05 c8 a3 22 93 6d 1b 68 01 72 28 c8 a4 db 46 da 00 5c 8a 32 29 36 d1 b6 80 17 22 8c 8a 4d b4 6d a0 05 c8 a3 22 93 6d 1b 68 01 72 28 c8 a4 db 46 da 00 5c 8a 32 29 36 d1 b6 80 17 22 8c 8a 4d b4 6d a0 05 c8 a3 22 93 6d 1b 68 01 72 28 c8 a4 db 46 da 00 5c 8a 32 29 36 d1 b6 80 17 22 8c 8a 4d b4 6d a0 05 c8 a3 22 93 6d 1b 68 01 72 28 c8 a4 db 46 da 00 5c 8a 32 29 36 d1 b6 80 16 8a 4d b4 6d a5 60 16 8a 4d b4 6d a2 c0 2d 14 9b 68 db 45 80 5a 29 36 d1 b6 8b 00 b4 52 6d a3 6d 16 01 68 a4 db 46 da 2c 02 d1 49 b6 8d b4 58 05 a2 93 6d 1b 68 b0 0b 45 26 da 36 d1 60 16 8a 4d b4 6d a2 c0 2d 14 9b Data Ascii: hr(F\2)6"Mm"mhr(F\2)6"Mm"mhr(F\2)6"Mm"mhr(F\2)6"Mm"mhr(F\2)6"Mm"mhr(F\2)6Mm`Mm-hEZ)6RmmhF,IXmhE&6`Mm-
2024-08-30 05:37:40 UTC	1369	IN	Data Raw: 0f 26 96 96 80 0a 28 a2 90 c2 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 06 48 cc b8 da 33 cf 34 06 1d 71 cd 3e 92 80 2a de 5a 45 7b 0b c6 e8 0e e1 8c d7 05 af 78 59 f4 f6 32 c6 0f 97 e8 2b d1 9b ee 9c 75 a8 e4 80 4f 06 c7 19 c8 ef 54 a5 61 1e 28 d1 ef 98 95 e0 8a 7e d3 df ad 74 3e 28 f0 eb 58 cc 66 8c 64 7b 57 3b 6e e4 b9 0d d6 b4 52 b8 58 5a 28 9a 13 bb 34 67 81 54 2b 05 14 66 8c d0 20 a2 8c d1 9a 00 28 a3 34 66 80 0a 28 cd 19 a0 02 8a 33 46 68 00 a2 8c d1 9a 00 28 a3 34 66 80 0a 28 cd 19 a0 02 8a 33 46 68 01 36 d1 b6 96 8a 57 01 36 d1 b6 96 8a 2e 02 6d a3 6d 2d 14 5c 04 db 46 da 5a 28 b8 09 b6 8d b4 b4 51 70 13 6d 1b 69 68 a2 e0 26 da 36 d2 d1 45 c0 4d b4 6d a5 a2 8b 80 9b 68 db 4b 45 17 01 36 d1 b6 96 6f 91 41 14 49 f2 84 c7 52 68 60 6f 78 4b 45 37 Data Ascii: &(((((H34q>*ZE{xY2+uOTa(~t>(Xfd{W;nRXZ(4gT+f (4f(3Fh(4f(3Fh6W6.mm-\FZ(Qpmih&6EMmhKE6oAIRh`oxKE7
2024-08-30 05:37:40 UTC	1369	IN	Data Raw: 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 15 91 af ea 9f d9 ba 7c 92 9e a1 86 2b 5e b9 ef 1a 05 fe c5 97 70 fe 21 fc ea a2 07 0b ab 78 96 7b c6 70 b2 b6 c2 39 5c 9c 56 5a cd e7 28 3b 76 d4 24 7f a4 37 1f 2d 5a 95 53 6a 6c f4 e6 b5 13 19 45 26 da 36 d3 24 5a 29 36 d1 b6 80 16 8a 4d b4 6d a0 05 a2 93 6d 1b 68 01 68 a4 db 46 da 00 5a 29 36 d1 b6 80 16 8a 4d b4 6d a0 05 a2 93 6d 1b 68 01 68 a4 db 46 da 00 5a 29 39 a3 9a 56 01 68 a4 e6 8e 68 b0 0b 45 27 34 73 45 80 5a 29 39 a3 9a 2c 02 d1 49 cd 1c d1 60 16 8a 4e 68 e6 8b 00 b4 52 73 47 34 58 05 a2 93 9a 39 a2 c0 2d 14 9c d1 cd 16 01 cd f2 f3 5a 1e 1f fd de a9 64 c3 fe 7a 56 73 fd df c2 ae e8 ad 8d 42 cb fe ba 50 cb 3d 7a 23 ba 35 3e Data Ascii: QEQEQEQEQEQEQEQEQEQE\|+^p!x{p9\VZ(;v$7-ZSjlE&6$Z)6MmmhhFZ)6MmmhhFZ)9VhhE'4sEZ)9,I`NhRsG4X9-ZdzVsBP=z#5>
2024-08-30 05:37:40 UTC	1369	IN	Data Raw: 51 45 14 00 51 45 14 00 53 0f 7a 7d 44 73 bb 1f ad 34 07 29 e3 6b bf 26 ce 38 01 fb cc 73 f9 57 9f 8e a7 1e b5 d4 78 ee e3 7e a4 b1 8e 40 c5 73 3b 42 93 ce 6b 6e 82 62 60 fa d1 83 eb 4b 45 17 24 4c 1f 5a 30 7d 69 68 a2 e0 26 0f ad 18 3e b4 b4 51 70 13 07 d6 8c 1f 5a 5a 28 b8 09 83 eb 46 0f ad 2d 14 5c 04 c1 f5 a3 07 d6 96 8a 2e 02 60 fa d1 83 eb 4b 45 17 01 30 7d 68 c1 f5 a5 a2 8b 80 98 3e b4 60 fa d2 d1 45 c0 4c 9f 4a 32 7d 29 68 a6 02 64 fa 51 93 e9 4b 45 00 26 4f a5 19 3e 94 b4 50 02 64 fa 51 93 e9 4b 45 00 26 4f a5 19 3e 94 b4 50 02 64 fa 51 93 e9 4b 45 00 26 4f a5 19 3e 94 b4 50 02 64 fa 51 93 e9 4b 45 00 26 4f a5 19 3e 94 b4 50 02 db b6 25 19 ec 73 5e ab e1 8b cf b6 69 30 b6 72 dd eb ca 64 5d b2 2b 0f bb 8e 6b b7 f8 7f 7c a4 cb 11 6f 97 6f cb f9 d6 Data Ascii: QEQESz}Ds4)k&8sWx~@s;Bknb`KE$LZ0}ih&>QpZZ(F-\.`KE0}h>`ELJ2})hdQKE&O>PdQKE&O>PdQKE&O>PdQKE&O>P%s^i0rd]+k\|oo
2024-08-30 05:37:40 UTC	1369	IN	Data Raw: 00 2d 14 9c d1 cd 00 2d 14 9c d1 cd 00 2d 14 9b a8 dd 4a c0 2d 14 9b a8 dd 45 80 5a 29 37 51 ba 8b 00 b4 52 6e a3 75 16 01 68 a4 dd 46 ea 2c 02 d1 49 ba 8d d4 58 05 a2 93 75 1b a8 b0 0b 45 26 ea 37 51 60 16 8a 4d d4 6e a2 c0 2d 14 9b a8 dd 45 80 76 7e 4c 53 3c be c6 97 75 1b a8 b0 1a de 1d d5 ff 00 b2 6f 95 e4 cb 44 46 dd ab ef 5e a1 67 30 b8 b7 59 57 a1 af 18 66 3c 11 d8 e6 bb bf 06 eb 8f 76 16 12 72 3a 56 52 29 1d 9a b6 ec f1 8a 75 37 ee f6 a7 54 8c 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 4a 5a 6b 1c 62 92 47 da 0e 28 03 23 c4 da cc 7a 6d 94 8a ca c5 e4 05 46 3b 57 98 34 de 64 ae ef c9 6a db f1 9e a8 d7 17 82 2c e7 69 ae 7b 75 69 11 31 6d ff 00 75 bb 77 39 e9 4b 4d dd 46 ea bb 12 2d 14 9b a8 dd 45 80 5a 29 37 51 ba 8b 00 Data Ascii: ---J-EZ)7QRnuhF,IXuE&7Q`Mn-Ev~LS<uoDF^g0YWf<vr:VR)u7T((((((JZkbG(#zmF;W4dj,i{ui1muw9KMF-EZ)7Q
2024-08-30 05:37:40 UTC	1369	IN	Data Raw: 13 9a 39 a5 a2 8b 80 9c d1 cd 2d 14 5c 04 e6 8e 69 68 a2 e0 27 34 73 4b 45 17 01 39 a3 9a 5a 28 b8 09 cd 1c d2 d1 45 c0 4e 68 e6 96 8a 2e 02 73 47 34 b4 51 70 13 75 1b a9 68 a6 02 6e a3 75 2d 14 00 9b a8 dd 4b 45 00 26 ea 37 52 d1 40 09 ba 8d d4 b4 50 02 6e a3 75 2d 14 00 9b a8 dd 4b 47 14 00 9b a8 dd 4b c5 1c 50 02 6e a3 75 2d 18 f6 a0 04 58 c9 6c 93 c5 4a 76 22 f5 15 0c aa db 70 a7 27 da ad e9 7a 1c f7 f2 00 43 62 90 15 77 35 c4 81 23 19 ae bf c2 fe 17 25 96 49 57 df 9a bf a2 f8 2d 6d 80 79 39 3d 7b 57 59 04 29 0a 6d 51 8a 4d a4 31 60 84 41 18 55 e8 2a 4a 6e e1 bb 1d e9 d5 89 41 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 55 af 15 26 8c c4 e3 3b 85 58 6e 54 8a 60 8c 60 67 93 4c 47 98 f8 93 c2 f3 e9 b7 Data Ascii: 9-\ih'4sKE9Z(ENh.sG4Qpuhnu-KE&7R@Pnu-KGKPnu-XlJv"p'zCbw5#%IW-my9={WY)mQM1`AU*JnAEPEPEPEPEPEPEPEPU&;XnT``gLG
2024-08-30 05:37:40 UTC	1248	IN	Data Raw: 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 91 b3 8e 0e 29 68 a0 04 5c f7 39 a2 96 8a 00 8f cb dc 3e 6f 98 d0 d1 93 c0 3c 7a 54 94 53 b8 8c 9d 43 41 b5 bd 57 26 31 e6 9e f5 c3 eb 1e 11 9e d1 9a 48 d0 95 f6 15 e9 9b 86 ec 63 9a 49 23 59 14 86 00 8a 7c cc 2c 78 b6 e7 dc 52 55 31 e3 a6 ee f4 c9 37 47 ce dc 8f 5a f4 fd 5b c3 36 da 92 e1 10 2b af 4c 00 2b 89 d5 34 0b 9d 26 42 d2 ae f8 fd b9 ad 13 11 8d 1b 19 17 20 71 4b 4a f3 09 b9 41 b4 0e a3 18 a6 ee aa 10 b4 52 6e a3 75 00 2d 14 9b a8 dd 40 0b 45 26 ea 37 50 02 d1 49 ba 8d d4 b5 01 68 eb d2 9f 81 b7 34 ca 5a 80 ed 8d 8c e3 8a 5f 29 b6 e7 6f 14 d9 2e 0c 38 e3 39 f6 ad 5f 0f f8 76 eb 52 b8 59 98 11 0e 7a 13 8a 96 c0 ab a7 e9 33 ea 93 08 e3 42 73 dc 57 71 a0 f8 36 0b 0c 4b 2a 6e 92 b6 b4 fd 2a 0b 35 43 1a e1 Data Ascii: (((()h\9>o<zTSCAW&1HcI#Y\|,xRU17GZ[6+L+4&B qKJARnu-@E&7PIh4Z_)o.89_vRYz3BsWq6Kn5C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49717	151.101.129.229	443	528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 05:37:40 UTC	521	OUT	GET /webshim/1.12.4/extras/modernizr-custom.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 05:37:40 UTC	723	IN	HTTP/1.1 200 OK Connection: close Content-Length: 6050 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 ETag: W/"17a2-jCxLjzRQqTu5EdsdGNv98GsOddk" Accept-Ranges: bytes Age: 240522 Date: Fri, 30 Aug 2024 05:37:40 GMT X-Served-By: cache-fra-eddf8230141-FRA, cache-ewr-kewr1740049-EWR X-Cache: HIT, MISS Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-08-30 05:37:40 UTC	1378	IN	Data Raw: 77 69 6e 64 6f 77 2e 4d 6f 64 65 72 6e 69 7a 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 61 29 7b 72 2e 63 73 73 54 65 78 74 3d 61 7d 66 75 6e 63 74 69 6f 6e 20 65 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 3d 3d 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 66 28 61 2c 62 29 7b 72 65 74 75 72 6e 21 21 7e 28 22 22 2b 61 29 2e 69 6e 64 65 78 4f 66 28 62 29 7d 66 75 6e 63 74 69 6f 6e 20 67 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 61 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 66 28 65 2c 22 2d 22 29 26 26 72 5b 65 5d 21 3d 3d 63 29 72 65 74 75 72 6e 22 70 66 78 22 3d 3d 62 3f 65 3a 21 30 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 68 28 61 2c 62 2c 64 29 7b 66 6f 72 28 Data Ascii: window.Modernizr=function(a,b,c){function d(a){r.cssText=a}function e(a,b){return typeof a===b}function f(a,b){return!!~(""+a).indexOf(b)}function g(a,b){for(var d in a){var e=a[d];if(!f(e,"-")&&r[e]!==c)return"pfx"==b?e:!0}return!1}function h(a,b,d){for(
2024-08-30 05:37:40 UTC	1378	IN	Data Raw: 6d 62 65 72 20 72 61 6e 67 65 20 63 6f 6c 6f 72 22 2e 73 70 6c 69 74 28 22 20 22 29 29 7d 76 61 72 20 6b 2c 6c 2c 6d 3d 22 32 2e 37 2e 31 22 2c 6e 3d 7b 7d 2c 6f 3d 62 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 70 3d 22 6d 6f 64 65 72 6e 69 7a 72 22 2c 71 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 70 29 2c 72 3d 71 2e 73 74 79 6c 65 2c 73 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 2c 74 3d 22 3a 29 22 2c 75 3d 28 7b 7d 2e 74 6f 53 74 72 69 6e 67 2c 22 20 2d 77 65 62 6b 69 74 2d 20 2d 6d 6f 7a 2d 20 2d 6f 2d 20 2d 6d 73 2d 20 22 2e 73 70 6c 69 74 28 22 20 22 29 29 2c 76 3d 22 57 65 62 6b 69 74 20 4d 6f 7a 20 4f 20 6d 73 22 2c 77 3d 76 2e 73 70 6c 69 74 28 22 20 22 29 2c 78 3d 76 2e 74 6f 4c 6f 77 65 72 43 61 Data Ascii: mber range color".split(" "))}var k,l,m="2.7.1",n={},o=b.documentElement,p="modernizr",q=b.createElement(p),r=q.style,s=b.createElement("input"),t=":)",u=({}.toString," -webkit- -moz- -o- -ms- ".split(" ")),v="Webkit Moz O ms",w=v.split(" "),x=v.toLowerCa
2024-08-30 05:37:40 UTC	1378	IN	Data Raw: 7b 28 63 3d 21 21 61 2e 63 61 6e 50 6c 61 79 54 79 70 65 29 26 26 28 63 3d 6e 65 77 20 42 6f 6f 6c 65 61 6e 28 63 29 2c 63 2e 6f 67 67 3d 61 2e 63 61 6e 50 6c 61 79 54 79 70 65 28 27 61 75 64 69 6f 2f 6f 67 67 3b 20 63 6f 64 65 63 73 3d 22 76 6f 72 62 69 73 22 27 29 2e 72 65 70 6c 61 63 65 28 2f 5e 6e 6f 24 2f 2c 22 22 29 2c 63 2e 6d 70 33 3d 61 2e 63 61 6e 50 6c 61 79 54 79 70 65 28 22 61 75 64 69 6f 2f 6d 70 65 67 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 5e 6e 6f 24 2f 2c 22 22 29 2c 63 2e 77 61 76 3d 61 2e 63 61 6e 50 6c 61 79 54 79 70 65 28 27 61 75 64 69 6f 2f 77 61 76 3b 20 63 6f 64 65 63 73 3d 22 31 22 27 29 2e 72 65 70 6c 61 63 65 28 2f 5e 6e 6f 24 2f 2c 22 22 29 2c 63 2e 6d 34 61 3d 28 61 2e 63 61 6e 50 6c 61 79 54 79 70 65 28 22 61 75 64 69 6f 2f Data Ascii: {(c=!!a.canPlayType)&&(c=new Boolean(c),c.ogg=a.canPlayType('audio/ogg; codecs="vorbis"').replace(/^no$/,""),c.mp3=a.canPlayType("audio/mpeg;").replace(/^no$/,""),c.wav=a.canPlayType('audio/wav; codecs="1"').replace(/^no$/,""),c.m4a=(a.canPlayType("audio/
2024-08-30 05:37:40 UTC	1378	IN	Data Raw: 66 72 61 67 2e 63 6c 6f 6e 65 4e 6f 64 65 28 29 2c 67 3d 30 2c 68 3d 64 28 29 2c 69 3d 68 2e 6c 65 6e 67 74 68 3b 69 3e 67 3b 67 2b 2b 29 66 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 68 5b 67 5d 29 3b 72 65 74 75 72 6e 20 66 7d 66 75 6e 63 74 69 6f 6e 20 68 28 61 2c 62 29 7b 62 2e 63 61 63 68 65 7c 7c 28 62 2e 63 61 63 68 65 3d 7b 7d 2c 62 2e 63 72 65 61 74 65 45 6c 65 6d 3d 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 2c 62 2e 63 72 65 61 74 65 46 72 61 67 3d 61 2e 63 72 65 61 74 65 44 6f 63 75 6d 65 6e 74 46 72 61 67 6d 65 6e 74 2c 62 2e 66 72 61 67 3d 62 2e 63 72 65 61 74 65 46 72 61 67 28 29 29 2c 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 73 2e 73 68 69 76 4d 65 74 68 6f 64 73 3f 66 28 Data Ascii: frag.cloneNode(),g=0,h=d(),i=h.length;i>g;g++)f.createElement(h[g]);return f}function h(a,b){b.cache\|\|(b.cache={},b.createElem=a.createElement,b.createFrag=a.createDocumentFragment,b.frag=b.createFrag()),a.createElement=function(c){return s.shivMethods?f(
2024-08-30 05:37:40 UTC	538	IN	Data Raw: 6f 20 62 64 69 20 63 61 6e 76 61 73 20 64 61 74 61 20 64 61 74 61 6c 69 73 74 20 64 65 74 61 69 6c 73 20 64 69 61 6c 6f 67 20 66 69 67 63 61 70 74 69 6f 6e 20 66 69 67 75 72 65 20 66 6f 6f 74 65 72 20 68 65 61 64 65 72 20 68 67 72 6f 75 70 20 6d 61 69 6e 20 6d 61 72 6b 20 6d 65 74 65 72 20 6e 61 76 20 6f 75 74 70 75 74 20 70 72 6f 67 72 65 73 73 20 73 65 63 74 69 6f 6e 20 73 75 6d 6d 61 72 79 20 74 65 6d 70 6c 61 74 65 20 74 69 6d 65 20 76 69 64 65 6f 22 2c 76 65 72 73 69 6f 6e 3a 6c 2c 73 68 69 76 43 53 53 3a 6d 2e 73 68 69 76 43 53 53 21 3d 3d 21 31 2c 73 75 70 70 6f 72 74 73 55 6e 6b 6e 6f 77 6e 45 6c 65 6d 65 6e 74 73 3a 6b 2c 73 68 69 76 4d 65 74 68 6f 64 73 3a 6d 2e 73 68 69 76 4d 65 74 68 6f 64 73 21 3d 3d 21 31 2c 74 79 70 65 3a 22 64 65 66 61 75 Data Ascii: o bdi canvas data datalist details dialog figcaption figure footer header hgroup main mark meter nav output progress section summary template time video",version:l,shivCSS:m.shivCSS!==!1,supportsUnknownElements:k,shivMethods:m.shivMethods!==!1,type:"defau

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49718	151.101.129.229	443	528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 05:37:40 UTC	508	OUT	GET /webshim/1.12.4/polyfiller.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 05:37:40 UTC	724	IN	HTTP/1.1 200 OK Connection: close Content-Length: 14985 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 ETag: W/"3a89-3Lxa1U+4+yACYbMzDrNgXLA3TJE" Accept-Ranges: bytes Age: 756863 Date: Fri, 30 Aug 2024 05:37:40 GMT X-Served-By: cache-fra-eddf8230068-FRA, cache-ewr-kewr1740036-EWR X-Cache: HIT, MISS Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-08-30 05:37:40 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 61 73 79 6e 63 57 65 62 73 68 69 6d 73 7c 7c 28 77 69 6e 64 6f 77 2e 61 73 79 6e 63 57 65 62 73 68 69 6d 73 3d 7b 63 66 67 3a 5b 5d 2c 72 65 61 64 79 3a 5b 5d 7d 29 7d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 26 26 28 61 28 6a 51 75 65 72 79 29 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 77 65 62 73 68 69 6d 73 7d 29 7d 3b 77 69 6e 64 6f 77 2e 77 65 62 73 68 69 6d 73 3d 7b 73 65 74 4f 70 74 69 6f 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 62 28 29 2c 77 69 6e 64 6f 77 2e 61 73 79 6e 63 57 65 62 73 68 69 6d 73 2e 63 66 67 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 Data Ascii: !function(a){var b=function(){window.asyncWebshims\|\|(window.asyncWebshims={cfg:[],ready:[]})},c=function(){window.jQuery&&(a(jQuery),a=function(){return window.webshims})};window.webshims={setOptions:function(){b(),window.asyncWebshims.cfg.push(arguments)
2024-08-30 05:37:40 UTC	1378	IN	Data Raw: 7c 28 68 2e 45 53 35 3d 21 31 29 2c 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 64 2e 74 69 6d 65 72 29 2c 63 3d 61 2e 73 75 70 70 6f 72 74 2e 68 72 65 66 4e 6f 72 6d 61 6c 69 7a 65 64 3d 3d 3d 21 31 3f 64 2e 5f 63 75 72 53 63 72 69 70 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 2c 34 29 3a 64 2e 5f 63 75 72 53 63 72 69 70 74 2e 73 72 63 2c 63 3d 63 2e 73 70 6c 69 74 28 22 3f 22 29 5b 30 5d 2e 73 6c 69 63 65 28 30 2c 63 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 2f 22 29 2b 31 29 2b 22 73 68 69 6d 73 2f 22 2c 61 2e 65 78 74 65 6e 64 28 64 2c 7b 76 65 72 73 69 6f 6e 3a 22 31 2e 31 32 2e 34 22 2c 63 66 67 3a 7b 77 61 69 74 52 65 61 64 79 3a 21 30 2c 6c 6f 61 64 53 74 79 6c 65 73 3a 21 30 2c 77 73 64 6f 63 3a 64 6f 63 75 6d 65 6e 74 2c 77 73 70 Data Ascii: \|(h.ES5=!1),clearInterval(d.timer),c=a.support.hrefNormalized===!1?d._curScript.getAttribute("src",4):d._curScript.src,c=c.split("?")[0].slice(0,c.lastIndexOf("/")+1)+"shims/",a.extend(d,{version:"1.12.4",cfg:{waitReady:!0,loadStyles:!0,wsdoc:document,wsp
2024-08-30 05:37:40 UTC	1378	IN	Data Raw: 30 29 2c 76 6f 69 64 20 30 29 7d 29 2c 6d 2e 6c 6f 61 64 53 74 79 6c 65 73 26 26 73 2e 6c 6f 61 64 43 53 53 28 22 73 74 79 6c 65 73 2f 73 68 69 6d 2e 63 73 73 22 29 2c 74 28 64 29 7d 2c 72 65 54 65 73 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 2c 67 3d 72 5b 64 5d 2c 68 3d 64 2b 22 52 65 61 64 79 22 3b 21 67 7c 7c 67 2e 6c 6f 61 64 65 64 7c 7c 28 67 2e 74 65 73 74 26 26 61 2e 69 73 46 75 6e 63 74 69 6f 6e 28 67 2e 74 65 73 74 29 3f 67 2e 74 65 73 74 28 5b 5d 29 3a 67 2e 74 65 73 74 29 7c 7c 28 66 5b 68 5d 26 26 64 65 6c 65 74 65 20 66 5b 68 5d 2c 65 3d 6e 5b 67 2e 66 5d 2c 62 2e 70 75 73 68 28 64 29 29 7d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 64 29 7b 22 73 74 72 69 Data Ascii: 0),void 0)}),m.loadStyles&&s.loadCSS("styles/shim.css"),t(d)},reTest:function(){var b,c=function(c,d){var e,g=r[d],h=d+"Ready";!g\|\|g.loaded\|\|(g.test&&a.isFunction(g.test)?g.test([]):g.test)\|\|(f[h]&&delete f[h],e=n[g.f],b.push(d))};return function(d){"stri
2024-08-30 05:37:40 UTC	1378	IN	Data Raw: 6c 6f 61 64 65 72 3a 7b 61 64 64 4d 6f 64 75 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 5b 62 5d 3d 63 2c 63 2e 6e 61 6d 65 3d 63 2e 6e 61 6d 65 7c 7c 62 2c 63 2e 63 7c 7c 28 63 2e 63 3d 5b 5d 29 2c 61 2e 65 61 63 68 28 63 2e 63 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 64 2e 63 5b 63 5d 7c 7c 28 64 2e 63 5b 63 5d 3d 5b 5d 29 2c 64 2e 63 5b 63 5d 2e 70 75 73 68 28 62 29 7d 29 7d 2c 6c 6f 61 64 4c 69 73 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 5b 5d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 64 26 26 28 64 3d 5b 64 5d 29 2c 61 2e 6d 65 72 67 65 28 62 2c 64 29 2c 73 2e 6c 6f 61 64 53 63 72 69 70 74 28 63 2c 21 31 2c 64 29 7d 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 64 Data Ascii: loader:{addModule:function(b,c){r[b]=c,c.name=c.name\|\|b,c.c\|\|(c.c=[]),a.each(c.c,function(a,c){d.c[c]\|\|(d.c[c]=[]),d.c[c].push(b)})},loadList:function(){var b=[],c=function(c,d){"string"==typeof d&&(d=[d]),a.merge(b,d),s.loadScript(c,!1,d)},e=function(c,d
2024-08-30 05:37:40 UTC	1378	IN	Data Raw: 72 69 70 74 22 29 5b 30 5d 2c 63 5b 64 5d 3d 31 2c 61 28 27 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 2f 3e 27 29 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 62 29 2e 61 74 74 72 28 7b 68 72 65 66 3a 64 7d 29 29 7d 7d 28 29 2c 6c 6f 61 64 53 63 72 69 70 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 7b 7d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 65 2c 66 29 7b 69 66 28 66 7c 7c 28 63 3d 73 2e 6d 61 6b 65 50 61 74 68 28 63 29 29 2c 21 62 5b 63 5d 29 7b 76 61 72 20 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 26 26 64 28 29 2c 65 26 26 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 28 65 3d 65 2e 73 70 6c 69 74 28 22 20 22 29 29 2c 61 2e 65 61 63 68 28 65 2c 66 75 6e 63 74 69 6f 6e 28 61 Data Ascii: ript")[0],c[d]=1,a('<link rel="stylesheet" />').insertBefore(b).attr({href:d}))}}(),loadScript:function(){var b={};return function(c,d,e,f){if(f\|\|(c=s.makePath(c)),!b[c]){var g=function(){d&&d(),e&&("string"==typeof e&&(e=e.split(" ")),a.each(e,function(a
2024-08-30 05:37:40 UTC	1378	IN	Data Raw: 64 6f 77 2e 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 26 26 63 6f 6e 73 6f 6c 65 5b 63 6f 6e 73 6f 6c 65 5b 62 5d 3f 62 3a 22 6c 6f 67 22 5d 28 61 29 29 7d 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 69 73 44 4f 4d 52 65 61 64 79 3d 61 2e 69 73 52 65 61 64 79 3b 76 61 72 20 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 69 73 44 4f 4d 52 65 61 64 79 3d 21 30 2c 6f 28 22 44 4f 4d 22 2c 21 30 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 28 22 57 49 4e 44 4f 57 4c 4f 41 44 22 2c 21 30 29 7d 2c 39 39 39 39 29 7d 3b 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 62 2e 72 75 6e 29 7b 69 66 28 28 6d 2e 64 65 62 75 67 7c 7c 21 28 22 63 72 6f 73 73 44 6f 6d 61 69 6e 22 69 6e 20 6d 2e 61 6a 61 78 29 26 26 6c 6f Data Ascii: dow.console&&console.log&&console[console[b]?b:"log"](a))}}),function(){a.isDOMReady=a.isReady;var c=function(){a.isDOMReady=!0,o("DOM",!0),setTimeout(function(){o("WINDOWLOAD",!0)},9999)};b=function(){if(!b.run){if((m.debug\|\|!("crossDomain"in m.ajax)&&lo
2024-08-30 05:37:40 UTC	1378	IN	Data Raw: 57 69 74 68 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 2e 66 6e 5b 63 2b 22 50 6f 6c 79 66 69 6c 6c 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 3d 61 28 62 29 2c 61 2e 66 6e 5b 63 5d 2e 63 61 6c 6c 28 74 68 69 73 2c 62 29 2c 61 2e 69 73 44 4f 4d 52 65 61 64 79 26 26 62 2e 65 61 63 68 28 66 29 2c 74 68 69 73 7d 7d 29 2c 61 2e 65 61 63 68 28 5b 22 69 6e 73 65 72 74 41 66 74 65 72 22 2c 22 69 6e 73 65 72 74 42 65 66 6f 72 65 22 2c 22 61 70 70 65 6e 64 54 6f 22 2c 22 70 72 65 70 65 6e 64 54 6f 22 2c 22 72 65 70 6c 61 63 65 41 6c 6c 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 2e 66 6e 5b 63 2e 72 65 70 6c 61 63 65 28 2f 5b 41 2d 5a 5d 2f 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 22 50 6f 6c 79 66 69 Data Ascii: With"],function(b,c){a.fn[c+"Polyfill"]=function(b){return b=a(b),a.fn[c].call(this,b),a.isDOMReady&&b.each(f),this}}),a.each(["insertAfter","insertBefore","appendTo","prependTo","replaceAll"],function(b,c){a.fn[c.replace(/[A-Z]/,function(a){return"Polyfi
2024-08-30 05:37:40 UTC	1378	IN	Data Raw: 69 6e 69 22 69 6e 20 77 69 6e 64 6f 77 7d 2c 63 3a 5b 31 36 2c 37 2c 32 2c 38 2c 31 2c 31 32 2c 31 39 2c 32 35 2c 32 33 2c 32 37 5d 7d 29 2c 72 2e 73 77 66 6d 69 6e 69 2e 74 65 73 74 28 29 2c 75 28 22 73 69 7a 7a 6c 65 22 2c 7b 74 65 73 74 3a 61 2e 65 78 70 72 2e 66 69 6c 74 65 72 73 7d 29 2c 75 28 22 6a 61 6a 61 78 22 2c 7b 74 65 73 74 3a 61 2e 61 6a 61 78 7d 29 2c 71 28 22 65 73 35 22 2c 7b 74 65 73 74 3a 21 28 21 68 2e 45 53 35 7c 7c 21 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 29 2c 63 3a 5b 31 38 2c 31 39 2c 32 35 2c 32 30 2c 33 32 5d 7d 29 2c 71 28 22 64 6f 6d 2d 65 78 74 65 6e 64 22 2c 7b 66 3a 65 2c 6e 6f 41 75 74 6f 43 61 6c 6c 62 61 63 6b 3a 21 30 2c 64 3a 5b 22 65 73 35 22 5d 2c 63 3a 5b 31 36 2c 37 2c 32 2c 31 35 2c Data Ascii: ini"in window},c:[16,7,2,8,1,12,19,25,23,27]}),r.swfmini.test(),u("sizzle",{test:a.expr.filters}),u("jajax",{test:a.ajax}),q("es5",{test:!(!h.ES5\|\|!Function.prototype.bind),c:[18,19,25,20,32]}),q("dom-extend",{f:e,noAutoCallback:!0,d:["es5"],c:[16,7,2,15,
2024-08-30 05:37:40 UTC	1378	IN	Data Raw: 65 64 56 61 6c 69 64 69 74 79 3d 21 31 2c 62 3d 68 5b 6c 5d 26 26 21 6f 3f 22 66 6f 72 6d 2d 6e 61 74 69 76 65 2d 65 78 74 65 6e 64 22 3a 67 7d 72 65 74 75 72 6e 20 73 2e 72 75 6e 3d 21 30 2c 21 31 7d 3b 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 61 74 61 6c 69 73 74 22 29 2c 64 2e 76 61 6c 69 64 61 74 69 6f 6e 4d 65 73 73 61 67 65 73 3d 64 2e 76 61 6c 69 64 69 74 79 4d 65 73 73 61 67 65 73 3d 7b 6c 61 6e 67 53 72 63 3a 22 69 31 38 6e 2f 66 6f 72 6d 63 66 67 2d 22 2c 61 76 61 69 6c 61 62 6c 65 4c 61 6e 67 73 3a 5b 22 61 72 22 2c 22 63 73 22 2c 22 65 6c 22 2c 22 65 73 22 2c 22 66 72 22 2c 22 68 65 22 2c 22 68 69 22 2c 22 68 75 22 2c 22 69 74 22 2c 22 6a 61 22 2c 22 6c 74 22 2c 22 6e 6c 22 2c 22 70 6c 22 2c 22 70 74 22 2c 22 Data Ascii: edValidity=!1,b=h[l]&&!o?"form-native-extend":g}return s.run=!0,!1};document.createElement("datalist"),d.validationMessages=d.validityMessages={langSrc:"i18n/formcfg-",availableLangs:["ar","cs","el","es","fr","he","hi","hu","it","ja","lt","nl","pl","pt","
2024-08-30 05:37:40 UTC	1378	IN	Data Raw: 69 74 28 22 20 22 29 29 2c 73 28 29 2c 61 2e 65 61 63 68 28 63 2e 5f 74 79 70 65 73 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 72 65 74 75 72 6e 20 63 20 69 6e 20 6b 26 26 21 6b 5b 63 5d 3f 28 62 3d 21 31 2c 21 31 29 3a 76 6f 69 64 20 30 7d 29 2c 62 7d 2c 6d 65 74 68 6f 64 4e 61 6d 65 73 3a 5b 22 73 74 65 70 55 70 22 2c 22 73 74 65 70 44 6f 77 6e 22 5d 2c 64 3a 5b 22 66 6f 72 6d 73 22 2c 65 5d 2c 63 3a 5b 36 2c 35 2c 31 38 2c 31 37 2c 31 34 2c 32 38 2c 32 39 2c 33 32 2c 33 33 5d 2c 6e 4d 3a 22 69 6e 70 75 74 20 69 6e 70 75 74 74 79 70 65 73 22 7d 29 2c 75 28 22 72 61 6e 67 65 2d 75 69 22 2c 7b 6f 70 74 69 6f 6e 73 3a 7b 7d 2c 6e 6f 41 75 74 6f 43 61 6c 6c 62 61 63 6b 3a 21 30 2c 74 65 73 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 21 61 Data Ascii: it(" ")),s(),a.each(c._types,function(a,c){return c in k&&!k[c]?(b=!1,!1):void 0}),b},methodNames:["stepUp","stepDown"],d:["forms",e],c:[6,5,18,17,14,28,29,32,33],nM:"input inputtypes"}),u("range-ui",{options:{},noAutoCallback:!0,test:function(){return!!a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49721	104.26.13.42	443	528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 05:37:40 UTC	508	OUT	GET /widgets/latest/dropdown.js HTTP/1.1 Host: cdn.gtranslate.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 05:37:40 UTC	770	IN	HTTP/1.1 200 OK Date: Fri, 30 Aug 2024 05:37:40 GMT Content-Type: application/javascript Content-Length: 11743 Connection: close Cache-Control: max-age=31536000 Cf-Bgj: minify Cf-Polished: origSize=12946 ETag: "644ef5be-3292" Expires: Fri, 16 May 2025 15:14:08 GMT Last-Modified: Sun, 30 Apr 2023 23:11:58 GMT CF-Cache-Status: HIT Age: 9123812 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=21Nsks2aw7jNXX5GM%2FgTMaIdCtQkT90vEuWqtPaY1vtCfQosXWzciWR7gJNt3BW5%2F%2FwBQANTt%2BIY%2BaSS6%2FrszJjKUwcsTAJh0%2FsvhZ2SpdMACvuFPcF351s9O3BVMLq52CVaVw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8bb26e2539038c5d-EWR
2024-08-30 05:37:40 UTC	599	IN	Data Raw: 2f 2a 21 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 47 54 72 61 6e 73 6c 61 74 65 20 49 6e 63 2e 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 74 3d 77 69 6e 64 6f 77 2e 67 74 72 61 6e 73 6c 61 74 65 53 65 74 74 69 6e 67 73 7c 7c 7b 7d 3b 67 74 3d 67 74 5b 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 67 74 2d 77 69 64 67 65 74 2d 69 64 27 29 5d 7c 7c 67 74 3b 76 61 72 20 6c 61 6e 67 5f 61 72 72 61 79 5f 65 6e 67 6c 69 73 68 3d 7b 22 61 66 22 3a 22 41 66 72 69 6b 61 61 6e 73 22 2c 22 73 71 22 3a 22 41 6c 62 61 6e 69 61 6e 22 2c 22 61 6d 22 3a 22 41 6d 68 61 72 69 63 22 2c 22 61 72 22 3a 22 41 72 61 62 69 63 22 2c 22 68 79 22 3a 22 41 72 6d 65 6e 69 61 6e 22 2c 22 61 Data Ascii: /!Copyright (C) GTranslate Inc./(function(){var gt=window.gtranslateSettings\|\|{};gt=gt[document.currentScript.getAttribute('data-gt-widget-id')]\|\|gt;var lang_array_english={"af":"Afrikaans","sq":"Albanian","am":"Amharic","ar":"Arabic","hy":"Armenian","a
2024-08-30 05:37:40 UTC	1369	IN	Data Raw: 69 22 3a 22 46 69 6e 6e 69 73 68 22 2c 22 66 72 22 3a 22 46 72 65 6e 63 68 22 2c 22 66 79 22 3a 22 46 72 69 73 69 61 6e 22 2c 22 67 6c 22 3a 22 47 61 6c 69 63 69 61 6e 22 2c 22 6b 61 22 3a 22 47 65 6f 72 67 69 61 6e 22 2c 22 64 65 22 3a 22 47 65 72 6d 61 6e 22 2c 22 65 6c 22 3a 22 47 72 65 65 6b 22 2c 22 67 75 22 3a 22 47 75 6a 61 72 61 74 69 22 2c 22 68 74 22 3a 22 48 61 69 74 69 61 6e 20 43 72 65 6f 6c 65 22 2c 22 68 61 22 3a 22 48 61 75 73 61 22 2c 22 68 61 77 22 3a 22 48 61 77 61 69 69 61 6e 22 2c 22 69 77 22 3a 22 48 65 62 72 65 77 22 2c 22 68 69 22 3a 22 48 69 6e 64 69 22 2c 22 68 6d 6e 22 3a 22 48 6d 6f 6e 67 22 2c 22 68 75 22 3a 22 48 75 6e 67 61 72 69 61 6e 22 2c 22 69 73 22 3a 22 49 63 65 6c 61 6e 64 69 63 22 2c 22 69 67 22 3a 22 49 67 62 6f 22 Data Ascii: i":"Finnish","fr":"French","fy":"Frisian","gl":"Galician","ka":"Georgian","de":"German","el":"Greek","gu":"Gujarati","ht":"Haitian Creole","ha":"Hausa","haw":"Hawaiian","iw":"Hebrew","hi":"Hindi","hmn":"Hmong","hu":"Hungarian","is":"Icelandic","ig":"Igbo"
2024-08-30 05:37:40 UTC	1369	IN	Data Raw: 36 35 5c 75 30 35 38 30 5c 75 30 35 36 35 5c 75 30 35 37 36 22 2c 22 61 7a 22 3a 22 41 7a 5c 75 30 32 35 39 72 62 61 79 63 61 6e 20 64 69 6c 69 22 2c 22 65 75 22 3a 22 45 75 73 6b 61 72 61 22 2c 22 62 65 22 3a 22 5c 75 30 34 31 31 5c 75 30 34 33 35 5c 75 30 34 33 62 5c 75 30 34 33 30 5c 75 30 34 34 30 5c 75 30 34 34 33 5c 75 30 34 34 31 5c 75 30 34 33 61 5c 75 30 34 33 30 5c 75 30 34 34 66 20 5c 75 30 34 33 63 5c 75 30 34 33 65 5c 75 30 34 33 32 5c 75 30 34 33 30 22 2c 22 62 6e 22 3a 22 5c 75 30 39 61 63 5c 75 30 39 62 65 5c 75 30 39 38 32 5c 75 30 39 62 32 5c 75 30 39 62 65 22 2c 22 62 73 22 3a 22 42 6f 73 61 6e 73 6b 69 22 2c 22 62 67 22 3a 22 5c 75 30 34 31 31 5c 75 30 34 34 61 5c 75 30 34 33 62 5c 75 30 34 33 33 5c 75 30 34 33 30 5c 75 30 34 34 30 5c Data Ascii: 65\u0580\u0565\u0576","az":"Az\u0259rbaycan dili","eu":"Euskara","be":"\u0411\u0435\u043b\u0430\u0440\u0443\u0441\u043a\u0430\u044f \u043c\u043e\u0432\u0430","bn":"\u09ac\u09be\u0982\u09b2\u09be","bs":"Bosanski","bg":"\u0411\u044a\u043b\u0433\u0430\u0440\
2024-08-30 05:37:40 UTC	1369	IN	Data Raw: 30 5c 75 30 34 33 33 5c 75 30 34 34 62 5c 75 30 34 33 37 5c 75 30 34 34 37 5c 75 30 34 33 30 22 2c 22 6c 6f 22 3a 22 5c 75 30 65 39 65 5c 75 30 65 62 32 5c 75 30 65 61 61 5c 75 30 65 62 32 5c 75 30 65 61 35 5c 75 30 65 62 32 5c 75 30 65 61 37 22 2c 22 6c 61 22 3a 22 4c 61 74 69 6e 22 2c 22 6c 76 22 3a 22 4c 61 74 76 69 65 5c 75 30 31 36 31 75 20 76 61 6c 6f 64 61 22 2c 22 6c 74 22 3a 22 4c 69 65 74 75 76 69 5c 75 30 31 37 33 20 6b 61 6c 62 61 22 2c 22 6c 62 22 3a 22 4c 5c 75 30 30 65 62 74 7a 65 62 75 65 72 67 65 73 63 68 22 2c 22 6d 6b 22 3a 22 5c 75 30 34 31 63 5c 75 30 34 33 30 5c 75 30 34 33 61 5c 75 30 34 33 35 5c 75 30 34 33 34 5c 75 30 34 33 65 5c 75 30 34 33 64 5c 75 30 34 34 31 5c 75 30 34 33 61 5c 75 30 34 33 38 20 5c 75 30 34 35 38 5c 75 30 34 Data Ascii: 0\u0433\u044b\u0437\u0447\u0430","lo":"\u0e9e\u0eb2\u0eaa\u0eb2\u0ea5\u0eb2\u0ea7","la":"Latin","lv":"Latvie\u0161u valoda","lt":"Lietuvi\u0173 kalba","lb":"L\u00ebtzebuergesch","mk":"\u041c\u0430\u043a\u0435\u0434\u043e\u043d\u0441\u043a\u0438 \u0458\u04
2024-08-30 05:37:40 UTC	1369	IN	Data Raw: 35 37 5c 75 30 34 33 64 5c 75 30 34 34 31 5c 75 30 34 34 63 5c 75 30 34 33 61 5c 75 30 34 33 30 22 2c 22 75 72 22 3a 22 5c 75 30 36 32 37 5c 75 30 36 33 31 5c 75 30 36 32 66 5c 75 30 36 34 38 22 2c 22 75 7a 22 3a 22 4f 5c 75 32 30 31 38 7a 62 65 6b 63 68 61 22 2c 22 76 69 22 3a 22 54 69 5c 75 31 65 62 66 6e 67 20 56 69 5c 75 31 65 63 37 74 22 2c 22 63 79 22 3a 22 43 79 6d 72 61 65 67 22 2c 22 78 68 22 3a 22 69 73 69 58 68 6f 73 61 22 2c 22 79 69 22 3a 22 5c 75 30 35 64 39 5c 75 30 35 64 39 5c 75 30 35 64 33 5c 75 30 35 64 39 5c 75 30 35 65 39 22 2c 22 79 6f 22 3a 22 59 6f 72 5c 75 30 30 66 39 62 5c 75 30 30 65 31 22 2c 22 7a 75 22 3a 22 5a 75 6c 75 22 7d 3b 76 61 72 20 64 65 66 61 75 6c 74 5f 6c 61 6e 67 75 61 67 65 3d 67 74 2e 64 65 66 61 75 6c 74 5f 6c Data Ascii: 57\u043d\u0441\u044c\u043a\u0430","ur":"\u0627\u0631\u062f\u0648","uz":"O\u2018zbekcha","vi":"Ti\u1ebfng Vi\u1ec7t","cy":"Cymraeg","xh":"isiXhosa","yi":"\u05d9\u05d9\u05d3\u05d9\u05e9","yo":"Yor\u00f9b\u00e1","zu":"Zulu"};var default_language=gt.default_l
2024-08-30 05:37:40 UTC	1369	IN	Data Raw: 7c 7c 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 29 29 2b 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 2b 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 3b 68 72 65 66 3d 28 6c 61 6e 67 3d 3d 64 65 66 61 75 6c 74 5f 6c 61 6e 67 75 61 67 65 29 26 26 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 27 2f 2f 27 2b 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2b 67 74 5f 72 65 71 75 65 73 74 5f 75 72 69 7c 7c 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 27 2f 2f 27 2b 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2b 27 2f 27 2b 6c 61 6e 67 2b 67 74 5f 72 65 71 75 65 73 74 5f 75 72 69 3b 7d 65 6c 73 65 20 69 66 28 75 72 6c 5f 73 74 72 75 63 74 75 72 65 3d 3d 27 73 75 62 5f 64 6f 6d 61 69 6e 27 29 7b 76 61 72 20 67 74 5f 72 65 71 75 65 Data Ascii: \|\|location.pathname))+location.search+location.hash;href=(lang==default_language)&&location.protocol+'//'+location.hostname+gt_request_uri\|\|location.protocol+'//'+location.hostname+'/'+lang+gt_request_uri;}else if(url_structure=='sub_domain'){var gt_reque
2024-08-30 05:37:40 UTC	1369	IN	Data Raw: 65 78 74 3d 73 65 6c 65 63 74 5f 6c 61 6e 67 75 61 67 65 5f 6c 61 62 65 6c 3b 65 6c 5f 73 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 6c 5f 6f 29 3b 6c 61 6e 67 75 61 67 65 73 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6c 61 6e 67 29 7b 76 61 72 20 65 6c 5f 6f 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 6f 70 74 69 6f 6e 27 29 3b 65 6c 5f 6f 2e 76 61 6c 75 65 3d 64 65 66 61 75 6c 74 5f 6c 61 6e 67 75 61 67 65 2b 27 7c 27 2b 6c 61 6e 67 3b 65 6c 5f 6f 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 67 74 2d 68 72 65 66 27 2c 67 65 74 5f 6c 61 6e 67 5f 68 72 65 66 28 6c 61 6e 67 29 29 3b 63 75 72 72 65 6e 74 5f 6c 61 6e 67 3d 3d 6c 61 6e 67 26 26 65 6c 5f 6f 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 73 Data Ascii: ext=select_language_label;el_s.appendChild(el_o);languages.forEach(function(lang){var el_o=document.createElement('option');el_o.value=default_language+'\|'+lang;el_o.setAttribute('data-gt-href',get_lang_href(lang));current_lang==lang&&el_o.setAttribute('s
2024-08-30 05:37:40 UTC	1369	IN	Data Raw: 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 4f 62 6a 65 63 74 29 7b 76 61 72 20 65 76 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 4f 62 6a 65 63 74 28 29 3b 65 6c 65 6d 65 6e 74 2e 66 69 72 65 45 76 65 6e 74 28 27 6f 6e 27 2b 65 76 65 6e 74 2c 65 76 74 29 7d 65 6c 73 65 7b 76 61 72 20 65 76 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 28 27 48 54 4d 4c 45 76 65 6e 74 73 27 29 3b 65 76 74 2e 69 6e 69 74 45 76 65 6e 74 28 65 76 65 6e 74 2c 74 72 75 65 2c 74 72 75 65 29 3b 65 6c 65 6d 65 6e 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 65 76 74 29 7d 7d 63 61 74 63 68 28 65 29 7b 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 6c 6f 61 64 5f 74 6c 69 62 28 29 7b 69 66 28 21 77 69 6e 64 6f 77 2e 67 74 5f 74 72 61 6e 73 Data Ascii: ument.createEventObject){var evt=document.createEventObject();element.fireEvent('on'+event,evt)}else{var evt=document.createEvent('HTMLEvents');evt.initEvent(event,true,true);element.dispatchEvent(evt)}}catch(e){}}function load_tlib(){if(!window.gt_trans
2024-08-30 05:37:40 UTC	1369	IN	Data Raw: 67 75 61 67 65 29 0a 6c 6f 61 64 5f 74 6c 69 62 28 29 3b 65 6c 73 65 0a 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 75 5f 63 6c 61 73 73 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 70 6f 69 6e 74 65 72 65 6e 74 65 72 27 2c 6c 6f 61 64 5f 74 6c 69 62 29 7d 29 3b 7d 0a 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 75 5f 63 6c 61 73 73 2b 27 20 2e 67 74 5f 73 65 6c 65 63 74 6f 72 27 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 63 68 61 6e 67 65 27 2c 66 75 6e 63 74 69 6f 6e 28 65 76 74 29 7b 69 66 28 75 72 6c 5f 73 74 72 75 63 74 75 Data Ascii: guage)load_tlib();elsedocument.querySelectorAll(u_class).forEach(function(e){e.addEventListener('pointerenter',load_tlib)});}document.querySelectorAll(u_class+' .gt_selector').forEach(function(e){e.addEventListener('change',function(evt){if(url_structu
2024-08-30 05:37:40 UTC	192	IN	Data Raw: 70 74 69 6f 6e 5b 76 61 6c 75 65 3d 22 27 2b 64 65 66 61 75 6c 74 5f 6c 61 6e 67 75 61 67 65 2b 27 7c 27 2b 70 72 65 66 65 72 72 65 64 5f 6c 61 6e 67 75 61 67 65 2b 27 22 5d 5b 64 61 74 61 2d 67 74 2d 68 72 65 66 5d 27 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 67 74 2d 68 72 65 66 27 29 7d 29 3b 7d 0a 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 27 67 74 5f 61 75 74 6f 73 77 69 74 63 68 27 2c 31 29 3b 7d 7d 29 28 29 3b Data Ascii: ption[value="'+default_language+'\|'+preferred_language+'"][data-gt-href]').forEach(function(e){location.href=e.getAttribute('data-gt-href')});}sessionStorage.setItem('gt_autoswitch',1);}})();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49716	157.240.253.1	443	528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 05:37:40 UTC	670	OUT	GET /assets/?revision=646225600660159&name=desktop-creating-an-account-banner&density=1 HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://meta.com-businesshelp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 05:37:40 UTC	1286	IN	HTTP/1.1 200 OK Pragma: public Expires: Mon, 26 Aug 2024 22:28:22 +0000 Cache-Control: public, max-age=86400 Content-Type: image/png Access-Control-Allow-Origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self';script-src .fbcdn.net 'unsafe-inline' blob: data: 'self';style-src 'unsafe-inline';connect-src .fbcdn.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';img-src data: blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.xx.facebook.com/csp/reporting/?m=c&minimize=0;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-08-30 05:37:40 UTC	1622	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-08-30 05:37:40 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-08-30 05:37:40 UTC	14844	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 40 00 00 01 a8 08 06 00 00 00 1e bc 29 c6 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 20 00 49 44 41 54 78 9c ec dd 0b 70 5c f7 75 e7 f9 83 17 01 82 97 02 28 92 a2 24 4a 04 24 59 90 28 da 22 29 da 4a 95 6d 81 50 12 67 84 8d 1d d2 c9 66 b0 4e c2 10 b2 6b ec cc 64 53 a2 b6 c6 9a ad f1 d6 12 aa a9 24 33 9e 2a 8b 2e 27 99 b5 5c b1 a0 a2 13 1b 9b 8a 45 95 ed a5 1c 6f 59 20 14 7b fd 10 5f b2 48 4a a0 45 02 a0 44 8a 04 20 00 e4 1f ef 06 7a eb 5c fe 1b 6a 80 78 74 a3 ef ed be 8f ef a7 aa 8b 0f 34 bb ff f7 7f 5b 10 79 7f f7 9c 53 94 4c 26 05 00 00 00 00 00 00 00 00 20 4a 8a 39 9b 00 00 00 00 00 00 00 00 20 6a 08 40 00 00 00 00 00 00 00 00 40 e4 10 80 00 00 00 00 00 00 00 00 80 c8 21 00 Data Ascii: PNGIHDR@)pHYs~ IDATxp\u($J$Y(")JmPgfNkdS$3*.'\EoY {_HJED z\jxt4[ySL& J9 j@@!
2024-08-30 05:37:41 UTC	16384	IN	Data Raw: 1e 7a 24 00 ab 01 00 c4 15 2d b0 80 c5 b5 64 b8 3f 99 b6 cb ca 56 a6 ef 8f 78 7a 9e e1 e7 00 bc 54 d1 b4 87 0a 10 00 d7 95 96 4a b2 bc 22 72 9b a1 c1 87 b6 71 7a b6 fc 3e c2 0f 8f e8 b0 78 9d 13 92 da 57 0d 46 a2 26 e9 dc 18 08 de 52 5e 21 4d 77 de 9d 53 70 a1 7f b6 f1 d6 3b dc d7 8a a2 ea 9a 4d f2 f0 23 1f 8f e4 b1 01 00 c2 83 0a 10 60 71 da d6 ea b9 25 9e 73 44 ab 45 fc d8 c7 b6 fa c6 d6 a6 8e c3 2d 54 81 60 01 ad 6c 0c 00 1f 9c 14 91 ad 6c 2c 80 64 f5 1a 29 ba 7c 29 12 fb a0 c1 87 ce f8 88 e2 c5 f9 20 49 b5 13 d3 8a 90 df 9f e8 8e 4c 45 c8 42 33 71 34 b8 f8 d3 9a 0f c8 a1 8b dd 59 b7 c3 5a 5f 5e e1 56 91 cc 0d 3f fa 7a 7b e5 e4 fe bf ce 69 bd 41 f1 b5 ff f1 77 52 5d c9 6c 0f 00 40 61 51 01 02 2c c2 71 1c 9d ad f0 fc 22 4f d1 01 d4 cd 3e ef 21 55 20 98 Data Ascii: z$-d?VxzTJ"rqz>xWF&R^!MwSp;M#`q%sDE-T`ll,d)\|) ILEB3q4YZ_^V?z{iAwR]l@aQ,q"O>!U
2024-08-30 05:37:41 UTC	480	IN	Data Raw: ce ce 8d 9b ba d6 91 de 43 aa c5 de d3 4e 3d 5e 79 8e 87 6d 67 8f fe e1 9f fc d9 41 a7 1e 17 00 80 8d 20 00 01 00 00 00 00 00 51 b1 d1 39 3a ae b2 ed ec 59 13 d7 d1 43 cf 37 34 f7 83 39 1e 00 80 20 60 06 08 00 00 00 00 00 40 44 e8 a1 e7 c7 45 64 cf 5a 9e b1 6a 6b f5 ee a5 cb bf 64 8e 07 00 20 48 a8 00 01 00 00 00 00 00 88 8e 03 6b 08 3f 8e 65 e7 e6 fe f9 b5 e1 73 bf 64 8e 07 00 20 88 08 40 00 00 00 00 00 00 a2 a3 63 85 67 3a a4 5b 63 1d ff 62 cf 97 8f f3 9a 00 00 04 1d 01 08 00 00 00 00 00 40 34 8d 94 03 0f 1d 7a 8c f1 3a 00 00 84 09 01 08 00 00 00 00 00 40 74 f4 ea 37 15 78 0c 73 df 01 00 61 c6 10 74 00 00 00 00 00 00 00 00 10 3a 71 6e 29 00 00 00 00 00 00 00 00 08 1b 02 10 00 00 00 00 00 00 00 00 10 3a 04 20 00 00 00 00 00 00 00 00 20 74 08 40 00 00 00 Data Ascii: CN=^ymgA Q9:YC749 `@DEdZjkd Hk?esd @cg:[cb@4z:@t7xsat:qn): t@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49722	172.67.68.204	443	528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 05:37:41 UTC	368	OUT	GET /widgets/latest/dropdown.js HTTP/1.1 Host: cdn.gtranslate.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 05:37:41 UTC	770	IN	HTTP/1.1 200 OK Date: Fri, 30 Aug 2024 05:37:41 GMT Content-Type: application/javascript Content-Length: 11743 Connection: close Cache-Control: max-age=31536000 Cf-Bgj: minify Cf-Polished: origSize=12946 ETag: "644ef5be-3292" Expires: Fri, 16 May 2025 15:14:08 GMT Last-Modified: Sun, 30 Apr 2023 23:11:58 GMT CF-Cache-Status: HIT Age: 9123813 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D8%2BPmGHE6mQ%2FJzrSA1CyHeTUPxJzVfB8fbbyRt%2BiulUaYHLI1h0%2BGWo1uLGt9IIARFtHBZuUx1pwtigq%2BvOdiQ8hWCMpAIk2cs%2FJTFiEw%2FdXXttE6g956LUgTLBqsxonee4kTw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8bb26e290b74426d-EWR
2024-08-30 05:37:41 UTC	599	IN	Data Raw: 2f 2a 21 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 47 54 72 61 6e 73 6c 61 74 65 20 49 6e 63 2e 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 74 3d 77 69 6e 64 6f 77 2e 67 74 72 61 6e 73 6c 61 74 65 53 65 74 74 69 6e 67 73 7c 7c 7b 7d 3b 67 74 3d 67 74 5b 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 67 74 2d 77 69 64 67 65 74 2d 69 64 27 29 5d 7c 7c 67 74 3b 76 61 72 20 6c 61 6e 67 5f 61 72 72 61 79 5f 65 6e 67 6c 69 73 68 3d 7b 22 61 66 22 3a 22 41 66 72 69 6b 61 61 6e 73 22 2c 22 73 71 22 3a 22 41 6c 62 61 6e 69 61 6e 22 2c 22 61 6d 22 3a 22 41 6d 68 61 72 69 63 22 2c 22 61 72 22 3a 22 41 72 61 62 69 63 22 2c 22 68 79 22 3a 22 41 72 6d 65 6e 69 61 6e 22 2c 22 61 Data Ascii: /!Copyright (C) GTranslate Inc./(function(){var gt=window.gtranslateSettings\|\|{};gt=gt[document.currentScript.getAttribute('data-gt-widget-id')]\|\|gt;var lang_array_english={"af":"Afrikaans","sq":"Albanian","am":"Amharic","ar":"Arabic","hy":"Armenian","a
2024-08-30 05:37:41 UTC	1369	IN	Data Raw: 69 22 3a 22 46 69 6e 6e 69 73 68 22 2c 22 66 72 22 3a 22 46 72 65 6e 63 68 22 2c 22 66 79 22 3a 22 46 72 69 73 69 61 6e 22 2c 22 67 6c 22 3a 22 47 61 6c 69 63 69 61 6e 22 2c 22 6b 61 22 3a 22 47 65 6f 72 67 69 61 6e 22 2c 22 64 65 22 3a 22 47 65 72 6d 61 6e 22 2c 22 65 6c 22 3a 22 47 72 65 65 6b 22 2c 22 67 75 22 3a 22 47 75 6a 61 72 61 74 69 22 2c 22 68 74 22 3a 22 48 61 69 74 69 61 6e 20 43 72 65 6f 6c 65 22 2c 22 68 61 22 3a 22 48 61 75 73 61 22 2c 22 68 61 77 22 3a 22 48 61 77 61 69 69 61 6e 22 2c 22 69 77 22 3a 22 48 65 62 72 65 77 22 2c 22 68 69 22 3a 22 48 69 6e 64 69 22 2c 22 68 6d 6e 22 3a 22 48 6d 6f 6e 67 22 2c 22 68 75 22 3a 22 48 75 6e 67 61 72 69 61 6e 22 2c 22 69 73 22 3a 22 49 63 65 6c 61 6e 64 69 63 22 2c 22 69 67 22 3a 22 49 67 62 6f 22 Data Ascii: i":"Finnish","fr":"French","fy":"Frisian","gl":"Galician","ka":"Georgian","de":"German","el":"Greek","gu":"Gujarati","ht":"Haitian Creole","ha":"Hausa","haw":"Hawaiian","iw":"Hebrew","hi":"Hindi","hmn":"Hmong","hu":"Hungarian","is":"Icelandic","ig":"Igbo"
2024-08-30 05:37:41 UTC	1369	IN	Data Raw: 36 35 5c 75 30 35 38 30 5c 75 30 35 36 35 5c 75 30 35 37 36 22 2c 22 61 7a 22 3a 22 41 7a 5c 75 30 32 35 39 72 62 61 79 63 61 6e 20 64 69 6c 69 22 2c 22 65 75 22 3a 22 45 75 73 6b 61 72 61 22 2c 22 62 65 22 3a 22 5c 75 30 34 31 31 5c 75 30 34 33 35 5c 75 30 34 33 62 5c 75 30 34 33 30 5c 75 30 34 34 30 5c 75 30 34 34 33 5c 75 30 34 34 31 5c 75 30 34 33 61 5c 75 30 34 33 30 5c 75 30 34 34 66 20 5c 75 30 34 33 63 5c 75 30 34 33 65 5c 75 30 34 33 32 5c 75 30 34 33 30 22 2c 22 62 6e 22 3a 22 5c 75 30 39 61 63 5c 75 30 39 62 65 5c 75 30 39 38 32 5c 75 30 39 62 32 5c 75 30 39 62 65 22 2c 22 62 73 22 3a 22 42 6f 73 61 6e 73 6b 69 22 2c 22 62 67 22 3a 22 5c 75 30 34 31 31 5c 75 30 34 34 61 5c 75 30 34 33 62 5c 75 30 34 33 33 5c 75 30 34 33 30 5c 75 30 34 34 30 5c Data Ascii: 65\u0580\u0565\u0576","az":"Az\u0259rbaycan dili","eu":"Euskara","be":"\u0411\u0435\u043b\u0430\u0440\u0443\u0441\u043a\u0430\u044f \u043c\u043e\u0432\u0430","bn":"\u09ac\u09be\u0982\u09b2\u09be","bs":"Bosanski","bg":"\u0411\u044a\u043b\u0433\u0430\u0440\
2024-08-30 05:37:41 UTC	1369	IN	Data Raw: 30 5c 75 30 34 33 33 5c 75 30 34 34 62 5c 75 30 34 33 37 5c 75 30 34 34 37 5c 75 30 34 33 30 22 2c 22 6c 6f 22 3a 22 5c 75 30 65 39 65 5c 75 30 65 62 32 5c 75 30 65 61 61 5c 75 30 65 62 32 5c 75 30 65 61 35 5c 75 30 65 62 32 5c 75 30 65 61 37 22 2c 22 6c 61 22 3a 22 4c 61 74 69 6e 22 2c 22 6c 76 22 3a 22 4c 61 74 76 69 65 5c 75 30 31 36 31 75 20 76 61 6c 6f 64 61 22 2c 22 6c 74 22 3a 22 4c 69 65 74 75 76 69 5c 75 30 31 37 33 20 6b 61 6c 62 61 22 2c 22 6c 62 22 3a 22 4c 5c 75 30 30 65 62 74 7a 65 62 75 65 72 67 65 73 63 68 22 2c 22 6d 6b 22 3a 22 5c 75 30 34 31 63 5c 75 30 34 33 30 5c 75 30 34 33 61 5c 75 30 34 33 35 5c 75 30 34 33 34 5c 75 30 34 33 65 5c 75 30 34 33 64 5c 75 30 34 34 31 5c 75 30 34 33 61 5c 75 30 34 33 38 20 5c 75 30 34 35 38 5c 75 30 34 Data Ascii: 0\u0433\u044b\u0437\u0447\u0430","lo":"\u0e9e\u0eb2\u0eaa\u0eb2\u0ea5\u0eb2\u0ea7","la":"Latin","lv":"Latvie\u0161u valoda","lt":"Lietuvi\u0173 kalba","lb":"L\u00ebtzebuergesch","mk":"\u041c\u0430\u043a\u0435\u0434\u043e\u043d\u0441\u043a\u0438 \u0458\u04
2024-08-30 05:37:41 UTC	1369	IN	Data Raw: 35 37 5c 75 30 34 33 64 5c 75 30 34 34 31 5c 75 30 34 34 63 5c 75 30 34 33 61 5c 75 30 34 33 30 22 2c 22 75 72 22 3a 22 5c 75 30 36 32 37 5c 75 30 36 33 31 5c 75 30 36 32 66 5c 75 30 36 34 38 22 2c 22 75 7a 22 3a 22 4f 5c 75 32 30 31 38 7a 62 65 6b 63 68 61 22 2c 22 76 69 22 3a 22 54 69 5c 75 31 65 62 66 6e 67 20 56 69 5c 75 31 65 63 37 74 22 2c 22 63 79 22 3a 22 43 79 6d 72 61 65 67 22 2c 22 78 68 22 3a 22 69 73 69 58 68 6f 73 61 22 2c 22 79 69 22 3a 22 5c 75 30 35 64 39 5c 75 30 35 64 39 5c 75 30 35 64 33 5c 75 30 35 64 39 5c 75 30 35 65 39 22 2c 22 79 6f 22 3a 22 59 6f 72 5c 75 30 30 66 39 62 5c 75 30 30 65 31 22 2c 22 7a 75 22 3a 22 5a 75 6c 75 22 7d 3b 76 61 72 20 64 65 66 61 75 6c 74 5f 6c 61 6e 67 75 61 67 65 3d 67 74 2e 64 65 66 61 75 6c 74 5f 6c Data Ascii: 57\u043d\u0441\u044c\u043a\u0430","ur":"\u0627\u0631\u062f\u0648","uz":"O\u2018zbekcha","vi":"Ti\u1ebfng Vi\u1ec7t","cy":"Cymraeg","xh":"isiXhosa","yi":"\u05d9\u05d9\u05d3\u05d9\u05e9","yo":"Yor\u00f9b\u00e1","zu":"Zulu"};var default_language=gt.default_l
2024-08-30 05:37:41 UTC	1369	IN	Data Raw: 7c 7c 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 29 29 2b 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 2b 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 3b 68 72 65 66 3d 28 6c 61 6e 67 3d 3d 64 65 66 61 75 6c 74 5f 6c 61 6e 67 75 61 67 65 29 26 26 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 27 2f 2f 27 2b 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2b 67 74 5f 72 65 71 75 65 73 74 5f 75 72 69 7c 7c 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 27 2f 2f 27 2b 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2b 27 2f 27 2b 6c 61 6e 67 2b 67 74 5f 72 65 71 75 65 73 74 5f 75 72 69 3b 7d 65 6c 73 65 20 69 66 28 75 72 6c 5f 73 74 72 75 63 74 75 72 65 3d 3d 27 73 75 62 5f 64 6f 6d 61 69 6e 27 29 7b 76 61 72 20 67 74 5f 72 65 71 75 65 Data Ascii: \|\|location.pathname))+location.search+location.hash;href=(lang==default_language)&&location.protocol+'//'+location.hostname+gt_request_uri\|\|location.protocol+'//'+location.hostname+'/'+lang+gt_request_uri;}else if(url_structure=='sub_domain'){var gt_reque
2024-08-30 05:37:41 UTC	1369	IN	Data Raw: 65 78 74 3d 73 65 6c 65 63 74 5f 6c 61 6e 67 75 61 67 65 5f 6c 61 62 65 6c 3b 65 6c 5f 73 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 6c 5f 6f 29 3b 6c 61 6e 67 75 61 67 65 73 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6c 61 6e 67 29 7b 76 61 72 20 65 6c 5f 6f 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 6f 70 74 69 6f 6e 27 29 3b 65 6c 5f 6f 2e 76 61 6c 75 65 3d 64 65 66 61 75 6c 74 5f 6c 61 6e 67 75 61 67 65 2b 27 7c 27 2b 6c 61 6e 67 3b 65 6c 5f 6f 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 67 74 2d 68 72 65 66 27 2c 67 65 74 5f 6c 61 6e 67 5f 68 72 65 66 28 6c 61 6e 67 29 29 3b 63 75 72 72 65 6e 74 5f 6c 61 6e 67 3d 3d 6c 61 6e 67 26 26 65 6c 5f 6f 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 73 Data Ascii: ext=select_language_label;el_s.appendChild(el_o);languages.forEach(function(lang){var el_o=document.createElement('option');el_o.value=default_language+'\|'+lang;el_o.setAttribute('data-gt-href',get_lang_href(lang));current_lang==lang&&el_o.setAttribute('s
2024-08-30 05:37:41 UTC	1369	IN	Data Raw: 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 4f 62 6a 65 63 74 29 7b 76 61 72 20 65 76 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 4f 62 6a 65 63 74 28 29 3b 65 6c 65 6d 65 6e 74 2e 66 69 72 65 45 76 65 6e 74 28 27 6f 6e 27 2b 65 76 65 6e 74 2c 65 76 74 29 7d 65 6c 73 65 7b 76 61 72 20 65 76 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 28 27 48 54 4d 4c 45 76 65 6e 74 73 27 29 3b 65 76 74 2e 69 6e 69 74 45 76 65 6e 74 28 65 76 65 6e 74 2c 74 72 75 65 2c 74 72 75 65 29 3b 65 6c 65 6d 65 6e 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 65 76 74 29 7d 7d 63 61 74 63 68 28 65 29 7b 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 6c 6f 61 64 5f 74 6c 69 62 28 29 7b 69 66 28 21 77 69 6e 64 6f 77 2e 67 74 5f 74 72 61 6e 73 Data Ascii: ument.createEventObject){var evt=document.createEventObject();element.fireEvent('on'+event,evt)}else{var evt=document.createEvent('HTMLEvents');evt.initEvent(event,true,true);element.dispatchEvent(evt)}}catch(e){}}function load_tlib(){if(!window.gt_trans
2024-08-30 05:37:41 UTC	1369	IN	Data Raw: 67 75 61 67 65 29 0a 6c 6f 61 64 5f 74 6c 69 62 28 29 3b 65 6c 73 65 0a 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 75 5f 63 6c 61 73 73 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 70 6f 69 6e 74 65 72 65 6e 74 65 72 27 2c 6c 6f 61 64 5f 74 6c 69 62 29 7d 29 3b 7d 0a 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 75 5f 63 6c 61 73 73 2b 27 20 2e 67 74 5f 73 65 6c 65 63 74 6f 72 27 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 63 68 61 6e 67 65 27 2c 66 75 6e 63 74 69 6f 6e 28 65 76 74 29 7b 69 66 28 75 72 6c 5f 73 74 72 75 63 74 75 Data Ascii: guage)load_tlib();elsedocument.querySelectorAll(u_class).forEach(function(e){e.addEventListener('pointerenter',load_tlib)});}document.querySelectorAll(u_class+' .gt_selector').forEach(function(e){e.addEventListener('change',function(evt){if(url_structu
2024-08-30 05:37:41 UTC	192	IN	Data Raw: 70 74 69 6f 6e 5b 76 61 6c 75 65 3d 22 27 2b 64 65 66 61 75 6c 74 5f 6c 61 6e 67 75 61 67 65 2b 27 7c 27 2b 70 72 65 66 65 72 72 65 64 5f 6c 61 6e 67 75 61 67 65 2b 27 22 5d 5b 64 61 74 61 2d 67 74 2d 68 72 65 66 5d 27 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 67 74 2d 68 72 65 66 27 29 7d 29 3b 7d 0a 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 27 67 74 5f 61 75 74 6f 73 77 69 74 63 68 27 2c 31 29 3b 7d 7d 29 28 29 3b Data Ascii: ption[value="'+default_language+'\|'+preferred_language+'"][data-gt-href]').forEach(function(e){location.href=e.getAttribute('data-gt-href')});}sessionStorage.setItem('gt_autoswitch',1);}})();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49724	188.114.97.3	443	528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 05:37:41 UTC	426	OUT	GET /assets/unidentified-avatar.jfif HTTP/1.1 Host: meta.com-businesshelp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=etc2hgh99mff6l1clnntmk6fuu
2024-08-30 05:37:41 UTC	663	IN	HTTP/1.1 200 OK Date: Fri, 30 Aug 2024 05:37:41 GMT Content-Type: image/jpeg Content-Length: 10168 Connection: close Last-Modified: Mon, 20 Nov 2023 13:40:56 GMT ETag: "27b8-60a95a2ae4a00" Accept-Ranges: bytes CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=64wtoLbFfc7BsU5xS8G%2F9TpxFJnfQIcIsIXwN2M8VVpmYU0rNcKxLxcM23MvGhEKLaOVJsaqcTyDLyaOktbwLcejHBVFqsYAGo%2FWIE%2F2xOWBv6HY8BFlnpeSV4pV%2FzEWt0bejL0VKHySYPCf"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8bb26e299bbac356-EWR alt-svc: h3=":443"; ma=86400
2024-08-30 05:37:41 UTC	706	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 02 00 02 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC"}!1AQa"q2
2024-08-30 05:37:41 UTC	1369	IN	Data Raw: 68 01 72 28 c8 a4 db 46 da 00 5c 8a 32 29 36 d1 b6 80 17 22 8c 8a 4d b4 6d a0 05 c8 a3 22 93 6d 1b 68 01 72 28 c8 a4 db 46 da 00 5c 8a 32 29 36 d1 b6 80 17 22 8c 8a 4d b4 6d a0 05 c8 a3 22 93 6d 1b 68 01 72 28 c8 a4 db 46 da 00 5c 8a 32 29 36 d1 b6 80 17 22 8c 8a 4d b4 6d a0 05 c8 a3 22 93 6d 1b 68 01 72 28 c8 a4 db 46 da 00 5c 8a 32 29 36 d1 b6 80 17 22 8c 8a 4d b4 6d a0 05 c8 a3 22 93 6d 1b 68 01 72 28 c8 a4 db 46 da 00 5c 8a 32 29 36 d1 b6 80 17 22 8c 8a 4d b4 6d a0 05 c8 a3 22 93 6d 1b 68 01 72 28 c8 a4 db 46 da 00 5c 8a 32 29 36 d1 b6 80 16 8a 4d b4 6d a5 60 16 8a 4d b4 6d a2 c0 2d 14 9b 68 db 45 80 5a 29 36 d1 b6 8b 00 b4 52 6d a3 6d 16 01 68 a4 db 46 da 2c 02 d1 49 b6 8d b4 58 05 a2 93 6d 1b 68 b0 0b 45 26 da 36 d1 60 16 8a 4d b4 6d a2 c0 2d 14 9b Data Ascii: hr(F\2)6"Mm"mhr(F\2)6"Mm"mhr(F\2)6"Mm"mhr(F\2)6"Mm"mhr(F\2)6"Mm"mhr(F\2)6Mm`Mm-hEZ)6RmmhF,IXmhE&6`Mm-
2024-08-30 05:37:41 UTC	1369	IN	Data Raw: 0f 26 96 96 80 0a 28 a2 90 c2 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 06 48 cc b8 da 33 cf 34 06 1d 71 cd 3e 92 80 2a de 5a 45 7b 0b c6 e8 0e e1 8c d7 05 af 78 59 f4 f6 32 c6 0f 97 e8 2b d1 9b ee 9c 75 a8 e4 80 4f 06 c7 19 c8 ef 54 a5 61 1e 28 d1 ef 98 95 e0 8a 7e d3 df ad 74 3e 28 f0 eb 58 cc 66 8c 64 7b 57 3b 6e e4 b9 0d d6 b4 52 b8 58 5a 28 9a 13 bb 34 67 81 54 2b 05 14 66 8c d0 20 a2 8c d1 9a 00 28 a3 34 66 80 0a 28 cd 19 a0 02 8a 33 46 68 00 a2 8c d1 9a 00 28 a3 34 66 80 0a 28 cd 19 a0 02 8a 33 46 68 01 36 d1 b6 96 8a 57 01 36 d1 b6 96 8a 2e 02 6d a3 6d 2d 14 5c 04 db 46 da 5a 28 b8 09 b6 8d b4 b4 51 70 13 6d 1b 69 68 a2 e0 26 da 36 d2 d1 45 c0 4d b4 6d a5 a2 8b 80 9b 68 db 4b 45 17 01 36 d1 b6 96 6f 91 41 14 49 f2 84 c7 52 68 60 6f 78 4b 45 37 Data Ascii: &(((((H34q>*ZE{xY2+uOTa(~t>(Xfd{W;nRXZ(4gT+f (4f(3Fh(4f(3Fh6W6.mm-\FZ(Qpmih&6EMmhKE6oAIRh`oxKE7
2024-08-30 05:37:41 UTC	1369	IN	Data Raw: 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 15 91 af ea 9f d9 ba 7c 92 9e a1 86 2b 5e b9 ef 1a 05 fe c5 97 70 fe 21 fc ea a2 07 0b ab 78 96 7b c6 70 b2 b6 c2 39 5c 9c 56 5a cd e7 28 3b 76 d4 24 7f a4 37 1f 2d 5a 95 53 6a 6c f4 e6 b5 13 19 45 26 da 36 d3 24 5a 29 36 d1 b6 80 16 8a 4d b4 6d a0 05 a2 93 6d 1b 68 01 68 a4 db 46 da 00 5a 29 36 d1 b6 80 16 8a 4d b4 6d a0 05 a2 93 6d 1b 68 01 68 a4 db 46 da 00 5a 29 39 a3 9a 56 01 68 a4 e6 8e 68 b0 0b 45 27 34 73 45 80 5a 29 39 a3 9a 2c 02 d1 49 cd 1c d1 60 16 8a 4e 68 e6 8b 00 b4 52 73 47 34 58 05 a2 93 9a 39 a2 c0 2d 14 9c d1 cd 16 01 cd f2 f3 5a 1e 1f fd de a9 64 c3 fe 7a 56 73 fd df c2 ae e8 ad 8d 42 cb fe ba 50 cb 3d 7a 23 ba 35 3e Data Ascii: QEQEQEQEQEQEQEQEQEQE\|+^p!x{p9\VZ(;v$7-ZSjlE&6$Z)6MmmhhFZ)6MmmhhFZ)9VhhE'4sEZ)9,I`NhRsG4X9-ZdzVsBP=z#5>
2024-08-30 05:37:41 UTC	1369	IN	Data Raw: 51 45 14 00 51 45 14 00 53 0f 7a 7d 44 73 bb 1f ad 34 07 29 e3 6b bf 26 ce 38 01 fb cc 73 f9 57 9f 8e a7 1e b5 d4 78 ee e3 7e a4 b1 8e 40 c5 73 3b 42 93 ce 6b 6e 82 62 60 fa d1 83 eb 4b 45 17 24 4c 1f 5a 30 7d 69 68 a2 e0 26 0f ad 18 3e b4 b4 51 70 13 07 d6 8c 1f 5a 5a 28 b8 09 83 eb 46 0f ad 2d 14 5c 04 c1 f5 a3 07 d6 96 8a 2e 02 60 fa d1 83 eb 4b 45 17 01 30 7d 68 c1 f5 a5 a2 8b 80 98 3e b4 60 fa d2 d1 45 c0 4c 9f 4a 32 7d 29 68 a6 02 64 fa 51 93 e9 4b 45 00 26 4f a5 19 3e 94 b4 50 02 64 fa 51 93 e9 4b 45 00 26 4f a5 19 3e 94 b4 50 02 64 fa 51 93 e9 4b 45 00 26 4f a5 19 3e 94 b4 50 02 64 fa 51 93 e9 4b 45 00 26 4f a5 19 3e 94 b4 50 02 db b6 25 19 ec 73 5e ab e1 8b cf b6 69 30 b6 72 dd eb ca 64 5d b2 2b 0f bb 8e 6b b7 f8 7f 7c a4 cb 11 6f 97 6f cb f9 d6 Data Ascii: QEQESz}Ds4)k&8sWx~@s;Bknb`KE$LZ0}ih&>QpZZ(F-\.`KE0}h>`ELJ2})hdQKE&O>PdQKE&O>PdQKE&O>PdQKE&O>P%s^i0rd]+k\|oo
2024-08-30 05:37:41 UTC	1369	IN	Data Raw: 00 2d 14 9c d1 cd 00 2d 14 9c d1 cd 00 2d 14 9b a8 dd 4a c0 2d 14 9b a8 dd 45 80 5a 29 37 51 ba 8b 00 b4 52 6e a3 75 16 01 68 a4 dd 46 ea 2c 02 d1 49 ba 8d d4 58 05 a2 93 75 1b a8 b0 0b 45 26 ea 37 51 60 16 8a 4d d4 6e a2 c0 2d 14 9b a8 dd 45 80 76 7e 4c 53 3c be c6 97 75 1b a8 b0 1a de 1d d5 ff 00 b2 6f 95 e4 cb 44 46 dd ab ef 5e a1 67 30 b8 b7 59 57 a1 af 18 66 3c 11 d8 e6 bb bf 06 eb 8f 76 16 12 72 3a 56 52 29 1d 9a b6 ec f1 8a 75 37 ee f6 a7 54 8c 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 4a 5a 6b 1c 62 92 47 da 0e 28 03 23 c4 da cc 7a 6d 94 8a ca c5 e4 05 46 3b 57 98 34 de 64 ae ef c9 6a db f1 9e a8 d7 17 82 2c e7 69 ae 7b 75 69 11 31 6d ff 00 75 bb 77 39 e9 4b 4d dd 46 ea bb 12 2d 14 9b a8 dd 45 80 5a 29 37 51 ba 8b 00 Data Ascii: ---J-EZ)7QRnuhF,IXuE&7Q`Mn-Ev~LS<uoDF^g0YWf<vr:VR)u7T((((((JZkbG(#zmF;W4dj,i{ui1muw9KMF-EZ)7Q
2024-08-30 05:37:41 UTC	1369	IN	Data Raw: 13 9a 39 a5 a2 8b 80 9c d1 cd 2d 14 5c 04 e6 8e 69 68 a2 e0 27 34 73 4b 45 17 01 39 a3 9a 5a 28 b8 09 cd 1c d2 d1 45 c0 4e 68 e6 96 8a 2e 02 73 47 34 b4 51 70 13 75 1b a9 68 a6 02 6e a3 75 2d 14 00 9b a8 dd 4b 45 00 26 ea 37 52 d1 40 09 ba 8d d4 b4 50 02 6e a3 75 2d 14 00 9b a8 dd 4b 47 14 00 9b a8 dd 4b c5 1c 50 02 6e a3 75 2d 18 f6 a0 04 58 c9 6c 93 c5 4a 76 22 f5 15 0c aa db 70 a7 27 da ad e9 7a 1c f7 f2 00 43 62 90 15 77 35 c4 81 23 19 ae bf c2 fe 17 25 96 49 57 df 9a bf a2 f8 2d 6d 80 79 39 3d 7b 57 59 04 29 0a 6d 51 8a 4d a4 31 60 84 41 18 55 e8 2a 4a 6e e1 bb 1d e9 d5 89 41 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 55 af 15 26 8c c4 e3 3b 85 58 6e 54 8a 60 8c 60 67 93 4c 47 98 f8 93 c2 f3 e9 b7 Data Ascii: 9-\ih'4sKE9Z(ENh.sG4Qpuhnu-KE&7R@Pnu-KGKPnu-XlJv"p'zCbw5#%IW-my9={WY)mQM1`AU*JnAEPEPEPEPEPEPEPEPU&;XnT``gLG
2024-08-30 05:37:41 UTC	1248	IN	Data Raw: 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 91 b3 8e 0e 29 68 a0 04 5c f7 39 a2 96 8a 00 8f cb dc 3e 6f 98 d0 d1 93 c0 3c 7a 54 94 53 b8 8c 9d 43 41 b5 bd 57 26 31 e6 9e f5 c3 eb 1e 11 9e d1 9a 48 d0 95 f6 15 e9 9b 86 ec 63 9a 49 23 59 14 86 00 8a 7c cc 2c 78 b6 e7 dc 52 55 31 e3 a6 ee f4 c9 37 47 ce dc 8f 5a f4 fd 5b c3 36 da 92 e1 10 2b af 4c 00 2b 89 d5 34 0b 9d 26 42 d2 ae f8 fd b9 ad 13 11 8d 1b 19 17 20 71 4b 4a f3 09 b9 41 b4 0e a3 18 a6 ee aa 10 b4 52 6e a3 75 00 2d 14 9b a8 dd 40 0b 45 26 ea 37 50 02 d1 49 ba 8d d4 b5 01 68 eb d2 9f 81 b7 34 ca 5a 80 ed 8d 8c e3 8a 5f 29 b6 e7 6f 14 d9 2e 0c 38 e3 39 f6 ad 5f 0f f8 76 eb 52 b8 59 98 11 0e 7a 13 8a 96 c0 ab a7 e9 33 ea 93 08 e3 42 73 dc 57 71 a0 f8 36 0b 0c 4b 2a 6e 92 b6 b4 fd 2a 0b 35 43 1a e1 Data Ascii: (((()h\9>o<zTSCAW&1HcI#Y\|,xRU17GZ[6+L+4&B qKJARnu-@E&7PIh4Z_)o.89_vRYz3BsWq6Kn5C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49726	157.240.251.9	443	528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 05:37:41 UTC	425	OUT	GET /assets/?revision=646225600660159&name=desktop-creating-an-account-banner&density=1 HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 05:37:41 UTC	1490	IN	HTTP/1.1 200 OK Pragma: public Expires: Sat, 31 Aug 2024 04:28:18 +0000 Cache-Control: public, max-age=86400 Content-Type: image/png Access-Control-Allow-Origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1: 'unsafe-inline' blob: data: 'self' https://.google-analytics.com .google.com;style-src 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com:* wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src data: blob: 'self' https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-08-30 05:37:41 UTC	1622	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-08-30 05:37:41 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-08-30 05:37:42 UTC	14640	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 40 00 00 01 a8 08 06 00 00 00 1e bc 29 c6 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 20 00 49 44 41 54 78 9c ec dd 0b 70 5c f7 75 e7 f9 83 17 01 82 97 02 28 92 a2 24 4a 04 24 59 90 28 da 22 29 da 4a 95 6d 81 50 12 67 84 8d 1d d2 c9 66 b0 4e c2 10 b2 6b ec cc 64 53 a2 b6 c6 9a ad f1 d6 12 aa a9 24 33 9e 2a 8b 2e 27 99 b5 5c b1 a0 a2 13 1b 9b 8a 45 95 ed a5 1c 6f 59 20 14 7b fd 10 5f b2 48 4a a0 45 02 a0 44 8a 04 20 00 e4 1f ef 06 7a eb 5c fe 1b 6a 80 78 74 a3 ef ed be 8f ef a7 aa 8b 0f 34 bb ff f7 7f 5b 10 79 7f f7 9c 53 94 4c 26 05 00 00 00 00 00 00 00 00 20 4a 8a 39 9b 00 00 00 00 00 00 00 00 20 6a 08 40 00 00 00 00 00 00 00 00 40 e4 10 80 00 00 00 00 00 00 00 00 80 c8 21 00 Data Ascii: PNGIHDR@)pHYs~ IDATxp\u($J$Y(")JmPgfNkdS$3*.'\EoY {_HJED z\jxt4[ySL& J9 j@@!
2024-08-30 05:37:42 UTC	16384	IN	Data Raw: 30 72 bf da 60 e9 5d fd bb 38 3f 58 42 6b 5b 7d 23 2d 6b 00 78 25 d3 16 90 00 22 2e d5 ee 27 ea 74 88 b9 86 1d 04 1e 99 d3 76 60 fa d0 4a 90 7f 33 f9 8e d4 27 2e 47 7e 78 fa dc 40 50 5b 55 9d 35 57 a5 77 dc 9b 6a 18 9d fd b1 63 4d bc e6 5f ac 5d 51 2e 1f 5b bb 41 3e 71 cb 46 a9 2c e1 d2 14 00 c0 3f fc 5f 06 58 80 e3 38 27 8c 31 99 0e 23 af f5 7a 1f db ea 1b db a3 32 0c 1d be a2 fd 15 00 2f 51 01 02 c0 35 1d f1 0a 10 0d 3c 3a 4a 6f 9d 99 77 81 ec 69 d5 8c 56 85 bc 50 56 e3 ce 09 79 6c f2 9d c8 b6 c7 9a ae aa be e1 f7 1a 6f bd 53 da 2e 9c cb b9 15 96 56 7d ec be bd 36 92 d5 1f 1b 3f bc 5d 3e f9 d0 47 e4 0f 1e 7a 24 00 ab 01 00 c4 15 2d b0 80 c5 b5 64 b8 3f 99 b6 cb ca 56 a6 ef 8f 78 7a 9e e1 e7 00 bc 54 d1 b4 87 0a 10 00 d7 95 96 4a b2 bc 22 72 9b a1 c1 87 Data Ascii: 0r`]8?XBk[}#-kx%".'tv`J3'.G~x@P[U5WwjcM_]Q.[A>qF,?_X8'1#z2/Q5<:JowiVPVyloS.V}6?]>Gz$-d?VxzTJ"r
2024-08-30 05:37:42 UTC	684	IN	Data Raw: 1d 92 94 a9 f0 a4 6d 83 2b 1d d2 c1 86 e8 b5 94 07 93 97 d7 34 c8 dc 0e 44 81 9e f7 a1 2a 3f 7c d7 72 29 1e 8f 9d 31 79 3d 5d 05 73 b4 86 4f 75 cc c4 e4 d4 ec c4 e4 f4 d9 59 db fe bb b9 ec dc 7f 3d f0 d4 5f 8c 98 bc 3e 00 20 3a 62 c5 62 91 db 0d 00 00 00 00 00 22 e1 48 ef 21 75 d8 bf cf af cf f5 8b 3d 5f 8e 99 bc 9e 89 fd 98 99 b5 73 e3 13 93 23 33 b3 f6 f1 6c 76 ae f7 89 ff f8 d4 f3 6e 5e 0f 00 80 32 2a 40 00 00 00 00 00 40 24 1c e9 3d 74 c0 cf e1 87 aa 8c 30 79 3d 3d fc dd f1 fd 98 9f cf 15 2f 8f 4f bc 3d 33 33 fb 23 db ce fe 8f 3f fa b3 6f f4 3b 7d 0d 00 00 6a 41 00 02 00 00 00 00 00 a2 a2 c7 cf cf d3 ce ce 8d 9b ba d6 91 de 43 aa c5 de d3 4e 3d 5e 79 8e 87 6d 67 8f fe e1 9f fc d9 41 a7 1e 17 00 80 8d 20 00 01 00 00 00 00 00 51 b1 d1 39 3a ae b2 ed ec Data Ascii: m+4D?\|r)1y=]sOuY=_> :bb"H!u=_s#3lvn^2@@$=t0y==/O=33#?o;}jACN=^ymgA Q9:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49731	151.101.129.229	443	528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 05:37:41 UTC	530	OUT	GET /webshim/1.12.4/shims/styles/shim.css HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 05:37:42 UTC	710	IN	HTTP/1.1 200 OK Connection: close Content-Length: 11103 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: text/css; charset=utf-8 ETag: W/"2b5f-vwz94A9ydfXoc2EWrntCVM7aTT8" Accept-Ranges: bytes Age: 299936 Date: Fri, 30 Aug 2024 05:37:41 GMT X-Served-By: cache-fra-etou8220032-FRA, cache-nyc-kteb1890090-NYC X-Cache: HIT, MISS Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-08-30 05:37:42 UTC	1378	IN	Data Raw: 2e 77 73 2d 70 6f 70 6f 76 65 72 7b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 7d 2e 77 73 2d 70 6f 70 6f 76 65 72 20 2a 2c 2e 77 73 2d 70 6f 70 6f 76 65 72 3a 62 65 66 6f 72 65 2c 2e 77 73 2d 70 6f 70 6f 76 65 72 3a 61 66 74 65 72 2c 2e 77 73 2d 70 6f 70 6f 76 65 72 20 3a 61 66 74 65 72 2c 2e 77 73 2d 70 6f 70 6f 76 65 72 20 3a 62 65 66 6f 72 65 7b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 7d 2e 77 73 2d 69 6d 70 6f 72 74 61 6e 74 2d 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 76 69 73 69 62 69 6c 69 74 Data Ascii: .ws-popover{-moz-box-sizing:content-box;box-sizing:content-box}.ws-popover *,.ws-popover:before,.ws-popover:after,.ws-popover :after,.ws-popover :before{-moz-box-sizing:content-box;box-sizing:content-box}.ws-important-hide{display:none!important;visibilit
2024-08-30 05:37:42 UTC	1378	IN	Data Raw: 61 79 3a 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 30 25 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 21 69 6d 70 6f 72 74 61 6e 74 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 2e 63 75 65 2d 64 69 73 70 6c 61 79 20 2e 63 75 65 2d 6c 69 6e 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 63 75 65 2d 64 69 73 70 6c 61 79 20 73 70 61 6e 2e 63 75 65 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 3a 33 70 78 20 35 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 38 29 3b 63 6f 6c Data Ascii: ay:block;padding:0;margin:0;width:100%;font-size:160%;color:#fff;visibility:visible!important;pointer-events:none}.cue-display .cue-line{display:block}.cue-display span.cue{display:inline-block;padding:3px 5px;background:#000;background:rgba(0,0,0,.8);col
2024-08-30 05:37:42 UTC	1378	IN	Data Raw: 6e 6f 77 72 61 70 7d 2e 70 6c 61 63 65 68 6f 6c 64 65 72 2d 76 69 73 69 62 6c 65 7b 63 6f 6c 6f 72 3a 23 39 39 39 7d 2e 70 6c 61 63 65 68 6f 6c 64 65 72 2d 66 6f 63 75 73 65 64 2e 70 6c 61 63 65 68 6f 6c 64 65 72 2d 76 69 73 69 62 6c 65 7b 63 6f 6c 6f 72 3a 23 63 63 63 7d 2e 77 73 2d 70 6f 70 6f 76 65 72 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 6f 75 74 6c 69 6e 65 3a 30 3b 70 61 64 64 69 6e 67 3a 30 20 2e 39 32 33 30 38 65 6d 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 2d 2e 39 32 33 30 38 65 6d 3b 7a 2d 69 6e 64 65 Data Ascii: nowrap}.placeholder-visible{color:#999}.placeholder-focused.placeholder-visible{color:#ccc}.ws-popover{font-size:13px;display:block;visibility:hidden;overflow:hidden;position:absolute;top:0;left:0;outline:0;padding:0 .92308em;margin:0 0 0 -.92308em;z-inde
2024-08-30 05:37:42 UTC	1378	IN	Data Raw: 74 65 28 30 2c 30 29 20 73 63 61 6c 65 28 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 30 2c 30 29 20 73 63 61 6c 65 28 31 29 7d 2e 77 73 2d 70 6f 2d 62 6f 78 7b 62 6f 72 64 65 72 3a 2e 30 37 36 39 32 65 6d 20 73 6f 6c 69 64 20 23 63 63 63 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 70 61 64 64 69 6e 67 3a 2e 33 38 34 36 32 65 6d 20 2e 33 38 34 36 32 65 6d 20 2e 32 33 30 37 37 65 6d 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 33 30 37 37 65 6d 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 2e 30 37 36 39 32 65 6d 20 2e 33 38 34 36 32 65 6d 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 35 29 7d 2e 77 73 2d 70 6f 2d 62 6f 78 20 62 75 74 74 6f 6e 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6f 76 65 72 66 6c Data Ascii: te(0,0) scale(1);transform:translate(0,0) scale(1)}.ws-po-box{border:.07692em solid #ccc;background:#fff;padding:.38462em .38462em .23077em;border-radius:.23077em;box-shadow:0 .07692em .38462em rgba(0,0,0,.25)}.ws-po-box button{display:inline-block;overfl
2024-08-30 05:37:42 UTC	1378	IN	Data Raw: 3b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 2e 35 33 38 34 36 65 6d 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 2e 35 33 38 34 36 65 6d 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 2e 35 33 38 34 36 65 6d 20 73 6f 6c 69 64 20 23 66 65 66 65 66 65 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 30 3b 7a 2d 69 6e 64 65 78 3a 39 39 39 39 39 39 39 39 39 7d 2e 77 73 2d 69 73 2d 72 74 6c 20 2e 77 73 2d 70 6f 2d 61 72 72 6f 77 20 2e 77 73 2d 70 6f 2d 61 72 72 6f 77 62 6f 78 7b 6c 65 66 74 3a 61 75 74 6f 3b 72 69 67 68 74 3a 2d 2e 35 33 38 34 36 65 6d 7d 5b 64 61 74 61 2d 76 65 72 74 69 63 61 6c 3d 62 6f 74 74 6f 6d 5d 20 2e 77 73 2d 70 6f 2d 61 72 72 6f 77 20 2e 77 73 2d 70 Data Ascii: ;border-left:.53846em solid transparent;border-right:.53846em solid transparent;border-bottom:.53846em solid #fefefe;border-top:0;z-index:999999999}.ws-is-rtl .ws-po-arrow .ws-po-arrowbox{left:auto;right:-.53846em}[data-vertical=bottom] .ws-po-arrow .ws-p
2024-08-30 05:37:42 UTC	1378	IN	Data Raw: 74 69 6f 6e 3a 63 6f 6c 6f 72 20 34 30 30 6d 73 7d 2e 64 61 74 61 6c 69 73 74 2d 70 6f 6c 79 66 69 6c 6c 20 2e 64 61 74 61 6c 69 73 74 2d 62 6f 78 20 2e 6f 70 74 69 6f 6e 2d 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 39 30 25 3b 63 6f 6c 6f 72 3a 23 36 36 36 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 6f 74 74 6f 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 31 35 65 6d 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 37 36 39 32 33 65 6d 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 63 6f 6c 6f 72 20 34 30 30 6d 73 7d 2e 64 61 Data Ascii: tion:color 400ms}.datalist-polyfill .datalist-box .option-label{display:none;max-width:100%;float:right;font-size:90%;color:#666;text-overflow:ellipsis;vertical-align:bottom;margin-top:.15em;margin-left:.76923em;text-align:right;transition:color 400ms}.da
2024-08-30 05:37:42 UTC	1378	IN	Data Raw: 2c 30 2c 2e 31 29 20 69 6e 73 65 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 7d 70 72 6f 67 72 65 73 73 5b 64 61 74 61 2d 70 6f 73 69 74 69 6f 6e 5d 3a 3a 2d 77 65 62 6b 69 74 2d 70 72 6f 67 72 65 73 73 2d 62 61 72 2c 70 72 6f 67 72 65 73 73 2e 77 73 2d 73 74 79 6c 65 3a 3a 2d 77 65 62 6b 69 74 2d 70 72 6f 67 72 65 73 73 2d 62 61 72 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 30 66 30 66 30 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 31 70 78 20 32 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 29 20 69 6e 73 65 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 62 6f 72 64 65 72 3a 30 20 6e 6f 6e 65 7d 70 72 6f 67 72 65 73 73 5b 64 61 74 61 2d 70 6f 73 69 74 69 6f 6e 5d Data Ascii: ,0,.1) inset;border-radius:4px}progress[data-position]::-webkit-progress-bar,progress.ws-style::-webkit-progress-bar{border:1px solid #ddd;background:#f0f0f0;box-shadow:0 1px 2px rgba(0,0,0,.1) inset;border-radius:4px;border:0 none}progress[data-position]
2024-08-30 05:37:42 UTC	1378	IN	Data Raw: 61 64 6f 77 3a 30 20 2d 31 70 78 20 31 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 35 29 20 69 6e 73 65 74 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 36 33 61 36 20 75 72 6c 28 70 72 6f 67 72 65 73 73 2e 70 6e 67 29 3b 62 6f 72 64 65 72 3a 30 7d 70 72 6f 67 72 65 73 73 5b 64 61 74 61 2d 70 6f 73 69 74 69 6f 6e 5d 3e 73 70 61 6e 2e 70 72 6f 67 72 65 73 73 2d 76 61 6c 75 65 2c 70 72 6f 67 72 65 73 73 2e 77 73 2d 73 74 79 6c 65 3e 73 70 61 6e 2e 70 72 6f 67 72 65 73 73 2d 76 61 6c 75 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 21 69 6d 70 6f 72 74 61 6e 74 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 2d 31 70 78 20 31 70 Data Ascii: adow:0 -1px 1px rgba(0,0,0,.15) inset;background:#0063a6 url(progress.png);border:0}progress[data-position]>span.progress-value,progress.ws-style>span.progress-value{display:block!important;position:absolute;top:0;bottom:0;height:100%;box-shadow:0 -1px 1p
2024-08-30 05:37:42 UTC	79	IN	Data Raw: 65 6e 74 20 23 30 30 30 7d 73 75 6d 6d 61 72 79 2e 73 75 6d 6d 61 72 79 2d 68 61 73 2d 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 31 70 78 20 64 6f 74 74 65 64 20 23 61 61 61 3b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 2d 31 70 78 7d Data Ascii: ent #000}summary.summary-has-focus{outline:1px dotted #aaa;outline-offset:-1px}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49732	151.101.129.229	443	528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 05:37:41 UTC	513	OUT	GET /webshim/1.12.4/shims/form-core.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 05:37:41 UTC	722	IN	HTTP/1.1 200 OK Connection: close Content-Length: 4665 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 ETag: W/"1239-xvUvunJCDKFp89h2ev99pOEomf0" Accept-Ranges: bytes Age: 228722 Date: Fri, 30 Aug 2024 05:37:41 GMT X-Served-By: cache-fra-etou8220101-FRA, cache-ewr-kewr1740061-EWR X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-08-30 05:37:41 UTC	1378	IN	Data Raw: 77 65 62 73 68 69 6d 73 2e 72 65 67 69 73 74 65 72 28 22 66 6f 72 6d 2d 63 6f 72 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 62 2e 63 61 70 74 75 72 69 6e 67 45 76 65 6e 74 50 72 65 76 65 6e 74 65 64 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 69 66 28 21 62 2e 5f 69 73 50 6f 6c 79 66 69 6c 6c 65 64 29 7b 76 61 72 20 63 3d 62 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 2c 64 3d 62 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 3b 62 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 61 2e 64 61 74 61 28 62 2e 74 61 72 67 65 74 2c 62 2e 74 79 70 65 2b 22 44 65 66 61 75 6c 74 50 72 65 76 65 6e Data Ascii: webshims.register("form-core",function(a,b,c,d,e,f){"use strict";b.capturingEventPrevented=function(b){if(!b._isPolyfilled){var c=b.isDefaultPrevented,d=b.preventDefault;b.preventDefault=function(){return clearTimeout(a.data(b.target,b.type+"DefaultPreven
2024-08-30 05:37:41 UTC	1378	IN	Data Raw: 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 21 28 21 61 2e 70 72 6f 70 28 62 2c 22 77 69 6c 6c 56 61 6c 69 64 61 74 65 22 29 7c 7c 21 61 2e 70 72 6f 70 28 62 2c 22 72 65 71 75 69 72 65 64 22 29 29 7d 2c 22 75 73 65 72 2d 65 72 72 6f 72 22 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 61 2e 70 72 6f 70 28 62 2c 22 77 69 6c 6c 56 61 6c 69 64 61 74 65 22 29 26 26 61 28 62 29 2e 68 61 73 43 6c 61 73 73 28 22 75 73 65 72 2d 65 72 72 6f 72 22 29 7d 2c 22 6f 70 74 69 6f 6e 61 6c 2d 65 6c 65 6d 65 6e 74 22 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 21 28 21 61 2e 70 72 6f 70 28 62 2c 22 77 69 6c 6c 56 61 6c 69 64 61 74 65 22 29 7c 7c 61 2e 70 72 6f 70 28 62 2c 22 72 65 71 75 69 72 65 64 22 29 21 3d 3d 21 31 29 7d 7d 29 2c 5b 22 76 61 Data Ascii: ction(b){return!(!a.prop(b,"willValidate")\|\|!a.prop(b,"required"))},"user-error":function(b){return a.prop(b,"willValidate")&&a(b).hasClass("user-error")},"optional-element":function(b){return!(!a.prop(b,"willValidate")\|\|a.prop(b,"required")!==!1)}}),["va
2024-08-30 05:37:41 UTC	1378	IN	Data Raw: 74 68 69 73 2e 69 64 3d 62 2e 77 73 50 6f 70 6f 76 65 72 2e 69 64 2b 2b 2c 74 68 69 73 2e 65 76 65 6e 74 6e 73 3d 22 2e 77 73 6f 76 65 72 6c 61 79 22 2b 74 68 69 73 2e 69 64 2c 74 68 69 73 2e 74 69 6d 65 72 73 3d 7b 7d 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3d 61 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 73 2d 70 6f 70 6f 76 65 72 27 2b 6d 2b 27 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 73 2d 70 6f 2d 6f 75 74 65 72 62 6f 78 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 73 2d 70 6f 2d 61 72 72 6f 77 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 73 2d 70 6f 2d 61 72 72 6f 77 62 6f 78 22 20 2f 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 73 2d 70 6f 2d 62 6f 78 22 20 2f 3e 3c 2f 64 69 76 3e 3c 2f Data Ascii: this.id=b.wsPopover.id++,this.eventns=".wsoverlay"+this.id,this.timers={},this.element=a('<div class="ws-popover'+m+'" tabindex="-1"><div class="ws-po-outerbox"><div class="ws-po-arrow"><div class="ws-po-arrowbox" /></div><div class="ws-po-box" /></div></
2024-08-30 05:37:41 UTC	531	IN	Data Raw: 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 66 26 26 28 66 3d 66 2e 64 65 66 61 75 6c 74 4d 65 73 73 61 67 65 29 2c 62 2e 72 65 70 6c 61 63 65 56 61 6c 69 64 61 74 69 6f 6e 70 6c 61 63 65 68 6f 6c 64 65 72 26 26 28 66 3d 62 2e 72 65 70 6c 61 63 65 56 61 6c 69 64 61 74 69 6f 6e 70 6c 61 63 65 68 6f 6c 64 65 72 28 63 2c 66 29 29 2c 66 7c 7c 22 22 7d 2c 61 2e 66 6e 2e 67 65 74 45 72 72 6f 72 4d 65 73 73 61 67 65 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 64 3d 22 22 2c 65 3d 74 68 69 73 5b 30 5d 3b 72 65 74 75 72 6e 20 65 26 26 28 64 3d 62 2e 67 65 74 43 6f 6e 74 65 6e 74 56 61 6c 69 64 61 74 69 6f 6e 4d 65 73 73 61 67 65 28 65 2c 21 31 2c 63 29 7c 7c 61 2e 70 72 6f 70 28 65 2c 22 63 75 73 74 6f 6d 56 61 6c 69 64 61 74 69 6f 6e 4d 65 73 73 61 Data Ascii: "object"==typeof f&&(f=f.defaultMessage),b.replaceValidationplaceholder&&(f=b.replaceValidationplaceholder(c,f)),f\|\|""},a.fn.getErrorMessage=function(c){var d="",e=this[0];return e&&(d=b.getContentValidationMessage(e,!1,c)\|\|a.prop(e,"customValidationMessa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49735	151.101.129.229	443	528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 05:37:42 UTC	519	OUT	GET /webshim/1.12.4/shims/form-validation.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 05:37:42 UTC	724	IN	HTTP/1.1 200 OK Connection: close Content-Length: 15969 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 ETag: W/"3e61-ZRPPKdyqnourEzRchtQxSFF8rM0" Accept-Ranges: bytes Age: 1968498 Date: Fri, 30 Aug 2024 05:37:42 GMT X-Served-By: cache-fra-etou8220086-FRA, cache-ewr-kewr1740036-EWR X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-08-30 05:37:42 UTC	1378	IN	Data Raw: 77 65 62 73 68 69 6d 73 2e 72 65 67 69 73 74 65 72 28 22 66 6f 72 6d 2d 76 61 6c 69 64 61 74 69 6f 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 67 3d 22 77 65 62 6b 69 74 55 52 4c 22 69 6e 20 63 2c 68 3d 4d 6f 64 65 72 6e 69 7a 72 2e 66 6f 72 6d 76 61 6c 69 64 61 74 69 6f 6e 26 26 21 62 2e 62 75 67 73 2e 62 75 73 74 65 64 56 61 6c 69 64 69 74 79 2c 69 3d 67 26 26 68 2c 6a 3d 69 26 26 70 61 72 73 65 46 6c 6f 61 74 28 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 53 61 66 61 72 69 5c 2f 28 5b 5c 64 5c 2e 5d 2b 29 2f 29 7c 7c 5b 22 22 2c 22 39 39 39 39 39 39 22 5d 29 5b 31 5d 2c 31 30 29 2c 6b 3d 66 2e 69 56 61 6c 3b 6b 2e 66 69 65 6c 64 57 Data Ascii: webshims.register("form-validation",function(a,b,c,d,e,f){"use strict";var g="webkitURL"in c,h=Modernizr.formvalidation&&!b.bugs.bustedValidity,i=g&&h,j=i&&parseFloat((navigator.userAgent.match(/Safari\/([\d\.]+)/)\|\|["","999999"])[1],10),k=f.iVal;k.fieldW
2024-08-30 05:37:42 UTC	1378	IN	Data Raw: 6e 74 28 29 2c 22 73 75 62 6d 69 74 22 21 3d 64 2e 74 79 70 65 26 26 61 2e 70 72 6f 70 28 64 2c 22 77 69 6c 6c 56 61 6c 69 64 61 74 65 22 29 26 26 28 22 63 68 61 6e 67 65 22 21 3d 63 2e 74 79 70 65 7c 7c 21 28 67 3d 66 2e 70 72 6f 70 28 22 74 79 70 65 22 29 29 7c 7c 7a 5b 67 5d 29 29 29 7b 65 3d 61 2e 64 61 74 61 28 64 2c 22 77 65 62 73 68 69 6d 73 73 77 69 74 63 68 76 61 6c 69 64 69 74 79 63 6c 61 73 73 22 29 3b 76 61 72 20 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 67 7c 7c 28 67 3d 66 2e 70 72 6f 70 28 22 74 79 70 65 22 29 29 2c 21 28 69 26 26 28 22 63 68 61 6e 67 65 22 3d 3d 63 2e 74 79 70 65 7c 7c 35 33 37 2e 33 36 3e 6a 29 26 26 41 5b 67 5d 26 26 61 28 63 2e 74 61 72 67 65 74 29 2e 69 73 28 22 3a 66 6f 63 75 73 22 29 7c 7c 22 66 6f 63 75 73 6f Data Ascii: nt(),"submit"!=d.type&&a.prop(d,"willValidate")&&("change"!=c.type\|\|!(g=f.prop("type"))\|\|z[g]))){e=a.data(d,"webshimsswitchvalidityclass");var h=function(){if(g\|\|(g=f.prop("type")),!(i&&("change"==c.type\|\|537.36>j)&&A[g]&&a(c.target).is(":focus")\|\|"focuso
2024-08-30 05:37:42 UTC	1378	IN	Data Raw: 22 2c 42 29 2e 6f 6e 28 22 72 65 73 65 74 20 72 65 73 65 74 76 61 6c 75 69 22 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 61 28 62 2e 74 61 72 67 65 74 29 3b 63 2e 69 73 28 22 66 6f 72 6d 2c 20 66 69 65 6c 64 73 65 74 22 29 26 26 28 63 3d 63 2e 6a 50 72 6f 70 28 22 65 6c 65 6d 65 6e 74 73 22 29 29 2c 63 2e 66 69 6c 74 65 72 28 22 2e 75 73 65 72 2d 65 72 72 6f 72 2c 20 2e 75 73 65 72 2d 73 75 63 63 65 73 73 22 29 2e 72 65 6d 6f 76 65 41 74 74 72 28 22 61 72 69 61 2d 69 6e 76 61 6c 69 64 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 75 73 65 72 2d 65 72 72 6f 72 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 75 73 65 72 2d 73 75 63 63 65 73 73 22 29 2e 67 65 74 4e 61 74 69 76 65 45 6c 65 6d 65 6e 74 28 29 2e 65 61 63 68 28 66 75 6e 63 74 69 Data Ascii: ",B).on("reset resetvalui",function(b){var c=a(b.target);c.is("form, fieldset")&&(c=c.jProp("elements")),c.filter(".user-error, .user-success").removeAttr("aria-invalid").removeClass("user-error").removeClass("user-success").getNativeElement().each(functi
2024-08-30 05:37:42 UTC	1378	IN	Data Raw: 29 7d 29 2c 65 7d 2c 61 2e 65 78 74 65 6e 64 28 62 2e 77 73 50 6f 70 6f 76 65 72 2c 7b 69 73 49 6e 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 2e 69 73 41 72 72 61 79 28 62 29 7c 7c 28 62 3d 5b 62 5d 29 3b 76 61 72 20 64 2c 65 2c 66 2c 67 3d 21 31 3b 66 6f 72 28 64 3d 30 2c 65 3d 62 2e 6c 65 6e 67 74 68 3b 65 3e 64 3b 64 2b 2b 29 69 66 28 66 3d 62 5b 64 5d 2c 66 26 26 66 2e 6a 71 75 65 72 79 26 26 28 66 3d 66 5b 30 5d 29 2c 66 26 26 28 66 3d 3d 63 7c 7c 61 2e 63 6f 6e 74 61 69 6e 73 28 66 2c 63 29 29 29 7b 67 3d 21 30 3b 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 67 7d 2c 73 68 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 69 66 28 21 74 68 69 73 2e 69 73 56 69 73 69 62 6c 65 29 7b 76 61 72 20 65 3d 61 2e 45 76 65 6e 74 28 22 77 73 70 Data Ascii: )}),e},a.extend(b.wsPopover,{isInElement:function(b,c){a.isArray(b)\|\|(b=[b]);var d,e,f,g=!1;for(d=0,e=b.length;e>d;d++)if(f=b[d],f&&f.jquery&&(f=f[0]),f&&(f==c\|\|a.contains(f,c))){g=!0;break}return g},show:function(b){if(!this.isVisible){var e=a.Event("wsp
2024-08-30 05:37:42 UTC	1378	IN	Data Raw: 7c 28 65 3d 66 29 2c 65 26 26 22 68 69 64 64 65 6e 22 3d 3d 61 2e 63 73 73 28 66 2c 22 6f 76 65 72 66 6c 6f 77 22 29 26 26 22 73 74 61 74 69 63 22 21 3d 61 2e 63 73 73 28 66 2c 22 70 6f 73 69 74 69 6f 6e 22 29 26 26 28 65 3d 21 31 29 3b 72 65 74 75 72 6e 20 61 28 65 7c 7c 67 29 7d 7d 28 29 2c 70 72 65 70 61 72 65 46 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 2c 65 2c 66 3d 74 68 69 73 2c 67 3d 7b 7d 2c 68 3d 61 2e 65 78 74 65 6e 64 28 21 30 2c 7b 7d 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2c 62 2e 6a 50 72 6f 70 28 22 66 6f 72 6d 22 29 2e 64 61 74 61 28 22 77 73 70 6f 70 6f 76 65 72 22 29 7c 7c 7b 7d 2c 62 2e 64 61 74 61 28 22 77 73 70 6f 70 6f 76 65 72 22 29 29 3b 74 68 69 73 2e 6c 61 73 74 4f 70 74 73 3d 68 2c 74 68 69 73 2e 6c 61 Data Ascii: \|(e=f),e&&"hidden"==a.css(f,"overflow")&&"static"!=a.css(f,"position")&&(e=!1);return a(e\|\|g)}}(),prepareFor:function(b,c){var d,e,f=this,g={},h=a.extend(!0,{},this.options,b.jProp("form").data("wspopover")\|\|{},b.data("wspopover"));this.lastOpts=h,this.la
2024-08-30 05:37:42 UTC	1378	IN	Data Raw: 22 3d 3d 64 2e 65 6c 65 6d 65 6e 74 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 74 79 22 29 7c 7c 28 64 2e 65 6c 65 6d 65 6e 74 2e 6f 66 66 28 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2b 64 2e 65 76 65 6e 74 6e 73 29 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 2c 22 6e 6f 6e 65 22 29 2e 61 74 74 72 28 7b 22 64 61 74 61 2d 69 64 22 3a 22 22 2c 22 64 61 74 61 2d 63 6c 61 73 73 22 3a 22 22 2c 68 69 64 64 65 6e 3a 22 68 69 64 64 65 6e 22 7d 29 2c 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 64 2e 74 69 6d 65 72 73 2e 66 6f 72 63 65 68 69 64 65 29 2c 61 28 63 29 2e 6f 66 66 28 22 72 65 73 69 7a 65 22 2b 64 2e 65 76 65 6e 74 6e 73 29 29 7d 3b 74 68 69 73 2e 63 6c 65 61 72 28 29 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 77 73 2d Data Ascii: "==d.element.css("visibility")\|\|(d.element.off("transitionend"+d.eventns).css("display","none").attr({"data-id":"","data-class":"",hidden:"hidden"}),clearTimeout(d.timers.forcehide),a(c).off("resize"+d.eventns))};this.clear(),this.element.removeClass("ws-
2024-08-30 05:37:42 UTC	1378	IN	Data Raw: 6b 65 20 65 6c 65 6d 65 6e 74 20 65 69 74 68 65 72 20 76 69 73 69 62 6c 65 20 6f 72 20 75 73 65 20 64 69 73 61 62 6c 65 64 2f 72 65 61 64 6f 6e 6c 79 20 74 6f 20 62 61 72 20 65 6c 65 6d 65 6e 74 73 20 66 72 6f 6d 20 76 61 6c 69 64 61 74 69 6f 6e 2e 20 57 69 74 68 20 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 61 20 67 72 6f 75 70 20 6f 66 20 65 6c 65 6d 65 6e 74 73 20 63 61 6e 20 62 65 20 69 67 6e 6f 72 65 64 2e 22 29 2c 63 2e 65 6c 65 6d 65 6e 74 2e 74 72 69 67 67 65 72 48 61 6e 64 6c 65 72 28 22 70 6f 73 70 6f 70 6f 76 65 72 22 29 7d 3b 67 3e 68 3f 62 2e 73 63 72 6f 6c 6c 52 6f 6f 74 2e 61 6e 69 6d 61 74 65 28 7b 73 63 72 6f 6c 6c 54 6f 70 3a 68 2d 35 2d 28 66 2e 76 69 65 77 70 6f 72 74 4f 66 66 73 65 74 7c 7c 30 29 7d 2c 7b 71 75 65 75 65 Data Ascii: ke element either visible or use disabled/readonly to bar elements from validation. With fieldset[disabled] a group of elements can be ignored."),c.element.triggerHandler("pospopover")};g>h?b.scrollRoot.animate({scrollTop:h-5-(f.viewportOffset\|\|0)},{queue
2024-08-30 05:37:42 UTC	1378	IN	Data Raw: 65 66 61 75 6c 74 4d 65 73 73 61 67 65 22 7d 3b 72 65 74 75 72 6e 20 61 2e 65 61 63 68 28 5b 22 63 75 73 74 6f 6d 45 72 72 6f 72 22 2c 22 62 61 64 49 6e 70 75 74 22 2c 22 74 79 70 65 4d 69 73 6d 61 74 63 68 22 2c 22 72 61 6e 67 65 55 6e 64 65 72 66 6c 6f 77 22 2c 22 72 61 6e 67 65 4f 76 65 72 66 6c 6f 77 22 2c 22 73 74 65 70 4d 69 73 6d 61 74 63 68 22 2c 22 74 6f 6f 4c 6f 6e 67 22 2c 22 74 6f 6f 53 68 6f 72 74 22 2c 22 70 61 74 74 65 72 6e 4d 69 73 6d 61 74 63 68 22 2c 22 76 61 6c 75 65 4d 69 73 73 69 6e 67 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 62 2e 72 65 70 6c 61 63 65 28 2f 5b 41 2d 5a 5d 2f 2c 65 29 3b 64 5b 62 5d 3d 22 2e 22 2b 63 2b 22 2c 20 2e 22 2b 62 2b 22 2c 20 2e 22 2b 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 Data Ascii: efaultMessage"};return a.each(["customError","badInput","typeMismatch","rangeUnderflow","rangeOverflow","stepMismatch","tooLong","tooShort","patternMismatch","valueMissing"],function(a,b){var c=b.replace(/[A-Z]/,e);d[b]="."+c+", ."+b+", ."+b.toLowerCase()
2024-08-30 05:37:42 UTC	1378	IN	Data Raw: 68 76 61 6c 69 64 69 74 79 75 69 22 29 3a 28 65 3d 74 68 69 73 2e 67 65 74 28 62 2c 66 29 2c 66 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 6e 29 2c 65 2e 6d 65 73 73 61 67 65 3d 22 22 2c 65 5b 49 5b 6b 2e 66 78 5d 2e 68 69 64 65 5d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 69 64 3d 3d 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 64 65 73 63 72 69 62 65 64 62 79 22 29 26 26 62 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 64 65 73 63 72 69 62 65 64 62 79 22 29 2c 61 28 74 68 69 73 29 2e 61 74 74 72 28 7b 68 69 64 64 65 6e 3a 22 68 69 64 64 65 6e 22 7d 29 7d 29 29 29 2c 63 7c 7c 64 7c 7c 74 68 69 73 2e 61 64 64 53 75 63 63 65 73 73 28 62 2c 66 29 2c 66 7d 2c 72 65 63 68 65 63 6b 49 6e 76 61 6c 69 64 49 6e 70 75 Data Ascii: hvalidityui"):(e=this.get(b,f),f.removeClass(n),e.message="",e[I[k.fx].hide](function(){this.id==b.getAttribute("aria-describedby")&&b.removeAttribute("aria-describedby"),a(this).attr({hidden:"hidden"})}))),c\|\|d\|\|this.addSuccess(b,f),f},recheckInvalidInpu
2024-08-30 05:37:42 UTC	1378	IN	Data Raw: 61 28 63 2e 74 61 72 67 65 74 29 2e 6a 50 72 6f 70 28 22 66 6f 72 6d 22 29 3b 64 2e 69 73 28 6b 2e 73 65 6c 29 26 26 62 2e 65 72 72 6f 72 62 6f 78 2e 72 65 73 65 74 28 63 2e 74 61 72 67 65 74 29 7d 7d 2c 66 69 72 73 74 69 6e 76 61 6c 69 64 3a 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 6b 2e 73 65 6c 26 26 6b 2e 68 61 6e 64 6c 65 42 75 62 62 6c 65 29 7b 76 61 72 20 64 3d 61 28 63 2e 74 61 72 67 65 74 29 2e 6a 50 72 6f 70 28 22 66 6f 72 6d 22 29 3b 64 2e 69 73 28 6b 2e 73 65 6c 29 26 26 28 63 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 22 6e 6f 6e 65 22 21 3d 6b 2e 68 61 6e 64 6c 65 42 75 62 62 6c 65 26 26 62 2e 76 61 6c 69 64 69 74 79 41 6c 65 72 74 2e 73 68 6f 77 46 6f 72 28 63 2e 74 61 72 67 65 74 2c 21 31 2c 21 31 2c 22 68 69 64 65 22 3d 3d Data Ascii: a(c.target).jProp("form");d.is(k.sel)&&b.errorbox.reset(c.target)}},firstinvalid:function(c){if(k.sel&&k.handleBubble){var d=a(c.target).jProp("form");d.is(k.sel)&&(c.preventDefault(),"none"!=k.handleBubble&&b.validityAlert.showFor(c.target,!1,!1,"hide"==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49737	151.101.129.229	443	528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-30 05:37:43 UTC	530	OUT	GET /webshim/1.12.4/shims/plugins/jquery.ui.position.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 05:37:43 UTC	723	IN	HTTP/1.1 200 OK Connection: close Content-Length: 6400 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 ETag: W/"1900-wP4XkUhbkDJnKsfGTCfX81foQAk" Accept-Ranges: bytes Age: 232217 Date: Fri, 30 Aug 2024 05:37:43 GMT X-Served-By: cache-fra-etou8220125-FRA, cache-nyc-kteb1890091-NYC X-Cache: HIT, MISS Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-08-30 05:37:43 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 55 49 20 50 6f 73 69 74 69 6f 6e 20 31 2e 31 30 2e 33 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 68 74 74 70 3a 2f 2f 61 70 69 2e 6a 71 75 65 72 79 75 69 2e 63 6f 6d 2f 70 6f 73 69 74 69 6f 6e 2f 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 61 2c 62 Data Ascii: /! jQuery UI Position 1.10.3 * http://jqueryui.com * * Copyright 2013 jQuery Foundation and other contributors * Released under the MIT license. * http://jquery.org/license * * http://api.jqueryui.com/position/ */!function(a,b){function c(a,b
2024-08-30 05:37:43 UTC	1378	IN	Data Raw: 69 64 74 68 3c 62 2e 65 6c 65 6d 65 6e 74 5b 30 5d 2e 73 63 72 6f 6c 6c 57 69 64 74 68 2c 66 3d 22 73 63 72 6f 6c 6c 22 3d 3d 3d 64 7c 7c 22 61 75 74 6f 22 3d 3d 3d 64 26 26 62 2e 68 65 69 67 68 74 3c 62 2e 65 6c 65 6d 65 6e 74 5b 30 5d 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 3b 72 65 74 75 72 6e 7b 77 69 64 74 68 3a 66 3f 61 2e 70 6f 73 69 74 69 6f 6e 2e 73 63 72 6f 6c 6c 62 61 72 57 69 64 74 68 28 29 3a 30 2c 68 65 69 67 68 74 3a 65 3f 61 2e 70 6f 73 69 74 69 6f 6e 2e 73 63 72 6f 6c 6c 62 61 72 57 69 64 74 68 28 29 3a 30 7d 7d 2c 67 65 74 57 69 74 68 69 6e 49 6e 66 6f 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 61 28 62 7c 7c 77 69 6e 64 6f 77 29 2c 64 3d 61 2e 69 73 57 69 6e 64 6f 77 28 63 5b 30 5d 29 3b 72 65 74 75 72 6e 7b 65 6c 65 6d 65 Data Ascii: idth<b.element[0].scrollWidth,f="scroll"===d\|\|"auto"===d&&b.height<b.element[0].scrollHeight;return{width:f?a.position.scrollbarWidth():0,height:e?a.position.scrollbarWidth():0}},getWithinInfo:function(b){var c=a(b\|\|window),d=a.isWindow(c[0]);return{eleme
2024-08-30 05:37:43 UTC	1378	IN	Data Raw: 73 2c 22 6d 61 72 67 69 6e 54 6f 70 22 29 2c 79 3d 6c 2b 6f 2b 64 28 74 68 69 73 2c 22 6d 61 72 67 69 6e 52 69 67 68 74 22 29 2b 76 2e 77 69 64 74 68 2c 7a 3d 6d 2b 73 2b 64 28 74 68 69 73 2c 22 6d 61 72 67 69 6e 42 6f 74 74 6f 6d 22 29 2b 76 2e 68 65 69 67 68 74 2c 41 3d 61 2e 65 78 74 65 6e 64 28 7b 7d 2c 72 29 2c 42 3d 63 28 78 2e 6d 79 2c 6b 2e 6f 75 74 65 72 57 69 64 74 68 28 29 2c 6b 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 29 3b 22 72 69 67 68 74 22 3d 3d 3d 62 2e 6d 79 5b 30 5d 3f 41 2e 6c 65 66 74 2d 3d 6c 3a 22 63 65 6e 74 65 72 22 3d 3d 3d 62 2e 6d 79 5b 30 5d 26 26 28 41 2e 6c 65 66 74 2d 3d 6c 2f 32 29 2c 22 62 6f 74 74 6f 6d 22 3d 3d 3d 62 2e 6d 79 5b 31 5d 3f 41 2e 74 6f 70 2d 3d 6d 3a 22 63 65 6e 74 65 72 22 3d 3d 3d 62 2e 6d 79 5b 31 5d Data Ascii: s,"marginTop"),y=l+o+d(this,"marginRight")+v.width,z=m+s+d(this,"marginBottom")+v.height,A=a.extend({},r),B=c(x.my,k.outerWidth(),k.outerHeight());"right"===b.my[0]?A.left-=l:"center"===b.my[0]&&(A.left-=l/2),"bottom"===b.my[1]?A.top-=m:"center"===b.my[1]
2024-08-30 05:37:43 UTC	1378	IN	Data Raw: 6a 3e 30 26 26 30 3e 3d 69 3f 65 3a 69 3e 6a 3f 65 2b 66 2d 62 2e 63 6f 6c 6c 69 73 69 6f 6e 57 69 64 74 68 3a 65 3a 69 3e 30 3f 61 2e 6c 65 66 74 2b 3d 69 3a 6a 3e 30 3f 61 2e 6c 65 66 74 2d 3d 6a 3a 61 2e 6c 65 66 74 3d 67 28 61 2e 6c 65 66 74 2d 68 2c 61 2e 6c 65 66 74 29 7d 2c 74 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 62 2e 77 69 74 68 69 6e 2c 65 3d 64 2e 69 73 57 69 6e 64 6f 77 3f 64 2e 73 63 72 6f 6c 6c 54 6f 70 3a 64 2e 6f 66 66 73 65 74 2e 74 6f 70 2c 66 3d 62 2e 77 69 74 68 69 6e 2e 68 65 69 67 68 74 2c 68 3d 61 2e 74 6f 70 2d 62 2e 63 6f 6c 6c 69 73 69 6f 6e 50 6f 73 69 74 69 6f 6e 2e 6d 61 72 67 69 6e 54 6f 70 2c 69 3d 65 2d 68 2c 6a 3d 68 2b 62 2e 63 6f 6c 6c 69 73 69 6f 6e 48 65 69 67 68 74 2d 66 2d 65 3b Data Ascii: j>0&&0>=i?e:i>j?e+f-b.collisionWidth:e:i>0?a.left+=i:j>0?a.left-=j:a.left=g(a.left-h,a.left)},top:function(a,b){var c,d=b.within,e=d.isWindow?d.scrollTop:d.offset.top,f=b.within.height,h=a.top-b.collisionPosition.marginTop,i=e-h,j=h+b.collisionHeight-f-e;
2024-08-30 05:37:43 UTC	888	IN	Data Raw: 73 69 6f 6e 50 6f 73 69 74 69 6f 6e 2e 6d 61 72 67 69 6e 54 6f 70 2b 6e 2b 6f 2b 70 2d 69 2c 61 2e 74 6f 70 2b 6e 2b 6f 2b 70 3e 6c 26 26 28 63 3e 30 7c 7c 68 28 63 29 3c 6c 29 26 26 28 61 2e 74 6f 70 2b 3d 6e 2b 6f 2b 70 29 29 7d 7d 2c 66 6c 69 70 66 69 74 3a 7b 6c 65 66 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 75 69 2e 70 6f 73 69 74 69 6f 6e 2e 66 6c 69 70 2e 6c 65 66 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 2c 61 2e 75 69 2e 70 6f 73 69 74 69 6f 6e 2e 66 69 74 2e 6c 65 66 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 74 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 75 69 2e 70 6f 73 69 74 69 6f 6e 2e 66 6c 69 70 2e 74 6f 70 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 Data Ascii: sionPosition.marginTop+n+o+p-i,a.top+n+o+p>l&&(c>0\|\|h(c)<l)&&(a.top+=n+o+p))}},flipfit:{left:function(){a.ui.position.flip.left.apply(this,arguments),a.ui.position.fit.left.apply(this,arguments)},top:function(){a.ui.position.flip.top.apply(this,arguments)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49741	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-08-30 05:37:46 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-30 05:37:46 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=100747 Date: Fri, 30 Aug 2024 05:37:46 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49743	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-08-30 05:37:47 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-30 05:37:47 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=100699 Date: Fri, 30 Aug 2024 05:37:47 GMT Content-Length: 55 Connection: close X-CID: 2
2024-08-30 05:37:47 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49742	13.85.23.86	443

Timestamp	Bytes transferred	Direction	Data
2024-08-30 05:37:47 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=5zmaD92Ty9SkAdA&MD=U9L85pl6 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-08-30 05:37:47 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: fc3433ac-c6d8-47e2-aea2-f20c0687ca6b MS-RequestId: 57d87377-fa2e-4754-b564-a0a9cfa5939b MS-CV: k3wLJs/Wf0GU7BIk.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 30 Aug 2024 05:37:46 GMT Connection: close Content-Length: 24490
2024-08-30 05:37:47 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-08-30 05:37:47 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.16	49745	20.190.160.20	443

Timestamp	Bytes transferred	Direction	Data
2024-08-30 05:37:50 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4710 Host: login.live.com
2024-08-30 05:37:50 UTC	4710	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-08-30 05:37:50 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Fri, 30 Aug 2024 05:36:50 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C538_BAY x-ms-request-id: 29cb3212-01d3-48a6-a4f3-131ff3ee7ca8 PPServer: PPV: 30 H: PH1PEPF00011EDE V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Fri, 30 Aug 2024 05:37:50 GMT Connection: close Content-Length: 10173
2024-08-30 05:37:50 UTC	10173	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.16	49747	20.190.160.20	443

Timestamp	Bytes transferred	Direction	Data
2024-08-30 05:37:52 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4710 Host: login.live.com
2024-08-30 05:37:52 UTC	4710	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-08-30 05:37:52 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Fri, 30 Aug 2024 05:36:52 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C538_SN1 x-ms-request-id: a2471bf8-9a41-46ac-abe9-4b33e28fa278 PPServer: PPV: 30 H: SN1PEPF0002F94B V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Fri, 30 Aug 2024 05:37:51 GMT Connection: close Content-Length: 10173
2024-08-30 05:37:52 UTC	10173	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.16	49749	20.190.160.20	443

Timestamp	Bytes transferred	Direction	Data
2024-08-30 05:37:54 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4710 Host: login.live.com
2024-08-30 05:37:54 UTC	4710	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-08-30 05:37:54 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Fri, 30 Aug 2024 05:36:54 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C538_BAY x-ms-request-id: 24017c5e-585f-4e29-97b1-30ec4a123304 PPServer: PPV: 30 H: PH1PEPF00018BCA V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Fri, 30 Aug 2024 05:37:54 GMT Connection: close Content-Length: 10173
2024-08-30 05:37:54 UTC	10173	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.16	49751	20.190.160.20	443

Timestamp	Bytes transferred	Direction	Data
2024-08-30 05:37:56 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4710 Host: login.live.com
2024-08-30 05:37:56 UTC	4710	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-08-30 05:37:56 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Fri, 30 Aug 2024 05:36:56 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C538_BL2 x-ms-request-id: 9e74c262-0741-46ea-abda-56a38716dd30 PPServer: PPV: 30 H: BL02EPF0001D8FE V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Fri, 30 Aug 2024 05:37:56 GMT Connection: close Content-Length: 10173
2024-08-30 05:37:56 UTC	10173	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	58681	20.242.39.171	443

Timestamp	Bytes transferred	Direction	Data
2024-08-30 05:38:01 UTC	142	OUT	GET /clientwebservice/ping HTTP/1.1 Connection: Keep-Alive User-Agent: DNS resiliency checker/1.0 Host: fe3cr.delivery.mp.microsoft.com
2024-08-30 05:38:01 UTC	234	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Expires: -1 Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Date: Fri, 30 Aug 2024 05:38:01 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	58683	20.114.59.183	443

Timestamp	Bytes transferred	Direction	Data
2024-08-30 05:38:03 UTC	124	OUT	GET /sls/ping HTTP/1.1 Connection: Keep-Alive User-Agent: DNS resiliency checker/1.0 Host: slscr.update.microsoft.com
2024-08-30 05:38:03 UTC	318	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Expires: -1 MS-CV: Fp9sHIVVhkW/CWO9.0 MS-RequestId: 89e093eb-85bc-4a7a-a6fb-662e175d0cf1 MS-CorrelationId: 498b1755-feed-4065-ab31-9c56944a01f9 X-Content-Type-Options: nosniff Date: Fri, 30 Aug 2024 05:38:03 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	58684	40.127.169.103	443

Timestamp	Bytes transferred	Direction	Data
2024-08-30 05:38:05 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=5zmaD92Ty9SkAdA&MD=U9L85pl6 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-08-30 05:38:05 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 00478f9b-431b-44f0-91b0-8b8c7957a9c5 MS-RequestId: 4970f60a-19ee-4750-8807-1911f2689ddf MS-CV: aJj0u1NGEk2l21S9.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 30 Aug 2024 05:38:05 GMT Connection: close Content-Length: 24490
2024-08-30 05:38:05 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-08-30 05:38:05 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	58685	40.127.169.103	443

Timestamp	Bytes transferred	Direction	Data
2024-08-30 05:38:06 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=5zmaD92Ty9SkAdA&MD=U9L85pl6 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-08-30 05:38:07 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: a8e7d350-0e5d-4325-88d9-1bbb61213973 MS-RequestId: fb498df0-1d0e-47e7-9741-1d44fd04f0e9 MS-CV: pQvgM+ngnUWYWQ79.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 30 Aug 2024 05:38:06 GMT Connection: close Content-Length: 30005
2024-08-30 05:38:07 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-08-30 05:38:07 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Target ID:	0
Start time:	01:37:34
Start date:	30/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://meta.com-businesshelp.com/index.php?appeal&mcp_token=eyjwawqiojewmzewmzq1mjy4otkynswic2lkijo3odg3njgynjixmzqyndmwlcjheci6imixzdfkmgq5mjawzdm4njhkmtg1m2njywe5ngnjmwjkiiwidhmioje3mjq5odc1odysimv4cci6mtcynzqwnjc4nn0.g1r0zoidsulijizzpul__xu_ezru3nkvbuiwksxr0pk
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	01:37:35
Start date:	30/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2160 --field-trial-handle=1952,i,5005524996599749835,3718445484579524720,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://meta.com-businesshelp.com/index.php?appeal&mcp_token=eyjwawqiojewmzewmzq1mjy4otkynswic2lkijo3odg3njgynjixmzqyndmwlcjheci6imixzdfkmgq5mjawzdm4njhkmtg1m2njywe5ngnjmwjkiiwidhmioje3mjq5odc1odysimv4cci6mtcynzqwnjc4nn0.g1r0zoidsulijizzpul__xu_ezru3nkvbuiwksxr0pk

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Chrome Cache Entry: 92

Chrome Cache Entry: 93

Chrome Cache Entry: 94

Chrome Cache Entry: 95

Chrome Cache Entry: 96

Windows Analysis Report
https://meta.com-businesshelp.com/index.php?appeal&mcp_token=eyjwawqiojewmzewmzq1mjy4otkynswic2lkijo3odg3njgynjixmzqyndmwlcjheci6imixzdfkmgq5mjawzdm4njhkmtg1m2njywe5ngnjmwjkiiwidhmioje3mjq5odc1odysimv4cci6mtcynzqwnjc4nn0.g1r0zoidsulijizzpul__xu_ezru3nkvbuiwksxr0pk