Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
https://microsofff.com/?rid=2751471&key=gtG6Iz

Overview

General Information

Sample URL:	https://microsofff.com/?rid=2751471&key=gtG6Iz
Analysis ID:	1520815
Infos:

Detection

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML title does not match URL

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

×

Process Tree

System is w10x64

chrome.exe (PID: 4444 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6184 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2112 --field-trial-handle=1984,i,13159588908107513183,537215738708389951,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6664 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://microsofff.com/?rid=2751471&key=gtG6Iz" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://microsofff.com/?rid=2751471&key=gtG6Iz

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Phishing

AI detected phishing page

Source: https://microsofff.com/?rid=2751471&key=gtG6Iz

LLM: Score: 9 Reasons: The brand 'Microsoft' is well-known and its legitimate domain is 'microsoft.com'., The provided URL 'microsofff.com' contains a misspelling of the brand name 'Microsoft'., The URL 'microsofff.com' does not match the legitimate domain 'microsoft.com'., The presence of input fields requesting sensitive information (email address, phone number, or Skype) is common in phishing attempts. DOM: 0.0.pages.csv

Phishing site detected (based on image similarity)

Source: https://microsofff.com/?rid=2751471&key=gtG6Iz

Matcher: Found strong image similarity, brand: MICROSOFT

Phishing site detected (based on logo match)

Source: https://microsofff.com/?rid=2751471&key=gtG6Iz

Matcher: Template: microsoft matched

Source: https://microsofff.com/?rid=2751471&key=gtG6Iz

HTTP Parser: Number of links: 0

Source: https://microsofff.com/?rid=2751471&key=gtG6Iz

HTTP Parser: Title: Sign in to your account does not match URL

Source: https://microsofff.com/?rid=2751471&key=gtG6Iz

HTTP Parser: No favicon

Source: https://microsofff.com/?rid=2751471&key=gtG6Iz

HTTP Parser: No <meta name="author".. found

Source: https://microsofff.com/?rid=2751471&key=gtG6Iz

HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49738 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49727 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.5:55075 -> 162.159.36.2:53

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49738 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /?rid=2751471&key=gtG6Iz HTTP/1.1Host: microsofff.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /staticpra/js/app/landing-ip.min.js HTTP/1.1Host: microsofff.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://microsofff.com/?rid=2751471&key=gtG6IzAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/bootstrap@4.6.2/dist/css/bootstrap.min.css HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://microsofff.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://microsofff.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/jquery@3.5.1/dist/jquery.slim.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://microsofff.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://microsofff.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/bootstrap@4.6.2/dist/js/bootstrap.bundle.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://microsofff.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://microsofff.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /templates/softmicro.svg HTTP/1.1Host: awareness.threatcop.aiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://microsofff.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /templates/key.svg HTTP/1.1Host: awareness.threatcop.aiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://microsofff.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /templates/ms_banner.jpg HTTP/1.1Host: awareness.threatcop.aiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://microsofff.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/jquery@3.5.1/dist/jquery.slim.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/bootstrap@4.6.2/dist/js/bootstrap.bundle.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /templates/softmicro.svg HTTP/1.1Host: awareness.threatcop.aiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /staticpra/js/app/landing-ip.min.js HTTP/1.1Host: microsofff.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /templates/key.svg HTTP/1.1Host: awareness.threatcop.aiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: microsofff.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://microsofff.com/?rid=2751471&key=gtG6IzAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /templates/ms_banner.jpg HTTP/1.1Host: awareness.threatcop.aiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?rid=2751471&key=gtG6Iz HTTP/1.1Host: microsofff.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://microsofff.com/?rid=2751471&key=gtG6IzAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"1cad-hx8g7mfyxXY3rBUFEIz9ABxJnmo"
Source: global traffic	HTTP traffic detected: GET /staticpra/js/app/landing-ip.min.js HTTP/1.1Host: microsofff.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: W/"235-19223a78b82"If-Modified-Since: Tue, 24 Sep 2024 10:50:35 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://microsofff.com/?rid=2751471&key=gtG6IzAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: microsofff.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: awareness.threatcop.ai
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.26.0Date: Fri, 27 Sep 2024 22:11:10 GMTContent-Type: text/html; charset=utf-8Content-Length: 19Connection: closeX-Powered-By: ExpressAccess-Control-Allow-Origin: *ETag: W/"13-FtncnC4nKhbzXLrRY4Tty8L5wNs"

Source: chromecache_71.2.dr	String found in binary or memory: https://awareness.threatcop.ai/templates/key.svg
Source: chromecache_71.2.dr	String found in binary or memory: https://awareness.threatcop.ai/templates/ms_banner.jpg);
Source: chromecache_71.2.dr	String found in binary or memory: https://awareness.threatcop.ai/templates/softmicro.svg
Source: chromecache_71.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/bootstrap
Source: chromecache_71.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/jquery
Source: chromecache_80.2.dr, chromecache_79.2.dr, chromecache_74.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_80.2.dr, chromecache_79.2.dr, chromecache_74.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_80.2.dr, chromecache_79.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_71.2.dr	String found in binary or memory: https://microsofff.com/data?rid=2751471&key=gtG6Iz
Source: chromecache_71.2.dr	String found in binary or memory: https://microsofff.com/staticpra/js/app/landing-ip.min.js
Source: chromecache_84.2.dr, chromecache_77.2.dr	String found in binary or memory: https://www.googleapis.com/geolocation/v1/geolocate?key=AIzaSyDzbkjxFajoOSqZsxeseKSM_X6Kp-EsNaU

Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55079
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49727 version: TLS 1.2

Source: classification engine

Classification label: mal64.phis.win@16/32@14/8

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2112 --field-trial-handle=1984,i,13159588908107513183,537215738708389951,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://microsofff.com/?rid=2751471&key=gtG6Iz"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2112 --field-trial-handle=1984,i,13159588908107513183,537215738708389951,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk			Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://microsofff.com/?rid=2751471&key=gtG6Iz	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://getbootstrap.com/)	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
jsdelivr.map.fastly.net	151.101.193.229	true	false		unknown
microsofff.com	13.234.117.252	true	true		unknown
awareness.threatcop.ai	13.127.7.201	true	false		unknown
www.google.com	172.217.16.132	true	false		unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false		unknown
cdn.jsdelivr.net	unknown	unknown	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://microsofff.com/favicon.ico	false		unknown
https://cdn.jsdelivr.net/npm/bootstrap@4.6.2/dist/js/bootstrap.bundle.min.js	false		unknown
https://cdn.jsdelivr.net/npm/bootstrap@4.6.2/dist/css/bootstrap.min.css	false		unknown
https://cdn.jsdelivr.net/npm/jquery@3.5.1/dist/jquery.slim.min.js	false		unknown
https://awareness.threatcop.ai/templates/ms_banner.jpg	false		unknown
https://awareness.threatcop.ai/templates/softmicro.svg	false		unknown
https://awareness.threatcop.ai/templates/key.svg	false		unknown
https://microsofff.com/?rid=2751471&key=gtG6Iz	true		unknown
https://microsofff.com/staticpra/js/app/landing-ip.min.js	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_80.2.dr, chromecache_79.2.dr	false		unknown
https://cdn.jsdelivr.net/npm/bootstrap	chromecache_71.2.dr	false		unknown
https://github.com/twbs/bootstrap/blob/main/LICENSE)	chromecache_80.2.dr, chromecache_79.2.dr, chromecache_74.2.dr	false		unknown
https://cdn.jsdelivr.net/npm/jquery	chromecache_71.2.dr	false		unknown
https://microsofff.com/data?rid=2751471&key=gtG6Iz	chromecache_71.2.dr	false		unknown
https://awareness.threatcop.ai/templates/ms_banner.jpg);	chromecache_71.2.dr	false		unknown
https://getbootstrap.com/)	chromecache_80.2.dr, chromecache_79.2.dr, chromecache_74.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
151.101.193.229	jsdelivr.map.fastly.net	United States		54113	FASTLYUS	false
151.101.65.229	unknown	United States		54113	FASTLYUS	false
13.127.7.201	awareness.threatcop.ai	United States		16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved		unknown	unknown	false
172.217.16.132	www.google.com	United States		15169	GOOGLEUS	false
13.234.117.252	microsofff.com	United States		16509	AMAZON-02US	true

Private

IP
192.168.2.6
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1520815
Start date and time:	2024-09-28 00:10:09 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 19s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://microsofff.com/?rid=2751471&key=gtG6Iz
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.phis.win@16/32@14/8
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.227, 74.125.133.84, 216.58.206.78, 34.104.35.123, 216.58.212.138, 142.250.185.138, 142.250.185.106, 142.250.185.170, 172.217.18.106, 172.217.16.202, 142.250.186.74, 142.250.185.74, 142.250.185.202, 142.250.186.106, 142.250.186.42, 142.250.185.234, 142.250.184.234, 142.250.186.138, 172.217.18.10, 216.58.206.74, 4.245.163.56, 93.184.221.240, 192.229.221.95, 40.69.42.241, 52.165.164.15, 216.58.206.67
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, wu.azureedge.net, d.8.0.a.e.e.f.b.0.0.0.0.0.0.0.0.5.0.0.0.0.0.8.0.0.3.0.1.3.0.6.2.ip6.arpa, clients2.google.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://microsofff.com/?rid=2751471&key=gtG6Iz

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://microsofff.com/?rid=2751471&key=gtG6Iz Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Submit", "text_input_field_labels":["Email address", "phone number or Skype"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://microsofff.com/?rid=2751471&key=gtG6Iz Model: jbxai	{ "phishing_score":9, "brands":"Microsoft", "legit_domain":"microsoft.com", "classification":"wellknown", "reasons":["The brand 'Microsoft' is well-known and its legitimate domain is 'microsoft.com'.", "The provided URL 'microsofff.com' contains a misspelling of the brand name 'Microsoft'.", "The URL 'microsofff.com' does not match the legitimate domain 'microsoft.com'.", "The presence of input fields requesting sensitive information (email address, phone number, or Skype) is common in phishing attempts."], "brand_matches":[false], "url_match":false, "brand_input":"Microsoft", "input_fields":"Email address, phone number or Skype"}

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Sep 27 21:11:03 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.977076457286933
Encrypted:	false
SSDEEP:	48:8HdGTiG+HlidAKZdA19ehwiZUklqehty+3:88zsay
MD5:	53AF45143D96861A544FB40760934E10
SHA1:	44C0CB11EFBF21F8A40A38E60A0D7F22522BA041
SHA-256:	A7F9274C56854C1D72B3BFD31E0D4FA5A6BD7040FB5374FD9D84F86E6038F0A0
SHA-512:	F77FC40C659CE68D625F6CF81DDDF56A72819C11FC13FA32C33DC0527F557302F6D150F18B17E73E31C63A583E1048339DC360FE0FB779542A6014F220E2FC3A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....L.c$...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I;Y`.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V;Y`.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V;Y`.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V;Y`............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V;Yb............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........@........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Sep 27 21:11:03 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.991893553806759
Encrypted:	false
SSDEEP:	48:8/dGTiG+HlidAKZdA1weh/iZUkAQkqehKy+2:8Eze9QLy
MD5:	C48FEDCF734F60BE21E3C00683AF1BF5
SHA1:	BD16C12FC65160198B095A660895ABFDE7E63B8E
SHA-256:	EBDE39F7A17C0135F3837B67D16DA30E8944DCA8511D7C7E042873ED22D7EEBB
SHA-512:	A4A2B1B5CF15257FB6B336227DFFDE208B3144631865C112BD6D91C12FD66E2EC3D75ADDE25556538FE3AD290F4A2F0EA45CB22D36C575DC13F2D5F308C59119
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....n5U$...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I;Y`.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V;Y`.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V;Y`.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V;Y`............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V;Yb............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........@........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.007615238913292
Encrypted:	false
SSDEEP:	48:8xPdGTiGsHlidAKZdA14tseh7sFiZUkmgqeh7sAy+BX:8x0zUnWy
MD5:	6B80928B7C534E5050F7DD43609D2741
SHA1:	4CBC1D0296EBF917A88CB357AB323E461D20FE02
SHA-256:	CDF117198354AFE5FBD55726A9971F0A887D8D23E52F1F0F04CC25688C3217B7
SHA-512:	6299F329E2EBF1281AA7C26938D6B71F7D2490C1E5BC1582D6206F949ECF7FF25CFB36E8689D7FBB01E846D437E9AA54FD7CAA13AE8BD7C4A1BF8F7AECC348D5
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I;Y`.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V;Y`.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V;Y`.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V;Y`............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........@........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Sep 27 21:11:03 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.994620244642872
Encrypted:	false
SSDEEP:	48:8SdGTiG+HlidAKZdA1vehDiZUkwqehOy+R:8fzFYy
MD5:	0B996F1471F67C9D44A8F4A52115416D
SHA1:	807E3BC1A72DA2DEF23D05F37A2E88DE3C734162
SHA-256:	50E3581C7754F20C652651264E7678E25626DC275B93675266B2F631D5312652
SHA-512:	1C49D983D105F4679DD111A740EB615030446AF6D87620686C437F18046E938FA7C3D8FEE83A6A379EE7E37D7C7A4FBAB05F6E053E38FA6293FF935DEEDAA6A6
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......N$...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I;Y`.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V;Y`.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V;Y`.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V;Y`............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V;Yb............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........@........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Sep 27 21:11:03 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.984457855730557
Encrypted:	false
SSDEEP:	48:8pdGTiG+HlidAKZdA1hehBiZUk1W1qeh8y+C:8izV9cy
MD5:	9186DB33C31C9DD5237231EFD6AE6898
SHA1:	A09ACAF5EA84922C731B81E579811AA2554F9D1C
SHA-256:	50BF8A2433380E7EAC8F20EDCC2D4EF5D91DFBCD5F212A46EA3101D3EC6E4998
SHA-512:	3F75153EE9772DCE4B6A97FEEF6A075A5CC258E15F1A3339F8B34C690C8AAF65A008473015AD8A91910E6B05FF0A89C18F099BE8EA826B1C57FD8C4A9061EEAC
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......]$...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I;Y`.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V;Y`.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V;Y`.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V;Y`............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V;Yb............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........@........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Sep 27 21:11:03 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.993200047589738
Encrypted:	false
SSDEEP:	48:8HdGTiG+HlidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbWy+yT+:88zpT/TbxWOvTbWy7T
MD5:	252825F4D7B31108643EF9CBD5C9F392
SHA1:	F67CEA2BFCCAE711611A7B71CE035930D0013FF5
SHA-256:	5C4DC672B7EA421EC95BF5CCA51E354184B66EF47F2964B773907F173BB23DCA
SHA-512:	31ADCCEA255AEF7C2527309C64DC2C5CB81690B23F78F64B620B6E45D18AC9071B42662FF91DD946BA400CD153DFAFE2659A030409E56ABE17BC2CAE653C49F7
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......=$...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I;Y`.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V;Y`.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V;Y`.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V;Y`............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V;Yb............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........@........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 70

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 71

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (482)
Category:	downloaded
Size (bytes):	7341
Entropy (8bit):	5.054477629595963
Encrypted:	false
SSDEEP:	96:TeT+T4c1ro8de3Ne3pVsE0iG1cUjhAgdSJ9eV/afKzqW:yT+T4GR8N8T0J5jhA6SJ4SfIj
MD5:	F2390EE9963522419BA179F182334ACD
SHA1:	871F20EE67F2C57637AC1505108CFD001C499E6A
SHA-256:	E9BE0AA897F258EA8927488C18138265BB0203013946675786D9343D6A4C59ED
SHA-512:	B03D2E9002A2C08993198B55C5AB4B4CCBE4A154DD613F938BBD8F1FADF7DEF45E9EC899D3008C84E01363C8EDEE37865A8AE7484B6AE888416339AD751FDB4E
Malicious:	false
Reputation:	low
URL:	https://microsofff.com/?rid=2751471&key=gtG6Iz
Preview:	<!DOCTYPE html><html lang="en"><head> Required meta tags --><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> Bootstrap CSS -->..<link crossorigin="anonymous" href="https://cdn.jsdelivr.net/npm/bootstrap@4.6.2/dist/css/bootstrap.min.css" integrity="sha384-xOolHFLEh07PJGoPkLv1IbcEPTNtaed2xpHsD9ESMhqIYd0nLMwNLD69Npy4HI+N" rel="stylesheet">..<title>Sign in to your account</title>..<style type="text/css">#mainSection{. display: flex;. justify-content: center;. height: 100vh;. background-image: url(https://awareness.threatcop.ai/templates/ms_banner.jpg);. background-position: center;. background-repeat: no-repeat;. background-size: cover;. align-items: center;.. }... .firstclass h1{. font-size: 35px;. text-align: center;. margin-bottom: 25px;. }.. .firstclass img{.. }.. .card-wrap{. box-shadow: 0 2px 6px rgba(0, 0, 0, 0.2);. background-col

Chrome Cache Entry: 72

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65245)
Category:	downloaded
Size (bytes):	72380
Entropy (8bit):	5.291235892642397
Encrypted:	false
SSDEEP:	1536:KDFXTRMYFbeDtyZxg6V4mMeexs1Lzu3JlQ5uCe/ZiEm4kWpfBogmzmPx3SgQ47Gl:AuIy3JlQ5cF7m+SgQ47GKA
MD5:	FB8409A092ADC6E8BE17E87D59E0595E
SHA1:	CF8D9821552D51BB50CE572E696ABA1309065800
SHA-256:	E3E5F35D586C0E6A9A9D7187687BE087580C40A5F8D0E52F0C4053BBC25C98DB
SHA-512:	FC35D35EBEA742874C522ABE2142580ADD8F3CE523AC727DC05AEAA49DD79203CD39955F32893B711C3A092C72090C579FAA339444AC4A1D7FB0C093175ACBFE
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/jquery@3.5.1/dist/jquery.slim.min.js
Preview:	/! jQuery v3.5.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-deprecated/ajax-event-alias,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(g,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,v=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,y=n.hasOwnProperty,a=y.toString,l=a.call(Object),m={},b=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},w=g.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function C(e,t,n){var r,i,o=(

Chrome Cache Entry: 73

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HoUinYn:IUyY
MD5:	903747EA4323C522742842A52CE710C9
SHA1:	9F806EA4288867A31A4AD53AC171AA4029DF182B
SHA-256:	4BD8B60F91849C936AE45615145A7B7BE2CF803322A30BABBAE7267A142CA5BB
SHA-512:	EEF73DC29A38ED70FFCFC321931BCB5B5A29FAAC356E8F6D84F57C532EEF44AE75021C341CF7DAE26B8211924A1C0E0EC4735F6BFC4AF3970A48EB63BFB7895F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkbcKmEnYFWihIFDYOoWz0=?alt=proto
Preview:	CgkKBw2DqFs9GgA=

Chrome Cache Entry: 74

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65326)
Category:	downloaded
Size (bytes):	162264
Entropy (8bit):	5.077412945081833
Encrypted:	false
SSDEEP:	1536:SS7CI4NT5+rMqFVD2DEBi8yNcuSElA3/uJpq3SYiLENM6HN26B:17sAGLq3SYiLENM6HN26B
MD5:	A4B3F509E79C54A512B890D73235EF04
SHA1:	1BE37B62306C8C0C6775BB4C93C5E4C4E13D9775
SHA-256:	F886516F3D41E9E7BD994C7F7A39A89CAFAE9483F90396CB0DDEAFE8D1EA5E72
SHA-512:	AEDFD2AD0E143486867C3C845D9B4D7325AF41E3AAD102F280796E1507128DA181D382315A16A5EF5B4ABB33FA2BC7985D807ABC9578A47917726146190D7FD3
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/bootstrap@4.6.2/dist/css/bootstrap.min.css
Preview:	/!. Bootstrap v4.6.2 (https://getbootstrap.com/). * Copyright 2011-2022 The Bootstrap Authors. * Copyright 2011-2022 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). /:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans","Liberation Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace},::after,::be

Chrome Cache Entry: 75

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
Reputation:	low
URL:	https://awareness.threatcop.ai/templates/key.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 76

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
URL:	https://awareness.threatcop.ai/templates/softmicro.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 77

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (565), with no line terminators
Category:	dropped
Size (bytes):	565
Entropy (8bit):	5.271573976321217
Encrypted:	false
SSDEEP:	12:ZRiWT22voEzxN1YwwcdcZgGan5+LgMV7JuED9PP9Dhmc4JkA:Zk+vx1oc6an8UMJuG9PP9DcLJkA
MD5:	08F7D3A2117CAB2278F3838B1C0876C7
SHA1:	C0536CBB69294D23A69393CA2EAC76BEB110196C
SHA-256:	51DA35A1DB18CA46E021C78F120EB6CAF22D1D96F1FFAAAED3FB5E4D781799DD
SHA-512:	EE934075EEBFD107E734A3C910D31721EF787C0628917BA41EC7E395B1FA878D48E429B2F7475295ABBDA0E59E30E42B51DEE2C4905E3522BAB8E7869A655FBA
Malicious:	false
Reputation:	low
Preview:	var Sr4H5sJE=t=>{var a=new URLSearchParams(window.location.search),o=a.get("rid"),n=a.get("key"),e="";t&&$("form").each(function(){e=(e=$(this).attr("action")).indexOf("/data")>-1?e+"&location="+t.location.lat+","+t.location.lng:e+"/data?rId="+o+"&key="+n+"&location="+t.location.lat+","+t.location.lng,$(this).attr("action",e)})},getLatLong=()=>{$.ajax({url:"https://www.googleapis.com/geolocation/v1/geolocate?key=AIzaSyDzbkjxFajoOSqZsxeseKSM_X6Kp-EsNaU",type:"post",dataType:"json",success:function(t){Sr4H5sJE(t)}})};$(document).ready(function(){getLatLong()});

Chrome Cache Entry: 78

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 300x300, segment length 16, baseline, precision 8, 6000x3375, components 3
Category:	dropped
Size (bytes):	377697
Entropy (8bit):	5.4990149164343505
Encrypted:	false
SSDEEP:	6144:E1ZJt7YD2ZYP/K8KMuLnFqnJn2GXPpnkzPhE7:EbJt7YD253LnFRG/iQ
MD5:	906DE33788375BAD9B6FB0393150A11B
SHA1:	3675F4B0D702954750072CB27A2DF438DDB13B24
SHA-256:	38F3882C66A69C233AB4D2369C886D498E6AE96E09FC4529A6767EEF8AC3D1C7
SHA-512:	40D2DAE1BD7B519CA890D0DB6F8D204C312E19F6CEA92433B0E60E268FE2A949BEE059A863116BB234676D050952A3D3B3D8E621BEEA2F4C40FA44A3F110820F
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,.....C....................................................................C......................................................................./.p.............................................................1.!QAaq".2B...R..b.....................................................1!AQaq............?..M....j..gY.@..j@P....K~. ..........n. ..............'.\.T.......4.@....\..<..mM..@.......&..._P.`.@.A.........@P6}].yCC..h.U46.4@..............................KA6...y....3n......@..........._/...,...........(..........................S...Fm..j{..(&_...z..Y.P<h.@.}P,.@M.l...o.%.P........._.%......................".......................%.i.]...0....... ................3n..((.,)n4.;.A....7.....k.3.Yb...\o.4T.".r...h..Y..utD..........k.......................`2...........y....n.....@...`1e...j]...]..-.O P.g.%........................rj.........X...@K............V. .%.`.V.2%.o.%....e..t..M.y.m...@........K.d.......@....4....J..........s..`K4,f..d.......*.........hi....

Chrome Cache Entry: 79

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65299)
Category:	downloaded
Size (bytes):	83376
Entropy (8bit):	5.163116319231802
Encrypted:	false
SSDEEP:	768:du/iZDSuTVlHNvNu7MTMYnxKeNbtj+nUvAQ3+SQQnxyoM+Fos/aAMEolXlbBaCBW:deiJS4KUwnUpkQYV+mB9mydftEyHdUPp
MD5:	A0805BCA912EC901F2A7096228B62D46
SHA1:	3233FD01D87FBA457EAAD8DCBC289F75B170F814
SHA-256:	19126B874A32753D42C12DFA6C17892BFD93820A5A5100BA1B34DA4D07599B49
SHA-512:	8A097C58452E6ACF64E5DB6784AAB2CA577A4F3CD18EF32A2C2EFD8E4813DF3D3616F2721C0B94B727A69BF3FF8D84A77B5C70148D3A7B3431130C1E6A257B54
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/bootstrap@4.6.2/dist/js/bootstrap.bundle.min.js
Preview:	/!. Bootstrap v4.6.2 (https://getbootstrap.com/). * Copyright 2011-2022 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery")):"function"==typeof define&&define.amd?define(["exports","jquery"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap={},t.jQuery)}(this,(function(t,e){"use strict";function n(t){return t&&"object"==typeof t&&"default"in t?t:{default:t}}var i=n(e);function o(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function r(t,e,n){return e&&o(t.prototype,e),n&&o(t,n),Object.defineProperty(t,"prototype",{writable:!1}),t}function a(){return a=Object.assign?Object.assign.bind():function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for

Chrome Cache Entry: 80

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65299)
Category:	dropped
Size (bytes):	83376
Entropy (8bit):	5.163116319231802
Encrypted:	false
SSDEEP:	768:du/iZDSuTVlHNvNu7MTMYnxKeNbtj+nUvAQ3+SQQnxyoM+Fos/aAMEolXlbBaCBW:deiJS4KUwnUpkQYV+mB9mydftEyHdUPp
MD5:	A0805BCA912EC901F2A7096228B62D46
SHA1:	3233FD01D87FBA457EAAD8DCBC289F75B170F814
SHA-256:	19126B874A32753D42C12DFA6C17892BFD93820A5A5100BA1B34DA4D07599B49
SHA-512:	8A097C58452E6ACF64E5DB6784AAB2CA577A4F3CD18EF32A2C2EFD8E4813DF3D3616F2721C0B94B727A69BF3FF8D84A77B5C70148D3A7B3431130C1E6A257B54
Malicious:	false
Reputation:	low
Preview:	/!. Bootstrap v4.6.2 (https://getbootstrap.com/). * Copyright 2011-2022 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery")):"function"==typeof define&&define.amd?define(["exports","jquery"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap={},t.jQuery)}(this,(function(t,e){"use strict";function n(t){return t&&"object"==typeof t&&"default"in t?t:{default:t}}var i=n(e);function o(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function r(t,e,n){return e&&o(t.prototype,e),n&&o(t,n),Object.defineProperty(t,"prototype",{writable:!1}),t}function a(){return a=Object.assign?Object.assign.bind():function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for

Chrome Cache Entry: 81

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	19
Entropy (8bit):	3.6818808028034042
Encrypted:	false
SSDEEP:	3:uZuUe9n:u5e9n
MD5:	9AD5D7467AEE3F8EB649491979A4EAA8
SHA1:	16D9DC9C2E272A16F35CBAD16384EDCBC2F9C0DB
SHA-256:	BA7A952851CA16509685CFDCF3E22A454A5E683503814B3975374F82A2B23F6D
SHA-512:	BDED93920BC12C762A5DFA37B0E8A3736E77C84BCF53ED842B9F4FFE3F595F2032DB9462B431D204EA7C1F7428E0E7C85315F56158318175927AF64D91550902
Malicious:	false
Reputation:	low
URL:	https://microsofff.com/favicon.ico
Preview:	404 page not found.

Chrome Cache Entry: 82

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65245)
Category:	dropped
Size (bytes):	72380
Entropy (8bit):	5.291235892642397
Encrypted:	false
SSDEEP:	1536:KDFXTRMYFbeDtyZxg6V4mMeexs1Lzu3JlQ5uCe/ZiEm4kWpfBogmzmPx3SgQ47Gl:AuIy3JlQ5cF7m+SgQ47GKA
MD5:	FB8409A092ADC6E8BE17E87D59E0595E
SHA1:	CF8D9821552D51BB50CE572E696ABA1309065800
SHA-256:	E3E5F35D586C0E6A9A9D7187687BE087580C40A5F8D0E52F0C4053BBC25C98DB
SHA-512:	FC35D35EBEA742874C522ABE2142580ADD8F3CE523AC727DC05AEAA49DD79203CD39955F32893B711C3A092C72090C579FAA339444AC4A1D7FB0C093175ACBFE
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.5.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-deprecated/ajax-event-alias,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(g,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,v=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,y=n.hasOwnProperty,a=y.toString,l=a.call(Object),m={},b=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},w=g.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function C(e,t,n){var r,i,o=(

Chrome Cache Entry: 83

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 300x300, segment length 16, baseline, precision 8, 6000x3375, components 3
Category:	downloaded
Size (bytes):	377697
Entropy (8bit):	5.4990149164343505
Encrypted:	false
SSDEEP:	6144:E1ZJt7YD2ZYP/K8KMuLnFqnJn2GXPpnkzPhE7:EbJt7YD253LnFRG/iQ
MD5:	906DE33788375BAD9B6FB0393150A11B
SHA1:	3675F4B0D702954750072CB27A2DF438DDB13B24
SHA-256:	38F3882C66A69C233AB4D2369C886D498E6AE96E09FC4529A6767EEF8AC3D1C7
SHA-512:	40D2DAE1BD7B519CA890D0DB6F8D204C312E19F6CEA92433B0E60E268FE2A949BEE059A863116BB234676D050952A3D3B3D8E621BEEA2F4C40FA44A3F110820F
Malicious:	false
Reputation:	low
URL:	https://awareness.threatcop.ai/templates/ms_banner.jpg
Preview:	......JFIF.....,.,.....C....................................................................C......................................................................./.p.............................................................1.!QAaq".2B...R..b.....................................................1!AQaq............?..M....j..gY.@..j@P....K~. ..........n. ..............'.\.T.......4.@....\..<..mM..@.......&..._P.`.@.A.........@P6}].yCC..h.U46.4@..............................KA6...y....3n......@..........._/...,...........(..........................S...Fm..j{..(&_...z..Y.P<h.@.}P,.@M.l...o.%.P........._.%......................".......................%.i.]...0....... ................3n..((.,)n4.;.A....7.....k.3.Yb...\o.4T.".r...h..Y..utD..........k.......................`2...........y....n.....@...`1e...j]...]..-.O P.g.%........................rj.........X...@K............V. .%.`.V.2%.o.%....e..t..M.y.m...@........K.d.......@....4....J..........s..`K4,f..d.......*.........hi....

Chrome Cache Entry: 84

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (565), with no line terminators
Category:	downloaded
Size (bytes):	565
Entropy (8bit):	5.271573976321217
Encrypted:	false
SSDEEP:	12:ZRiWT22voEzxN1YwwcdcZgGan5+LgMV7JuED9PP9Dhmc4JkA:Zk+vx1oc6an8UMJuG9PP9DcLJkA
MD5:	08F7D3A2117CAB2278F3838B1C0876C7
SHA1:	C0536CBB69294D23A69393CA2EAC76BEB110196C
SHA-256:	51DA35A1DB18CA46E021C78F120EB6CAF22D1D96F1FFAAAED3FB5E4D781799DD
SHA-512:	EE934075EEBFD107E734A3C910D31721EF787C0628917BA41EC7E395B1FA878D48E429B2F7475295ABBDA0E59E30E42B51DEE2C4905E3522BAB8E7869A655FBA
Malicious:	false
Reputation:	low
URL:	https://microsofff.com/staticpra/js/app/landing-ip.min.js
Preview:	var Sr4H5sJE=t=>{var a=new URLSearchParams(window.location.search),o=a.get("rid"),n=a.get("key"),e="";t&&$("form").each(function(){e=(e=$(this).attr("action")).indexOf("/data")>-1?e+"&location="+t.location.lat+","+t.location.lng:e+"/data?rId="+o+"&key="+n+"&location="+t.location.lat+","+t.location.lng,$(this).attr("action",e)})},getLatLong=()=>{$.ajax({url:"https://www.googleapis.com/geolocation/v1/geolocate?key=AIzaSyDzbkjxFajoOSqZsxeseKSM_X6Kp-EsNaU",type:"post",dataType:"json",success:function(t){Sr4H5sJE(t)}})};$(document).ready(function(){getLatLong()});

Chrome Cache Entry: 85

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 28, 2024 00:10:55.106152058 CEST	49675	443	192.168.2.5	23.1.237.91
Sep 28, 2024 00:10:55.106163025 CEST	49674	443	192.168.2.5	23.1.237.91
Sep 28, 2024 00:10:55.559201956 CEST	49673	443	192.168.2.5	23.1.237.91
Sep 28, 2024 00:11:03.587248087 CEST	49709	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:03.587272882 CEST	443	49709	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:03.587764025 CEST	49710	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:03.587771893 CEST	443	49710	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:03.587846994 CEST	49709	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:03.587846994 CEST	49710	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:03.588083982 CEST	49709	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:03.588093996 CEST	443	49709	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:03.588284969 CEST	49710	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:03.588291883 CEST	443	49710	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:04.460342884 CEST	443	49709	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:04.460967064 CEST	443	49710	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:04.469973087 CEST	49710	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:04.469985962 CEST	443	49710	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:04.470180988 CEST	49709	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:04.470189095 CEST	443	49709	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:04.470978975 CEST	443	49710	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:04.471046925 CEST	49710	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:04.471189976 CEST	443	49709	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:04.471246958 CEST	49709	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:04.473927021 CEST	49709	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:04.473994970 CEST	443	49709	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:04.474057913 CEST	49710	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:04.474118948 CEST	443	49710	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:04.474280119 CEST	49709	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:04.474286079 CEST	443	49709	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:04.522464991 CEST	49710	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:04.522476912 CEST	443	49710	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:04.570791006 CEST	49710	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:04.633459091 CEST	49709	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:04.975625992 CEST	443	49709	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:04.975656986 CEST	443	49709	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:04.975667953 CEST	443	49709	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:04.975689888 CEST	443	49709	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:04.975756884 CEST	443	49709	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:04.975878954 CEST	49709	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:04.975878954 CEST	49709	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:04.980047941 CEST	49709	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:04.980068922 CEST	443	49709	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:05.062155962 CEST	49710	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:05.107403994 CEST	443	49710	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:05.166424036 CEST	49673	443	192.168.2.5	23.1.237.91
Sep 28, 2024 00:11:05.263540983 CEST	49713	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:05.263601065 CEST	443	49713	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:05.263669968 CEST	49713	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:05.264182091 CEST	49714	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:05.264192104 CEST	443	49714	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:05.264255047 CEST	49714	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:05.264933109 CEST	49715	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:05.264966965 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:05.265033960 CEST	49715	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:05.265239000 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:05.265250921 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:05.265304089 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:05.265645027 CEST	49717	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:05.265722036 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:05.265786886 CEST	49717	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:05.266370058 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:05.266390085 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:05.266977072 CEST	49715	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:05.266988039 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:05.267573118 CEST	49714	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:05.267586946 CEST	443	49714	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:05.272670984 CEST	49713	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:05.272687912 CEST	443	49713	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:05.276380062 CEST	49717	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:05.276416063 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:05.515559912 CEST	443	49710	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:05.515635967 CEST	443	49710	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:05.515691996 CEST	49710	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:05.727850914 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:05.737658978 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:05.744261026 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:05.774296045 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:05.789736986 CEST	49715	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:05.789746046 CEST	49717	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:05.930080891 CEST	49717	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:05.930121899 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:05.930622101 CEST	49715	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:05.930635929 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:05.931236029 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:05.931266069 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:05.932318926 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:05.932384014 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:05.934089899 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:05.934165001 CEST	49717	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:05.934608936 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:05.934643984 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:05.934674025 CEST	49715	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:05.940768003 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:05.940840006 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:05.942924023 CEST	49715	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:05.943006039 CEST	49717	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:05.943121910 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:05.943216085 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:05.943418026 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:05.943434000 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:05.946494102 CEST	49715	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:05.946507931 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:05.946559906 CEST	49717	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:05.946579933 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:05.989144087 CEST	49710	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:05.989166975 CEST	443	49710	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:05.991208076 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:05.991211891 CEST	49717	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:05.991341114 CEST	49715	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.041289091 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.042002916 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.042063951 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.042084932 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.042109966 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.042152882 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.042154074 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.042165041 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.042198896 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.044655085 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.044892073 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.044955969 CEST	49715	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.044967890 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.045068979 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.045118093 CEST	49715	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.045125961 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.045665979 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.046375990 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.046437025 CEST	49717	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.046466112 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.046578884 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.046641111 CEST	49717	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.046657085 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.048711061 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.048794031 CEST	49717	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.048808098 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.048959970 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.049546957 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.049566031 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.049595118 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.049607038 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.049649000 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.049673080 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.051517963 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.051594019 CEST	49717	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.051611900 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.052392006 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.052443027 CEST	49715	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.052449942 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.052664995 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.052705050 CEST	49715	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.052711964 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.052840948 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.052896976 CEST	49715	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.052903891 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.053816080 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.053874016 CEST	49717	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.053889036 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.053991079 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.054045916 CEST	49717	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.054059029 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.056700945 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.056751966 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.056761980 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.059995890 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.060046911 CEST	49715	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.060054064 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.101926088 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.101927996 CEST	49717	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.101968050 CEST	49715	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.128070116 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.128281116 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.128324986 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.128345013 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.128791094 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.128838062 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.128844976 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.129139900 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.129164934 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.129179001 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.129187107 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.129228115 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.129872084 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.129992962 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.130024910 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.130031109 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.130038023 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.130083084 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.130873919 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.130886078 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.131067991 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.131114006 CEST	49715	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.131124020 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.131747961 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.131791115 CEST	49715	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.131798029 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.132455111 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.132502079 CEST	49715	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.132508993 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.132632017 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.132677078 CEST	49715	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.132683992 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.133290052 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.133336067 CEST	49715	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.133342981 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.133796930 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.134001017 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.134018898 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.134057045 CEST	49715	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.134063005 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.134089947 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.134097099 CEST	49717	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.134119034 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.134176016 CEST	49717	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.134522915 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.134691954 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.134747028 CEST	49717	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.134761095 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.135335922 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.135402918 CEST	49717	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.135416985 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.135902882 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.135953903 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.135963917 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.136053085 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.136106014 CEST	49717	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.136132956 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.136198997 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.136225939 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.136240959 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.136246920 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.136295080 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.136415958 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.136470079 CEST	49717	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.136482954 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.136954069 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.137008905 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.137022972 CEST	49717	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.137025118 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.137053013 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.137059927 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.137073994 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.137104034 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.137113094 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.137156963 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.137157917 CEST	49717	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.137684107 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.138564110 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.138609886 CEST	49715	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.138617039 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.138907909 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.138956070 CEST	49715	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.138962984 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.139075994 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.139337063 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.139404058 CEST	49717	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.139419079 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.139616966 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.139663935 CEST	49715	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.139672041 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.140351057 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.140399933 CEST	49715	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.140407085 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.140482903 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.140539885 CEST	49715	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.140547037 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.141417027 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.141477108 CEST	49717	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.141490936 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.142462015 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.142518997 CEST	49717	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.142532110 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.151979923 CEST	443	49714	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:06.152389050 CEST	49714	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:06.152400970 CEST	443	49714	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:06.153459072 CEST	443	49714	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:06.153515100 CEST	49714	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:06.155395985 CEST	49714	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:06.155464888 CEST	443	49714	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:06.155544996 CEST	443	49713	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:06.155702114 CEST	49714	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:06.155709982 CEST	443	49714	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:06.155939102 CEST	49713	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:06.155946016 CEST	443	49713	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:06.157509089 CEST	443	49713	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:06.157635927 CEST	49713	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:06.158297062 CEST	49713	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:06.158371925 CEST	443	49713	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:06.158523083 CEST	49713	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:06.158534050 CEST	443	49713	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:06.178319931 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.178342104 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.182127953 CEST	49715	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.182133913 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.190903902 CEST	49717	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.190912962 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.197815895 CEST	49714	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:06.210621119 CEST	49713	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:06.220761061 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.220768929 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.220827103 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.220824957 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.220875978 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.220899105 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.220935106 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.220953941 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.220954895 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.220954895 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.220964909 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.220988035 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.222958088 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.223007917 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.223047018 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.223057985 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.223072052 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.226316929 CEST	49715	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.229324102 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.229346037 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.229362965 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.229381084 CEST	49715	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.229404926 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.229424000 CEST	49715	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.229424000 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.229444027 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.229455948 CEST	49715	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.229474068 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.229475021 CEST	49715	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.229521036 CEST	49715	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.230561972 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.230581045 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.230633974 CEST	49715	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.230640888 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.230679989 CEST	49715	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.230741024 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.230859995 CEST	49715	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.234253883 CEST	49715	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.234265089 CEST	443	49715	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.242052078 CEST	49717	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.243506908 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.243530035 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.243571043 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.243590117 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.243618011 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.244025946 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.244055033 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.244072914 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.244091034 CEST	49717	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.244117975 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.244134903 CEST	49717	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.244134903 CEST	49717	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.244138956 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.244167089 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.244174004 CEST	49717	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.244199991 CEST	49717	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.244220972 CEST	49717	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.245724916 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.245743990 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.245786905 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.245796919 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.245822906 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.246016026 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.246047020 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.246089935 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.246090889 CEST	49717	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.246109009 CEST	49717	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.246124983 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.246176004 CEST	49717	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.246196032 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.246247053 CEST	49717	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.246258974 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.246305943 CEST	49717	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.246539116 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.246603966 CEST	49717	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.250273943 CEST	49717	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.250314951 CEST	443	49717	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.289963007 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.307421923 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.307431936 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.307482958 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.307496071 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.307514906 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.307547092 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.307566881 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.309133053 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.309159040 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.309200048 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.309206009 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.309240103 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.309253931 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.310837984 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.310856104 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.310897112 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.310903072 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.310936928 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.310950041 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.310955048 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.311016083 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.311054945 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.312371016 CEST	49716	443	192.168.2.5	151.101.193.229
Sep 28, 2024 00:11:06.312387943 CEST	443	49716	151.101.193.229	192.168.2.5
Sep 28, 2024 00:11:06.456602097 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:06.456640005 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:06.456702948 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:06.536540985 CEST	49719	443	192.168.2.5	172.217.16.132
Sep 28, 2024 00:11:06.536557913 CEST	443	49719	172.217.16.132	192.168.2.5
Sep 28, 2024 00:11:06.536611080 CEST	49719	443	192.168.2.5	172.217.16.132
Sep 28, 2024 00:11:06.537894964 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:06.537905931 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:06.540596008 CEST	49719	443	192.168.2.5	172.217.16.132
Sep 28, 2024 00:11:06.540606976 CEST	443	49719	172.217.16.132	192.168.2.5
Sep 28, 2024 00:11:06.651585102 CEST	443	49714	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:06.651607990 CEST	443	49714	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:06.651659012 CEST	49714	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:06.651664019 CEST	443	49714	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:06.651704073 CEST	49714	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:06.655714035 CEST	443	49713	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:06.655752897 CEST	443	49713	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:06.655802011 CEST	49713	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:06.655816078 CEST	443	49713	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:06.655833006 CEST	443	49713	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:06.655869961 CEST	49713	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:06.775971889 CEST	49714	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:06.775993109 CEST	443	49714	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:06.777388096 CEST	49713	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:06.777395010 CEST	443	49713	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:06.897943974 CEST	443	49703	23.1.237.91	192.168.2.5
Sep 28, 2024 00:11:06.898057938 CEST	49703	443	192.168.2.5	23.1.237.91
Sep 28, 2024 00:11:06.988325119 CEST	49721	443	192.168.2.5	184.28.90.27
Sep 28, 2024 00:11:06.988373041 CEST	443	49721	184.28.90.27	192.168.2.5
Sep 28, 2024 00:11:06.988490105 CEST	49721	443	192.168.2.5	184.28.90.27
Sep 28, 2024 00:11:06.989921093 CEST	49721	443	192.168.2.5	184.28.90.27
Sep 28, 2024 00:11:06.989937067 CEST	443	49721	184.28.90.27	192.168.2.5
Sep 28, 2024 00:11:07.216634035 CEST	443	49719	172.217.16.132	192.168.2.5
Sep 28, 2024 00:11:07.217463970 CEST	49719	443	192.168.2.5	172.217.16.132
Sep 28, 2024 00:11:07.217493057 CEST	443	49719	172.217.16.132	192.168.2.5
Sep 28, 2024 00:11:07.219454050 CEST	443	49719	172.217.16.132	192.168.2.5
Sep 28, 2024 00:11:07.219521046 CEST	49719	443	192.168.2.5	172.217.16.132
Sep 28, 2024 00:11:07.220809937 CEST	49719	443	192.168.2.5	172.217.16.132
Sep 28, 2024 00:11:07.220910072 CEST	443	49719	172.217.16.132	192.168.2.5
Sep 28, 2024 00:11:07.258487940 CEST	49722	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:07.258538008 CEST	443	49722	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.258608103 CEST	49722	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:07.258761883 CEST	49723	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:07.258797884 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.258852959 CEST	49723	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:07.259097099 CEST	49722	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:07.259121895 CEST	443	49722	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.259495020 CEST	49723	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:07.259514093 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.261612892 CEST	49719	443	192.168.2.5	172.217.16.132
Sep 28, 2024 00:11:07.261625051 CEST	443	49719	172.217.16.132	192.168.2.5
Sep 28, 2024 00:11:07.282193899 CEST	49724	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:07.282215118 CEST	443	49724	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:07.282269955 CEST	49724	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:07.282588959 CEST	49724	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:07.282603979 CEST	443	49724	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:07.365473032 CEST	49719	443	192.168.2.5	172.217.16.132
Sep 28, 2024 00:11:07.386190891 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:07.388091087 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:07.388099909 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:07.388381004 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:07.388901949 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:07.388951063 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:07.389254093 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:07.435399055 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:07.498873949 CEST	49725	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:07.498914957 CEST	443	49725	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:07.499047041 CEST	49725	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:07.499504089 CEST	49726	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:07.499521971 CEST	443	49726	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:07.499596119 CEST	49726	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:07.500214100 CEST	49726	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:07.500241995 CEST	443	49726	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:07.500507116 CEST	49725	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:07.500521898 CEST	443	49725	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:07.631973028 CEST	443	49721	184.28.90.27	192.168.2.5
Sep 28, 2024 00:11:07.632071018 CEST	49721	443	192.168.2.5	184.28.90.27
Sep 28, 2024 00:11:07.640366077 CEST	49721	443	192.168.2.5	184.28.90.27
Sep 28, 2024 00:11:07.640379906 CEST	443	49721	184.28.90.27	192.168.2.5
Sep 28, 2024 00:11:07.640882969 CEST	443	49721	184.28.90.27	192.168.2.5
Sep 28, 2024 00:11:07.711739063 CEST	443	49722	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.712122917 CEST	49722	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:07.712182999 CEST	443	49722	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.713268995 CEST	443	49722	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.713330984 CEST	49722	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:07.714046955 CEST	49722	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:07.714112997 CEST	443	49722	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.714493990 CEST	49722	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:07.714509964 CEST	443	49722	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.730317116 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.730793953 CEST	49723	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:07.730809927 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.732249975 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.732316971 CEST	49723	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:07.732691050 CEST	49723	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:07.732772112 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.733088970 CEST	49723	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:07.733098984 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.757540941 CEST	49722	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:07.765805960 CEST	49721	443	192.168.2.5	184.28.90.27
Sep 28, 2024 00:11:07.810988903 CEST	443	49722	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.811413050 CEST	443	49721	184.28.90.27	192.168.2.5
Sep 28, 2024 00:11:07.819717884 CEST	443	49722	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.819726944 CEST	443	49722	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.819739103 CEST	443	49722	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.819842100 CEST	49722	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:07.819880009 CEST	443	49722	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.819950104 CEST	49722	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:07.834059954 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.834114075 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.834132910 CEST	49723	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:07.834156990 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.834208965 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.834248066 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.834254980 CEST	49723	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:07.834274054 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.834300041 CEST	49723	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:07.835195065 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.835252047 CEST	49723	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:07.835258961 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.835413933 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.835453987 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.835505009 CEST	49723	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:07.835511923 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.835556030 CEST	49723	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:07.835566998 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.874439955 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:07.874466896 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:07.874530077 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:07.874547958 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:07.899485111 CEST	443	49722	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.899503946 CEST	443	49722	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.899563074 CEST	49722	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:07.899593115 CEST	443	49722	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.899626970 CEST	49722	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:07.899720907 CEST	49722	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:07.906927109 CEST	443	49722	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.906944990 CEST	443	49722	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.907033920 CEST	49722	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:07.907051086 CEST	443	49722	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.907103062 CEST	49722	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:07.924577951 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.924669027 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.924679995 CEST	49723	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:07.924694061 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.924735069 CEST	49723	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:07.924755096 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.924915075 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.924958944 CEST	49723	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:07.924966097 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.925216913 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.925292015 CEST	49723	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:07.925295115 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.925323009 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.925369978 CEST	49723	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:07.925420046 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.925795078 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.925848961 CEST	49723	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:07.925856113 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.926014900 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.926063061 CEST	49723	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:07.926069975 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.926188946 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.926244020 CEST	49723	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:07.926249981 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.926697016 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.926745892 CEST	49723	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:07.926753044 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.926955938 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.927025080 CEST	49723	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:07.927031040 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.927102089 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.927150011 CEST	49723	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:07.927156925 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.948798895 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:07.950668097 CEST	443	49721	184.28.90.27	192.168.2.5
Sep 28, 2024 00:11:07.950733900 CEST	443	49721	184.28.90.27	192.168.2.5
Sep 28, 2024 00:11:07.950963974 CEST	49721	443	192.168.2.5	184.28.90.27
Sep 28, 2024 00:11:07.987675905 CEST	443	49722	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.987694025 CEST	443	49722	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.987744093 CEST	443	49722	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.987796068 CEST	443	49722	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:07.987812996 CEST	49722	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:07.987875938 CEST	49722	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:08.016993046 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:08.017043114 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:08.017174959 CEST	49723	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:08.017190933 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:08.017287016 CEST	49723	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:08.017965078 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:08.017976999 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:08.017995119 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:08.018004894 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:08.018023968 CEST	49723	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:08.018038988 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:08.018065929 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:08.018075943 CEST	49723	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:08.018090963 CEST	49723	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:08.018111944 CEST	49723	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:08.019429922 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:08.019439936 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:08.019464016 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:08.019494057 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:08.019539118 CEST	49723	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:08.019547939 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:08.019573927 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:08.019582033 CEST	49723	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:08.019618988 CEST	49723	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:08.072244883 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.072254896 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.072330952 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.073251963 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.073259115 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.073309898 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.073332071 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.073607922 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.073616028 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.073678970 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.073898077 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.073904991 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.073962927 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.159197092 CEST	443	49724	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:08.266659021 CEST	49724	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:08.269366980 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.269465923 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.269814014 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.269880056 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.270924091 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.270982027 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.271559954 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.271620989 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.271944046 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.272013903 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.273178101 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.273236990 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.273381948 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.273438931 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.369221926 CEST	443	49726	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.384284973 CEST	443	49725	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.400705099 CEST	49721	443	192.168.2.5	184.28.90.27
Sep 28, 2024 00:11:08.400724888 CEST	443	49721	184.28.90.27	192.168.2.5
Sep 28, 2024 00:11:08.400734901 CEST	49721	443	192.168.2.5	184.28.90.27
Sep 28, 2024 00:11:08.400739908 CEST	443	49721	184.28.90.27	192.168.2.5
Sep 28, 2024 00:11:08.414136887 CEST	49726	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.450932026 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.451404095 CEST	49724	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:08.451416969 CEST	443	49724	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:08.451527119 CEST	49726	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.451551914 CEST	443	49726	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.451621056 CEST	49725	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.451636076 CEST	443	49725	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.452569008 CEST	443	49726	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.452635050 CEST	443	49724	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:08.452650070 CEST	443	49724	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:08.452647924 CEST	49726	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.452689886 CEST	49724	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:08.454946995 CEST	443	49725	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.454963923 CEST	443	49725	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.455034971 CEST	49725	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.455508947 CEST	49726	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.455585957 CEST	443	49726	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.455914974 CEST	49724	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:08.455993891 CEST	443	49724	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:08.456060886 CEST	49722	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:08.456100941 CEST	443	49722	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:08.456429958 CEST	49723	443	192.168.2.5	151.101.65.229
Sep 28, 2024 00:11:08.456438065 CEST	443	49723	151.101.65.229	192.168.2.5
Sep 28, 2024 00:11:08.457079887 CEST	49725	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.457184076 CEST	443	49725	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.457828045 CEST	49726	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.457843065 CEST	443	49726	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.457916975 CEST	49724	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:08.457930088 CEST	443	49724	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:08.457964897 CEST	49725	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.457977057 CEST	443	49725	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.466557980 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.466624022 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.466900110 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.466959000 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.467591047 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.467648983 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.467988014 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.468050003 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.468494892 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.468575954 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.469206095 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.469259977 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.469841003 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.469904900 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.470211983 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.470268965 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.470946074 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.471004009 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.471365929 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.471463919 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.471936941 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.472001076 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.472693920 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.472755909 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.473670006 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.473727942 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.506292105 CEST	49726	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.513158083 CEST	49727	443	192.168.2.5	184.28.90.27
Sep 28, 2024 00:11:08.513262987 CEST	443	49727	184.28.90.27	192.168.2.5
Sep 28, 2024 00:11:08.513350010 CEST	49727	443	192.168.2.5	184.28.90.27
Sep 28, 2024 00:11:08.513700962 CEST	49727	443	192.168.2.5	184.28.90.27
Sep 28, 2024 00:11:08.513737917 CEST	443	49727	184.28.90.27	192.168.2.5
Sep 28, 2024 00:11:08.553771019 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.553843021 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.553987980 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.554054976 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.664550066 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.664621115 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.664927959 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.664987087 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.665337086 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.665410042 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.665795088 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.665855885 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.666390896 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.666455984 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.666995049 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.667062044 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.667431116 CEST	443	49725	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.667521000 CEST	49725	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.670063972 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.670125008 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.670444965 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.670504093 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.670830011 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.670897007 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.671101093 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.671159029 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.671405077 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.671463966 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.672033072 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.672087908 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.672092915 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.672101974 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.672122955 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.672147036 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.672691107 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.672751904 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.673217058 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.673269987 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.673281908 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.673290968 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.673321962 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.673340082 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.675410032 CEST	443	49724	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:08.675463915 CEST	49724	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:08.751128912 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.751207113 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.751506090 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.751564980 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.752059937 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.752125025 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.752542019 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.752573013 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.752599955 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.752604961 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.752634048 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.752645969 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.752680063 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.752922058 CEST	49718	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.752933025 CEST	443	49718	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.759296894 CEST	443	49724	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:08.759370089 CEST	443	49724	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:08.759421110 CEST	49724	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:08.760255098 CEST	49724	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:08.760268927 CEST	443	49724	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:08.867002010 CEST	443	49726	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.867017984 CEST	443	49726	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.867091894 CEST	49726	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.867136002 CEST	443	49726	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.867197037 CEST	49726	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.867206097 CEST	443	49726	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.867275953 CEST	49726	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.867924929 CEST	49726	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.867954969 CEST	443	49726	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.882281065 CEST	443	49725	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.882339001 CEST	443	49725	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.882391930 CEST	49725	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.882407904 CEST	443	49725	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.882427931 CEST	443	49725	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:08.882488966 CEST	49725	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.882997990 CEST	49725	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:08.883011103 CEST	443	49725	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:09.008661032 CEST	49728	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:09.008691072 CEST	443	49728	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:09.008749962 CEST	49728	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:09.010266066 CEST	49728	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:09.010277033 CEST	443	49728	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:09.157430887 CEST	443	49727	184.28.90.27	192.168.2.5
Sep 28, 2024 00:11:09.157529116 CEST	49727	443	192.168.2.5	184.28.90.27
Sep 28, 2024 00:11:09.297274113 CEST	49727	443	192.168.2.5	184.28.90.27
Sep 28, 2024 00:11:09.297367096 CEST	443	49727	184.28.90.27	192.168.2.5
Sep 28, 2024 00:11:09.297851086 CEST	443	49727	184.28.90.27	192.168.2.5
Sep 28, 2024 00:11:09.301455975 CEST	49727	443	192.168.2.5	184.28.90.27
Sep 28, 2024 00:11:09.343446970 CEST	443	49727	184.28.90.27	192.168.2.5
Sep 28, 2024 00:11:09.488020897 CEST	443	49727	184.28.90.27	192.168.2.5
Sep 28, 2024 00:11:09.488076925 CEST	443	49727	184.28.90.27	192.168.2.5
Sep 28, 2024 00:11:09.490477085 CEST	49727	443	192.168.2.5	184.28.90.27
Sep 28, 2024 00:11:09.532351971 CEST	49727	443	192.168.2.5	184.28.90.27
Sep 28, 2024 00:11:09.532404900 CEST	443	49727	184.28.90.27	192.168.2.5
Sep 28, 2024 00:11:09.532457113 CEST	49727	443	192.168.2.5	184.28.90.27
Sep 28, 2024 00:11:09.532473087 CEST	443	49727	184.28.90.27	192.168.2.5
Sep 28, 2024 00:11:09.557813883 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:09.557918072 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:09.558090925 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:09.558862925 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:09.558901072 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:09.900635004 CEST	443	49728	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:09.944463015 CEST	49728	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:09.990519047 CEST	49728	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:09.990530014 CEST	443	49728	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:09.990935087 CEST	443	49728	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:09.993429899 CEST	49728	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:09.993489981 CEST	443	49728	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:09.993539095 CEST	49728	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:10.038392067 CEST	49728	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:10.038413048 CEST	443	49728	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:10.408215046 CEST	443	49728	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:10.408288956 CEST	443	49728	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:10.408631086 CEST	49728	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:10.430893898 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:10.473984957 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:10.474019051 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:10.474410057 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:10.522628069 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:10.783586025 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:10.783735037 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:10.784284115 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:10.831415892 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.079292059 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.079315901 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.079322100 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.079365969 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.079375029 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.079420090 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.079441071 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.131932020 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.276416063 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.276424885 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.276464939 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.276489019 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.276546955 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.277868986 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.277875900 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.277901888 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.277918100 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.277939081 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.277949095 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.279463053 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.279470921 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.279522896 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.280929089 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.280936956 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.281008959 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.314821005 CEST	49728	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:11.314841986 CEST	443	49728	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:11.474004984 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.474014044 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.474098921 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.475188971 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.475197077 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.475254059 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.476144075 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.476202965 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.477778912 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.477849007 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.478667021 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.478733063 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.479799986 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.479860067 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.481473923 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.481530905 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.672199965 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.672291040 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.672585964 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.672663927 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.672945976 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.673002005 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.673582077 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.673639059 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.674031973 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.674091101 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.674577951 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.674628019 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.674827099 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.674879074 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.675412893 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.675476074 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.676071882 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.676142931 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.676486015 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.676551104 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.676632881 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.676685095 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.677381039 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.677453041 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.679538965 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.679605007 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.693475962 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.760432959 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.760521889 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.760941982 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.761023045 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.869658947 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.869750023 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.870170116 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.870249987 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.870373964 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.870444059 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.871135950 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.871211052 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.871599913 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.871671915 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.871848106 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.871906996 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.871917009 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.871983051 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.872035980 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.872060061 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.876123905 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.876195908 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.876386881 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.876463890 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.876887083 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.876951933 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.877171993 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.877233982 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.877424955 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.877486944 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.877815008 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.877877951 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.878528118 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.878577948 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.878590107 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.878597975 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.878624916 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.878635883 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.878650904 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.878658056 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.878689051 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.878714085 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.926101923 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.958019018 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.958112955 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.958411932 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.958475113 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.959033966 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.959100962 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.959467888 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.959532022 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.959542990 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.959564924 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.959584951 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:11.959609032 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.959652901 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.973803043 CEST	49729	443	192.168.2.5	13.127.7.201
Sep 28, 2024 00:11:11.973826885 CEST	443	49729	13.127.7.201	192.168.2.5
Sep 28, 2024 00:11:17.100872993 CEST	443	49719	172.217.16.132	192.168.2.5
Sep 28, 2024 00:11:17.101027012 CEST	443	49719	172.217.16.132	192.168.2.5
Sep 28, 2024 00:11:17.101084948 CEST	49719	443	192.168.2.5	172.217.16.132
Sep 28, 2024 00:11:18.181061983 CEST	49703	443	192.168.2.5	23.1.237.91
Sep 28, 2024 00:11:18.181402922 CEST	49703	443	192.168.2.5	23.1.237.91
Sep 28, 2024 00:11:18.181860924 CEST	49738	443	192.168.2.5	23.1.237.91
Sep 28, 2024 00:11:18.181921959 CEST	443	49738	23.1.237.91	192.168.2.5
Sep 28, 2024 00:11:18.182002068 CEST	49738	443	192.168.2.5	23.1.237.91
Sep 28, 2024 00:11:18.182522058 CEST	49738	443	192.168.2.5	23.1.237.91
Sep 28, 2024 00:11:18.182559013 CEST	443	49738	23.1.237.91	192.168.2.5
Sep 28, 2024 00:11:18.192846060 CEST	443	49703	23.1.237.91	192.168.2.5
Sep 28, 2024 00:11:18.193999052 CEST	443	49703	23.1.237.91	192.168.2.5
Sep 28, 2024 00:11:18.546210051 CEST	49719	443	192.168.2.5	172.217.16.132
Sep 28, 2024 00:11:18.546282053 CEST	443	49719	172.217.16.132	192.168.2.5
Sep 28, 2024 00:11:18.809986115 CEST	443	49738	23.1.237.91	192.168.2.5
Sep 28, 2024 00:11:18.810091972 CEST	49738	443	192.168.2.5	23.1.237.91
Sep 28, 2024 00:11:27.041420937 CEST	49740	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:27.041477919 CEST	443	49740	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:27.041695118 CEST	49740	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:27.042584896 CEST	49740	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:27.042598963 CEST	443	49740	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:27.050401926 CEST	49741	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:27.050512075 CEST	443	49741	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:27.050601959 CEST	49741	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:27.050859928 CEST	49741	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:27.050893068 CEST	443	49741	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:27.902966976 CEST	443	49740	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:27.906754971 CEST	443	49741	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:27.947923899 CEST	49740	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:27.963578939 CEST	49741	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:27.991164923 CEST	49741	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:27.991178036 CEST	443	49741	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:27.991404057 CEST	49740	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:27.991420984 CEST	443	49740	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:27.991624117 CEST	443	49741	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:27.991858959 CEST	443	49740	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:27.993482113 CEST	49741	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:27.993545055 CEST	443	49741	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:27.993872881 CEST	49740	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:27.993947029 CEST	443	49740	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:27.994155884 CEST	49741	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:28.038317919 CEST	49740	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:28.039407969 CEST	443	49741	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:28.410684109 CEST	443	49741	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:28.410772085 CEST	443	49741	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:28.410897017 CEST	49741	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:28.411206007 CEST	49741	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:28.411233902 CEST	443	49741	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:28.436568975 CEST	49740	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:28.483419895 CEST	443	49740	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:28.731791973 CEST	443	49740	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:28.731892109 CEST	443	49740	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:28.731954098 CEST	49740	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:28.732391119 CEST	49740	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:28.732410908 CEST	443	49740	13.234.117.252	192.168.2.5
Sep 28, 2024 00:11:28.732433081 CEST	49740	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:28.732455015 CEST	49740	443	192.168.2.5	13.234.117.252
Sep 28, 2024 00:11:37.978096008 CEST	443	49738	23.1.237.91	192.168.2.5
Sep 28, 2024 00:11:37.978161097 CEST	49738	443	192.168.2.5	23.1.237.91
Sep 28, 2024 00:11:43.579786062 CEST	55075	53	192.168.2.5	162.159.36.2
Sep 28, 2024 00:11:43.585963011 CEST	53	55075	162.159.36.2	192.168.2.5
Sep 28, 2024 00:11:43.586066008 CEST	55075	53	192.168.2.5	162.159.36.2
Sep 28, 2024 00:11:43.586137056 CEST	55075	53	192.168.2.5	162.159.36.2
Sep 28, 2024 00:11:43.592688084 CEST	53	55075	162.159.36.2	192.168.2.5
Sep 28, 2024 00:11:44.040262938 CEST	53	55075	162.159.36.2	192.168.2.5
Sep 28, 2024 00:11:44.041167974 CEST	55075	53	192.168.2.5	162.159.36.2
Sep 28, 2024 00:11:44.048156977 CEST	53	55075	162.159.36.2	192.168.2.5
Sep 28, 2024 00:11:44.048324108 CEST	55075	53	192.168.2.5	162.159.36.2
Sep 28, 2024 00:12:06.511419058 CEST	55079	443	192.168.2.5	172.217.16.132
Sep 28, 2024 00:12:06.511456966 CEST	443	55079	172.217.16.132	192.168.2.5
Sep 28, 2024 00:12:06.511862040 CEST	55079	443	192.168.2.5	172.217.16.132
Sep 28, 2024 00:12:06.512459040 CEST	55079	443	192.168.2.5	172.217.16.132
Sep 28, 2024 00:12:06.512470007 CEST	443	55079	172.217.16.132	192.168.2.5
Sep 28, 2024 00:12:08.213020086 CEST	443	55079	172.217.16.132	192.168.2.5
Sep 28, 2024 00:12:08.213381052 CEST	55079	443	192.168.2.5	172.217.16.132
Sep 28, 2024 00:12:08.213392973 CEST	443	55079	172.217.16.132	192.168.2.5
Sep 28, 2024 00:12:08.213740110 CEST	443	55079	172.217.16.132	192.168.2.5
Sep 28, 2024 00:12:08.214689970 CEST	55079	443	192.168.2.5	172.217.16.132
Sep 28, 2024 00:12:08.214754105 CEST	443	55079	172.217.16.132	192.168.2.5
Sep 28, 2024 00:12:08.257066011 CEST	55079	443	192.168.2.5	172.217.16.132
Sep 28, 2024 00:12:19.134547949 CEST	443	55079	172.217.16.132	192.168.2.5
Sep 28, 2024 00:12:19.134615898 CEST	443	55079	172.217.16.132	192.168.2.5
Sep 28, 2024 00:12:19.134722948 CEST	55079	443	192.168.2.5	172.217.16.132
Sep 28, 2024 00:12:20.416713953 CEST	55079	443	192.168.2.5	172.217.16.132
Sep 28, 2024 00:12:20.416774035 CEST	443	55079	172.217.16.132	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 28, 2024 00:11:02.137484074 CEST	53	63633	1.1.1.1	192.168.2.5
Sep 28, 2024 00:11:02.139259100 CEST	53	60287	1.1.1.1	192.168.2.5
Sep 28, 2024 00:11:03.333657026 CEST	53	64481	1.1.1.1	192.168.2.5
Sep 28, 2024 00:11:03.561901093 CEST	64575	53	192.168.2.5	1.1.1.1
Sep 28, 2024 00:11:03.562105894 CEST	64248	53	192.168.2.5	1.1.1.1
Sep 28, 2024 00:11:03.583223104 CEST	53	64575	1.1.1.1	192.168.2.5
Sep 28, 2024 00:11:03.583374023 CEST	53	64248	1.1.1.1	192.168.2.5
Sep 28, 2024 00:11:05.002680063 CEST	57261	53	192.168.2.5	1.1.1.1
Sep 28, 2024 00:11:05.002856016 CEST	60616	53	192.168.2.5	1.1.1.1
Sep 28, 2024 00:11:05.003267050 CEST	56338	53	192.168.2.5	1.1.1.1
Sep 28, 2024 00:11:05.003416061 CEST	56121	53	192.168.2.5	1.1.1.1
Sep 28, 2024 00:11:05.225420952 CEST	53	60616	1.1.1.1	192.168.2.5
Sep 28, 2024 00:11:05.225791931 CEST	53	57261	1.1.1.1	192.168.2.5
Sep 28, 2024 00:11:05.238871098 CEST	53	56338	1.1.1.1	192.168.2.5
Sep 28, 2024 00:11:05.239001036 CEST	53	56121	1.1.1.1	192.168.2.5
Sep 28, 2024 00:11:06.490386963 CEST	56772	53	192.168.2.5	1.1.1.1
Sep 28, 2024 00:11:06.491060972 CEST	58557	53	192.168.2.5	1.1.1.1
Sep 28, 2024 00:11:06.498999119 CEST	53	56772	1.1.1.1	192.168.2.5
Sep 28, 2024 00:11:06.499583960 CEST	53	58557	1.1.1.1	192.168.2.5
Sep 28, 2024 00:11:06.552702904 CEST	53	53104	1.1.1.1	192.168.2.5
Sep 28, 2024 00:11:07.247525930 CEST	55305	53	192.168.2.5	1.1.1.1
Sep 28, 2024 00:11:07.247926950 CEST	52833	53	192.168.2.5	1.1.1.1
Sep 28, 2024 00:11:07.248764992 CEST	56916	53	192.168.2.5	1.1.1.1
Sep 28, 2024 00:11:07.248960018 CEST	65243	53	192.168.2.5	1.1.1.1
Sep 28, 2024 00:11:07.254554033 CEST	52950	53	192.168.2.5	1.1.1.1
Sep 28, 2024 00:11:07.254823923 CEST	51759	53	192.168.2.5	1.1.1.1
Sep 28, 2024 00:11:07.255336046 CEST	53	56916	1.1.1.1	192.168.2.5
Sep 28, 2024 00:11:07.258013964 CEST	53	65243	1.1.1.1	192.168.2.5
Sep 28, 2024 00:11:07.280769110 CEST	53	52833	1.1.1.1	192.168.2.5
Sep 28, 2024 00:11:07.281732082 CEST	53	55305	1.1.1.1	192.168.2.5
Sep 28, 2024 00:11:07.434432030 CEST	53	51759	1.1.1.1	192.168.2.5
Sep 28, 2024 00:11:07.498007059 CEST	53	52950	1.1.1.1	192.168.2.5
Sep 28, 2024 00:11:20.802797079 CEST	53	52248	1.1.1.1	192.168.2.5
Sep 28, 2024 00:11:39.922801971 CEST	53	61667	1.1.1.1	192.168.2.5
Sep 28, 2024 00:11:43.578728914 CEST	53	55303	162.159.36.2	192.168.2.5
Sep 28, 2024 00:11:44.209853888 CEST	53	64376	1.1.1.1	192.168.2.5
Sep 28, 2024 00:12:02.021614075 CEST	53	58311	1.1.1.1	192.168.2.5
Sep 28, 2024 00:12:02.536093950 CEST	53	51994	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 28, 2024 00:11:03.561901093 CEST	192.168.2.5	1.1.1.1	0xbf19	Standard query (0)	microsofff.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 00:11:03.562105894 CEST	192.168.2.5	1.1.1.1	0x141d	Standard query (0)	microsofff.com	65	IN (0x0001)	false
Sep 28, 2024 00:11:05.002680063 CEST	192.168.2.5	1.1.1.1	0xfed	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Sep 28, 2024 00:11:05.002856016 CEST	192.168.2.5	1.1.1.1	0xb5f1	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Sep 28, 2024 00:11:05.003267050 CEST	192.168.2.5	1.1.1.1	0xab1d	Standard query (0)	awareness.threatcop.ai	A (IP address)	IN (0x0001)	false
Sep 28, 2024 00:11:05.003416061 CEST	192.168.2.5	1.1.1.1	0x3aa8	Standard query (0)	awareness.threatcop.ai	65	IN (0x0001)	false
Sep 28, 2024 00:11:06.490386963 CEST	192.168.2.5	1.1.1.1	0x576b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 00:11:06.491060972 CEST	192.168.2.5	1.1.1.1	0xb90	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 28, 2024 00:11:07.247525930 CEST	192.168.2.5	1.1.1.1	0x5bd3	Standard query (0)	microsofff.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 00:11:07.247926950 CEST	192.168.2.5	1.1.1.1	0x77e3	Standard query (0)	microsofff.com	65	IN (0x0001)	false
Sep 28, 2024 00:11:07.248764992 CEST	192.168.2.5	1.1.1.1	0x994c	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Sep 28, 2024 00:11:07.248960018 CEST	192.168.2.5	1.1.1.1	0x3716	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Sep 28, 2024 00:11:07.254554033 CEST	192.168.2.5	1.1.1.1	0xfb87	Standard query (0)	awareness.threatcop.ai	A (IP address)	IN (0x0001)	false
Sep 28, 2024 00:11:07.254823923 CEST	192.168.2.5	1.1.1.1	0xb57d	Standard query (0)	awareness.threatcop.ai	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 28, 2024 00:11:03.583223104 CEST	1.1.1.1	192.168.2.5	0xbf19	No error (0)	microsofff.com		13.234.117.252	A (IP address)	IN (0x0001)	false
Sep 28, 2024 00:11:05.225420952 CEST	1.1.1.1	192.168.2.5	0xb5f1	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 28, 2024 00:11:05.225791931 CEST	1.1.1.1	192.168.2.5	0xfed	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 28, 2024 00:11:05.225791931 CEST	1.1.1.1	192.168.2.5	0xfed	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Sep 28, 2024 00:11:05.225791931 CEST	1.1.1.1	192.168.2.5	0xfed	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Sep 28, 2024 00:11:05.225791931 CEST	1.1.1.1	192.168.2.5	0xfed	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Sep 28, 2024 00:11:05.225791931 CEST	1.1.1.1	192.168.2.5	0xfed	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Sep 28, 2024 00:11:05.238871098 CEST	1.1.1.1	192.168.2.5	0xab1d	No error (0)	awareness.threatcop.ai		13.127.7.201	A (IP address)	IN (0x0001)	false
Sep 28, 2024 00:11:06.498999119 CEST	1.1.1.1	192.168.2.5	0x576b	No error (0)	www.google.com		172.217.16.132	A (IP address)	IN (0x0001)	false
Sep 28, 2024 00:11:06.499583960 CEST	1.1.1.1	192.168.2.5	0xb90	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 28, 2024 00:11:07.255336046 CEST	1.1.1.1	192.168.2.5	0x994c	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 28, 2024 00:11:07.255336046 CEST	1.1.1.1	192.168.2.5	0x994c	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Sep 28, 2024 00:11:07.255336046 CEST	1.1.1.1	192.168.2.5	0x994c	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Sep 28, 2024 00:11:07.255336046 CEST	1.1.1.1	192.168.2.5	0x994c	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Sep 28, 2024 00:11:07.255336046 CEST	1.1.1.1	192.168.2.5	0x994c	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Sep 28, 2024 00:11:07.258013964 CEST	1.1.1.1	192.168.2.5	0x3716	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 28, 2024 00:11:07.281732082 CEST	1.1.1.1	192.168.2.5	0x5bd3	No error (0)	microsofff.com		13.234.117.252	A (IP address)	IN (0x0001)	false
Sep 28, 2024 00:11:07.498007059 CEST	1.1.1.1	192.168.2.5	0xfb87	No error (0)	awareness.threatcop.ai		13.127.7.201	A (IP address)	IN (0x0001)	false
Sep 28, 2024 00:11:16.994688034 CEST	1.1.1.1	192.168.2.5	0xa18b	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 28, 2024 00:11:16.994688034 CEST	1.1.1.1	192.168.2.5	0xa18b	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 28, 2024 00:11:30.485439062 CEST	1.1.1.1	192.168.2.5	0xd9fd	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 28, 2024 00:11:30.485439062 CEST	1.1.1.1	192.168.2.5	0xd9fd	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 28, 2024 00:11:55.014422894 CEST	1.1.1.1	192.168.2.5	0x7051	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 28, 2024 00:11:55.014422894 CEST	1.1.1.1	192.168.2.5	0x7051	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 28, 2024 00:12:15.364134073 CEST	1.1.1.1	192.168.2.5	0x545b	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 28, 2024 00:12:15.364134073 CEST	1.1.1.1	192.168.2.5	0x545b	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

microsofff.com

https:

cdn.jsdelivr.net

awareness.threatcop.ai

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49709	13.234.117.252	443	6184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 22:11:04 UTC	680	OUT	GET /?rid=2751471&key=gtG6Iz HTTP/1.1 Host: microsofff.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 22:11:04 UTC	258	IN	HTTP/1.1 200 OK Server: nginx/1.26.0 Date: Fri, 27 Sep 2024 22:11:04 GMT Content-Type: text/html; charset=utf-8 Content-Length: 7341 Connection: close X-Powered-By: Express Access-Control-Allow-Origin: * ETag: W/"1cad-hx8g7mfyxXY3rBUFEIz9ABxJnmo"
2024-09-27 22:11:04 UTC	7341	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 21 2d 2d 20 52 65 71 75 69 72 65 64 20 6d 65 74 61 20 74 61 67 73 20 2d 2d 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 3c 21 2d 2d 20 42 6f 6f 74 73 74 72 61 70 20 43 53 53 20 2d 2d 3e 0a 09 3c 6c 69 6e 6b 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 Data Ascii: <!DOCTYPE html><html lang="en"><head>... Required meta tags --><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">... Bootstrap CSS --><link crossorigin="anonymous" href="https://cdn.jsdelivr.ne

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49710	13.234.117.252	443	6184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 22:11:05 UTC	570	OUT	GET /staticpra/js/app/landing-ip.min.js HTTP/1.1 Host: microsofff.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://microsofff.com/?rid=2751471&key=gtG6Iz Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 22:11:05 UTC	323	IN	HTTP/1.1 200 OK Server: nginx/1.26.0 Date: Fri, 27 Sep 2024 22:11:05 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 565 Connection: close X-Powered-By: Express Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Tue, 24 Sep 2024 10:50:35 GMT ETag: W/"235-19223a78b82"
2024-09-27 22:11:05 UTC	565	IN	Data Raw: 76 61 72 20 53 72 34 48 35 73 4a 45 3d 74 3d 3e 7b 76 61 72 20 61 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 29 2c 6f 3d 61 2e 67 65 74 28 22 72 69 64 22 29 2c 6e 3d 61 2e 67 65 74 28 22 6b 65 79 22 29 2c 65 3d 22 22 3b 74 26 26 24 28 22 66 6f 72 6d 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 3d 28 65 3d 24 28 74 68 69 73 29 2e 61 74 74 72 28 22 61 63 74 69 6f 6e 22 29 29 2e 69 6e 64 65 78 4f 66 28 22 2f 64 61 74 61 22 29 3e 2d 31 3f 65 2b 22 26 6c 6f 63 61 74 69 6f 6e 3d 22 2b 74 2e 6c 6f 63 61 74 69 6f 6e 2e 6c 61 74 2b 22 2c 22 2b 74 2e 6c 6f 63 61 74 69 6f 6e 2e 6c 6e 67 3a 65 2b 22 2f 64 61 74 61 3f 72 49 64 3d 22 2b 6f 2b 22 26 6b 65 79 3d 22 2b 6e Data Ascii: var Sr4H5sJE=t=>{var a=new URLSearchParams(window.location.search),o=a.get("rid"),n=a.get("key"),e="";t&&$("form").each(function(){e=(e=$(this).attr("action")).indexOf("/data")>-1?e+"&location="+t.location.lat+","+t.location.lng:e+"/data?rId="+o+"&key="+n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49716	151.101.193.229	443	6184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 22:11:05 UTC	603	OUT	GET /npm/bootstrap@4.6.2/dist/css/bootstrap.min.css HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://microsofff.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://microsofff.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 22:11:06 UTC	763	IN	HTTP/1.1 200 OK Connection: close Content-Length: 162264 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: text/css; charset=utf-8 X-JSD-Version: 4.6.2 X-JSD-Version-Type: version ETag: W/"279d8-G+N7YjBsjAxndbtMk8XkxOE9l3U" Accept-Ranges: bytes Age: 2012605 Date: Fri, 27 Sep 2024 22:11:05 GMT X-Served-By: cache-fra-eddf8230063-FRA, cache-nyc-kteb1890045-NYC X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-09-27 22:11:06 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 36 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 32 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 32 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 30 66 32 3b 2d 2d 70 75 Data Ascii: /! Bootstrap v4.6.2 (https://getbootstrap.com/) * Copyright 2011-2022 The Bootstrap Authors * Copyright 2011-2022 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root{--blue:#007bff;--indigo:#6610f2;--pu
2024-09-27 22:11:06 UTC	1378	IN	Data Raw: 72 20 45 6d 6f 6a 69 22 2c 22 53 65 67 6f 65 20 55 49 20 45 6d 6f 6a 69 22 2c 22 53 65 67 6f 65 20 55 49 20 53 79 6d 62 6f 6c 22 2c 22 4e 6f 74 6f 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 22 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 3b 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 7d 5b 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 5d 3a 66 6f 63 75 73 3a 6e 6f 74 28 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 29 7b 6f 75 74 6c 69 6e 65 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 68 72 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 68 65 69 67 68 Data Ascii: r Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";font-size:1rem;font-weight:400;line-height:1.5;color:#212529;text-align:left;background-color:#fff}[tabindex="-1"]:focus:not(:focus-visible){outline:0!important}hr{box-sizing:content-box;heigh
2024-09-27 22:11:06 UTC	1378	IN	Data Raw: 6d 3a 31 72 65 6d 3b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 3b 2d 6d 73 2d 6f 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 3a 73 63 72 6f 6c 6c 62 61 72 7d 66 69 67 75 72 65 7b 6d 61 72 67 69 6e 3a 30 20 30 20 31 72 65 6d 7d 69 6d 67 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 73 76 67 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 74 61 62 6c 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 63 6f 6c 6c 61 70 73 65 7d 63 61 70 74 69 6f 6e 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 2e 37 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 2e 37 35 72 65 6d 3b 63 6f 6c 6f 72 3a 23 36 63 37 35 37 64 3b 74 65 Data Ascii: m:1rem;overflow:auto;-ms-overflow-style:scrollbar}figure{margin:0 0 1rem}img{vertical-align:middle;border-style:none}svg{overflow:hidden;vertical-align:middle}table{border-collapse:collapse}caption{padding-top:.75rem;padding-bottom:.75rem;color:#6c757d;te
2024-09-27 22:11:06 UTC	1378	IN	Data Raw: 77 65 62 6b 69 74 2d 69 6e 6e 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 2c 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a 3a 2d 77 65 62 6b 69 74 2d 6f 75 74 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 7b 68 65 69 67 68 74 3a 61 75 74 6f 7d 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 7b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 2d 32 70 78 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 7d 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 64 65 63 6f 72 61 74 69 6f 6e 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 7d 3a 3a 2d 77 65 62 6b 69 74 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 62 75 74 74 6f 6e 7b 66 6f 6e 74 3a 69 6e 68 65 72 69 74 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 Data Ascii: webkit-inner-spin-button,[type=number]::-webkit-outer-spin-button{height:auto}[type=search]{outline-offset:-2px;-webkit-appearance:none}[type=search]::-webkit-search-decoration{-webkit-appearance:none}::-webkit-file-upload-button{font:inherit;-webkit-appe
2024-09-27 22:11:06 UTC	1378	IN	Data Raw: 2d 66 6f 6f 74 65 72 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 65 6d 3b 63 6f 6c 6f 72 3a 23 36 63 37 35 37 64 7d 2e 62 6c 6f 63 6b 71 75 6f 74 65 2d 66 6f 6f 74 65 72 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 32 30 31 34 5c 30 30 41 30 22 7d 2e 69 6d 67 2d 66 6c 75 69 64 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 69 6d 67 2d 74 68 75 6d 62 6e 61 69 6c 7b 70 61 64 64 69 6e 67 3a 2e 32 35 72 65 6d 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 65 65 32 65 36 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 Data Ascii: -footer{display:block;font-size:.875em;color:#6c757d}.blockquote-footer::before{content:"\2014\00A0"}.img-fluid{max-width:100%;height:auto}.img-thumbnail{padding:.25rem;background-color:#fff;border:1px solid #dee2e6;border-radius:.25rem;max-width:100%;hei
2024-09-27 22:11:06 UTC	1378	IN	Data Raw: 67 69 6e 2d 6c 65 66 74 3a 2d 31 35 70 78 7d 2e 6e 6f 2d 67 75 74 74 65 72 73 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 6e 6f 2d 67 75 74 74 65 72 73 3e 2e 63 6f 6c 2c 2e 6e 6f 2d 67 75 74 74 65 72 73 3e 5b 63 6c 61 73 73 2a 3d 63 6f 6c 2d 5d 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 7d 2e 63 6f 6c 2c 2e 63 6f 6c 2d 31 2c 2e 63 6f 6c 2d 31 30 2c 2e 63 6f 6c 2d 31 31 2c 2e 63 6f 6c 2d 31 32 2c 2e 63 6f 6c 2d 32 2c 2e 63 6f 6c 2d 33 2c 2e 63 6f 6c 2d 34 2c 2e 63 6f 6c 2d 35 2c 2e 63 6f 6c 2d 36 2c 2e 63 6f 6c 2d 37 2c 2e 63 6f 6c 2d 38 2c 2e 63 6f 6c 2d 39 2c 2e 63 6f 6c 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 6c 67 2c 2e 63 6f 6c 2d 6c 67 2d 31 2c 2e 63 6f 6c 2d Data Ascii: gin-left:-15px}.no-gutters{margin-right:0;margin-left:0}.no-gutters>.col,.no-gutters>[class*=col-]{padding-right:0;padding-left:0}.col,.col-1,.col-10,.col-11,.col-12,.col-2,.col-3,.col-4,.col-5,.col-6,.col-7,.col-8,.col-9,.col-auto,.col-lg,.col-lg-1,.col-
2024-09-27 22:11:06 UTC	1378	IN	Data Raw: 20 30 20 61 75 74 6f 3b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 63 6f 6c 2d 31 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 38 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 38 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 38 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 32 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 31 36 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 31 36 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 36 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 33 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 32 35 25 3b 66 6c 65 78 3a 30 20 30 20 32 35 25 3b 6d 61 78 2d 77 69 64 74 68 3a 32 35 25 7d 2e 63 6f 6c 2d 34 7b 2d 6d 73 2d 66 6c 65 78 Data Ascii: 0 auto;flex:0 0 auto;width:auto;max-width:100%}.col-1{-ms-flex:0 0 8.333333%;flex:0 0 8.333333%;max-width:8.333333%}.col-2{-ms-flex:0 0 16.666667%;flex:0 0 16.666667%;max-width:16.666667%}.col-3{-ms-flex:0 0 25%;flex:0 0 25%;max-width:25%}.col-4{-ms-flex
2024-09-27 22:11:06 UTC	1378	IN	Data Raw: 6c 65 66 74 3a 38 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 36 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 35 25 7d 2e 6f 66 66 73 65 74 2d 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 33 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 31 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 25 7d 2e 6f 66 66 73 65 74 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 Data Ascii: left:8.333333%}.offset-2{margin-left:16.666667%}.offset-3{margin-left:25%}.offset-4{margin-left:33.333333%}.offset-5{margin-left:41.666667%}.offset-6{margin-left:50%}.offset-7{margin-left:58.333333%}.offset-8{margin-left:66.666667%}.offset-9{margin-left:7
2024-09-27 22:11:06 UTC	1378	IN	Data Raw: 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 38 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 36 36 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 36 36 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 73 6d 2d 39 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 6d 61 78 2d 77 69 64 74 68 3a 37 35 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 30 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 31 7b 2d 6d 73 2d 66 6c 65 78 3a 30 Data Ascii: 333333%;max-width:58.333333%}.col-sm-8{-ms-flex:0 0 66.666667%;flex:0 0 66.666667%;max-width:66.666667%}.col-sm-9{-ms-flex:0 0 75%;flex:0 0 75%;max-width:75%}.col-sm-10{-ms-flex:0 0 83.333333%;flex:0 0 83.333333%;max-width:83.333333%}.col-sm-11{-ms-flex:0
2024-09-27 22:11:06 UTC	1378	IN	Data Raw: 64 7b 2d 6d 73 2d 66 6c 65 78 2d 70 72 65 66 65 72 72 65 64 2d 73 69 7a 65 3a 30 3b 66 6c 65 78 2d 62 61 73 69 73 3a 30 3b 2d 6d 73 2d 66 6c 65 78 2d 70 6f 73 69 74 69 76 65 3a 31 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 6d 64 2d 31 3e 2a 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 6d 64 2d 32 3e 2a 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 6d 64 2d 33 3e 2a 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 33 33 2e 33 33 33 33 33 33 25 3b 66 Data Ascii: d{-ms-flex-preferred-size:0;flex-basis:0;-ms-flex-positive:1;flex-grow:1;max-width:100%}.row-cols-md-1>{-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.row-cols-md-2>{-ms-flex:0 0 50%;flex:0 0 50%;max-width:50%}.row-cols-md-3>*{-ms-flex:0 0 33.333333%;f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49715	151.101.193.229	443	6184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 22:11:05 UTC	583	OUT	GET /npm/jquery@3.5.1/dist/jquery.slim.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://microsofff.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://microsofff.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 22:11:06 UTC	775	IN	HTTP/1.1 200 OK Connection: close Content-Length: 72380 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 3.5.1 X-JSD-Version-Type: version ETag: W/"11abc-z42YIVUtUbtQzlcuaWq6EwkGWAA" Accept-Ranges: bytes Age: 392736 Date: Fri, 27 Sep 2024 22:11:06 GMT X-Served-By: cache-fra-etou8220123-FRA, cache-nyc-kteb1890061-NYC X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-09-27 22:11:06 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 64 65 70 72 65 63 61 74 65 64 2f 61 6a 61 78 2d 65 76 65 6e 74 2d 61 6c 69 61 73 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 Data Ascii: /*! jQuery v3.5.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-deprecated/ajax-event-alias,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other c
2024-09-27 22:11:06 UTC	1378	IN	Data Raw: 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 64 65 70 72 65 63 61 74 65 64 2f 61 6a 61 78 2d 65 76 65 6e 74 2d 61 6c 69 61 73 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 22 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 45 2e 66 6e 2e 69 6e 69 74 28 65 2c 74 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 76 61 72 20 74 3d 21 21 65 26 26 22 6c 65 6e 67 74 68 22 69 6e 20 65 26 26 65 2e 6c 65 6e 67 74 68 2c 6e 3d 54 28 65 29 3b 72 65 74 75 72 6e 21 62 28 65 29 26 26 21 78 28 65 29 26 26 28 22 61 72 72 61 79 22 3d 3d 3d 6e 7c 7c 30 3d 3d 3d Data Ascii: query,-ajax/xhr,-manipulation/_evalUrl,-deprecated/ajax-event-alias,-effects,-effects/Tween,-effects/animatedSelector",E=function(e,t){return new E.fn.init(e,t)};function d(e){var t=!!e&&"length"in e&&e.length,n=T(e);return!b(e)&&!x(e)&&("array"===n\|\|0===
2024-09-27 22:11:06 UTC	1378	IN	Data Raw: 21 3d 28 65 3d 61 72 67 75 6d 65 6e 74 73 5b 73 5d 29 29 66 6f 72 28 74 20 69 6e 20 65 29 72 3d 65 5b 74 5d 2c 22 5f 5f 70 72 6f 74 6f 5f 5f 22 21 3d 3d 74 26 26 61 21 3d 3d 72 26 26 28 6c 26 26 72 26 26 28 45 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 72 29 7c 7c 28 69 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 29 29 29 3f 28 6e 3d 61 5b 74 5d 2c 6f 3d 69 26 26 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6e 29 3f 5b 5d 3a 69 7c 7c 45 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 6e 29 3f 6e 3a 7b 7d 2c 69 3d 21 31 2c 61 5b 74 5d 3d 45 2e 65 78 74 65 6e 64 28 6c 2c 6f 2c 72 29 29 3a 76 6f 69 64 20 30 21 3d 3d 72 26 26 28 61 5b 74 5d 3d 72 29 29 3b 72 65 74 75 72 6e 20 61 7d 2c 45 2e 65 78 74 65 6e 64 28 7b 65 78 70 61 6e 64 6f 3a 22 6a 51 75 65 72 Data Ascii: !=(e=arguments[s]))for(t in e)r=e[t],"__proto__"!==t&&a!==r&&(l&&r&&(E.isPlainObject(r)\|\|(i=Array.isArray(r)))?(n=a[t],o=i&&!Array.isArray(n)?[]:i\|\|E.isPlainObject(n)?n:{},i=!1,a[t]=E.extend(l,o,r)):void 0!==r&&(a[t]=r));return a},E.extend({expando:"jQuer
2024-09-27 22:11:06 UTC	1378	IN	Data Raw: 6c 26 26 28 45 2e 66 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 74 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 2c 45 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 20 53 79 6d 62 6f 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6e 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 74 2b 22 5d 22 5d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 3b 76 61 72 20 70 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 2c 70 2c 78 2c 6f 2c 69 2c 68 2c 66 2c 67 2c 77 2c 75 2c 6c 2c 43 2c 54 2c 61 2c 45 2c 76 2c 73 2c 63 2c 79 2c 41 3d 22 73 69 7a 7a 6c Data Ascii: l&&(E.fn[Symbol.iterator]=t[Symbol.iterator]),E.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(e,t){n["[object "+t+"]"]=t.toLowerCase()});var p=function(n){var e,p,x,o,i,h,f,g,w,u,l,C,T,a,E,v,s,c,y,A="sizzl
2024-09-27 22:11:06 UTC	1378	IN	Data Raw: 79 70 65 29 28 3f 3a 5c 5c 28 22 2b 52 2b 22 2a 28 65 76 65 6e 7c 6f 64 64 7c 28 28 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 52 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 52 2b 22 2a 28 5c 5c 64 2b 29 7c 29 29 22 2b 52 2b 22 2a 5c 5c 29 7c 29 22 2c 22 69 22 29 2c 62 6f 6f 6c 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 3f 3a 22 2b 49 2b 22 29 24 22 2c 22 69 22 29 2c 6e 65 65 64 73 43 6f 6e 74 65 78 74 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 52 2b 22 2a 5b 3e 2b 7e 5d 7c 3a 28 65 76 65 6e 7c 6f 64 64 7c 65 71 7c 67 74 7c 6c 74 7c 6e 74 68 7c 66 69 72 73 74 7c 6c 61 73 74 29 28 3f 3a 5c 5c 28 22 2b 52 2b 22 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 22 2b 52 2b 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d Data Ascii: ype)(?:\\("+R+"(even\|odd\|(([+-]\|)(\\d)n\|)"+R+"(?:([+-]\|)"+R+"(\\d+)\|))"+R+"\\)\|)","i"),bool:new RegExp("^(?:"+I+")$","i"),needsContext:new RegExp("^"+R+"[>+~]\|:(even\|odd\|eq\|gt\|lt\|nth\|first\|last)(?:\\("+R+"((?:-\\d)?\\d)"+R+"*\\)\|)(?=[^-]\|$)","i")}
2024-09-27 22:11:06 UTC	1378	IN	Data Raw: 6e 20 6e 2e 70 75 73 68 28 61 29 2c 6e 7d 65 6c 73 65 20 69 66 28 66 26 26 28 61 3d 66 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 69 29 29 26 26 79 28 65 2c 61 29 26 26 61 2e 69 64 3d 3d 3d 69 29 72 65 74 75 72 6e 20 6e 2e 70 75 73 68 28 61 29 2c 6e 7d 65 6c 73 65 7b 69 66 28 75 5b 32 5d 29 72 65 74 75 72 6e 20 4f 2e 61 70 70 6c 79 28 6e 2c 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 74 29 29 2c 6e 3b 69 66 28 28 69 3d 75 5b 33 5d 29 26 26 70 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 4f 2e 61 70 70 6c 79 28 6e 2c 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 69 29 29 2c Data Ascii: n n.push(a),n}else if(f&&(a=f.getElementById(i))&&y(e,a)&&a.id===i)return n.push(a),n}else{if(u[2])return O.apply(n,e.getElementsByTagName(t)),n;if((i=u[3])&&p.getElementsByClassName&&e.getElementsByClassName)return O.apply(n,e.getElementsByClassName(i)),
2024-09-27 22:11:06 UTC	1378	IN	Data Raw: 72 20 74 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 74 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 74 29 26 26 65 2e 74 79 70 65 3d 3d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 65 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 65 3f 65 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 21 31 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 3f 22 6c 61 62 65 6c 22 69 6e 20 65 3f 22 6c 61 62 65 6c 22 69 6e 20 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3f 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 74 3a 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 74 3a 65 2e 69 73 44 69 73 61 62 6c 65 64 3d 3d 3d 74 7c 7c 65 2e 69 73 Data Ascii: r t=e.nodeName.toLowerCase();return("input"===t\|\|"button"===t)&&e.type===n}}function ge(t){return function(e){return"form"in e?e.parentNode&&!1===e.disabled?"label"in e?"label"in e.parentNode?e.parentNode.disabled===t:e.disabled===t:e.isDisabled===t\|\|e.is
2024-09-27 22:11:06 UTC	1378	IN	Data Raw: 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 2c 70 2e 67 65 74 42 79 49 64 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 69 64 3d 41 2c 21 54 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 54 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 41 29 2e 6c 65 6e 67 74 68 7d 29 2c 70 2e 67 65 74 42 79 49 64 3f 28 78 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 74 7d 7d 2c 78 2e 66 69 6e 64 2e 49 44 3d Data Ascii: .getElementsByClassName),p.getById=ce(function(e){return a.appendChild(e).id=A,!T.getElementsByName\|\|!T.getElementsByName(A).length}),p.getById?(x.filter.ID=function(e){var t=e.replace(te,ne);return function(e){return e.getAttribute("id")===t}},x.find.ID=
2024-09-27 22:11:06 UTC	1378	IN	Data Raw: 70 74 69 6f 6e 20 73 65 6c 65 63 74 65 64 3d 27 27 3e 3c 2f 6f 70 74 69 6f 6e 3e 3c 2f 73 65 6c 65 63 74 3e 22 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6d 73 61 6c 6c 6f 77 63 61 70 74 75 72 65 5e 3d 27 27 5d 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 5b 2a 5e 24 5d 3d 22 2b 52 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 52 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 49 2b 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 41 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 7e 3d 22 29 2c Data Ascii: ption selected=''></option></select>",e.querySelectorAll("[msallowcapture^='']").length&&v.push("[^$]="+R+"(?:''\|\"\")"),e.querySelectorAll("[selected]").length\|\|v.push("\\["+R+"*(?:value\|"+I+")"),e.querySelectorAll("[id~="+A+"-]").length\|\|v.push("~="),
2024-09-27 22:11:06 UTC	1378	IN	Data Raw: 2c 74 3d 4a 2e 74 65 73 74 28 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 29 2c 79 3d 74 7c 7c 4a 2e 74 65 73 74 28 61 2e 63 6f 6e 74 61 69 6e 73 29 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 3f 65 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3a 65 2c 72 3d 74 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 65 3d 3d 3d 72 7c 7c 21 28 21 72 7c 7c 31 21 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 28 6e 2e 63 6f 6e 74 61 69 6e 73 3f 6e 2e 63 6f 6e 74 61 69 6e 73 28 72 29 3a 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 26 26 31 36 26 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 72 29 Data Ascii: ,t=J.test(a.compareDocumentPosition),y=t\|\|J.test(a.contains)?function(e,t){var n=9===e.nodeType?e.documentElement:e,r=t&&t.parentNode;return e===r\|\|!(!r\|\|1!==r.nodeType\|\|!(n.contains?n.contains(r):e.compareDocumentPosition&&16&e.compareDocumentPosition(r)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49717	151.101.193.229	443	6184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 22:11:05 UTC	594	OUT	GET /npm/bootstrap@4.6.2/dist/js/bootstrap.bundle.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://microsofff.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://microsofff.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 22:11:06 UTC	776	IN	HTTP/1.1 200 OK Connection: close Content-Length: 83376 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 4.6.2 X-JSD-Version-Type: version ETag: W/"145b0-MjP9Adh/ukV+qtjcvCifdbFw+BQ" Accept-Ranges: bytes Age: 1784005 Date: Fri, 27 Sep 2024 22:11:06 GMT X-Served-By: cache-fra-etou8220105-FRA, cache-nyc-kteb1890051-NYC X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-09-27 22:11:06 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 36 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 32 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 Data Ascii: /! Bootstrap v4.6.2 (https://getbootstrap.com/) * Copyright 2011-2022 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,e){"ob
2024-09-27 22:11:06 UTC	1378	IN	Data Raw: 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 74 61 72 67 65 74 22 29 3b 69 66 28 21 65 7c 7c 22 23 22 3d 3d 3d 65 29 7b 76 61 72 20 6e 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 29 3b 65 3d 6e 26 26 22 23 22 21 3d 3d 6e 3f 6e 2e 74 72 69 6d 28 29 3a 22 22 7d 74 72 79 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 65 29 3f 65 3a 6e 75 6c 6c 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 2c 67 65 74 54 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 46 72 6f 6d 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 Data Ascii: SelectorFromElement:function(t){var e=t.getAttribute("data-target");if(!e\|\|"#"===e){var n=t.getAttribute("href");e=n&&"#"!==n?n.trim():""}try{return document.querySelector(e)?e:null}catch(t){return null}},getTransitionDurationFromElement:function(t){if(!t
2024-09-27 22:11:06 UTC	1378	IN	Data Raw: 45 72 72 6f 72 28 22 42 6f 6f 74 73 74 72 61 70 27 73 20 4a 61 76 61 53 63 72 69 70 74 20 72 65 71 75 69 72 65 73 20 6a 51 75 65 72 79 2e 20 6a 51 75 65 72 79 20 6d 75 73 74 20 62 65 20 69 6e 63 6c 75 64 65 64 20 62 65 66 6f 72 65 20 42 6f 6f 74 73 74 72 61 70 27 73 20 4a 61 76 61 53 63 72 69 70 74 2e 22 29 3b 76 61 72 20 74 3d 69 2e 64 65 66 61 75 6c 74 2e 66 6e 2e 6a 71 75 65 72 79 2e 73 70 6c 69 74 28 22 20 22 29 5b 30 5d 2e 73 70 6c 69 74 28 22 2e 22 29 3b 69 66 28 74 5b 30 5d 3c 32 26 26 74 5b 31 5d 3c 39 7c 7c 31 3d 3d 3d 74 5b 30 5d 26 26 39 3d 3d 3d 74 5b 31 5d 26 26 74 5b 32 5d 3c 31 7c 7c 74 5b 30 5d 3e 3d 34 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 6f 6f 74 73 74 72 61 70 27 73 20 4a 61 76 61 53 63 72 69 70 74 20 72 65 71 75 69 Data Ascii: Error("Bootstrap's JavaScript requires jQuery. jQuery must be included before Bootstrap's JavaScript.");var t=i.default.fn.jquery.split(" ")[0].split(".");if(t[0]<2&&t[1]<9\|\|1===t[0]&&9===t[1]&&t[2]<1\|\|t[0]>=4)throw new Error("Bootstrap's JavaScript requi
2024-09-27 22:11:06 UTC	1378	IN	Data Raw: 65 22 29 29 7b 76 61 72 20 6e 3d 75 2e 67 65 74 54 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 29 3b 69 2e 64 65 66 61 75 6c 74 28 74 29 2e 6f 6e 65 28 75 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 6e 29 7d 65 6c 73 65 20 74 68 69 73 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 29 7d 2c 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 2e 64 65 66 61 75 6c 74 28 74 29 2e 64 65 74 61 63 68 28 29 2e 74 72 69 67 67 65 72 28 22 63 6c 6f 73 65 64 2e 62 73 2e 61 Data Ascii: e")){var n=u.getTransitionDurationFromElement(t);i.default(t).one(u.TRANSITION_END,(function(n){return e._destroyElement(t,n)})).emulateTransitionEnd(n)}else this._destroyElement(t)},e._destroyElement=function(t){i.default(t).detach().trigger("closed.bs.a
2024-09-27 22:11:06 UTC	1378	IN	Data Raw: 3d 3d 6f 2e 74 79 70 65 7c 7c 28 6f 2e 63 68 65 63 6b 65 64 3d 21 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 6d 29 29 2c 74 68 69 73 2e 73 68 6f 75 6c 64 41 76 6f 69 64 54 72 69 67 67 65 72 43 68 61 6e 67 65 7c 7c 69 2e 64 65 66 61 75 6c 74 28 6f 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 29 2c 6f 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 28 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 Data Ascii: ==o.type\|\|(o.checked=!this._element.classList.contains(m)),this.shouldAvoidTriggerChange\|\|i.default(o).trigger("change")),o.focus(),e=!1}}this._element.hasAttribute("disabled")\|\|this._element.classList.contains("disabled")\|\|(e&&this._element.setAttribute(
2024-09-27 22:11:06 UTC	1378	IN	Data Raw: 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 62 75 74 74 6f 6e 73 22 5d 20 2e 62 74 6e 27 29 29 2c 65 3d 30 2c 6e 3d 74 2e 6c 65 6e 67 74 68 3b 65 3c 6e 3b 65 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 65 5d 2c 6f 3d 69 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 5f 29 3b 6f 2e 63 68 65 63 6b 65 64 7c 7c 6f 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 63 68 65 63 6b 65 64 22 29 3f 69 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 6d 29 3a 69 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 6d 29 7d 66 6f 72 28 76 61 72 20 72 3d 30 2c 61 3d 28 74 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 64 Data Ascii: ion(){for(var t=[].slice.call(document.querySelectorAll('[data-toggle="buttons"] .btn')),e=0,n=t.length;e<n;e++){var i=t[e],o=i.querySelector(_);o.checked\|\|o.hasAttribute("checked")?i.classList.add(m):i.classList.remove(m)}for(var r=0,a=(t=[].slice.call(d
2024-09-27 22:11:06 UTC	1378	IN	Data Raw: 50 6f 69 6e 74 65 72 45 76 65 6e 74 7c 7c 77 69 6e 64 6f 77 2e 4d 53 50 6f 69 6e 74 65 72 45 76 65 6e 74 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 65 3d 74 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 65 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 43 29 7d 2c 65 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 69 2e 64 65 66 61 75 6c 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 3b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 74 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 74 2e 63 73 73 28 22 76 69 Data Ascii: PointerEvent\|\|window.MSPointerEvent),this._addEventListeners()}var e=t.prototype;return e.next=function(){this._isSliding\|\|this._slide(C)},e.nextWhenVisible=function(){var t=i.default(this._element);!document.hidden&&t.is(":visible")&&"hidden"!==t.css("vi
2024-09-27 22:11:06 UTC	1378	IN	Data Raw: 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 7d 2c 65 2e 5f 67 65 74 43 6f 6e 66 69 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 61 28 7b 7d 2c 41 2c 74 29 2c 75 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 79 2c 74 2c 6b 29 2c 74 7d 2c 65 2e 5f 68 61 6e 64 6c 65 53 77 69 70 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 4d 61 74 68 2e 61 62 73 28 74 68 69 73 2e 74 6f 75 63 68 44 65 6c 74 61 58 29 3b 69 66 28 21 28 74 3c 3d 34 30 29 29 7b 76 61 72 20 65 3d 74 2f 74 68 69 73 2e 74 6f 75 63 68 44 65 6c 74 61 58 3b 74 68 69 73 Data Ascii: =null,this._isSliding=null,this._activeElement=null,this._indicatorsElement=null},e._getConfig=function(t){return t=a({},A,t),u.typeCheckConfig(y,t,k),t},e._handleSwipe=function(){var t=Math.abs(this.touchDeltaX);if(!(t<=40)){var e=t/this.touchDeltaX;this
2024-09-27 22:11:06 UTC	1378	IN	Data Raw: 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 29 29 2c 74 68 69 73 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 3f 28 69 2e 64 65 66 61 75 6c 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 22 70 6f 69 6e 74 65 72 64 6f 77 6e 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 28 74 29 7d 29 29 2c 69 2e 64 65 66 61 75 6c 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 22 70 6f 69 6e 74 65 72 75 70 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 28 74 29 7d 29 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 22 29 29 3a 28 69 2e 64 65 66 Data Ascii: .preventDefault()})),this._pointerEvent?(i.default(this._element).on("pointerdown.bs.carousel",(function(t){return e(t)})),i.default(this._element).on("pointerup.bs.carousel",(function(t){return n(t)})),this._element.classList.add("pointer-event")):(i.def
2024-09-27 22:11:06 UTC	1378	IN	Data Raw: 74 3a 74 2c 64 69 72 65 63 74 69 6f 6e 3a 65 2c 66 72 6f 6d 3a 6f 2c 74 6f 3a 6e 7d 29 3b 72 65 74 75 72 6e 20 69 2e 64 65 66 61 75 6c 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 74 72 69 67 67 65 72 28 72 29 2c 72 7d 2c 65 2e 5f 73 65 74 41 63 74 69 76 65 49 6e 64 69 63 61 74 6f 72 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 61 63 74 69 76 65 22 29 29 3b 69 2e 64 65 66 61 75 6c 74 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 54 29 3b 76 61 72 20 6e 3d 74 68 69 Data Ascii: t:t,direction:e,from:o,to:n});return i.default(this._element).trigger(r),r},e._setActiveIndicatorElement=function(t){if(this._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll(".active"));i.default(e).removeClass(T);var n=thi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49714	13.127.7.201	443	6184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 22:11:06 UTC	603	OUT	GET /templates/softmicro.svg HTTP/1.1 Host: awareness.threatcop.ai Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://microsofff.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 22:11:06 UTC	253	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 22:11:06 GMT Server: Apache/2.4.52 (Ubuntu) Last-Modified: Fri, 23 Aug 2024 04:05:58 GMT ETag: "e43-62051e4803117" Accept-Ranges: bytes Content-Length: 3651 Connection: close Content-Type: image/svg+xml
2024-09-27 22:11:06 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49713	13.127.7.201	443	6184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 22:11:06 UTC	597	OUT	GET /templates/key.svg HTTP/1.1 Host: awareness.threatcop.ai Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://microsofff.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 22:11:06 UTC	253	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 22:11:06 GMT Server: Apache/2.4.52 (Ubuntu) Last-Modified: Fri, 23 Aug 2024 04:05:57 GMT ETag: "638-62051e47a64ba" Accept-Ranges: bytes Content-Length: 1592 Connection: close Content-Type: image/svg+xml
2024-09-27 22:11:06 UTC	1592	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 2c 30 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49718	13.127.7.201	443	6184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 22:11:07 UTC	603	OUT	GET /templates/ms_banner.jpg HTTP/1.1 Host: awareness.threatcop.ai Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://microsofff.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 22:11:07 UTC	254	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 22:11:07 GMT Server: Apache/2.4.52 (Ubuntu) Last-Modified: Tue, 09 Jul 2024 06:01:57 GMT ETag: "5c361-61cca447475a1" Accept-Ranges: bytes Content-Length: 377697 Connection: close Content-Type: image/jpeg
2024-09-27 22:11:07 UTC	7938	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 01 2c 01 2c 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c0 00 11 08 0d 2f 17 70 03 01 11 00 02 11 01 03 11 01 ff c4 00 19 00 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 09 ff c4 00 2a 10 01 01 01 00 02 03 01 01 01 01 01 01 00 02 00 07 00 01 11 02 31 12 21 51 41 61 71 22 81 32 42 13 91 03 52 a1 b1 62 82 ff c4 00 1a 01 01 01 Data Ascii: JFIF,,CC/p*1!QAaq"2BRb
2024-09-27 22:11:08 UTC	8000	IN	Data Raw: c6 7e 82 80 00 19 01 3c 41 32 80 00 00 02 ef d0 4f 40 00 00 00 00 00 00 00 00 00 00 04 b6 11 31 a9 61 89 80 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 80 60 00 d0 00 00 00 00 00 00 00 33 41 00 00 00 00 00 05 97 01 a0 00 00 00 00 00 00 00 04 b3 41 32 fc 04 06 a5 d0 2c fd 80 c8 00 d7 94 13 0d 8a 98 ad 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 41 90 00 00 00 00 00 00 00 00 00 00 00 05 b7 d0 20 00 00 0b 2e 03 40 00 00 0b a0 b2 80 00 d4 ba 95 9a 22 00 00 00 00 00 00 00 00 00 19 01 2f 1f 80 9d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bb 44 c3 65 81 98 82 8b 12 8d 20 00 00 b3 a6 68 a8 00 00 02 c0 50 4c 04 00 00 6b a0 60 32 00 00 b0 2c d5 c4 66 cb 19 65 a9 76 35 01 40 00 00 00 00 01 9b db 34 10 00 00 00 00 00 06 ba 0c 80 2f 1b 8d 74 Data Ascii: ~<A2O@1a`3AA2,A .@"/De hPLk`2,fev5@4/t
2024-09-27 22:11:08 UTC	8000	IN	Data Raw: 00 00 00 00 00 00 00 00 58 cd f7 45 00 00 00 00 00 00 00 00 00 13 41 34 0d 04 00 00 6b 41 34 0d 03 41 34 00 01 ac 00 14 01 36 7d 04 b7 41 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 76 86 1e 42 62 ec fa 26 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 26 03 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2c a0 a0 00 00 00 00 12 e0 35 d8 00 01 d8 33 66 0c 82 2c e5 f4 6b 4b 65 12 fa 92 e0 8d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 aa 2e ae fa d0 4b ed b8 cd 3a 06 a5 d0 00 03 a0 4f 20 36 02 80 00 00 00 00 00 00 00 00 00 00 2c 9a 0d 26 02 89 67 e8 96 32 32 d6 4a 35 9a 9e 22 62 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 80 0b 2e 55 2b 48 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9e 30 12 ca 08 00 Data Ascii: XEA4kA4A46}AvBb&(& ,53f,kKe.K:O 6,&g22J5"b.U+H0
2024-09-27 22:11:08 UTC	8000	IN	Data Raw: 8c b7 2e 8d 16 68 30 32 00 00 00 00 00 00 00 0b 2e 02 f9 40 5e c0 9e 80 04 e4 07 97 d0 5d 80 4b ec 1b 00 4a 08 00 00 80 00 00 00 00 00 00 00 00 00 00 00 00 00 18 00 cf 2f a0 80 d4 bb 1a 82 aa 68 1e 50 30 10 1a 80 94 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 44 15 41 30 14 10 19 00 00 00 00 00 00 00 00 00 00 00 00 00 12 82 80 09 41 90 00 37 00 00 00 00 00 0d b0 00 00 00 1a 00 0b 70 19 00 16 72 fa 05 a0 cd 05 00 00 25 c0 6a 5d 04 e4 0e 76 60 35 c2 fb b0 1b 02 cd 06 6c c0 01 2d c0 25 05 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 66 c0 40 58 0b 41 90 00 00 01 9e 4b 04 68 00 00 00 00 00 00 00 00 00 00 01 31 2c 19 64 01 a5 a2 58 82 00 00 00 01 01 68 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 6c 13 52 d9 7f 04 b4 Data Ascii: .h02.@^]KJ/hP0DA0A7pr%j]v`5l-%f@XAKh1,dXh lR
2024-09-27 22:11:08 UTC	8000	IN	Data Raw: 00 00 00 00 00 4d 05 00 19 a0 80 00 00 00 00 00 00 0b 00 c0 40 00 02 03 58 09 80 40 68 00 40 50 42 8a c8 00 00 00 00 00 00 0d 4f 60 a0 cd ba 08 00 35 3a 05 00 19 b7 f0 13 70 1a 9c be 82 5b f8 08 0d 02 80 00 25 b8 04 ba 0a 02 20 aa 00 00 00 00 02 5a 96 8c b2 00 d4 6a 0a a2 56 68 6a 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c e0 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 68 10 14 00 00 66 cf 80 80 0c d0 00 01 ab 35 81 2c c6 b7 44 50 00 17 bf f5 38 20 2f 1e ca 1c 88 26 5a 68 d7 8a 68 64 41 40 04 be d6 0c b4 00 00 00 2c b9 13 04 50 00 00 00 01 01 41 9a 04 05 05 00 12 c4 12 26 18 b5 78 cd 98 0b 3a 4a 95 51 00 00 00 00 00 04 f2 5c 5c 59 75 10 00 12 f4 b1 63 2d 2d 6a 7f 59 ac aa 00 00 00 00 00 02 6c 03 c8 14 12 cd 04 06 b2 7c 00 Data Ascii: M@X@h@PBO`5:p[% ZjVhj hf5,DP8 /&ZhhdA@,PA&x:JQ\\Yuc--jYl\|
2024-09-27 22:11:08 UTC	8000	IN	Data Raw: 00 00 00 00 00 00 01 90 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 89 45 41 9a b0 58 51 50 00 00 00 03 68 2f 90 2e c0 00 00 00 00 00 00 00 00 00 00 04 bd 8c d5 e1 7d e0 46 c6 99 bd 8c d6 6d 11 01 78 dc a0 e8 00 00 00 00 00 00 00 00 00 00 00 00 00 cd 04 00 58 0d 00 00 00 00 00 26 03 20 00 0b 01 6c 06 40 00 00 00 00 1a 89 45 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 65 81 ad 6b 57 8a a5 68 40 00 01 33 01 2d fc 66 d1 10 6a 74 d4 0b c7 e1 82 4f 55 27 83 4d 00 00 00 00 27 2e 81 90 00 00 00 00 00 00 00 00 00 00 00 00 00 12 02 80 0c 00 00 00 00 02 cb 80 bb a0 96 fe 40 40 00 00 00 6a 5f 40 9b 77 41 65 d0 50 66 df c8 08 25 80 84 f4 1a d4 ba 2c 51 41 9a cd ba 08 00 1b 68 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 02 80 00 00 02 58 0c 80 Data Ascii: @EAXQPh/.}FmxX& l@E@@ekWh@3-fjtOU'M'.@@j_@wAePf%,QAhX
2024-09-27 22:11:08 UTC	8000	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 4b 2d 12 c2 74 29 7a 04 9d 8c c5 b7 06 93 6d 04 19 5c a2 e2 e4 17 19 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b5 03 a0 14 00 00 00 00 00 12 d0 64 16 76 0d 00 02 02 87 40 cd ba 08 02 33 7a 92 de 34 c5 ea ff 00 f5 65 4d c4 8d 9b 69 44 c4 4b 70 19 be fb 06 a6 1a 6a 82 5b 80 9d 83 37 b6 a3 51 15 5d 58 60 00 0c 86 9a 96 c8 09 6e 82 00 00 00 00 0b 3b 03 67 e4 06 6c 06 b8 dd 9e c1 a0 4b 64 04 b7 41 00 00 0b 3d ee 80 09 66 0c d8 82 00 01 7d 51 40 94 0a 08 00 00 00 00 00 00 99 05 66 cc 10 06 c6 ac 67 94 f6 32 99 a0 be 20 be 30 0c 90 14 06 6c 04 12 f4 b0 49 56 c1 76 7d 4c 0d 9b e8 12 dd 59 04 50 00 00 00 4c 04 06 80 06 6c c0 40 00 00 00 ec 18 19 00 00 00 00 00 1a f2 fe 02 79 50 36 fd 04 05 94 1a 00 00 00 02 74 00 33 66 02 01 b3 Data Ascii: K-t)zm\dv@3z4eMiDKpj[7Q]X`n;glKdA=f}Q@fg2 0lIVv}LYPLl@yP6t3f
2024-09-27 22:11:08 UTC	8000	IN	Data Raw: 97 df b0 ad 0c 00 00 06 7b d1 74 10 00 00 27 60 d7 40 cf 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 4e 82 80 00 1a 0c e8 00 b0 14 00 4d 24 90 3c 04 00 00 00 00 02 c9 41 24 05 00 04 b0 19 06 a0 28 00 00 00 30 27 2e 96 0a 81 b1 70 66 dd 59 04 50 00 00 59 35 04 50 00 00 00 00 00 00 00 00 00 00 00 19 b1 9a 2c 41 41 9a 08 00 00 00 0b 80 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 90 31 2d f8 26 a0 c8 00 00 02 5e 5f 01 9d d0 6a 74 0a 00 00 00 00 00 9b 80 9e 5f 01 65 fa 0a 00 00 9b 80 79 02 6d 04 9d b2 36 80 00 00 9d 55 e8 ca 32 01 9a 00 00 02 79 40 4f 20 36 82 ca 2c 50 c0 30 a2 30 00 37 3a 1a 64 65 00 00 00 00 03 67 d0 00 00 00 13 17 45 40 00 00 00 00 00 00 00 01 39 74 09 3b 06 8c 03 06 6f 64 00 01 79 24 11 40 00 00 00 04 b0 10 00 00 Data Ascii: {t'`@`NM$<A$(0'.pfYPY5P,AA1-&^_jt_eym6U2y@O 6,P007:degE@9t;ody$@
2024-09-27 22:11:08 UTC	8000	IN	Data Raw: 00 00 6c 80 9e 40 4b a0 a0 c8 90 14 ca 14 19 d0 00 d0 40 58 0b 41 90 01 65 06 81 28 20 2c a0 ac d9 fa 25 84 12 20 87 b1 5a 9f d0 c4 e4 88 8a 00 b9 53 45 bd 27 d1 96 85 9d a5 16 cd 48 32 d0 00 02 02 80 0c 00 00 00 00 96 81 34 14 00 00 01 2c f7 a2 58 bf fa 29 90 31 81 90 00 00 00 00 00 00 00 00 00 00 00 00 00 33 40 c9 00 03 60 32 00 12 e2 6a e0 a8 00 99 a6 8a 1d 82 f8 d4 d1 14 00 00 00 19 d0 34 00 00 00 00 04 bd c5 82 a0 00 09 b1 7d 17 64 f8 7a 16 fe a0 9e 50 0d 9f 41 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 7c be 82 ee 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ba 0b 90 4b c7 e2 61 a8 62 e8 61 a1 86 92 e2 62 eb 5b a0 00 00 06 98 2e a6 06 98 2e a6 06 98 00 00 00 00 00 00 00 0d 4b f4 14 00 00 00 00 00 00 00 00 Data Ascii: l@K@XAe( ,% ZSE'H24,X)13@`2j4}dzPA@\|Kabab[..K
2024-09-27 22:11:08 UTC	8000	IN	Data Raw: 08 00 00 00 00 00 00 00 00 00 00 00 0c 00 00 00 00 00 00 00 00 00 00 27 21 2b 22 01 00 00 00 59 41 74 19 02 78 66 00 02 6a e0 b1 59 ba 33 57 8f 60 a0 cd ec 00 32 82 c0 3f e4 0d 80 80 01 2e 01 ec 04 ab 04 50 00 00 21 46 99 00 00 00 12 82 00 00 00 00 25 fc 20 4b a5 14 12 f4 0c b5 d0 9d b2 35 d8 33 d1 40 00 00 05 97 f0 1a 00 00 00 00 00 00 04 b3 f4 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05 96 c0 59 cb e8 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 cb f4 14 00 00 6a 50 00 00 0c 03 01 30 0c 03 01 32 83 40 00 00 02 cb 80 d0 00 00 00 00 02 59 f0 19 00 00 00 00 00 00 00 00 01 65 c0 68 00 00 00 00 00 00 00 00 00 00 00 06 a5 d0 50 00 00 00 00 00 00 05 94 14 13 00 c0 3d 80 6b 52 e8 ba 00 00 00 00 00 00 00 00 00 00 0d 4b f8 0a 00 Data Ascii: '!+"YAtxfjY3W`2?.P!F% K53@Y(jP02@YehP=kRK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49722	151.101.65.229	443	6184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 22:11:07 UTC	380	OUT	GET /npm/jquery@3.5.1/dist/jquery.slim.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 22:11:07 UTC	775	IN	HTTP/1.1 200 OK Connection: close Content-Length: 72380 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 3.5.1 X-JSD-Version-Type: version ETag: W/"11abc-z42YIVUtUbtQzlcuaWq6EwkGWAA" Accept-Ranges: bytes Date: Fri, 27 Sep 2024 22:11:07 GMT Age: 392738 X-Served-By: cache-fra-etou8220123-FRA, cache-nyc-kteb1890039-NYC X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-09-27 22:11:07 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 64 65 70 72 65 63 61 74 65 64 2f 61 6a 61 78 2d 65 76 65 6e 74 2d 61 6c 69 61 73 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 Data Ascii: /*! jQuery v3.5.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-deprecated/ajax-event-alias,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other c
2024-09-27 22:11:07 UTC	16384	IN	Data Raw: 69 66 28 63 29 7b 69 66 28 79 29 7b 77 68 69 6c 65 28 6c 29 7b 61 3d 65 3b 77 68 69 6c 65 28 61 3d 61 5b 6c 5d 29 69 66 28 62 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 21 31 3b 75 3d 6c 3d 22 6f 6e 6c 79 22 3d 3d 3d 68 26 26 21 75 26 26 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 7d 72 65 74 75 72 6e 21 30 7d 69 66 28 75 3d 5b 6d 3f 63 2e 66 69 72 73 74 43 68 69 6c 64 3a 63 2e 6c 61 73 74 43 68 69 6c 64 5d 2c 6d 26 26 64 29 7b 70 3d 28 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 63 29 5b 41 5d 7c 7c 28 61 5b 41 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b Data Ascii: if(c){if(y){while(l){a=e;while(a=a[l])if(b?a.nodeName.toLowerCase()===f:1===a.nodeType)return!1;u=l="only"===h&&!u&&"nextSibling"}return!0}if(u=[m?c.firstChild:c.lastChild],m&&d){p=(s=(r=(i=(o=(a=c)[A]\|\|(a[A]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[
2024-09-27 22:11:07 UTC	16384	IN	Data Raw: 65 6e 67 74 68 2c 6c 3d 6e 75 6c 6c 3d 3d 6e 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 54 28 6e 29 29 66 6f 72 28 73 20 69 6e 20 69 3d 21 30 2c 6e 29 24 28 65 2c 74 2c 73 2c 6e 5b 73 5d 2c 21 30 2c 6f 2c 61 29 3b 65 6c 73 65 20 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 26 26 28 69 3d 21 30 2c 62 28 72 29 7c 7c 28 61 3d 21 30 29 2c 6c 26 26 28 61 3f 28 74 2e 63 61 6c 6c 28 65 2c 72 29 2c 74 3d 6e 75 6c 6c 29 3a 28 6c 3d 74 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6c 2e 63 61 6c 6c 28 45 28 65 29 2c 6e 29 7d 29 29 2c 74 29 29 66 6f 72 28 3b 73 3c 75 3b 73 2b 2b 29 74 28 65 5b 73 5d 2c 6e 2c 61 3f 72 3a 72 2e 63 61 6c 6c 28 65 5b 73 5d 2c 73 2c 74 28 65 5b 73 5d 2c 6e 29 29 29 3b 72 65 74 75 72 6e 20 69 3f 65 3a 6c 3f 74 Data Ascii: ength,l=null==n;if("object"===T(n))for(s in i=!0,n)$(e,t,s,n[s],!0,o,a);else if(void 0!==r&&(i=!0,b(r)\|\|(a=!0),l&&(a?(t.call(e,r),t=null):(l=t,t=function(e,t,n){return l.call(E(e),n)})),t))for(;s<u;s++)t(e[s],n,a?r:r.call(e[s],s,t(e[s],n)));return i?e:l?t
2024-09-27 22:11:07 UTC	16384	IN	Data Raw: 65 64 3d 73 2e 63 68 65 63 6b 65 64 3a 22 69 6e 70 75 74 22 21 3d 3d 6c 26 26 22 74 65 78 74 61 72 65 61 22 21 3d 3d 6c 7c 7c 28 75 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 73 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 3b 69 66 28 74 29 69 66 28 6e 29 66 6f 72 28 6f 3d 6f 7c 7c 67 65 28 65 29 2c 61 3d 61 7c 7c 67 65 28 63 29 2c 72 3d 30 2c 69 3d 6f 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 4f 65 28 6f 5b 72 5d 2c 61 5b 72 5d 29 3b 65 6c 73 65 20 4f 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 67 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 76 65 28 61 2c 21 66 26 26 67 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 Data Ascii: ed=s.checked:"input"!==l&&"textarea"!==l\|\|(u.defaultValue=s.defaultValue);if(t)if(n)for(o=o\|\|ge(e),a=a\|\|ge(c),r=0,i=o.length;r<i;r++)Oe(o[r],a[r]);else Oe(e,c);return 0<(a=ge(c,"script")).length&&ve(a,!f&&ge(e,"script")),c},cleanData:function(e){for(var t
2024-09-27 22:11:07 UTC	6844	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 7c 7c 74 68 69 73 2c 74 3d 59 2e 61 63 63 65 73 73 28 65 2c 72 29 2d 31 3b 74 3f 59 2e 61 63 63 65 73 73 28 65 2c 72 2c 74 29 3a 28 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 6e 2c 69 2c 21 30 29 2c 59 2e 72 65 6d 6f 76 65 28 65 2c 72 29 29 7d 7d 7d 29 2c 45 2e 70 61 72 73 65 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 69 66 28 21 65 7c 7c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 74 72 79 7b 74 3d 28 6e 65 77 20 67 2e 44 4f 4d 50 61 72 73 65 72 29 2e 70 61 72 73 65 46 72 6f 6d 53 74 72 69 6e 67 28 65 2c 22 74 65 78 Data Ascii: unction(){var e=this.ownerDocument\|\|this.document\|\|this,t=Y.access(e,r)-1;t?Y.access(e,r,t):(e.removeEventListener(n,i,!0),Y.remove(e,r))}}}),E.parseXML=function(e){var t;if(!e\|\|"string"!=typeof e)return null;try{t=(new g.DOMParser).parseFromString(e,"tex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49723	151.101.65.229	443	6184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 22:11:07 UTC	391	OUT	GET /npm/bootstrap@4.6.2/dist/js/bootstrap.bundle.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 22:11:07 UTC	776	IN	HTTP/1.1 200 OK Connection: close Content-Length: 83376 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 4.6.2 X-JSD-Version-Type: version ETag: W/"145b0-MjP9Adh/ukV+qtjcvCifdbFw+BQ" Accept-Ranges: bytes Age: 2732929 Date: Fri, 27 Sep 2024 22:11:07 GMT X-Served-By: cache-fra-etou8220105-FRA, cache-ewr-kewr1740042-EWR X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-09-27 22:11:07 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 36 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 32 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 Data Ascii: /! Bootstrap v4.6.2 (https://getbootstrap.com/) * Copyright 2011-2022 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,e){"ob
2024-09-27 22:11:07 UTC	1378	IN	Data Raw: 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 74 61 72 67 65 74 22 29 3b 69 66 28 21 65 7c 7c 22 23 22 3d 3d 3d 65 29 7b 76 61 72 20 6e 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 29 3b 65 3d 6e 26 26 22 23 22 21 3d 3d 6e 3f 6e 2e 74 72 69 6d 28 29 3a 22 22 7d 74 72 79 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 65 29 3f 65 3a 6e 75 6c 6c 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 2c 67 65 74 54 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 46 72 6f 6d 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 Data Ascii: SelectorFromElement:function(t){var e=t.getAttribute("data-target");if(!e\|\|"#"===e){var n=t.getAttribute("href");e=n&&"#"!==n?n.trim():""}try{return document.querySelector(e)?e:null}catch(t){return null}},getTransitionDurationFromElement:function(t){if(!t
2024-09-27 22:11:07 UTC	1378	IN	Data Raw: 45 72 72 6f 72 28 22 42 6f 6f 74 73 74 72 61 70 27 73 20 4a 61 76 61 53 63 72 69 70 74 20 72 65 71 75 69 72 65 73 20 6a 51 75 65 72 79 2e 20 6a 51 75 65 72 79 20 6d 75 73 74 20 62 65 20 69 6e 63 6c 75 64 65 64 20 62 65 66 6f 72 65 20 42 6f 6f 74 73 74 72 61 70 27 73 20 4a 61 76 61 53 63 72 69 70 74 2e 22 29 3b 76 61 72 20 74 3d 69 2e 64 65 66 61 75 6c 74 2e 66 6e 2e 6a 71 75 65 72 79 2e 73 70 6c 69 74 28 22 20 22 29 5b 30 5d 2e 73 70 6c 69 74 28 22 2e 22 29 3b 69 66 28 74 5b 30 5d 3c 32 26 26 74 5b 31 5d 3c 39 7c 7c 31 3d 3d 3d 74 5b 30 5d 26 26 39 3d 3d 3d 74 5b 31 5d 26 26 74 5b 32 5d 3c 31 7c 7c 74 5b 30 5d 3e 3d 34 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 6f 6f 74 73 74 72 61 70 27 73 20 4a 61 76 61 53 63 72 69 70 74 20 72 65 71 75 69 Data Ascii: Error("Bootstrap's JavaScript requires jQuery. jQuery must be included before Bootstrap's JavaScript.");var t=i.default.fn.jquery.split(" ")[0].split(".");if(t[0]<2&&t[1]<9\|\|1===t[0]&&9===t[1]&&t[2]<1\|\|t[0]>=4)throw new Error("Bootstrap's JavaScript requi
2024-09-27 22:11:07 UTC	1378	IN	Data Raw: 65 22 29 29 7b 76 61 72 20 6e 3d 75 2e 67 65 74 54 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 29 3b 69 2e 64 65 66 61 75 6c 74 28 74 29 2e 6f 6e 65 28 75 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 6e 29 7d 65 6c 73 65 20 74 68 69 73 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 29 7d 2c 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 2e 64 65 66 61 75 6c 74 28 74 29 2e 64 65 74 61 63 68 28 29 2e 74 72 69 67 67 65 72 28 22 63 6c 6f 73 65 64 2e 62 73 2e 61 Data Ascii: e")){var n=u.getTransitionDurationFromElement(t);i.default(t).one(u.TRANSITION_END,(function(n){return e._destroyElement(t,n)})).emulateTransitionEnd(n)}else this._destroyElement(t)},e._destroyElement=function(t){i.default(t).detach().trigger("closed.bs.a
2024-09-27 22:11:07 UTC	1378	IN	Data Raw: 3d 3d 6f 2e 74 79 70 65 7c 7c 28 6f 2e 63 68 65 63 6b 65 64 3d 21 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 6d 29 29 2c 74 68 69 73 2e 73 68 6f 75 6c 64 41 76 6f 69 64 54 72 69 67 67 65 72 43 68 61 6e 67 65 7c 7c 69 2e 64 65 66 61 75 6c 74 28 6f 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 29 2c 6f 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 28 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 Data Ascii: ==o.type\|\|(o.checked=!this._element.classList.contains(m)),this.shouldAvoidTriggerChange\|\|i.default(o).trigger("change")),o.focus(),e=!1}}this._element.hasAttribute("disabled")\|\|this._element.classList.contains("disabled")\|\|(e&&this._element.setAttribute(
2024-09-27 22:11:07 UTC	1378	IN	Data Raw: 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 62 75 74 74 6f 6e 73 22 5d 20 2e 62 74 6e 27 29 29 2c 65 3d 30 2c 6e 3d 74 2e 6c 65 6e 67 74 68 3b 65 3c 6e 3b 65 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 65 5d 2c 6f 3d 69 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 5f 29 3b 6f 2e 63 68 65 63 6b 65 64 7c 7c 6f 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 63 68 65 63 6b 65 64 22 29 3f 69 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 6d 29 3a 69 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 6d 29 7d 66 6f 72 28 76 61 72 20 72 3d 30 2c 61 3d 28 74 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 64 Data Ascii: ion(){for(var t=[].slice.call(document.querySelectorAll('[data-toggle="buttons"] .btn')),e=0,n=t.length;e<n;e++){var i=t[e],o=i.querySelector(_);o.checked\|\|o.hasAttribute("checked")?i.classList.add(m):i.classList.remove(m)}for(var r=0,a=(t=[].slice.call(d
2024-09-27 22:11:07 UTC	1378	IN	Data Raw: 50 6f 69 6e 74 65 72 45 76 65 6e 74 7c 7c 77 69 6e 64 6f 77 2e 4d 53 50 6f 69 6e 74 65 72 45 76 65 6e 74 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 65 3d 74 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 65 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 43 29 7d 2c 65 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 69 2e 64 65 66 61 75 6c 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 3b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 74 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 74 2e 63 73 73 28 22 76 69 Data Ascii: PointerEvent\|\|window.MSPointerEvent),this._addEventListeners()}var e=t.prototype;return e.next=function(){this._isSliding\|\|this._slide(C)},e.nextWhenVisible=function(){var t=i.default(this._element);!document.hidden&&t.is(":visible")&&"hidden"!==t.css("vi
2024-09-27 22:11:07 UTC	1378	IN	Data Raw: 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 7d 2c 65 2e 5f 67 65 74 43 6f 6e 66 69 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 61 28 7b 7d 2c 41 2c 74 29 2c 75 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 79 2c 74 2c 6b 29 2c 74 7d 2c 65 2e 5f 68 61 6e 64 6c 65 53 77 69 70 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 4d 61 74 68 2e 61 62 73 28 74 68 69 73 2e 74 6f 75 63 68 44 65 6c 74 61 58 29 3b 69 66 28 21 28 74 3c 3d 34 30 29 29 7b 76 61 72 20 65 3d 74 2f 74 68 69 73 2e 74 6f 75 63 68 44 65 6c 74 61 58 3b 74 68 69 73 Data Ascii: =null,this._isSliding=null,this._activeElement=null,this._indicatorsElement=null},e._getConfig=function(t){return t=a({},A,t),u.typeCheckConfig(y,t,k),t},e._handleSwipe=function(){var t=Math.abs(this.touchDeltaX);if(!(t<=40)){var e=t/this.touchDeltaX;this
2024-09-27 22:11:07 UTC	1378	IN	Data Raw: 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 29 29 2c 74 68 69 73 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 3f 28 69 2e 64 65 66 61 75 6c 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 22 70 6f 69 6e 74 65 72 64 6f 77 6e 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 28 74 29 7d 29 29 2c 69 2e 64 65 66 61 75 6c 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 22 70 6f 69 6e 74 65 72 75 70 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 28 74 29 7d 29 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 22 29 29 3a 28 69 2e 64 65 66 Data Ascii: .preventDefault()})),this._pointerEvent?(i.default(this._element).on("pointerdown.bs.carousel",(function(t){return e(t)})),i.default(this._element).on("pointerup.bs.carousel",(function(t){return n(t)})),this._element.classList.add("pointer-event")):(i.def
2024-09-27 22:11:07 UTC	1378	IN	Data Raw: 74 3a 74 2c 64 69 72 65 63 74 69 6f 6e 3a 65 2c 66 72 6f 6d 3a 6f 2c 74 6f 3a 6e 7d 29 3b 72 65 74 75 72 6e 20 69 2e 64 65 66 61 75 6c 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 74 72 69 67 67 65 72 28 72 29 2c 72 7d 2c 65 2e 5f 73 65 74 41 63 74 69 76 65 49 6e 64 69 63 61 74 6f 72 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 61 63 74 69 76 65 22 29 29 3b 69 2e 64 65 66 61 75 6c 74 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 54 29 3b 76 61 72 20 6e 3d 74 68 69 Data Ascii: t:t,direction:e,from:o,to:n});return i.default(this._element).trigger(r),r},e._setActiveIndicatorElement=function(t){if(this._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll(".active"));i.default(e).removeClass(T);var n=thi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49721	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-27 22:11:07 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-27 22:11:07 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=239635 Date: Fri, 27 Sep 2024 22:11:07 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49726	13.127.7.201	443	6184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 22:11:08 UTC	369	OUT	GET /templates/softmicro.svg HTTP/1.1 Host: awareness.threatcop.ai Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 22:11:08 UTC	253	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 22:11:08 GMT Server: Apache/2.4.52 (Ubuntu) Last-Modified: Fri, 23 Aug 2024 04:05:58 GMT ETag: "e43-62051e4803117" Accept-Ranges: bytes Content-Length: 3651 Connection: close Content-Type: image/svg+xml
2024-09-27 22:11:08 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49724	13.234.117.252	443	6184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 22:11:08 UTC	372	OUT	GET /staticpra/js/app/landing-ip.min.js HTTP/1.1 Host: microsofff.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 22:11:08 UTC	323	IN	HTTP/1.1 200 OK Server: nginx/1.26.0 Date: Fri, 27 Sep 2024 22:11:08 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 565 Connection: close X-Powered-By: Express Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Tue, 24 Sep 2024 10:50:35 GMT ETag: W/"235-19223a78b82"
2024-09-27 22:11:08 UTC	565	IN	Data Raw: 76 61 72 20 53 72 34 48 35 73 4a 45 3d 74 3d 3e 7b 76 61 72 20 61 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 29 2c 6f 3d 61 2e 67 65 74 28 22 72 69 64 22 29 2c 6e 3d 61 2e 67 65 74 28 22 6b 65 79 22 29 2c 65 3d 22 22 3b 74 26 26 24 28 22 66 6f 72 6d 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 3d 28 65 3d 24 28 74 68 69 73 29 2e 61 74 74 72 28 22 61 63 74 69 6f 6e 22 29 29 2e 69 6e 64 65 78 4f 66 28 22 2f 64 61 74 61 22 29 3e 2d 31 3f 65 2b 22 26 6c 6f 63 61 74 69 6f 6e 3d 22 2b 74 2e 6c 6f 63 61 74 69 6f 6e 2e 6c 61 74 2b 22 2c 22 2b 74 2e 6c 6f 63 61 74 69 6f 6e 2e 6c 6e 67 3a 65 2b 22 2f 64 61 74 61 3f 72 49 64 3d 22 2b 6f 2b 22 26 6b 65 79 3d 22 2b 6e Data Ascii: var Sr4H5sJE=t=>{var a=new URLSearchParams(window.location.search),o=a.get("rid"),n=a.get("key"),e="";t&&$("form").each(function(){e=(e=$(this).attr("action")).indexOf("/data")>-1?e+"&location="+t.location.lat+","+t.location.lng:e+"/data?rId="+o+"&key="+n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49725	13.127.7.201	443	6184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 22:11:08 UTC	363	OUT	GET /templates/key.svg HTTP/1.1 Host: awareness.threatcop.ai Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 22:11:08 UTC	253	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 22:11:08 GMT Server: Apache/2.4.52 (Ubuntu) Last-Modified: Fri, 23 Aug 2024 04:05:57 GMT ETag: "638-62051e47a64ba" Accept-Ranges: bytes Content-Length: 1592 Connection: close Content-Type: image/svg+xml
2024-09-27 22:11:08 UTC	1592	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 2c 30 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49727	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-27 22:11:09 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-27 22:11:09 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=239663 Date: Fri, 27 Sep 2024 22:11:09 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-27 22:11:09 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49728	13.234.117.252	443	6184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 22:11:09 UTC	607	OUT	GET /favicon.ico HTTP/1.1 Host: microsofff.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://microsofff.com/?rid=2751471&key=gtG6Iz Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 22:11:10 UTC	261	IN	HTTP/1.1 404 Not Found Server: nginx/1.26.0 Date: Fri, 27 Sep 2024 22:11:10 GMT Content-Type: text/html; charset=utf-8 Content-Length: 19 Connection: close X-Powered-By: Express Access-Control-Allow-Origin: * ETag: W/"13-FtncnC4nKhbzXLrRY4Tty8L5wNs"
2024-09-27 22:11:10 UTC	19	IN	Data Raw: 34 30 34 20 70 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 2e Data Ascii: 404 page not found.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49729	13.127.7.201	443	6184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 22:11:10 UTC	369	OUT	GET /templates/ms_banner.jpg HTTP/1.1 Host: awareness.threatcop.ai Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 22:11:11 UTC	254	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 22:11:10 GMT Server: Apache/2.4.52 (Ubuntu) Last-Modified: Tue, 09 Jul 2024 06:01:57 GMT ETag: "5c361-61cca447475a1" Accept-Ranges: bytes Content-Length: 377697 Connection: close Content-Type: image/jpeg
2024-09-27 22:11:11 UTC	7938	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 01 2c 01 2c 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c0 00 11 08 0d 2f 17 70 03 01 11 00 02 11 01 03 11 01 ff c4 00 19 00 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 09 ff c4 00 2a 10 01 01 01 00 02 03 01 01 01 01 01 01 00 02 00 07 00 01 11 02 31 12 21 51 41 61 71 22 81 32 42 13 91 03 52 a1 b1 62 82 ff c4 00 1a 01 01 01 Data Ascii: JFIF,,CC/p*1!QAaq"2BRb
2024-09-27 22:11:11 UTC	8000	IN	Data Raw: c6 7e 82 80 00 19 01 3c 41 32 80 00 00 02 ef d0 4f 40 00 00 00 00 00 00 00 00 00 00 04 b6 11 31 a9 61 89 80 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 80 60 00 d0 00 00 00 00 00 00 00 33 41 00 00 00 00 00 05 97 01 a0 00 00 00 00 00 00 00 04 b3 41 32 fc 04 06 a5 d0 2c fd 80 c8 00 d7 94 13 0d 8a 98 ad 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 41 90 00 00 00 00 00 00 00 00 00 00 00 05 b7 d0 20 00 00 0b 2e 03 40 00 00 0b a0 b2 80 00 d4 ba 95 9a 22 00 00 00 00 00 00 00 00 00 19 01 2f 1f 80 9d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bb 44 c3 65 81 98 82 8b 12 8d 20 00 00 b3 a6 68 a8 00 00 02 c0 50 4c 04 00 00 6b a0 60 32 00 00 b0 2c d5 c4 66 cb 19 65 a9 76 35 01 40 00 00 00 00 01 9b db 34 10 00 00 00 00 00 06 ba 0c 80 2f 1b 8d 74 Data Ascii: ~<A2O@1a`3AA2,A .@"/De hPLk`2,fev5@4/t
2024-09-27 22:11:11 UTC	8000	IN	Data Raw: 00 00 00 00 00 00 00 00 58 cd f7 45 00 00 00 00 00 00 00 00 00 13 41 34 0d 04 00 00 6b 41 34 0d 03 41 34 00 01 ac 00 14 01 36 7d 04 b7 41 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 76 86 1e 42 62 ec fa 26 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 26 03 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2c a0 a0 00 00 00 00 12 e0 35 d8 00 01 d8 33 66 0c 82 2c e5 f4 6b 4b 65 12 fa 92 e0 8d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 aa 2e ae fa d0 4b ed b8 cd 3a 06 a5 d0 00 03 a0 4f 20 36 02 80 00 00 00 00 00 00 00 00 00 00 2c 9a 0d 26 02 89 67 e8 96 32 32 d6 4a 35 9a 9e 22 62 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 80 0b 2e 55 2b 48 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9e 30 12 ca 08 00 Data Ascii: XEA4kA4A46}AvBb&(& ,53f,kKe.K:O 6,&g22J5"b.U+H0
2024-09-27 22:11:11 UTC	8000	IN	Data Raw: 8c b7 2e 8d 16 68 30 32 00 00 00 00 00 00 00 0b 2e 02 f9 40 5e c0 9e 80 04 e4 07 97 d0 5d 80 4b ec 1b 00 4a 08 00 00 80 00 00 00 00 00 00 00 00 00 00 00 00 00 18 00 cf 2f a0 80 d4 bb 1a 82 aa 68 1e 50 30 10 1a 80 94 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 44 15 41 30 14 10 19 00 00 00 00 00 00 00 00 00 00 00 00 00 12 82 80 09 41 90 00 37 00 00 00 00 00 0d b0 00 00 00 1a 00 0b 70 19 00 16 72 fa 05 a0 cd 05 00 00 25 c0 6a 5d 04 e4 0e 76 60 35 c2 fb b0 1b 02 cd 06 6c c0 01 2d c0 25 05 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 66 c0 40 58 0b 41 90 00 00 01 9e 4b 04 68 00 00 00 00 00 00 00 00 00 00 01 31 2c 19 64 01 a5 a2 58 82 00 00 00 01 01 68 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 6c 13 52 d9 7f 04 b4 Data Ascii: .h02.@^]KJ/hP0DA0A7pr%j]v`5l-%f@XAKh1,dXh lR
2024-09-27 22:11:11 UTC	8000	IN	Data Raw: 00 00 00 00 00 4d 05 00 19 a0 80 00 00 00 00 00 00 0b 00 c0 40 00 02 03 58 09 80 40 68 00 40 50 42 8a c8 00 00 00 00 00 00 0d 4f 60 a0 cd ba 08 00 35 3a 05 00 19 b7 f0 13 70 1a 9c be 82 5b f8 08 0d 02 80 00 25 b8 04 ba 0a 02 20 aa 00 00 00 00 02 5a 96 8c b2 00 d4 6a 0a a2 56 68 6a 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c e0 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 68 10 14 00 00 66 cf 80 80 0c d0 00 01 ab 35 81 2c c6 b7 44 50 00 17 bf f5 38 20 2f 1e ca 1c 88 26 5a 68 d7 8a 68 64 41 40 04 be d6 0c b4 00 00 00 2c b9 13 04 50 00 00 00 01 01 41 9a 04 05 05 00 12 c4 12 26 18 b5 78 cd 98 0b 3a 4a 95 51 00 00 00 00 00 04 f2 5c 5c 59 75 10 00 12 f4 b1 63 2d 2d 6a 7f 59 ac aa 00 00 00 00 00 02 6c 03 c8 14 12 cd 04 06 b2 7c 00 Data Ascii: M@X@h@PBO`5:p[% ZjVhj hf5,DP8 /&ZhhdA@,PA&x:JQ\\Yuc--jYl\|
2024-09-27 22:11:11 UTC	8000	IN	Data Raw: 00 00 00 00 00 00 01 90 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 89 45 41 9a b0 58 51 50 00 00 00 03 68 2f 90 2e c0 00 00 00 00 00 00 00 00 00 00 04 bd 8c d5 e1 7d e0 46 c6 99 bd 8c d6 6d 11 01 78 dc a0 e8 00 00 00 00 00 00 00 00 00 00 00 00 00 cd 04 00 58 0d 00 00 00 00 00 26 03 20 00 0b 01 6c 06 40 00 00 00 00 1a 89 45 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 65 81 ad 6b 57 8a a5 68 40 00 01 33 01 2d fc 66 d1 10 6a 74 d4 0b c7 e1 82 4f 55 27 83 4d 00 00 00 00 27 2e 81 90 00 00 00 00 00 00 00 00 00 00 00 00 00 12 02 80 0c 00 00 00 00 02 cb 80 bb a0 96 fe 40 40 00 00 00 6a 5f 40 9b 77 41 65 d0 50 66 df c8 08 25 80 84 f4 1a d4 ba 2c 51 41 9a cd ba 08 00 1b 68 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 02 80 00 00 02 58 0c 80 Data Ascii: @EAXQPh/.}FmxX& l@E@@ekWh@3-fjtOU'M'.@@j_@wAePf%,QAhX
2024-09-27 22:11:11 UTC	8000	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 4b 2d 12 c2 74 29 7a 04 9d 8c c5 b7 06 93 6d 04 19 5c a2 e2 e4 17 19 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b5 03 a0 14 00 00 00 00 00 12 d0 64 16 76 0d 00 02 02 87 40 cd ba 08 02 33 7a 92 de 34 c5 ea ff 00 f5 65 4d c4 8d 9b 69 44 c4 4b 70 19 be fb 06 a6 1a 6a 82 5b 80 9d 83 37 b6 a3 51 15 5d 58 60 00 0c 86 9a 96 c8 09 6e 82 00 00 00 00 0b 3b 03 67 e4 06 6c 06 b8 dd 9e c1 a0 4b 64 04 b7 41 00 00 0b 3d ee 80 09 66 0c d8 82 00 01 7d 51 40 94 0a 08 00 00 00 00 00 00 99 05 66 cc 10 06 c6 ac 67 94 f6 32 99 a0 be 20 be 30 0c 90 14 06 6c 04 12 f4 b0 49 56 c1 76 7d 4c 0d 9b e8 12 dd 59 04 50 00 00 00 4c 04 06 80 06 6c c0 40 00 00 00 ec 18 19 00 00 00 00 00 1a f2 fe 02 79 50 36 fd 04 05 94 1a 00 00 00 02 74 00 33 66 02 01 b3 Data Ascii: K-t)zm\dv@3z4eMiDKpj[7Q]X`n;glKdA=f}Q@fg2 0lIVv}LYPLl@yP6t3f
2024-09-27 22:11:11 UTC	8000	IN	Data Raw: 97 df b0 ad 0c 00 00 06 7b d1 74 10 00 00 27 60 d7 40 cf 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 4e 82 80 00 1a 0c e8 00 b0 14 00 4d 24 90 3c 04 00 00 00 00 02 c9 41 24 05 00 04 b0 19 06 a0 28 00 00 00 30 27 2e 96 0a 81 b1 70 66 dd 59 04 50 00 00 59 35 04 50 00 00 00 00 00 00 00 00 00 00 00 19 b1 9a 2c 41 41 9a 08 00 00 00 0b 80 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 90 31 2d f8 26 a0 c8 00 00 02 5e 5f 01 9d d0 6a 74 0a 00 00 00 00 00 9b 80 9e 5f 01 65 fa 0a 00 00 9b 80 79 02 6d 04 9d b2 36 80 00 00 9d 55 e8 ca 32 01 9a 00 00 02 79 40 4f 20 36 82 ca 2c 50 c0 30 a2 30 00 37 3a 1a 64 65 00 00 00 00 03 67 d0 00 00 00 13 17 45 40 00 00 00 00 00 00 00 01 39 74 09 3b 06 8c 03 06 6f 64 00 01 79 24 11 40 00 00 00 04 b0 10 00 00 Data Ascii: {t'`@`NM$<A$(0'.pfYPY5P,AA1-&^_jt_eym6U2y@O 6,P007:degE@9t;ody$@
2024-09-27 22:11:11 UTC	8000	IN	Data Raw: 00 00 6c 80 9e 40 4b a0 a0 c8 90 14 ca 14 19 d0 00 d0 40 58 0b 41 90 01 65 06 81 28 20 2c a0 ac d9 fa 25 84 12 20 87 b1 5a 9f d0 c4 e4 88 8a 00 b9 53 45 bd 27 d1 96 85 9d a5 16 cd 48 32 d0 00 02 02 80 0c 00 00 00 00 96 81 34 14 00 00 01 2c f7 a2 58 bf fa 29 90 31 81 90 00 00 00 00 00 00 00 00 00 00 00 00 00 33 40 c9 00 03 60 32 00 12 e2 6a e0 a8 00 99 a6 8a 1d 82 f8 d4 d1 14 00 00 00 19 d0 34 00 00 00 00 04 bd c5 82 a0 00 09 b1 7d 17 64 f8 7a 16 fe a0 9e 50 0d 9f 41 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 7c be 82 ee 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ba 0b 90 4b c7 e2 61 a8 62 e8 61 a1 86 92 e2 62 eb 5b a0 00 00 06 98 2e a6 06 98 2e a6 06 98 00 00 00 00 00 00 00 0d 4b f4 14 00 00 00 00 00 00 00 00 Data Ascii: l@K@XAe( ,% ZSE'H24,X)13@`2j4}dzPA@\|Kabab[..K
2024-09-27 22:11:11 UTC	8000	IN	Data Raw: 08 00 00 00 00 00 00 00 00 00 00 00 0c 00 00 00 00 00 00 00 00 00 00 27 21 2b 22 01 00 00 00 59 41 74 19 02 78 66 00 02 6a e0 b1 59 ba 33 57 8f 60 a0 cd ec 00 32 82 c0 3f e4 0d 80 80 01 2e 01 ec 04 ab 04 50 00 00 21 46 99 00 00 00 12 82 00 00 00 00 25 fc 20 4b a5 14 12 f4 0c b5 d0 9d b2 35 d8 33 d1 40 00 00 05 97 f0 1a 00 00 00 00 00 00 04 b3 f4 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05 96 c0 59 cb e8 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 cb f4 14 00 00 6a 50 00 00 0c 03 01 30 0c 03 01 32 83 40 00 00 02 cb 80 d0 00 00 00 00 02 59 f0 19 00 00 00 00 00 00 00 00 01 65 c0 68 00 00 00 00 00 00 00 00 00 00 00 06 a5 d0 50 00 00 00 00 00 00 05 94 14 13 00 c0 3d 80 6b 52 e8 ba 00 00 00 00 00 00 00 00 00 00 0d 4b f8 0a 00 Data Ascii: '!+"YAtxfjY3W`2?.P!F% K53@Y(jP02@YehP=kRK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49741	13.234.117.252	443	6184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 22:11:27 UTC	797	OUT	GET /?rid=2751471&key=gtG6Iz HTTP/1.1 Host: microsofff.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://microsofff.com/?rid=2751471&key=gtG6Iz Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"1cad-hx8g7mfyxXY3rBUFEIz9ABxJnmo"
2024-09-27 22:11:28 UTC	206	IN	HTTP/1.1 304 Not Modified Server: nginx/1.26.0 Date: Fri, 27 Sep 2024 22:11:28 GMT Connection: close X-Powered-By: Express Access-Control-Allow-Origin: * ETag: W/"1cad-hx8g7mfyxXY3rBUFEIz9ABxJnmo"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49740	13.234.117.252	443	6184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 22:11:28 UTC	656	OUT	GET /staticpra/js/app/landing-ip.min.js HTTP/1.1 Host: microsofff.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: W/"235-19223a78b82" If-Modified-Since: Tue, 24 Sep 2024 10:50:35 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://microsofff.com/?rid=2751471&key=gtG6Iz Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 22:11:28 UTC	259	IN	HTTP/1.1 304 Not Modified Server: nginx/1.26.0 Date: Fri, 27 Sep 2024 22:11:28 GMT Connection: close X-Powered-By: Express Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Tue, 24 Sep 2024 10:50:35 GMT ETag: W/"235-19223a78b82"

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 4444, Parent PID: 5460

General

Target ID:	0
Start time:	18:10:56
Start date:	27/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6184, Parent PID: 4444

General

Target ID:	2
Start time:	18:11:00
Start date:	27/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2112 --field-trial-handle=1984,i,13159588908107513183,537215738708389951,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6664, Parent PID: 5460

General

Target ID:	3
Start time:	18:11:02
Start date:	27/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://microsofff.com/?rid=2751471&key=gtG6Iz"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly