Edit tour

Windows Analysis Report
https://svfs.is/TMPS/

Overview

General Information

Sample URL:	https://svfs.is/TMPS/
Analysis ID:	1521657
Tags:	openphish
Infos:

Detection

Score:	60
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Phishing site detected (based on favicon image match)

Detected non-DNS traffic on DNS port

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3088 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 4784 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2240 --field-trial-handle=2164,i,3080895685432291650,9581872052856105846,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 1936 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://svfs.is/TMPS/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://svfs.is/TMPS/

SlashNext: detection malicious, Label: Fraudulent Website type: Phishing & Social usering

Phishing

AI detected phishing page

Source: https://svfs.is/dnkdl/

LLM: Score: 9 Reasons: DHL is a well-known international logistics and courier company., The legitimate domain for DHL is 'dhl.com'., The provided URL 'svfs.is' does not match the legitimate domain 'dhl.com'., The domain 'svfs.is' is unusual and not associated with DHL., The use of a different domain extension (.is) is suspicious., Phishing sites often use unrelated or unusual domain names to trick users. DOM: 1.0.pages.csv

Phishing site detected (based on favicon image match)

Source: https://svfs.is	Matcher: Template: dhl matched with high similarity
Source: https://svfs.is/dnkdl/	Matcher: Template: dhl matched with high similarity

Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.6:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.6:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49769 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.6:49711 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56

Source: global traffic	HTTP traffic detected: GET /TMPS/ HTTP/1.1Host: svfs.isConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dnkdl/ HTTP/1.1Host: svfs.isConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://svfs.is/TMPS/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dnkdl/assets/font-awesome/css/font-awesome.min.css HTTP/1.1Host: svfs.isConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://svfs.is/dnkdl/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
Source: global traffic	HTTP traffic detected: GET /dnkdl/assets/core_form.css HTTP/1.1Host: svfs.isConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://svfs.is/dnkdl/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
Source: global traffic	HTTP traffic detected: GET /dnkdl/assets/bundle.css HTTP/1.1Host: svfs.isConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://svfs.is/dnkdl/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
Source: global traffic	HTTP traffic detected: GET /dnkdl/assets/jquery/dist/jquery.min.js HTTP/1.1Host: svfs.isConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://svfs.is/dnkdl/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
Source: global traffic	HTTP traffic detected: GET /dnkdl/assets/ua-parser-js/dist/ua-parser.min.js HTTP/1.1Host: svfs.isConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://svfs.is/dnkdl/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
Source: global traffic	HTTP traffic detected: GET /dnkdl/assets/angular/angular.min.js HTTP/1.1Host: svfs.isConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://svfs.is/dnkdl/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
Source: global traffic	HTTP traffic detected: GET /dnkdl/assets/core_form.js HTTP/1.1Host: svfs.isConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://svfs.is/dnkdl/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
Source: global traffic	HTTP traffic detected: GET /dnkdl/img/dhl-logo.svg HTTP/1.1Host: svfs.isConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://svfs.is/dnkdl/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
Source: global traffic	HTTP traffic detected: GET /dnkdl/img/youtube-new.svg HTTP/1.1Host: svfs.isConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://svfs.is/dnkdl/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
Source: global traffic	HTTP traffic detected: GET /dnkdl/img/facebook-new.svg HTTP/1.1Host: svfs.isConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://svfs.is/dnkdl/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
Source: global traffic	HTTP traffic detected: GET /dnkdl/img/linkedIn-new.svg HTTP/1.1Host: svfs.isConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://svfs.is/dnkdl/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
Source: global traffic	HTTP traffic detected: GET /dnkdl/img/instagram-new.svg HTTP/1.1Host: svfs.isConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://svfs.is/dnkdl/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
Source: global traffic	HTTP traffic detected: GET /dnkdl/img/7f0d3a9b32ad319a9dd1.svg HTTP/1.1Host: svfs.isConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://svfs.is/dnkdl/assets/bundle.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
Source: global traffic	HTTP traffic detected: GET /dnkdl/fonts/iconfont-36e40d8b4a0a369beacf.woff HTTP/1.1Host: svfs.isConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://svfs.issec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://svfs.is/dnkdl/assets/bundle.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
Source: global traffic	HTTP traffic detected: GET /dnkdl/fonts/default-274a65bae9742377aaf0.woff HTTP/1.1Host: svfs.isConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://svfs.issec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://svfs.is/dnkdl/assets/bundle.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
Source: global traffic	HTTP traffic detected: GET /dnkdl/fonts/default-815fcbb4d2c579017011.woff HTTP/1.1Host: svfs.isConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://svfs.issec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://svfs.is/dnkdl/assets/bundle.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
Source: global traffic	HTTP traffic detected: GET /dnkdl/fonts/default-5a6dd86f272b304a8b83.woff HTTP/1.1Host: svfs.isConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://svfs.issec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://svfs.is/dnkdl/assets/bundle.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
Source: global traffic	HTTP traffic detected: GET /dnkdl/fonts/default-3e828e80f6e985c352eb.woff HTTP/1.1Host: svfs.isConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://svfs.issec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://svfs.is/dnkdl/assets/bundle.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
Source: global traffic	HTTP traffic detected: GET /dnkdl/assets/ua-parser-js/dist/ua-parser.min.js HTTP/1.1Host: svfs.isConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
Source: global traffic	HTTP traffic detected: GET /dnkdl/assets/jquery/dist/jquery.min.js HTTP/1.1Host: svfs.isConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
Source: global traffic	HTTP traffic detected: GET /dnkdl/assets/angular/angular.min.js HTTP/1.1Host: svfs.isConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
Source: global traffic	HTTP traffic detected: GET /dnkdl/assets/core_form.js HTTP/1.1Host: svfs.isConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
Source: global traffic	HTTP traffic detected: GET /dnkdl/img/dhl-logo.svg HTTP/1.1Host: svfs.isConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
Source: global traffic	HTTP traffic detected: GET /dnkdl/img/youtube-new.svg HTTP/1.1Host: svfs.isConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /dnkdl/img/favicon.ico HTTP/1.1Host: svfs.isConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://svfs.is/dnkdl/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
Source: global traffic	HTTP traffic detected: GET /dnkdl/img/facebook-new.svg HTTP/1.1Host: svfs.isConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
Source: global traffic	HTTP traffic detected: GET /dnkdl/img/linkedIn-new.svg HTTP/1.1Host: svfs.isConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
Source: global traffic	HTTP traffic detected: GET /dnkdl/img/instagram-new.svg HTTP/1.1Host: svfs.isConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
Source: global traffic	HTTP traffic detected: GET /dnkdl/img/7f0d3a9b32ad319a9dd1.svg HTTP/1.1Host: svfs.isConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
Source: global traffic	HTTP traffic detected: GET /dnkdl/img/favicon.ico HTTP/1.1Host: svfs.isConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=78dSHgUMl3K4rbg&MD=yeNl4vB5 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=78dSHgUMl3K4rbg&MD=yeNl4vB5 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com

Source: global traffic	DNS traffic detected: DNS query: svfs.is
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sat, 28 Sep 2024 23:44:08 GMTContent-Type: text/htmlContent-Length: 808Connection: closeLast-Modified: Sun, 12 Mar 2023 17:15:32 GMTETag: "328-5f6b724586ded"Accept-Ranges: bytes
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sat, 28 Sep 2024 23:44:08 GMTContent-Type: text/htmlContent-Length: 808Connection: closeLast-Modified: Sun, 12 Mar 2023 17:15:32 GMTETag: "328-5f6b724586ded"Accept-Ranges: bytes
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sat, 28 Sep 2024 23:44:08 GMTContent-Type: text/htmlContent-Length: 808Connection: closeLast-Modified: Sun, 12 Mar 2023 17:15:32 GMTETag: "328-5f6b724586ded"Accept-Ranges: bytes
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sat, 28 Sep 2024 23:44:08 GMTContent-Type: text/htmlContent-Length: 808Connection: closeLast-Modified: Sun, 12 Mar 2023 17:15:32 GMTETag: "328-5f6b724586ded"Accept-Ranges: bytes
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sat, 28 Sep 2024 23:44:08 GMTContent-Type: text/htmlContent-Length: 808Connection: closeLast-Modified: Sun, 12 Mar 2023 17:15:32 GMTETag: "328-5f6b724586ded"Accept-Ranges: bytes

Source: chromecache_73.2.dr, chromecache_77.2.dr	String found in binary or memory: http://angularjs.org
Source: chromecache_73.2.dr, chromecache_77.2.dr	String found in binary or memory: http://errors.angularjs.org/1.6.6/
Source: chromecache_53.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_53.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_74.2.dr, chromecache_66.2.dr	String found in binary or memory: https://github.com/faisalman/ua-parser-js
Source: chromecache_51.2.dr, chromecache_63.2.dr	String found in binary or memory: https://i.imgur.com/lQNIz8H.png
Source: chromecache_49.2.dr, chromecache_59.2.dr, chromecache_71.2.dr, chromecache_55.2.dr, chromecache_54.2.dr, chromecache_70.2.dr, chromecache_60.2.dr, chromecache_72.2.dr	String found in binary or memory: https://sketchapp.com
Source: chromecache_50.2.dr	String found in binary or memory: https://svfs.is/dnkdl/

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.6:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.6:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49769 version: TLS 1.2

Source: classification engine

Classification label: mal60.phis.win@16/53@6/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2240 --field-trial-handle=2164,i,3080895685432291650,9581872052856105846,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://svfs.is/TMPS/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2240 --field-trial-handle=2164,i,3080895685432291650,9581872052856105846,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://svfs.is/TMPS/	100%	SlashNext	Fraudulent Website type: Phishing & Social usering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
http://fontawesome.io	0%	URL Reputation	safe
http://fontawesome.io/license	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
svfs.is	185.112.144.235	true	true	unknown
www.google.com	142.250.186.100	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://svfs.is/dnkdl/assets/angular/angular.min.js	true	unknown
https://svfs.is/dnkdl/fonts/default-3e828e80f6e985c352eb.woff	true	unknown
https://svfs.is/dnkdl/fonts/default-5a6dd86f272b304a8b83.woff	true	unknown
https://svfs.is/dnkdl/assets/bundle.css	true	unknown
https://svfs.is/dnkdl/	true	unknown
https://svfs.is/dnkdl/img/youtube-new.svg	true	unknown
https://svfs.is/dnkdl/img/facebook-new.svg	true	unknown
https://svfs.is/dnkdl/img/linkedIn-new.svg	true	unknown
https://svfs.is/dnkdl/img/instagram-new.svg	true	unknown
https://svfs.is/dnkdl/fonts/iconfont-36e40d8b4a0a369beacf.woff	true	unknown
https://svfs.is/dnkdl/img/favicon.ico	true	unknown
https://svfs.is/dnkdl/assets/core_form.js	true	unknown
https://svfs.is/TMPS/	true	unknown
https://svfs.is/dnkdl/assets/ua-parser-js/dist/ua-parser.min.js	true	unknown
https://svfs.is/dnkdl/assets/jquery/dist/jquery.min.js	true	unknown
https://svfs.is/dnkdl/assets/font-awesome/css/font-awesome.min.css	true	unknown
https://svfs.is/dnkdl/fonts/default-815fcbb4d2c579017011.woff	true	unknown
https://svfs.is/dnkdl/img/dhl-logo.svg	true	unknown
https://svfs.is/dnkdl/fonts/default-274a65bae9742377aaf0.woff	true	unknown
https://svfs.is/dnkdl/img/7f0d3a9b32ad319a9dd1.svg	true	unknown
https://svfs.is/dnkdl/assets/core_form.css	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://fontawesome.io	chromecache_53.2.dr	false	URL Reputation: safe	unknown
http://errors.angularjs.org/1.6.6/	chromecache_73.2.dr, chromecache_77.2.dr	false		unknown
http://fontawesome.io/license	chromecache_53.2.dr	false	URL Reputation: safe	unknown
https://sketchapp.com	chromecache_49.2.dr, chromecache_59.2.dr, chromecache_71.2.dr, chromecache_55.2.dr, chromecache_54.2.dr, chromecache_70.2.dr, chromecache_60.2.dr, chromecache_72.2.dr	false		unknown
https://i.imgur.com/lQNIz8H.png	chromecache_51.2.dr, chromecache_63.2.dr	false		unknown
http://angularjs.org	chromecache_73.2.dr, chromecache_77.2.dr	false		unknown
https://github.com/faisalman/ua-parser-js	chromecache_74.2.dr, chromecache_66.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.186.100	www.google.com	United States	15169	GOOGLEUS	false
185.112.144.235	svfs.is	Iceland	44925	THE-1984-ASIS	true

Private

IP
192.168.2.6
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1521657
Start date and time:	2024-09-29 01:43:05 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 18s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://svfs.is/TMPS/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	6
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.phis.win@16/53@6/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.163, 74.125.206.84, 142.250.185.238, 34.104.35.123, 142.250.185.170, 172.217.16.202, 142.250.185.234, 142.250.185.138, 216.58.206.74, 142.250.184.234, 142.250.185.202, 142.250.186.74, 142.250.186.138, 216.58.212.170, 172.217.16.138, 142.250.186.42, 142.250.185.74, 142.250.186.106, 142.250.185.106, 172.217.18.10, 192.229.221.95, 13.85.23.206, 199.232.214.172, 20.242.39.171, 172.217.16.195
Excluded domains from analysis (whitelisted): client.wns.windows.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://svfs.is/TMPS/

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://svfs.is/dnkdl/ Model: jbxai	{ "brand":["DHL"], "contains_trigger_text":true, "trigger_text":"To complete the delivery process by DHL Express, please confirm the payment (3 USD) by clicking Next. Online verification must be done within the next 7 days before it expires.", "prominent_button_name":"Next", "text_input_field_labels":["Service Area: DHL OFFICE", "Tracking number: 00340434139185930097"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":true, "has_visible_qrcode":false}

URL: https://svfs.is/dnkdl/ Model: jbxai	{ "phishing_score":9, "brands":"DHL", "legit_domain":"dhl.com", "classification":"wellknown", "reasons":["DHL is a well-known international logistics and courier company.", "The legitimate domain for DHL is 'dhl.com'.", "The provided URL 'svfs.is' does not match the legitimate domain 'dhl.com'.", "The domain 'svfs.is' is unusual and not associated with DHL.", "The use of a different domain extension (.is) is suspicious.", "Phishing sites often use unrelated or unusual domain names to trick users."], "brand_matches":[false], "url_match":false, "brand_input":"DHL", "input_fields":"Service Area: DHL OFFICE, Tracking number: 00340434139185930097"}

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 48

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:HeL:u
MD5:	841C268288739CF9828DEF74E761DEB6
SHA1:	E44AB09A6DBB26453957362439CABAC6FDD135E8
SHA-256:	80F4CAD30556965E423C10AD6EB77A5F6E901CA7BD2C00FA8D381B3D633E7583
SHA-512:	877B172FCFF80083C146A107A3CBFD7593D318A077580001B78117AB6BB32275FDBA52FE5E19C62756A84A0270E1E210E558395727338F5DAFF2FF82DAA802CD
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAklm2vkfvm1QxIFDRR4aLM=?alt=proto
Preview:	CgkKBw0UeGizGgA=

Chrome Cache Entry: 49

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4508
Entropy (8bit):	4.279722918407211
Encrypted:	false
SSDEEP:	96:00s7QepJtXJ8o7QZGdUo+AsfPiQ81PY5EEoyY:js7jJSo7RUol4P+1Q6EoyY
MD5:	056511AEB5282ECAAB9FBF10ED2273E5
SHA1:	FC29C2C37C4B4A31AD13E80356371E338AEF5894
SHA-256:	F01C2E1870FCD75CECA3B4C42C3110CB0AA4B933B562CF3D2C7DDD20CE03C7EE
SHA-512:	C758606B6749103990368038C74AEC1822442CB097D159400286992997106F24653FE740ACACA91A9AEF52E671019C7295AF7D14E64502BBF125383E3C140615
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="42px" height="42px" viewBox="0 0 42 42" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 54.1 (76490) - https://sketchapp.com -->. <title>Icon SoMe / Instagram</title>. <desc>Created with Sketch.</desc>. <g id="Icon-SoMe-/-Instagram" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <path d="M20.9999603,1 C26.4316739,1 27.1126824,1.02302314 29.245895,1.12035543 C31.3747412,1.21744955 32.8285332,1.5555721 34.10076,2.05001379 C35.4159368,2.56104803 36.5312886,3.24491457 37.6431473,4.35677327 C38.7550854,5.46871136 39.4388726,6.58406323 39.9499862,7.89916065 C40.4444279,9.1713874 40.7825504,10.6251794 40.8796446,12.7540256 C40.9769769,14.8872382 41,15.5683261 41,20.9999603 C41,26.4316739 40.9769769,27.1127618 40.8796446,29.2459744 C40.7825504,31.3747412 40.4444279,32.8286126 39.9499862,34.10076 C39.4388726,35.4159368 38.7550854,36.5312886

Chrome Cache Entry: 50

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	57
Entropy (8bit):	4.411947585047357
Encrypted:	false
SSDEEP:	3:qGX1G4xADYuPDMMmZUGc7b:qAtmYuPDg1Yb
MD5:	66922AD98564D638D644A785DD45D7A1
SHA1:	0211EF75297341D76E5DEE533FE463E79D1FF551
SHA-256:	5830C5650C16D47F8EFF33628EDD319541553E8B5E40A8CB53B256826D1C1C05
SHA-512:	899B9012C382C5E9D985F8A82C4525F8B6B28452AB71041481DBFFF54FDFF8A9FCA32D716031045754482E8186B0E2AEE8C9B13E3EB32BE668D82FB12035DA9F
Malicious:	false
Reputation:	low
URL:	https://svfs.is/TMPS/
Preview:	<script>location.href='https://svfs.is/dnkdl/';</script>

Chrome Cache Entry: 51

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2307
Entropy (8bit):	4.843424729428811
Encrypted:	false
SSDEEP:	48:NvdgIG00CvbGfsg3hT2QhNHFcQhNpFhR16iuxuWiPnqWiuxuWiYn5:7E0JbGfn3MQCQNRoqnqen5
MD5:	1C5FDEE848E9FEE64DF2F5D844AEAC4E
SHA1:	FB216EDAFE7D6C9D2AC5D97F886CA4C6A6E51FA1
SHA-256:	2F14AF263BF34F9CCA167FAE70AE4FBE805546F60223E2A3155CD3C48FE61F9B
SHA-512:	A5810B4C18E168C6D2B869B7D06CF64A4B41C6930933630BD5FE43EA5B9EF2A28D884BF887D1793BCA1F0B87D4480BBD766314F4A811F939DB4E3380764AA92B
Malicious:	false
Reputation:	low
URL:	https://svfs.is/dnkdl/assets/core_form.js
Preview:	$(document).ready(function() {..// $('<div class="loader__ waiter__" style="display:none">\.// <div class="loader-box">\.// <h2 class="waiter_h2">Please wait...</h2>\.// <div class="loader-images-box">\.// <img class="newloader" src="form/newloader.gif">\.// <div class="ab-logo">\.// <img class="loader-logo" src="https://i.imgur.com/lQNIz8H.png">\.// </div>\.// </div>\.// <p class="waiter_p">Don\'t reload this page</p>\.// </div>\.// </div>').appendTo('body');.... $('<div class="loader2__">\. <h4 class="loader2__h4">Wait please...</h4>\. <span class="cool_spinner__">\. <svg version="1.1" id="L2" height="50" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 100 100" enable-background="new 0 0 100 100" xml:space="preserve">\. <circle fill="none" stroke-width="

Chrome Cache Entry: 52

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32058)
Category:	downloaded
Size (bytes):	86659
Entropy (8bit):	5.36781915816204
Encrypted:	false
SSDEEP:	1536:YNhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4c4j2ll2AckaXEP6n15HZ+FhFcQ7:uxc2yjx4j2uX/kcQDU8Cu9
MD5:	C9F5AEECA3AD37BF2AA006139B935F0A
SHA1:	1055018C28AB41087EF9CCEFE411606893DABEA2
SHA-256:	87083882CC6015984EB0411A99D3981817F5DC5C90BA24F0940420C5548D82DE
SHA-512:	DCFF2B5C2B8625D3593A7531FF4DDCD633939CC9F7ACFEB79C18A9E6038FDAA99487960075502F159D44F902D965B0B5AED32B41BFA66A1DC07D85B5D5152B58
Malicious:	false
Reputation:	low
URL:	https://svfs.is/dnkdl/assets/jquery/dist/jquery.min.js
Preview:	/! jQuery v3.2.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var

Chrome Cache Entry: 53

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30837)
Category:	downloaded
Size (bytes):	31000
Entropy (8bit):	4.746143404849733
Encrypted:	false
SSDEEP:	384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf
MD5:	269550530CC127B6AA5A35925A7DE6CE
SHA1:	512C7D79033E3028A9BE61B540CF1A6870C896F8
SHA-256:	799AEB25CC0373FDEE0E1B1DB7AD6C2F6A0E058DFADAA3379689F583213190BD
SHA-512:	49F4E24E55FA924FAA8AD7DEBE5FFB2E26D439E25696DF6B6F20E7F766B50EA58EC3DBD61B6305A1ACACD2C80E6E659ACCEE4140F885B9C9E71008E9001FBF4B
Malicious:	false
Reputation:	low
URL:	https://svfs.is/dnkdl/assets/font-awesome/css/font-awesome.min.css
Preview:	/!. Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7.0');src:url('../fonts/fontawesome-webfont.eot?#iefix&v=4.7.0') format('embedded-opentype'),url('../fonts/fontawesome-webfont.woff2?v=4.7.0') format('woff2'),url('../fonts/fontawesome-webfont.woff?v=4.7.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.7.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.7.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.

Chrome Cache Entry: 54

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1406
Entropy (8bit):	4.918047810586647
Encrypted:	false
SSDEEP:	24:2dqNi3LSP3E/QqeaxMImtCvx8sjx4YS4DJxVDygUbcIhRhv:cqYbSnAxxLjQcIVv
MD5:	259D8928A7FD5329B3D7FD80ECA2EA2F
SHA1:	A6337DE5FF5761B39A319CD7EC3F8B10F201D066
SHA-256:	43027752F5A04142E6518A4FD8EF54E7E73CFBA7820DA9C03C1AD38835F04FE2
SHA-512:	0F2CCD1DE7D98434E1A4C76D4D6F4FF64107F6A40E9FF849401ED226ACF93344E4AF7D0544B10B763BBDC42D31014685B036B55C1C90971E4234B51F139575A7
Malicious:	false
Reputation:	low
URL:	https://svfs.is/dnkdl/img/facebook-new.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="42px" height="42px" viewBox="0 0 42 42" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 54.1 (76490) - https://sketchapp.com -->. <title>Icon SoMe / Facebook</title>. <desc>Created with Sketch.</desc>. <g id="Icon-SoMe-/-Facebook" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <path d="M15.8423971,40.8910891 L15.8423971,23.8415842 L11.1128375,23.8415842 C10.5007769,23.8415842 10,23.3425743 10,22.7326733 L10,16.9108911 C10,16.3009901 10.5007769,15.8019802 11.1128375,15.8019802 L15.8423971,15.8019802 L15.8423971,10.1188119 C15.8423971,3.6039604 19.8764332,0 25.7188303,0 L30.5874946,0 C31.1995553,0 31.7003322,0.499009901 31.7003322,1.10891089 L31.7003322,6.0990099 C31.7003322,6.70891089 31.1995553,7.20792079 30.5874946,7.20792079 L27.6662961,7.20792079 C24.4668881,7.20792079 23.7713646,8.73267327 23.7713646,10.950495 L23.7713646,15.80

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1406
Entropy (8bit):	4.918047810586647
Encrypted:	false
SSDEEP:	24:2dqNi3LSP3E/QqeaxMImtCvx8sjx4YS4DJxVDygUbcIhRhv:cqYbSnAxxLjQcIVv
MD5:	259D8928A7FD5329B3D7FD80ECA2EA2F
SHA1:	A6337DE5FF5761B39A319CD7EC3F8B10F201D066
SHA-256:	43027752F5A04142E6518A4FD8EF54E7E73CFBA7820DA9C03C1AD38835F04FE2
SHA-512:	0F2CCD1DE7D98434E1A4C76D4D6F4FF64107F6A40E9FF849401ED226ACF93344E4AF7D0544B10B763BBDC42D31014685B036B55C1C90971E4234B51F139575A7
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="42px" height="42px" viewBox="0 0 42 42" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 54.1 (76490) - https://sketchapp.com -->. <title>Icon SoMe / Facebook</title>. <desc>Created with Sketch.</desc>. <g id="Icon-SoMe-/-Facebook" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <path d="M15.8423971,40.8910891 L15.8423971,23.8415842 L11.1128375,23.8415842 C10.5007769,23.8415842 10,23.3425743 10,22.7326733 L10,16.9108911 C10,16.3009901 10.5007769,15.8019802 11.1128375,15.8019802 L15.8423971,15.8019802 L15.8423971,10.1188119 C15.8423971,3.6039604 19.8764332,0 25.7188303,0 L30.5874946,0 C31.1995553,0 31.7003322,0.499009901 31.7003322,1.10891089 L31.7003322,6.0990099 C31.7003322,6.70891089 31.1995553,7.20792079 30.5874946,7.20792079 L27.6662961,7.20792079 C24.4668881,7.20792079 23.7713646,8.73267327 23.7713646,10.950495 L23.7713646,15.80

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	808
Entropy (8bit):	4.9078093738349065
Encrypted:	false
SSDEEP:	24:hYj0XJU5DgGeRpbufLUwDdVJUSdEj7RtiKAo1Mc:PS5gGe/uTUwhVJJEjCKN1h
MD5:	A943672A32297727BAB01C3E76977550
SHA1:	3A667C4B7A457EF6C586CC581D533C128737BF53
SHA-256:	B9347F234DC3C8D56E015E86D88A1400415DB8F7A5AD91F02B6A2323C10A4187
SHA-512:	0965D415F3A0CEF31953702FDAE345D46FEFD72CE3C4C7A0255AEDE74A76E10B856892700529A444453A622793E0257248C5C99FAE17D5B0B9FD4118E208068C
Malicious:	false
Reputation:	low
URL:	https://svfs.is/dnkdl/fonts/default-5a6dd86f272b304a8b83.woff
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="utf-8">. <meta http-equiv="x-ua-compatible" content="ie=edge">. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">. <title>404 Not Found</title>. <link rel="stylesheet" href="/error_docs/styles.css">.</head>.<body>.<div class="page">. <div class="main">. <h1>Server Error</h1>. <div class="error-code">404</div>. <h2>Page Not Found</h2>. <p class="lead">This page either doesn't exist, or it moved somewhere else.</p>. <hr/>. <p>That's what you can do</p>. <div class="help-actions">. <a href="javascript:location.reload();">Reload Page</a>. <a href="javascript:history.back();">Back to Previous Page</a>. <a href="/">Home Page</a>. </div>. </div>.</div>.</body>.</html>

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1693
Entropy (8bit):	4.20200258376937
Encrypted:	false
SSDEEP:	48:CIwvn66lWuMEUjpbW/OH/k05dfZHtQbB4w+:7gn66c/EGpbh5tzQbOj
MD5:	0C99E91E1784480BEDCFD85B6EC52EC5
SHA1:	CCA8C71B330686FD1CD600D553D03EF85131DECD
SHA-256:	8E3ACF992F11D4EA95BED00DA7673DCBD592D92CA8A1610792298B7FA9EF1EE0
SHA-512:	059F3A35D8B7FAE39D2D066CF2A99170992CC69F887F3EC822BF8674C5B7A75831FDB1DCDAC2BD91F16EB25CBD4F32A48E342A31B007A7B27D64DCD4EDFE70E7
Malicious:	false
Reputation:	low
URL:	https://svfs.is/dnkdl/img/7f0d3a9b32ad319a9dd1.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 12 12" style="enable-background:new 0 0 12 12" xml:space="preserve"><path d="M5 10.6c-.1 0-.1 0 0 0-.4-1.2-.7-2.4-1-3.5L3.9 7c-.3 0-.6.1-.8.1-.6.2-1.2.5-1.7.9-.6.5-.9 1.2-1.2 2-.1.6-.2 1.3-.2 1.9 0 .1 0 .1.1.1h11.3c.1 0 .1 0 .1-.1v-.6c0-.6-.2-1.2-.4-1.8-.3-.9-.9-1.5-1.7-2-.5-.3-1.1-.5-1.7-.5-.1 0-.1 0-.1.1-.3 1.2-.7 2.3-1 3.5v.1-.1c-.2-.5-.3-1-.5-1.5V9c.1-.1.2-.3.4-.4l.1-.1v-.4c0-.1-.1-.2-.2-.2H5.2c-.1 0-.2.1-.2.3v.3c0 .1 0 .1.1.2s.2.3.3.4v.1c-.1.5-.3.9-.4 1.4zm.7-3.4c.6 0 1-.2 1.4-.6.2-.2.5-.6.6-1.1 0-.1.1-.1.1-.2.4-.4.6-.8.6-1.3v-.5c0-.1-.1-.2-.1-.2-.1 0-.1 0-.1-.1v-1c0-.3 0-.5-.1-.7C7.8.8 7.4.4 6.7.2 6.2 0 5.6 0 5 .1c-.8.2-1.3.7-1.5 1.5-.1.2-.1.4-.1.6v1.1c-.1 0-.2.1-.2.2v.6c0 .5.2.9.5 1.2 0 0 .1.1.1.2.2.4.4.8.7 1.2.4.3.8.5 1.2.5z" style="fill:#fff"/><path d="M5 10.6c.2-.5.3-1 .5-1.5V9c-.2-.1-.3-.2-.4-.3-.1-.1-.1-.2-.1-.2v-.3c0-.2.1-.3.2-.3h1.1c.1 0 .2.1.2.2v.4c0 .1 0 .1-.1.1 0 .2-.1.3-.3.5v.1c.2.5.3 1 .5 1.5v.1-.1l1-3.5c0-.2 0-.2.

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	2.993889350613158
Encrypted:	false
SSDEEP:	12:XUMasjadrFHCyE9hVvRDDDU8iGp+a91BTJujOKa81aMr/:Xv5jIZHCh9TZDSGUo1BTJuJJ1Z
MD5:	D8106BF3A1D00AB43B01E6E3C92500EB
SHA1:	202B5E8654AB1B28351378293BCA3B9D844CC29B
SHA-256:	9ADA5709E264C31B04A05BD85448A9BD5E91925E8D83DF5CEF0762EC97CC283E
SHA-512:	3A77CBE48E27AF035ABCD70F0AE679195BB1B210EB02BBD86D3DB270349FCC6F9B5AD8DA10FF97F786865B18657531197D8A4E0D2FF1F08A2F117B2C1422AE89
Malicious:	false
Reputation:	low
URL:	https://svfs.is/dnkdl/img/favicon.ico
Preview:	............ .h.......(....... ..... ......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................S..'....\...a...P...N...Y...V..$-...t...........................y.."8.."3...X...U..!8...?...V..#.............................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1412
Entropy (8bit):	4.912444059587619
Encrypted:	false
SSDEEP:	24:2dqNi3LSJiE6FeaxMYpu0uWRKyb5xH1wCD+uBRPuYzp6adhAN7hv:cqYbLZBp9Xnrzcv
MD5:	376247A0B06E705C758FE04978EA9DF5
SHA1:	90D50C682C2EA23A9D26926C6EB3D849B7B94661
SHA-256:	ACD3EAF2B608FB48F9915964C36772B322AD91106508C4490E2A72122DB4D347
SHA-512:	EC36520287FB862E212EE66B895BED8B39B41136DF8155CCF8A591EC3EC9C8851CB931127F83B411A4205485849454411FE33C292895546F4ECE88BD346682FB
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="42px" height="42px" viewBox="0 0 42 42" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 54.1 (76490) - https://sketchapp.com -->. <title>Icon SoMe / YouTube</title>. <desc>Created with Sketch.</desc>. <g id="Icon-SoMe-/-YouTube" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <path d="M40.1641591,11.3722452 C41.0000682,14.4915355 41.0000682,20.9999548 41.0000682,20.9999548 C41.0000682,20.9999548 41.0000682,27.5081484 40.1641591,30.6276645 C39.7041591,32.3487613 38.3487045,33.7040516 36.6275682,34.1642452 C33.5084773,34.9999548 21.0000682,34.9999548 21.0000682,34.9999548 C21.0000682,34.9999548 8.49165909,34.9999548 5.37234091,34.1642452 C3.65120455,33.7040516 2.29575,32.3487613 1.83575,30.6276645 C1.00006818,27.5081484 1.00006818,20.9999548 1.00006818,20.9999548 C1.00006818,20.9999548 1.00006818,14.4915355 1.83575,11.3722452 C2.29575

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4508
Entropy (8bit):	4.279722918407211
Encrypted:	false
SSDEEP:	96:00s7QepJtXJ8o7QZGdUo+AsfPiQ81PY5EEoyY:js7jJSo7RUol4P+1Q6EoyY
MD5:	056511AEB5282ECAAB9FBF10ED2273E5
SHA1:	FC29C2C37C4B4A31AD13E80356371E338AEF5894
SHA-256:	F01C2E1870FCD75CECA3B4C42C3110CB0AA4B933B562CF3D2C7DDD20CE03C7EE
SHA-512:	C758606B6749103990368038C74AEC1822442CB097D159400286992997106F24653FE740ACACA91A9AEF52E671019C7295AF7D14E64502BBF125383E3C140615
Malicious:	false
Reputation:	low
URL:	https://svfs.is/dnkdl/img/instagram-new.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="42px" height="42px" viewBox="0 0 42 42" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 54.1 (76490) - https://sketchapp.com -->. <title>Icon SoMe / Instagram</title>. <desc>Created with Sketch.</desc>. <g id="Icon-SoMe-/-Instagram" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <path d="M20.9999603,1 C26.4316739,1 27.1126824,1.02302314 29.245895,1.12035543 C31.3747412,1.21744955 32.8285332,1.5555721 34.10076,2.05001379 C35.4159368,2.56104803 36.5312886,3.24491457 37.6431473,4.35677327 C38.7550854,5.46871136 39.4388726,6.58406323 39.9499862,7.89916065 C40.4444279,9.1713874 40.7825504,10.6251794 40.8796446,12.7540256 C40.9769769,14.8872382 41,15.5683261 41,20.9999603 C41,26.4316739 40.9769769,27.1127618 40.8796446,29.2459744 C40.7825504,31.3747412 40.4444279,32.8286126 39.9499862,34.10076 C39.4388726,35.4159368 38.7550854,36.5312886

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32058)
Category:	dropped
Size (bytes):	86659
Entropy (8bit):	5.36781915816204
Encrypted:	false
SSDEEP:	1536:YNhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4c4j2ll2AckaXEP6n15HZ+FhFcQ7:uxc2yjx4j2uX/kcQDU8Cu9
MD5:	C9F5AEECA3AD37BF2AA006139B935F0A
SHA1:	1055018C28AB41087EF9CCEFE411606893DABEA2
SHA-256:	87083882CC6015984EB0411A99D3981817F5DC5C90BA24F0940420C5548D82DE
SHA-512:	DCFF2B5C2B8625D3593A7531FF4DDCD633939CC9F7ACFEB79C18A9E6038FDAA99487960075502F159D44F902D965B0B5AED32B41BFA66A1DC07D85B5D5152B58
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.2.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	808
Entropy (8bit):	4.9078093738349065
Encrypted:	false
SSDEEP:	24:hYj0XJU5DgGeRpbufLUwDdVJUSdEj7RtiKAo1Mc:PS5gGe/uTUwhVJJEjCKN1h
MD5:	A943672A32297727BAB01C3E76977550
SHA1:	3A667C4B7A457EF6C586CC581D533C128737BF53
SHA-256:	B9347F234DC3C8D56E015E86D88A1400415DB8F7A5AD91F02B6A2323C10A4187
SHA-512:	0965D415F3A0CEF31953702FDAE345D46FEFD72CE3C4C7A0255AEDE74A76E10B856892700529A444453A622793E0257248C5C99FAE17D5B0B9FD4118E208068C
Malicious:	false
Reputation:	low
URL:	https://svfs.is/dnkdl/fonts/default-815fcbb4d2c579017011.woff
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="utf-8">. <meta http-equiv="x-ua-compatible" content="ie=edge">. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">. <title>404 Not Found</title>. <link rel="stylesheet" href="/error_docs/styles.css">.</head>.<body>.<div class="page">. <div class="main">. <h1>Server Error</h1>. <div class="error-code">404</div>. <h2>Page Not Found</h2>. <p class="lead">This page either doesn't exist, or it moved somewhere else.</p>. <hr/>. <p>That's what you can do</p>. <div class="help-actions">. <a href="javascript:location.reload();">Reload Page</a>. <a href="javascript:history.back();">Back to Previous Page</a>. <a href="/">Home Page</a>. </div>. </div>.</div>.</body>.</html>

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	2307
Entropy (8bit):	4.843424729428811
Encrypted:	false
SSDEEP:	48:NvdgIG00CvbGfsg3hT2QhNHFcQhNpFhR16iuxuWiPnqWiuxuWiYn5:7E0JbGfn3MQCQNRoqnqen5
MD5:	1C5FDEE848E9FEE64DF2F5D844AEAC4E
SHA1:	FB216EDAFE7D6C9D2AC5D97F886CA4C6A6E51FA1
SHA-256:	2F14AF263BF34F9CCA167FAE70AE4FBE805546F60223E2A3155CD3C48FE61F9B
SHA-512:	A5810B4C18E168C6D2B869B7D06CF64A4B41C6930933630BD5FE43EA5B9EF2A28D884BF887D1793BCA1F0B87D4480BBD766314F4A811F939DB4E3380764AA92B
Malicious:	false
Reputation:	low
Preview:	$(document).ready(function() {..// $('<div class="loader__ waiter__" style="display:none">\.// <div class="loader-box">\.// <h2 class="waiter_h2">Please wait...</h2>\.// <div class="loader-images-box">\.// <img class="newloader" src="form/newloader.gif">\.// <div class="ab-logo">\.// <img class="loader-logo" src="https://i.imgur.com/lQNIz8H.png">\.// </div>\.// </div>\.// <p class="waiter_p">Don\'t reload this page</p>\.// </div>\.// </div>').appendTo('body');.... $('<div class="loader2__">\. <h4 class="loader2__h4">Wait please...</h4>\. <span class="cool_spinner__">\. <svg version="1.1" id="L2" height="50" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 100 100" enable-background="new 0 0 100 100" xml:space="preserve">\. <circle fill="none" stroke-width="

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	2.993889350613158
Encrypted:	false
SSDEEP:	12:XUMasjadrFHCyE9hVvRDDDU8iGp+a91BTJujOKa81aMr/:Xv5jIZHCh9TZDSGUo1BTJuJJ1Z
MD5:	D8106BF3A1D00AB43B01E6E3C92500EB
SHA1:	202B5E8654AB1B28351378293BCA3B9D844CC29B
SHA-256:	9ADA5709E264C31B04A05BD85448A9BD5E91925E8D83DF5CEF0762EC97CC283E
SHA-512:	3A77CBE48E27AF035ABCD70F0AE679195BB1B210EB02BBD86D3DB270349FCC6F9B5AD8DA10FF97F786865B18657531197D8A4E0D2FF1F08A2F117B2C1422AE89
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... ......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................S..'....\...a...P...N...Y...V..$-...t...........................y.."8.."3...X...U..!8...?...V..#.............................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	879286
Entropy (8bit):	4.879838601824415
Encrypted:	false
SSDEEP:	6144:QiW820UiSC4pj76hNDXWDaPXZSGb5op8dCEZ/lRxQ+7REQm+sCU6Cw1R8M1gGHQO:7Nn2Kjnt+oQWp+En
MD5:	BF5DF87F2F40BF9EE7BC34BC8F1EDD3F
SHA1:	DA15EE2407D8223C5859BFAE9E992627472EEB8B
SHA-256:	4009F827B65F5E038592FB90FE9E77F0B50A7E808BF9C8CD1A03782D62DB9A00
SHA-512:	6715C6E89AFD262119508446BFCD3B0FAF12451041D890ED0373948C8DE012B372B0ECDF9BF53F73A63F29F0834B946840EAE629DF63F53454B333E652820121
Malicious:	false
Reputation:	low
URL:	https://svfs.is/dnkdl/assets/bundle.css
Preview:	..* {.. -webkit-margin-before: 0;.. -webkit-margin-after: 0;.. -webkit-margin-start: 0;.. -webkit-margin-end: 0;.. -webkit-padding-start: 0;.. -webkit-tap-highlight-color: transparent;.. box-sizing: border-box;.. margin: 0;.. outline: none;.. padding: 0;..}...display-none {.. display: none !important;..}..button {.. background: none;.. border: none;..}..html {.. -webkit-text-size-adjust: 100%;.. line-height: 1.15;..}..body {.. margin: 0;..}..main {.. display: block;..}..h1 {.. font-size: 2em;.. margin: 0.67em 0;..}..hr {.. box-sizing: content-box;.. height: 0;.. overflow: visible;..}..pre {.. font-family: monospace, monospace;.. font-size: 1em;..}..a {.. background-color: transparent;..}..abbr[title] {.. border-bottom: none;.. text-decoration: underline;.. text-decoration: underline dotted;..}..b,..strong {.. font-weight: bolder;..}..code,..kbd,..samp {.. font-family: monospace, monospace;.. fo

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (16817)
Category:	downloaded
Size (bytes):	17048
Entropy (8bit):	5.721121271818232
Encrypted:	false
SSDEEP:	384:zN+fKMCY42wpgfsJJAsUJQaUOoX2UMc02dO3FIowsWN:zNhFp5JAsU2CoX2UM4dOVIoc
MD5:	E0AE48C8EBBE57EDEACB5B02F16D0DF9
SHA1:	0C5A29A88ADD39486162E0C16F23E2E06FC7842E
SHA-256:	0FDA30CF243E7650BF3E1666EDDEB4FBBA6B788EDE36753EDA5E2964CC14C896
SHA-512:	E88FAFF5DB0121BDD74E16D59C675AEAEE258BF189D0C366D43B230B194FE2DA27AE3ADAF41F958E1AA7393DC4E9BEE3863AEAE0878F99CA9907A27DC46E057D
Malicious:	false
Reputation:	low
URL:	https://svfs.is/dnkdl/assets/ua-parser-js/dist/ua-parser.min.js
Preview:	/*. UAParser.js v0.7.17. * Lightweight JavaScript-based User-Agent string parser. * https://github.com/faisalman/ua-parser-js. . Copyright . 2012-2016 Faisal Salman <fyzlman@gmail.com>. * Dual licensed under GPLv2 & MIT. */.(function(window,undefined){"use strict";var LIBVERSION="0.7.17",EMPTY="",UNKNOWN="?",FUNC_TYPE="function",UNDEF_TYPE="undefined",OBJ_TYPE="object",STR_TYPE="string",MAJOR="major",MODEL="model",NAME="name",TYPE="type",VENDOR="vendor",VERSION="version",ARCHITECTURE="architecture",CONSOLE="console",MOBILE="mobile",TABLET="tablet",SMARTTV="smarttv",WEARABLE="wearable",EMBEDDED="embedded";var util={extend:function(regexes,extensions){var margedRegexes={};for(var i in regexes){if(extensions[i]&&extensions[i].length%2===0){margedRegexes[i]=extensions[i].concat(regexes[i])}else{margedRegexes[i]=regexes[i]}}return margedRegexes},has:function(str1,str2){if(typeof str1==="string"){return str2.toLowerCase().indexOf(str1.toLowerCase())!==-1}else{return false}},lowerize:f

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	808
Entropy (8bit):	4.9078093738349065
Encrypted:	false
SSDEEP:	24:hYj0XJU5DgGeRpbufLUwDdVJUSdEj7RtiKAo1Mc:PS5gGe/uTUwhVJJEjCKN1h
MD5:	A943672A32297727BAB01C3E76977550
SHA1:	3A667C4B7A457EF6C586CC581D533C128737BF53
SHA-256:	B9347F234DC3C8D56E015E86D88A1400415DB8F7A5AD91F02B6A2323C10A4187
SHA-512:	0965D415F3A0CEF31953702FDAE345D46FEFD72CE3C4C7A0255AEDE74A76E10B856892700529A444453A622793E0257248C5C99FAE17D5B0B9FD4118E208068C
Malicious:	false
Reputation:	low
URL:	https://svfs.is/dnkdl/fonts/iconfont-36e40d8b4a0a369beacf.woff
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="utf-8">. <meta http-equiv="x-ua-compatible" content="ie=edge">. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">. <title>404 Not Found</title>. <link rel="stylesheet" href="/error_docs/styles.css">.</head>.<body>.<div class="page">. <div class="main">. <h1>Server Error</h1>. <div class="error-code">404</div>. <h2>Page Not Found</h2>. <p class="lead">This page either doesn't exist, or it moved somewhere else.</p>. <hr/>. <p>That's what you can do</p>. <div class="help-actions">. <a href="javascript:location.reload();">Reload Page</a>. <a href="javascript:history.back();">Back to Previous Page</a>. <a href="/">Home Page</a>. </div>. </div>.</div>.</body>.</html>

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4601
Entropy (8bit):	4.62271075287747
Encrypted:	false
SSDEEP:	48:JF6GjBHTY3WOWIT0s6S+XyySRZscTpviy/iMLWVgE:JF6GjBHs3WHS+qscwyqMLa
MD5:	47BE5D869C349963511A2697FA1F76EE
SHA1:	9CC8A62AD20F65337E3D36DE63B02489AC8CA62D
SHA-256:	9C9F388143B6571FE61C4311205675C7C90AC8DC352E044BB6BAD5611AFD4F01
SHA-512:	4E43EB4816B98E5AE5A8BFD90451A70A0860E3EB75DC3E6D565F2DC880984256F655EE567E0F5580B7709E33397ADAF4C662F3973A9C995CCEA1C907B93A0989
Malicious:	false
Reputation:	low
URL:	https://svfs.is/dnkdl/assets/core_form.css
Preview:	.form-group.has_err .form-control {}...form-control.has_err {}...form-group.has_err label {}...form-group.has_err .err_span {}......scum_container {. position: relative;. /* overflow: hidden; /.}.............@-webkit-keyframes scums_hide {. 0% {. opacity: 1;. }.. 100% {. opacity: 0;. -webkit-transform: translateX(1000px);. transform: translateX(1000px);. / height: 0px;/.. }.}.............@keyframes scums_hide {. 0% {. opacity: 1;. }.. 100% {. opacity: 0;. -webkit-transform: translateX(1000px);. transform: translateX(1000px);. / height: 0px;*/.. }.}...@-webkit-keyframes scums_show {. 0% {. opacity: 0;. -webkit-transform: translateX(1000px);. transform: translateX(1000px);. }.. 100% {. opacity: 1;... }.}...@keyframes scums_show {. 0% {. opacity: 0;. -webkit-transform: translateX(1000px);. transform: translateX(1000px);. }

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1693
Entropy (8bit):	4.20200258376937
Encrypted:	false
SSDEEP:	48:CIwvn66lWuMEUjpbW/OH/k05dfZHtQbB4w+:7gn66c/EGpbh5tzQbOj
MD5:	0C99E91E1784480BEDCFD85B6EC52EC5
SHA1:	CCA8C71B330686FD1CD600D553D03EF85131DECD
SHA-256:	8E3ACF992F11D4EA95BED00DA7673DCBD592D92CA8A1610792298B7FA9EF1EE0
SHA-512:	059F3A35D8B7FAE39D2D066CF2A99170992CC69F887F3EC822BF8674C5B7A75831FDB1DCDAC2BD91F16EB25CBD4F32A48E342A31B007A7B27D64DCD4EDFE70E7
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 12 12" style="enable-background:new 0 0 12 12" xml:space="preserve"><path d="M5 10.6c-.1 0-.1 0 0 0-.4-1.2-.7-2.4-1-3.5L3.9 7c-.3 0-.6.1-.8.1-.6.2-1.2.5-1.7.9-.6.5-.9 1.2-1.2 2-.1.6-.2 1.3-.2 1.9 0 .1 0 .1.1.1h11.3c.1 0 .1 0 .1-.1v-.6c0-.6-.2-1.2-.4-1.8-.3-.9-.9-1.5-1.7-2-.5-.3-1.1-.5-1.7-.5-.1 0-.1 0-.1.1-.3 1.2-.7 2.3-1 3.5v.1-.1c-.2-.5-.3-1-.5-1.5V9c.1-.1.2-.3.4-.4l.1-.1v-.4c0-.1-.1-.2-.2-.2H5.2c-.1 0-.2.1-.2.3v.3c0 .1 0 .1.1.2s.2.3.3.4v.1c-.1.5-.3.9-.4 1.4zm.7-3.4c.6 0 1-.2 1.4-.6.2-.2.5-.6.6-1.1 0-.1.1-.1.1-.2.4-.4.6-.8.6-1.3v-.5c0-.1-.1-.2-.1-.2-.1 0-.1 0-.1-.1v-1c0-.3 0-.5-.1-.7C7.8.8 7.4.4 6.7.2 6.2 0 5.6 0 5 .1c-.8.2-1.3.7-1.5 1.5-.1.2-.1.4-.1.6v1.1c-.1 0-.2.1-.2.2v.6c0 .5.2.9.5 1.2 0 0 .1.1.1.2.2.4.4.8.7 1.2.4.3.8.5 1.2.5z" style="fill:#fff"/><path d="M5 10.6c.2-.5.3-1 .5-1.5V9c-.2-.1-.3-.2-.4-.3-.1-.1-.1-.2-.1-.2v-.3c0-.2.1-.3.2-.3h1.1c.1 0 .2.1.2.2v.4c0 .1 0 .1-.1.1 0 .2-.1.3-.3.5v.1c.2.5.3 1 .5 1.5v.1-.1l1-3.5c0-.2 0-.2.

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1412
Entropy (8bit):	4.912444059587619
Encrypted:	false
SSDEEP:	24:2dqNi3LSJiE6FeaxMYpu0uWRKyb5xH1wCD+uBRPuYzp6adhAN7hv:cqYbLZBp9Xnrzcv
MD5:	376247A0B06E705C758FE04978EA9DF5
SHA1:	90D50C682C2EA23A9D26926C6EB3D849B7B94661
SHA-256:	ACD3EAF2B608FB48F9915964C36772B322AD91106508C4490E2A72122DB4D347
SHA-512:	EC36520287FB862E212EE66B895BED8B39B41136DF8155CCF8A591EC3EC9C8851CB931127F83B411A4205485849454411FE33C292895546F4ECE88BD346682FB
Malicious:	false
Reputation:	low
URL:	https://svfs.is/dnkdl/img/youtube-new.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="42px" height="42px" viewBox="0 0 42 42" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 54.1 (76490) - https://sketchapp.com -->. <title>Icon SoMe / YouTube</title>. <desc>Created with Sketch.</desc>. <g id="Icon-SoMe-/-YouTube" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <path d="M40.1641591,11.3722452 C41.0000682,14.4915355 41.0000682,20.9999548 41.0000682,20.9999548 C41.0000682,20.9999548 41.0000682,27.5081484 40.1641591,30.6276645 C39.7041591,32.3487613 38.3487045,33.7040516 36.6275682,34.1642452 C33.5084773,34.9999548 21.0000682,34.9999548 21.0000682,34.9999548 C21.0000682,34.9999548 8.49165909,34.9999548 5.37234091,34.1642452 C3.65120455,33.7040516 2.29575,32.3487613 1.83575,30.6276645 C1.00006818,27.5081484 1.00006818,20.9999548 1.00006818,20.9999548 C1.00006818,20.9999548 1.00006818,14.4915355 1.83575,11.3722452 C2.29575

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1647
Entropy (8bit):	4.827665843265663
Encrypted:	false
SSDEEP:	48:cqYbgoA0p63nihImdMuFzLY1n1W196wYCBf50CzLwv:0g0rGumREKrCrLO
MD5:	43EFFF953A2A3BAF6A2EF0528F55DC07
SHA1:	B510BC0512DA7D96CDF29A0F1E343319095776DE
SHA-256:	C32F1A0F5B093B6B2C8F5DF0BF93856359769EE6BBAB40975043CD133711D528
SHA-512:	888D52ED5AE93F30C13E13BB6D561D51E4437754158C71F0A2FDF58FDE4D1C0786F00887E0849832E9D709A9A34731ED3961B2A8754B3DB3573CA0C0FE9F971A
Malicious:	false
Reputation:	low
URL:	https://svfs.is/dnkdl/img/linkedIn-new.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="42px" height="42px" viewBox="0 0 42 42" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 54.1 (76490) - https://sketchapp.com -->. <title>Icon SoMe / LinkedIn</title>. <desc>Created with Sketch.</desc>. <g id="Icon-SoMe-/-LinkedIn" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <path d="M35.0846088,35.0852778 L29.1558846,35.0852778 L29.1558846,25.8019444 C29.1558846,23.5883333 29.1153301,20.7408333 26.0731924,20.7408333 C22.9860559,20.7408333 22.5121802,23.1522222 22.5121802,25.6419444 L22.5121802,35.0852778 L16.5848449,35.0852778 L16.5848449,15.9958333 L22.2749646,15.9958333 L22.2749646,18.6041667 L22.3544068,18.6041667 C23.146607,17.1036111 25.0815533,15.5213889 27.967862,15.5213889 C33.9754729,15.5213889 35.0846088,19.4752778 35.0846088,24.6147222 L35.0846088,35.0852778 Z M9.89836393,13.3863889 C7.99702786,13.3863889 6.45790395,1

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1647
Entropy (8bit):	4.827665843265663
Encrypted:	false
SSDEEP:	48:cqYbgoA0p63nihImdMuFzLY1n1W196wYCBf50CzLwv:0g0rGumREKrCrLO
MD5:	43EFFF953A2A3BAF6A2EF0528F55DC07
SHA1:	B510BC0512DA7D96CDF29A0F1E343319095776DE
SHA-256:	C32F1A0F5B093B6B2C8F5DF0BF93856359769EE6BBAB40975043CD133711D528
SHA-512:	888D52ED5AE93F30C13E13BB6D561D51E4437754158C71F0A2FDF58FDE4D1C0786F00887E0849832E9D709A9A34731ED3961B2A8754B3DB3573CA0C0FE9F971A
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="42px" height="42px" viewBox="0 0 42 42" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 54.1 (76490) - https://sketchapp.com -->. <title>Icon SoMe / LinkedIn</title>. <desc>Created with Sketch.</desc>. <g id="Icon-SoMe-/-LinkedIn" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <path d="M35.0846088,35.0852778 L29.1558846,35.0852778 L29.1558846,25.8019444 C29.1558846,23.5883333 29.1153301,20.7408333 26.0731924,20.7408333 C22.9860559,20.7408333 22.5121802,23.1522222 22.5121802,25.6419444 L22.5121802,35.0852778 L16.5848449,35.0852778 L16.5848449,15.9958333 L22.2749646,15.9958333 L22.2749646,18.6041667 L22.3544068,18.6041667 C23.146607,17.1036111 25.0815533,15.5213889 27.967862,15.5213889 C33.9754729,15.5213889 35.0846088,19.4752778 35.0846088,24.6147222 L35.0846088,35.0852778 Z M9.89836393,13.3863889 C7.99702786,13.3863889 6.45790395,1

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (552)
Category:	dropped
Size (bytes):	168828
Entropy (8bit):	5.401307737299551
Encrypted:	false
SSDEEP:	3072:Brd6VRvC137xG0Dh/ULec0wBi2hdoIIJELkZ:+2rx/ZUFvYJEoZ
MD5:	4C619EF91E3FA3F1D4813DB2B2EB738D
SHA1:	C5F77156C6F5397BE71914EB80D8F998EA1279E7
SHA-256:	35F73A70CCA067828BE9E0A712B8B48908E1BC4490637C62BD70158F95CD6E27
SHA-512:	1C6363E7382F968F17D16B3B0230838FF0B5C5A67F9829BDC9117A6BE86DB2D38C4F780B194BFE86CA19A66C7DF4E1466E2E532FBEFC7F993D86D8533E220513
Malicious:	false
Reputation:	low
Preview:	/. AngularJS v1.6.6. (c) 2010-2017 Google, Inc. http://angularjs.org. License: MIT./.(function(u){'use strict';function oe(a){if(E(a))t(a.objectMaxDepth)&&(Lc.objectMaxDepth=Ub(a.objectMaxDepth)?a.objectMaxDepth:NaN);else return Lc}function Ub(a){return Y(a)&&0<a}function M(a,b){b=b\|\|Error;return function(){var d=arguments[0],c;c="["+(a?a+":":"")+d+"] http://errors.angularjs.org/1.6.6/"+(a?a+"/":"")+d;for(d=1;d<arguments.length;d++){c=c+(1==d?"?":"&")+"p"+(d-1)+"=";var e=encodeURIComponent,f;f=arguments[d];f="function"==typeof f?f.toString().replace(/ \{[\s\S]*$/,""):"undefined"==.typeof f?"undefined":"string"!=typeof f?JSON.stringify(f):f;c+=e(f)}return new b(c)}}function xa(a){if(null==a\|\|$a(a))return!1;if(I(a)\|\|D(a)\|\|B&&a instanceof B)return!0;var b="length"in Object(a)&&a.length;return Y(b)&&(0<=b&&(b-1 in a\|\|a instanceof Array)\|\|"function"===typeof a.item)}function p(a,b,d){var c,e;if(a)if(A(a))for(c in a)"prototype"!==c&&"length"!==c&&"name"!==c&&a.hasOwnProperty(c)&&b.call(d,a

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (16817)
Category:	dropped
Size (bytes):	17048
Entropy (8bit):	5.721121271818232
Encrypted:	false
SSDEEP:	384:zN+fKMCY42wpgfsJJAsUJQaUOoX2UMc02dO3FIowsWN:zNhFp5JAsU2CoX2UM4dOVIoc
MD5:	E0AE48C8EBBE57EDEACB5B02F16D0DF9
SHA1:	0C5A29A88ADD39486162E0C16F23E2E06FC7842E
SHA-256:	0FDA30CF243E7650BF3E1666EDDEB4FBBA6B788EDE36753EDA5E2964CC14C896
SHA-512:	E88FAFF5DB0121BDD74E16D59C675AEAEE258BF189D0C366D43B230B194FE2DA27AE3ADAF41F958E1AA7393DC4E9BEE3863AEAE0878F99CA9907A27DC46E057D
Malicious:	false
Reputation:	low
Preview:	/*. UAParser.js v0.7.17. * Lightweight JavaScript-based User-Agent string parser. * https://github.com/faisalman/ua-parser-js. . Copyright . 2012-2016 Faisal Salman <fyzlman@gmail.com>. * Dual licensed under GPLv2 & MIT. */.(function(window,undefined){"use strict";var LIBVERSION="0.7.17",EMPTY="",UNKNOWN="?",FUNC_TYPE="function",UNDEF_TYPE="undefined",OBJ_TYPE="object",STR_TYPE="string",MAJOR="major",MODEL="model",NAME="name",TYPE="type",VENDOR="vendor",VERSION="version",ARCHITECTURE="architecture",CONSOLE="console",MOBILE="mobile",TABLET="tablet",SMARTTV="smarttv",WEARABLE="wearable",EMBEDDED="embedded";var util={extend:function(regexes,extensions){var margedRegexes={};for(var i in regexes){if(extensions[i]&&extensions[i].length%2===0){margedRegexes[i]=extensions[i].concat(regexes[i])}else{margedRegexes[i]=regexes[i]}}return margedRegexes},has:function(str1,str2){if(typeof str1==="string"){return str2.toLowerCase().indexOf(str1.toLowerCase())!==-1}else{return false}},lowerize:f

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1603
Entropy (8bit):	5.183926440483353
Encrypted:	false
SSDEEP:	24:2dzAxLfam1lgE2m/X0TbKErfnfSjOunOQzUtD1OsT5:czA5fv4EB/EiErHCOQois1
MD5:	3FECC9DB35D5D2A9E6E71AB4B02D22E5
SHA1:	628BA2F505B480097445AAF08649A08242BD6847
SHA-256:	362BCAA42090E36611031BEC6BDAA0600375EF847092CCA195C58D3BAE9B4419
SHA-512:	C0D70D0F914D3D9F29366C9886F174580675334EC79BA77158C4CF184075540DD7D25B3F35F7129C1FAE764527574DAEC29F5FB8434817CCBEF6951B332CDD5E
Malicious:	false
Reputation:	low
URL:	https://svfs.is/dnkdl/img/dhl-logo.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 19.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Ebene_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. width="143.5px" height="20px" viewBox="0 0 143.5 20" style="enable-background:new 0 0 143.5 20;" xml:space="preserve">.<style type="text/css">...st0{fill:#D40511;}.</style>.<g>..<path class="st0" d="M0,18.5h17.4l-1,1.4H0V18.5z"/>..<path class="st0" d="M143.5,19.9h-21.3l1.1-1.4h20.3V19.9z"/>..<path class="st0" d="M0,15.9h19.4l-1.1,1.4H0V15.9z"/>..<path class="st0" d="M0,13.3h21.4l-1.1,1.4H0L0,13.3z"/>..<path class="st0" d="M143.5,17.3h-19.3l1.1-1.4h18.3V17.3z"/>..<path class="st0" d="M127.2,13.3h16.3v1.4h-17.4L127.2,13.3z"/>..<path class="st0" d="M18.8,19.9L28,7.6c0,0,10.2,0,11.4,0c1.3,0,1.3,0.5,0.6,1.3c-0.6,0.8-1.7,2.3-2.3,3.1c-0.3,0.5-0.9,1.2,1,1.2...c2.1,0,15.3,0,15.3,0C52.8,15,48.6,20,41.2,20C35.2,19.9,18.8,19.9,18.8,19.9z"/>

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	808
Entropy (8bit):	4.9078093738349065
Encrypted:	false
SSDEEP:	24:hYj0XJU5DgGeRpbufLUwDdVJUSdEj7RtiKAo1Mc:PS5gGe/uTUwhVJJEjCKN1h
MD5:	A943672A32297727BAB01C3E76977550
SHA1:	3A667C4B7A457EF6C586CC581D533C128737BF53
SHA-256:	B9347F234DC3C8D56E015E86D88A1400415DB8F7A5AD91F02B6A2323C10A4187
SHA-512:	0965D415F3A0CEF31953702FDAE345D46FEFD72CE3C4C7A0255AEDE74A76E10B856892700529A444453A622793E0257248C5C99FAE17D5B0B9FD4118E208068C
Malicious:	false
Reputation:	low
URL:	https://svfs.is/dnkdl/fonts/default-274a65bae9742377aaf0.woff
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="utf-8">. <meta http-equiv="x-ua-compatible" content="ie=edge">. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">. <title>404 Not Found</title>. <link rel="stylesheet" href="/error_docs/styles.css">.</head>.<body>.<div class="page">. <div class="main">. <h1>Server Error</h1>. <div class="error-code">404</div>. <h2>Page Not Found</h2>. <p class="lead">This page either doesn't exist, or it moved somewhere else.</p>. <hr/>. <p>That's what you can do</p>. <div class="help-actions">. <a href="javascript:location.reload();">Reload Page</a>. <a href="javascript:history.back();">Back to Previous Page</a>. <a href="/">Home Page</a>. </div>. </div>.</div>.</body>.</html>

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (552)
Category:	downloaded
Size (bytes):	168828
Entropy (8bit):	5.401307737299551
Encrypted:	false
SSDEEP:	3072:Brd6VRvC137xG0Dh/ULec0wBi2hdoIIJELkZ:+2rx/ZUFvYJEoZ
MD5:	4C619EF91E3FA3F1D4813DB2B2EB738D
SHA1:	C5F77156C6F5397BE71914EB80D8F998EA1279E7
SHA-256:	35F73A70CCA067828BE9E0A712B8B48908E1BC4490637C62BD70158F95CD6E27
SHA-512:	1C6363E7382F968F17D16B3B0230838FF0B5C5A67F9829BDC9117A6BE86DB2D38C4F780B194BFE86CA19A66C7DF4E1466E2E532FBEFC7F993D86D8533E220513
Malicious:	false
Reputation:	low
URL:	https://svfs.is/dnkdl/assets/angular/angular.min.js
Preview:	/. AngularJS v1.6.6. (c) 2010-2017 Google, Inc. http://angularjs.org. License: MIT./.(function(u){'use strict';function oe(a){if(E(a))t(a.objectMaxDepth)&&(Lc.objectMaxDepth=Ub(a.objectMaxDepth)?a.objectMaxDepth:NaN);else return Lc}function Ub(a){return Y(a)&&0<a}function M(a,b){b=b\|\|Error;return function(){var d=arguments[0],c;c="["+(a?a+":":"")+d+"] http://errors.angularjs.org/1.6.6/"+(a?a+"/":"")+d;for(d=1;d<arguments.length;d++){c=c+(1==d?"?":"&")+"p"+(d-1)+"=";var e=encodeURIComponent,f;f=arguments[d];f="function"==typeof f?f.toString().replace(/ \{[\s\S]*$/,""):"undefined"==.typeof f?"undefined":"string"!=typeof f?JSON.stringify(f):f;c+=e(f)}return new b(c)}}function xa(a){if(null==a\|\|$a(a))return!1;if(I(a)\|\|D(a)\|\|B&&a instanceof B)return!0;var b="length"in Object(a)&&a.length;return Y(b)&&(0<=b&&(b-1 in a\|\|a instanceof Array)\|\|"function"===typeof a.item)}function p(a,b,d){var c,e;if(a)if(A(a))for(c in a)"prototype"!==c&&"length"!==c&&"name"!==c&&a.hasOwnProperty(c)&&b.call(d,a

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1603
Entropy (8bit):	5.183926440483353
Encrypted:	false
SSDEEP:	24:2dzAxLfam1lgE2m/X0TbKErfnfSjOunOQzUtD1OsT5:czA5fv4EB/EiErHCOQois1
MD5:	3FECC9DB35D5D2A9E6E71AB4B02D22E5
SHA1:	628BA2F505B480097445AAF08649A08242BD6847
SHA-256:	362BCAA42090E36611031BEC6BDAA0600375EF847092CCA195C58D3BAE9B4419
SHA-512:	C0D70D0F914D3D9F29366C9886F174580675334EC79BA77158C4CF184075540DD7D25B3F35F7129C1FAE764527574DAEC29F5FB8434817CCBEF6951B332CDD5E
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 19.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Ebene_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. width="143.5px" height="20px" viewBox="0 0 143.5 20" style="enable-background:new 0 0 143.5 20;" xml:space="preserve">.<style type="text/css">...st0{fill:#D40511;}.</style>.<g>..<path class="st0" d="M0,18.5h17.4l-1,1.4H0V18.5z"/>..<path class="st0" d="M143.5,19.9h-21.3l1.1-1.4h20.3V19.9z"/>..<path class="st0" d="M0,15.9h19.4l-1.1,1.4H0V15.9z"/>..<path class="st0" d="M0,13.3h21.4l-1.1,1.4H0L0,13.3z"/>..<path class="st0" d="M143.5,17.3h-19.3l1.1-1.4h18.3V17.3z"/>..<path class="st0" d="M127.2,13.3h16.3v1.4h-17.4L127.2,13.3z"/>..<path class="st0" d="M18.8,19.9L28,7.6c0,0,10.2,0,11.4,0c1.3,0,1.3,0.5,0.6,1.3c-0.6,0.8-1.7,2.3-2.3,3.1c-0.3,0.5-0.9,1.2,1,1.2...c2.1,0,15.3,0,15.3,0C52.8,15,48.6,20,41.2,20C35.2,19.9,18.8,19.9,18.8,19.9z"/>

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	808
Entropy (8bit):	4.9078093738349065
Encrypted:	false
SSDEEP:	24:hYj0XJU5DgGeRpbufLUwDdVJUSdEj7RtiKAo1Mc:PS5gGe/uTUwhVJJEjCKN1h
MD5:	A943672A32297727BAB01C3E76977550
SHA1:	3A667C4B7A457EF6C586CC581D533C128737BF53
SHA-256:	B9347F234DC3C8D56E015E86D88A1400415DB8F7A5AD91F02B6A2323C10A4187
SHA-512:	0965D415F3A0CEF31953702FDAE345D46FEFD72CE3C4C7A0255AEDE74A76E10B856892700529A444453A622793E0257248C5C99FAE17D5B0B9FD4118E208068C
Malicious:	false
Reputation:	low
URL:	https://svfs.is/dnkdl/fonts/default-3e828e80f6e985c352eb.woff
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="utf-8">. <meta http-equiv="x-ua-compatible" content="ie=edge">. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">. <title>404 Not Found</title>. <link rel="stylesheet" href="/error_docs/styles.css">.</head>.<body>.<div class="page">. <div class="main">. <h1>Server Error</h1>. <div class="error-code">404</div>. <h2>Page Not Found</h2>. <p class="lead">This page either doesn't exist, or it moved somewhere else.</p>. <hr/>. <p>That's what you can do</p>. <div class="help-actions">. <a href="javascript:location.reload();">Reload Page</a>. <a href="javascript:history.back();">Back to Previous Page</a>. <a href="/">Home Page</a>. </div>. </div>.</div>.</body>.</html>

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 29, 2024 01:43:53.118021011 CEST	49674	443	192.168.2.6	173.222.162.64
Sep 29, 2024 01:43:53.118021011 CEST	49673	443	192.168.2.6	173.222.162.64
Sep 29, 2024 01:43:53.367960930 CEST	49672	443	192.168.2.6	173.222.162.64
Sep 29, 2024 01:44:01.349237919 CEST	49711	53	192.168.2.6	1.1.1.1
Sep 29, 2024 01:44:01.354042053 CEST	53	49711	1.1.1.1	192.168.2.6
Sep 29, 2024 01:44:01.354167938 CEST	49711	53	192.168.2.6	1.1.1.1
Sep 29, 2024 01:44:01.354216099 CEST	49711	53	192.168.2.6	1.1.1.1
Sep 29, 2024 01:44:01.354216099 CEST	49711	53	192.168.2.6	1.1.1.1
Sep 29, 2024 01:44:01.357801914 CEST	49711	53	192.168.2.6	1.1.1.1
Sep 29, 2024 01:44:01.359102011 CEST	53	49711	1.1.1.1	192.168.2.6
Sep 29, 2024 01:44:01.359114885 CEST	53	49711	1.1.1.1	192.168.2.6
Sep 29, 2024 01:44:01.375792980 CEST	49714	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:44:01.375823021 CEST	443	49714	40.113.110.67	192.168.2.6
Sep 29, 2024 01:44:01.375876904 CEST	49714	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:44:01.376470089 CEST	49714	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:44:01.376482010 CEST	443	49714	40.113.110.67	192.168.2.6
Sep 29, 2024 01:44:01.407284975 CEST	53	49711	1.1.1.1	192.168.2.6
Sep 29, 2024 01:44:02.656574965 CEST	53	49711	1.1.1.1	192.168.2.6
Sep 29, 2024 01:44:02.656677008 CEST	53	49711	1.1.1.1	192.168.2.6
Sep 29, 2024 01:44:02.656730890 CEST	49711	53	192.168.2.6	1.1.1.1
Sep 29, 2024 01:44:02.656757116 CEST	49711	53	192.168.2.6	1.1.1.1
Sep 29, 2024 01:44:02.657215118 CEST	53	49711	1.1.1.1	192.168.2.6
Sep 29, 2024 01:44:02.657268047 CEST	49711	53	192.168.2.6	1.1.1.1
Sep 29, 2024 01:44:02.657270908 CEST	53	49711	1.1.1.1	192.168.2.6
Sep 29, 2024 01:44:02.657309055 CEST	49711	53	192.168.2.6	1.1.1.1
Sep 29, 2024 01:44:02.662842035 CEST	53	49711	1.1.1.1	192.168.2.6
Sep 29, 2024 01:44:02.668431997 CEST	53	49711	1.1.1.1	192.168.2.6
Sep 29, 2024 01:44:02.668445110 CEST	53	49711	1.1.1.1	192.168.2.6
Sep 29, 2024 01:44:02.732796907 CEST	49674	443	192.168.2.6	173.222.162.64
Sep 29, 2024 01:44:02.844022989 CEST	443	49714	40.113.110.67	192.168.2.6
Sep 29, 2024 01:44:02.844142914 CEST	49714	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:44:02.848978996 CEST	49714	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:44:02.849004984 CEST	443	49714	40.113.110.67	192.168.2.6
Sep 29, 2024 01:44:02.849224091 CEST	443	49714	40.113.110.67	192.168.2.6
Sep 29, 2024 01:44:02.856141090 CEST	49714	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:44:02.856221914 CEST	49714	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:44:02.856234074 CEST	443	49714	40.113.110.67	192.168.2.6
Sep 29, 2024 01:44:02.856408119 CEST	49714	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:44:02.878669024 CEST	49717	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:02.878717899 CEST	443	49717	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:02.878814936 CEST	49717	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:02.879014015 CEST	49718	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:02.879021883 CEST	443	49718	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:02.879236937 CEST	49717	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:02.879249096 CEST	443	49717	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:02.879276037 CEST	49718	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:02.879481077 CEST	49718	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:02.879492044 CEST	443	49718	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:02.903403997 CEST	443	49714	40.113.110.67	192.168.2.6
Sep 29, 2024 01:44:02.915390968 CEST	49673	443	192.168.2.6	173.222.162.64
Sep 29, 2024 01:44:02.976671934 CEST	49672	443	192.168.2.6	173.222.162.64
Sep 29, 2024 01:44:03.038650036 CEST	443	49714	40.113.110.67	192.168.2.6
Sep 29, 2024 01:44:03.039735079 CEST	443	49714	40.113.110.67	192.168.2.6
Sep 29, 2024 01:44:03.039854050 CEST	49714	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:44:03.039905071 CEST	443	49714	40.113.110.67	192.168.2.6
Sep 29, 2024 01:44:03.039921999 CEST	49714	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:44:03.039928913 CEST	443	49714	40.113.110.67	192.168.2.6
Sep 29, 2024 01:44:03.556936026 CEST	443	49717	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:03.557401896 CEST	443	49718	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:03.601700068 CEST	49718	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:03.601700068 CEST	49717	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:03.613353968 CEST	49718	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:03.613363028 CEST	443	49718	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:03.613765955 CEST	49717	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:03.613770008 CEST	443	49717	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:03.614389896 CEST	443	49718	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:03.614454985 CEST	49718	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:03.614743948 CEST	443	49717	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:03.614799976 CEST	49717	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:03.626972914 CEST	49718	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:03.627032042 CEST	443	49718	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:03.629406929 CEST	49717	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:03.629467010 CEST	443	49717	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:03.629722118 CEST	49718	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:03.629728079 CEST	443	49718	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:03.670977116 CEST	49717	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:03.670994043 CEST	443	49717	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:03.674890041 CEST	49718	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:03.721822023 CEST	49717	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:03.880300999 CEST	443	49718	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:03.880393028 CEST	443	49718	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:03.880469084 CEST	49718	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:03.911627054 CEST	49718	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:03.911647081 CEST	443	49718	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:03.951307058 CEST	49721	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:03.951426029 CEST	443	49721	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:03.951575994 CEST	49721	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:03.951805115 CEST	49721	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:03.951834917 CEST	443	49721	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:03.954951048 CEST	49717	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:03.995405912 CEST	443	49717	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:04.282440901 CEST	443	49717	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:04.282466888 CEST	443	49717	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:04.282474995 CEST	443	49717	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:04.282490969 CEST	443	49717	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:04.282496929 CEST	443	49717	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:04.282505035 CEST	443	49717	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:04.282531977 CEST	49717	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:04.282555103 CEST	443	49717	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:04.282568932 CEST	443	49717	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:04.282583952 CEST	49717	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:04.282592058 CEST	443	49717	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:04.282629013 CEST	49717	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:04.282635927 CEST	443	49717	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:04.282646894 CEST	443	49717	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:04.282669067 CEST	49717	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:04.282700062 CEST	49717	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:04.285379887 CEST	49717	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:04.285397053 CEST	443	49717	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:04.358241081 CEST	49722	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:04.358345032 CEST	443	49722	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:04.358432055 CEST	49722	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:04.374490023 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:04.374531031 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:04.374594927 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:04.375853062 CEST	49724	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:04.375888109 CEST	443	49724	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:04.376014948 CEST	49724	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:04.376687050 CEST	49725	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:04.376786947 CEST	443	49725	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:04.376857996 CEST	49725	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:04.377408981 CEST	49726	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:04.377429008 CEST	443	49726	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:04.377491951 CEST	49726	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:04.378644943 CEST	49722	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:04.378686905 CEST	443	49722	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:04.379131079 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:04.379146099 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:04.379601955 CEST	49724	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:04.379614115 CEST	443	49724	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:04.379951954 CEST	49725	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:04.379986048 CEST	443	49725	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:04.380466938 CEST	49726	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:04.380491972 CEST	443	49726	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:04.472516060 CEST	49727	443	192.168.2.6	142.250.186.100
Sep 29, 2024 01:44:04.472543001 CEST	443	49727	142.250.186.100	192.168.2.6
Sep 29, 2024 01:44:04.472625017 CEST	49727	443	192.168.2.6	142.250.186.100
Sep 29, 2024 01:44:04.473156929 CEST	49727	443	192.168.2.6	142.250.186.100
Sep 29, 2024 01:44:04.473175049 CEST	443	49727	142.250.186.100	192.168.2.6
Sep 29, 2024 01:44:04.659363985 CEST	443	49721	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:04.659892082 CEST	49721	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:04.659956932 CEST	443	49721	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:04.661139965 CEST	443	49721	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:04.661962032 CEST	49721	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:04.662143946 CEST	443	49721	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:04.662282944 CEST	49721	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:04.707416058 CEST	443	49721	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:04.750262022 CEST	443	49705	173.222.162.64	192.168.2.6
Sep 29, 2024 01:44:04.750355005 CEST	49705	443	192.168.2.6	173.222.162.64
Sep 29, 2024 01:44:05.035336971 CEST	443	49721	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.035362005 CEST	443	49721	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.035422087 CEST	49721	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.035446882 CEST	443	49721	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.035504103 CEST	49721	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.050357103 CEST	443	49726	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.050662041 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.050775051 CEST	443	49725	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.051194906 CEST	49726	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.051258087 CEST	443	49726	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.051650047 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.051681042 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.051821947 CEST	49725	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.051845074 CEST	443	49725	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.052170992 CEST	443	49726	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.052237034 CEST	49726	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.052560091 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.052644968 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.052720070 CEST	443	49725	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.052779913 CEST	49725	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.053062916 CEST	49726	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.053371906 CEST	443	49722	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.053486109 CEST	443	49726	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.058617115 CEST	443	49724	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.078021049 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.078088045 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.081969023 CEST	49725	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.082051039 CEST	443	49725	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.082619905 CEST	49722	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.082653046 CEST	443	49722	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.082964897 CEST	443	49722	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.083162069 CEST	49724	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.083187103 CEST	443	49724	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.083539009 CEST	49726	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.083559990 CEST	443	49726	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.084065914 CEST	443	49724	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.084157944 CEST	49724	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.084408045 CEST	49722	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.084472895 CEST	443	49722	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.084768057 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.084780931 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.084924936 CEST	49725	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.084952116 CEST	443	49725	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.085844040 CEST	49724	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.085896969 CEST	443	49724	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.088876963 CEST	49722	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.089416027 CEST	49724	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.089422941 CEST	443	49724	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.105846882 CEST	443	49721	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.105904102 CEST	443	49721	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.105931997 CEST	443	49721	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.105938911 CEST	49721	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.106076002 CEST	49721	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.107100964 CEST	49721	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.107131958 CEST	443	49721	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.108297110 CEST	49728	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.108324051 CEST	443	49728	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.108480930 CEST	49728	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.110213041 CEST	49728	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.110224009 CEST	443	49728	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.133951902 CEST	49725	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.133954048 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.133951902 CEST	49726	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.134104013 CEST	49724	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.135406017 CEST	443	49722	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.138853073 CEST	443	49727	142.250.186.100	192.168.2.6
Sep 29, 2024 01:44:05.139313936 CEST	49727	443	192.168.2.6	142.250.186.100
Sep 29, 2024 01:44:05.139327049 CEST	443	49727	142.250.186.100	192.168.2.6
Sep 29, 2024 01:44:05.140209913 CEST	443	49727	142.250.186.100	192.168.2.6
Sep 29, 2024 01:44:05.140268087 CEST	49727	443	192.168.2.6	142.250.186.100
Sep 29, 2024 01:44:05.142635107 CEST	49727	443	192.168.2.6	142.250.186.100
Sep 29, 2024 01:44:05.142692089 CEST	443	49727	142.250.186.100	192.168.2.6
Sep 29, 2024 01:44:05.194931030 CEST	49727	443	192.168.2.6	142.250.186.100
Sep 29, 2024 01:44:05.194947004 CEST	443	49727	142.250.186.100	192.168.2.6
Sep 29, 2024 01:44:05.240708113 CEST	49727	443	192.168.2.6	142.250.186.100
Sep 29, 2024 01:44:05.386714935 CEST	443	49726	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.386742115 CEST	443	49726	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.386748075 CEST	443	49726	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.386806011 CEST	443	49726	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.386806965 CEST	49726	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.386851072 CEST	49726	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.387793064 CEST	49726	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.387815952 CEST	443	49726	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.404597044 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.404619932 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.404627085 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.404658079 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.404668093 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.404675961 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.404695034 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.404719114 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.404742002 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.404767036 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.421104908 CEST	443	49722	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.421128035 CEST	443	49722	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.421139956 CEST	443	49722	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.421207905 CEST	49722	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.421247959 CEST	443	49722	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.421258926 CEST	49722	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.421308994 CEST	49722	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.421942949 CEST	443	49724	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.421971083 CEST	443	49724	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.421979904 CEST	443	49724	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.421993017 CEST	443	49724	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.421999931 CEST	443	49724	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.422007084 CEST	443	49724	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.422019958 CEST	49724	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.422039032 CEST	443	49724	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.422086000 CEST	49724	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.422086000 CEST	49724	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.422307968 CEST	49722	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.422349930 CEST	443	49722	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.501411915 CEST	443	49725	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.501441956 CEST	443	49725	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.501449108 CEST	443	49725	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.501462936 CEST	443	49725	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.501471043 CEST	443	49725	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.501477957 CEST	443	49725	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.501501083 CEST	49725	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.501530886 CEST	443	49725	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.501549959 CEST	49725	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.501573086 CEST	49725	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.501837015 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.501871109 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.501923084 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.501956940 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.501972914 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.502002954 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.502468109 CEST	443	49725	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.502487898 CEST	443	49725	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.502543926 CEST	49725	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.502554893 CEST	443	49725	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.502607107 CEST	49725	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.510580063 CEST	443	49724	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.510606050 CEST	443	49724	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.510663033 CEST	49724	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.510679960 CEST	443	49724	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.510690928 CEST	49724	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.510813951 CEST	49724	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.610837936 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.610865116 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.610924959 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.610951900 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.610965967 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.610990047 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.611747980 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.611764908 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.611813068 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.611816883 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.611870050 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.612272978 CEST	443	49725	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.612297058 CEST	443	49725	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.612345934 CEST	49725	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.612375021 CEST	443	49725	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.612413883 CEST	49725	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.613256931 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.613276958 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.613329887 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.613333941 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.613368034 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.613706112 CEST	443	49725	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.613729000 CEST	443	49725	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.613868952 CEST	49725	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.613878965 CEST	443	49725	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.614017963 CEST	49725	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.614444017 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.614460945 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.614499092 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.614502907 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.614520073 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.614542961 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.615118027 CEST	443	49725	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.615134954 CEST	443	49725	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.615164042 CEST	49725	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.615171909 CEST	443	49725	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.615204096 CEST	49725	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.615854025 CEST	443	49725	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.615910053 CEST	49725	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.615916967 CEST	443	49725	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.615933895 CEST	443	49725	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.615973949 CEST	49725	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.616338015 CEST	49725	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.616358042 CEST	443	49725	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.620620966 CEST	443	49724	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.620640993 CEST	443	49724	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.620740891 CEST	49724	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.620740891 CEST	49724	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.620767117 CEST	443	49724	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.620804071 CEST	49724	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.621648073 CEST	443	49724	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.621663094 CEST	443	49724	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.621723890 CEST	49724	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.621745110 CEST	443	49724	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.621835947 CEST	49724	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.623275995 CEST	443	49724	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.623290062 CEST	443	49724	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.623348951 CEST	49724	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.623363018 CEST	443	49724	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.623420000 CEST	49724	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.643738985 CEST	443	49724	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.643753052 CEST	443	49724	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.643815041 CEST	49724	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.643838882 CEST	443	49724	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.643868923 CEST	49724	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.643915892 CEST	49724	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.721621990 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.721645117 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.721858978 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.721879005 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.721949100 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.722301960 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.722316980 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.722352028 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.722357035 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.722405910 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.722405910 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.722940922 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.722954988 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.723124981 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.723128080 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.723521948 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.724047899 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.724061966 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.724267006 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.724272013 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.724354982 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.724905014 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.724919081 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.725001097 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.725001097 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.725004911 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.725055933 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.725965023 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.725981951 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.726042986 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.726047039 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.726077080 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.726102114 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.726792097 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.726807117 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.726874113 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.726874113 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.726877928 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.731230974 CEST	443	49724	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.731251001 CEST	443	49724	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.731268883 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.731328964 CEST	49724	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.731329918 CEST	49724	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.731347084 CEST	443	49724	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.731395960 CEST	49724	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.731936932 CEST	443	49724	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.731951952 CEST	443	49724	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.732047081 CEST	49724	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.732047081 CEST	49724	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.732052088 CEST	443	49724	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.732266903 CEST	49724	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.732621908 CEST	443	49724	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.732635975 CEST	443	49724	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.732716084 CEST	49724	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.732716084 CEST	49724	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.732719898 CEST	443	49724	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.732810020 CEST	49724	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.733623981 CEST	443	49724	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.733655930 CEST	443	49724	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.733727932 CEST	49724	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.733727932 CEST	49724	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.733732939 CEST	443	49724	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.734110117 CEST	49724	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.734216928 CEST	443	49724	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.734286070 CEST	443	49724	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.734322071 CEST	49724	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.734407902 CEST	49724	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.751498938 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.791562080 CEST	49724	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.802550077 CEST	443	49728	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.808523893 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.808548927 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.808717966 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.808734894 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.808877945 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.809232950 CEST	49728	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.809241056 CEST	443	49728	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.809602976 CEST	443	49728	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.820028067 CEST	49728	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.820139885 CEST	443	49728	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.832568884 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.832591057 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.832694054 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.832694054 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.832707882 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.832731962 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.832748890 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.832762003 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.832766056 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.832794905 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.832906961 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.832911015 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.833029032 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.833048105 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.833082914 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.833087921 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.833111048 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.833362103 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.833379030 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.833446026 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.833446026 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.833452940 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.837685108 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.837698936 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.837743044 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.837748051 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.837779045 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.838259935 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.838275909 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.838351011 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.838351011 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.838355064 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.838725090 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.838737011 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.838776112 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.838781118 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.838805914 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.846884012 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.848017931 CEST	49728	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.895414114 CEST	443	49728	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.895581007 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.895598888 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.895735025 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.895735025 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.895742893 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.896096945 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.916035891 CEST	49724	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.916055918 CEST	443	49724	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.919812918 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.919853926 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.919883013 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.919889927 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.919994116 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.920022011 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.920041084 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.920044899 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.920070887 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.920070887 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.920417070 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.920429945 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.920450926 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.920454979 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.920480967 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.920892000 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.920908928 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.920926094 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.920929909 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.920958996 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.920958996 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.921369076 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.921380997 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.921397924 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.921401978 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.921411991 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.921459913 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.921459913 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.921895027 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.921906948 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.921966076 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.921966076 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.921969891 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.922373056 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.922389030 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.922405958 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.922410011 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.922442913 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.922892094 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.926935911 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.982240915 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.982264996 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.982475042 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.982500076 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.982666016 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.982683897 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.982754946 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.982754946 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:05.982763052 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:05.982814074 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.006856918 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.006876945 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.007025003 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.007033110 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.007256985 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.007375002 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.007392883 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.007647038 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.007652044 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.007716894 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.007915974 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.007930040 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.008047104 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.008050919 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.008111000 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.008364916 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.008382082 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.008439064 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.008441925 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.008472919 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.008519888 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.008914948 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.008929014 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.009238005 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.009242058 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.009299040 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.009341955 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.009356022 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.009495974 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.009500027 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.009579897 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.009795904 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.009810925 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.009953976 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.009959936 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.010096073 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.075114012 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.075136900 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.075262070 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.075262070 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.075273037 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.075402975 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.093375921 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.093394041 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.093516111 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.093516111 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.093525887 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.093693018 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.093728065 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.093746901 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.093750954 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.093759060 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.094000101 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.094012976 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.094048023 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.094053984 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.094084978 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.094084978 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.094203949 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.094351053 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.094364882 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.094436884 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.094436884 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.094441891 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.094887018 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.095103979 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.095119953 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.095210075 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.095210075 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.095216036 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.095446110 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.095463991 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.095523119 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.095527887 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.095722914 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.095779896 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.095819950 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.095876932 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.095881939 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.095911980 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.099278927 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.131972075 CEST	443	49728	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.132031918 CEST	443	49728	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.132199049 CEST	443	49728	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.132236958 CEST	49728	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.138883114 CEST	49728	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.156174898 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.156198025 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.158889055 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.158905029 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.166879892 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.180397034 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.180413008 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.180521011 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.180526972 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.180658102 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.181032896 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.181046963 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.181130886 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.181130886 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.181135893 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.181226015 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.181509972 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.181524992 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.181601048 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.181605101 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.181946039 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.181963921 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.182048082 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.182048082 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.182053089 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.182179928 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.182527065 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.182539940 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.182626009 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.182626009 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.182631969 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.182672024 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.182995081 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.183010101 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.183254004 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.183288097 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.183296919 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.183310032 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.183327913 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.183329105 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.183352947 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.183352947 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.183424950 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.342231989 CEST	49729	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.342233896 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.342288971 CEST	443	49729	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.342371941 CEST	49729	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.342833042 CEST	49730	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.342839956 CEST	443	49730	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.342915058 CEST	49730	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.346069098 CEST	49729	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.346086025 CEST	443	49729	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.348968029 CEST	49730	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.348980904 CEST	443	49730	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.350346088 CEST	49728	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.350366116 CEST	443	49728	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.393677950 CEST	49731	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.393698931 CEST	49732	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.393723965 CEST	443	49731	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.393726110 CEST	443	49732	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.394927979 CEST	49731	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.394972086 CEST	49732	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.395575047 CEST	49731	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.395586967 CEST	443	49731	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.395606995 CEST	49732	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.395617962 CEST	443	49732	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.396837950 CEST	49733	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.396934032 CEST	443	49733	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.397433043 CEST	49733	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.398037910 CEST	49733	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.398072958 CEST	443	49733	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.398669004 CEST	49723	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.398679972 CEST	443	49723	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.473882914 CEST	49735	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.473907948 CEST	443	49735	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:06.474076033 CEST	49735	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.474899054 CEST	49735	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:06.474910021 CEST	443	49735	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.029067993 CEST	443	49730	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.032402992 CEST	49730	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.032433033 CEST	443	49730	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.032747030 CEST	443	49730	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.033579111 CEST	49730	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.033636093 CEST	443	49730	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.033775091 CEST	49730	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.047007084 CEST	443	49729	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.049887896 CEST	49729	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.049897909 CEST	443	49729	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.051024914 CEST	443	49729	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.053018093 CEST	49729	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.053217888 CEST	443	49729	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.053258896 CEST	49729	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.076628923 CEST	443	49732	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.077219009 CEST	49732	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.077239037 CEST	443	49732	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.078233004 CEST	443	49732	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.078303099 CEST	49732	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.079272032 CEST	49732	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.079329014 CEST	443	49732	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.079405069 CEST	443	49730	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.081507921 CEST	49732	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.081515074 CEST	443	49732	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.082346916 CEST	443	49731	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.084352970 CEST	49731	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.084379911 CEST	443	49731	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.085350990 CEST	443	49731	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.085413933 CEST	49731	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.090369940 CEST	49731	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.090436935 CEST	443	49731	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.090522051 CEST	49731	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.090533972 CEST	443	49731	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.094949961 CEST	443	49733	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.095165014 CEST	49733	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.095237970 CEST	443	49733	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.096278906 CEST	443	49733	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.096359015 CEST	49733	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.097965002 CEST	49733	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.098036051 CEST	443	49733	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.098134995 CEST	49733	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.098153114 CEST	443	49733	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.099020958 CEST	49736	443	192.168.2.6	184.28.90.27
Sep 29, 2024 01:44:07.099059105 CEST	443	49736	184.28.90.27	192.168.2.6
Sep 29, 2024 01:44:07.099111080 CEST	49736	443	192.168.2.6	184.28.90.27
Sep 29, 2024 01:44:07.099410057 CEST	443	49729	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.100904942 CEST	49729	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.102454901 CEST	49736	443	192.168.2.6	184.28.90.27
Sep 29, 2024 01:44:07.102472067 CEST	443	49736	184.28.90.27	192.168.2.6
Sep 29, 2024 01:44:07.131656885 CEST	49732	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.131674051 CEST	49731	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.150898933 CEST	49733	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.159727097 CEST	443	49735	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.180516958 CEST	49735	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.180526018 CEST	443	49735	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.181554079 CEST	443	49735	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.181632042 CEST	49735	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.182024002 CEST	49735	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.182079077 CEST	443	49735	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.182455063 CEST	49735	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.182460070 CEST	443	49735	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.225624084 CEST	49735	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.352381945 CEST	443	49730	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.352408886 CEST	443	49730	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.352463007 CEST	443	49730	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.352468014 CEST	49730	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.352529049 CEST	49730	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.362112999 CEST	49730	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.362155914 CEST	443	49730	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.371315002 CEST	443	49729	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.371403933 CEST	443	49729	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.371443987 CEST	49729	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.374603987 CEST	49729	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.374627113 CEST	443	49729	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.399951935 CEST	443	49732	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.400018930 CEST	443	49732	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.400058985 CEST	49732	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.403244972 CEST	49732	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.403273106 CEST	443	49732	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.405745029 CEST	443	49731	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.405771971 CEST	443	49731	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.405826092 CEST	443	49731	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.405827045 CEST	49731	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.405860901 CEST	49731	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.406399965 CEST	49731	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.406414986 CEST	443	49731	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.422100067 CEST	443	49733	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.422130108 CEST	443	49733	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.422139883 CEST	443	49733	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.422182083 CEST	49733	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.422204018 CEST	443	49733	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.422216892 CEST	443	49733	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.422276974 CEST	49733	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.423192978 CEST	49733	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.423208952 CEST	443	49733	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.481574059 CEST	443	49735	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.481601954 CEST	443	49735	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.481652975 CEST	443	49735	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.481654882 CEST	49735	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.481726885 CEST	49735	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.717346907 CEST	49737	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.717406988 CEST	443	49737	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.717513084 CEST	49737	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.718867064 CEST	49738	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.718873978 CEST	443	49738	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.718943119 CEST	49738	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.719600916 CEST	49739	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.719656944 CEST	443	49739	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.719866037 CEST	49739	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.720447063 CEST	49740	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.720500946 CEST	443	49740	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.720555067 CEST	49740	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.721529961 CEST	49741	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.721612930 CEST	443	49741	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.721687078 CEST	49741	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.722109079 CEST	49737	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.722122908 CEST	443	49737	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.722651958 CEST	49738	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.722661018 CEST	443	49738	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.722929955 CEST	49739	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.722949028 CEST	443	49739	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.723449945 CEST	49740	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.723473072 CEST	443	49740	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.723879099 CEST	49741	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.723896027 CEST	443	49741	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.854285002 CEST	49735	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:07.854321957 CEST	443	49735	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:07.928318977 CEST	443	49736	184.28.90.27	192.168.2.6
Sep 29, 2024 01:44:07.928402901 CEST	49736	443	192.168.2.6	184.28.90.27
Sep 29, 2024 01:44:07.938788891 CEST	49736	443	192.168.2.6	184.28.90.27
Sep 29, 2024 01:44:07.938818932 CEST	443	49736	184.28.90.27	192.168.2.6
Sep 29, 2024 01:44:07.939116955 CEST	443	49736	184.28.90.27	192.168.2.6
Sep 29, 2024 01:44:07.991926908 CEST	49736	443	192.168.2.6	184.28.90.27
Sep 29, 2024 01:44:08.206604958 CEST	49736	443	192.168.2.6	184.28.90.27
Sep 29, 2024 01:44:08.251394033 CEST	443	49736	184.28.90.27	192.168.2.6
Sep 29, 2024 01:44:08.346259117 CEST	49742	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.346328974 CEST	443	49742	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.346388102 CEST	49742	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.346743107 CEST	49743	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.346786022 CEST	443	49743	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.346975088 CEST	49743	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.347110987 CEST	49744	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.347156048 CEST	443	49744	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.347212076 CEST	49744	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.347625971 CEST	49745	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.347654104 CEST	443	49745	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.347712040 CEST	49745	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.348102093 CEST	49746	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.348109961 CEST	443	49746	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.348239899 CEST	49746	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.348464012 CEST	49747	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.348473072 CEST	443	49747	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.348551989 CEST	49747	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.349277973 CEST	49747	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.349293947 CEST	443	49747	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.349577904 CEST	49746	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.349589109 CEST	443	49746	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.350423098 CEST	49745	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.350430012 CEST	443	49745	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.351026058 CEST	49744	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.351036072 CEST	443	49744	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.351623058 CEST	49743	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.351639032 CEST	443	49743	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.352163076 CEST	49742	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.352193117 CEST	443	49742	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.396047115 CEST	443	49736	184.28.90.27	192.168.2.6
Sep 29, 2024 01:44:08.396284103 CEST	443	49736	184.28.90.27	192.168.2.6
Sep 29, 2024 01:44:08.396358967 CEST	49736	443	192.168.2.6	184.28.90.27
Sep 29, 2024 01:44:08.396557093 CEST	49736	443	192.168.2.6	184.28.90.27
Sep 29, 2024 01:44:08.396589041 CEST	443	49736	184.28.90.27	192.168.2.6
Sep 29, 2024 01:44:08.396601915 CEST	49736	443	192.168.2.6	184.28.90.27
Sep 29, 2024 01:44:08.396608114 CEST	443	49736	184.28.90.27	192.168.2.6
Sep 29, 2024 01:44:08.582474947 CEST	49748	443	192.168.2.6	184.28.90.27
Sep 29, 2024 01:44:08.582532883 CEST	443	49748	184.28.90.27	192.168.2.6
Sep 29, 2024 01:44:08.582726002 CEST	49748	443	192.168.2.6	184.28.90.27
Sep 29, 2024 01:44:08.583108902 CEST	49748	443	192.168.2.6	184.28.90.27
Sep 29, 2024 01:44:08.583123922 CEST	443	49748	184.28.90.27	192.168.2.6
Sep 29, 2024 01:44:08.583998919 CEST	443	49737	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.584706068 CEST	49737	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.584743023 CEST	443	49737	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.585190058 CEST	443	49737	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.585504055 CEST	49737	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.585576057 CEST	443	49737	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.586659908 CEST	443	49741	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.586812019 CEST	443	49739	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.604887962 CEST	443	49738	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.605873108 CEST	49739	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.605889082 CEST	443	49739	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.605943918 CEST	49741	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.605977058 CEST	443	49741	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.606848001 CEST	443	49739	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.606863976 CEST	443	49741	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.606919050 CEST	49739	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.606991053 CEST	49741	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.613909006 CEST	443	49740	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.632544994 CEST	49737	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.656537056 CEST	49740	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.662082911 CEST	49738	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.662100077 CEST	443	49738	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.662209034 CEST	49737	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.662544012 CEST	443	49738	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.662781000 CEST	49740	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.662791014 CEST	443	49740	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.663129091 CEST	49741	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.663249969 CEST	443	49741	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.663602114 CEST	49739	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.663700104 CEST	443	49739	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.663892984 CEST	49738	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.663959026 CEST	443	49738	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.664222956 CEST	443	49740	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.664339066 CEST	49740	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.664391994 CEST	49741	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.664418936 CEST	443	49741	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.664443970 CEST	49739	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.664458990 CEST	443	49739	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.664956093 CEST	49740	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.664969921 CEST	49738	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.665134907 CEST	443	49740	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.665136099 CEST	49740	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.707408905 CEST	443	49737	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.707464933 CEST	443	49740	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.711416006 CEST	443	49738	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.712836981 CEST	49739	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.713017941 CEST	49740	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.713036060 CEST	443	49740	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.754627943 CEST	49740	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.773910999 CEST	49741	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.911801100 CEST	443	49739	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.911870956 CEST	443	49739	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.912141085 CEST	49739	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.912225962 CEST	443	49741	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.912301064 CEST	443	49741	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.912357092 CEST	49741	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.912385941 CEST	443	49737	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.912606001 CEST	443	49737	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.912662029 CEST	49737	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.913328886 CEST	49739	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.913346052 CEST	443	49739	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.914577007 CEST	49741	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.914604902 CEST	443	49741	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.914835930 CEST	49737	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.914854050 CEST	443	49737	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.933636904 CEST	443	49738	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.933829069 CEST	443	49738	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.933887959 CEST	49738	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.934202909 CEST	49738	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.934212923 CEST	443	49738	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.989804983 CEST	443	49740	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.989882946 CEST	443	49740	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:08.989960909 CEST	49740	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.990458012 CEST	49740	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:08.990474939 CEST	443	49740	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.023282051 CEST	443	49744	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.023514032 CEST	49744	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.023544073 CEST	443	49744	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.024365902 CEST	443	49747	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.024540901 CEST	49747	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.024549007 CEST	443	49747	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.024563074 CEST	443	49744	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.024629116 CEST	49744	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.025166988 CEST	49744	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.025233984 CEST	443	49744	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.025304079 CEST	49744	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.028184891 CEST	443	49747	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.028261900 CEST	49747	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.028526068 CEST	443	49745	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.028645039 CEST	49747	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.028809071 CEST	443	49747	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.028850079 CEST	49745	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.028876066 CEST	443	49745	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.028879881 CEST	49747	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.029887915 CEST	443	49745	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.029963970 CEST	49745	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.030308962 CEST	49745	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.030365944 CEST	49745	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.030405998 CEST	443	49745	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.035259962 CEST	443	49742	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.035474062 CEST	49742	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.035499096 CEST	443	49742	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.039737940 CEST	443	49742	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.039804935 CEST	49742	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.040194035 CEST	49742	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.040332079 CEST	49742	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.040385008 CEST	443	49742	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.052191973 CEST	443	49743	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.052573919 CEST	49743	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.052587032 CEST	443	49743	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.053644896 CEST	443	49743	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.053729057 CEST	49743	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.053956032 CEST	443	49746	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.054141998 CEST	49743	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.054204941 CEST	443	49743	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.054305077 CEST	49746	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.054317951 CEST	443	49746	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.054414034 CEST	49743	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.054423094 CEST	443	49743	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.058129072 CEST	443	49746	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.058235884 CEST	49746	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.058610916 CEST	49746	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.058681965 CEST	49746	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.058770895 CEST	443	49746	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.071399927 CEST	443	49744	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.072761059 CEST	49747	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.072774887 CEST	443	49747	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.072804928 CEST	49745	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.072813034 CEST	443	49745	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.088816881 CEST	49742	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.088845968 CEST	443	49742	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.120938063 CEST	49747	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.120956898 CEST	49745	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.128791094 CEST	49742	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.165371895 CEST	49749	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.165419102 CEST	443	49749	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.165560961 CEST	49749	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.166085005 CEST	49749	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.166099072 CEST	443	49749	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.171231985 CEST	49744	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.171238899 CEST	49743	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.171246052 CEST	443	49744	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.171308994 CEST	49746	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.171319962 CEST	443	49746	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.237863064 CEST	443	49748	184.28.90.27	192.168.2.6
Sep 29, 2024 01:44:09.237966061 CEST	49748	443	192.168.2.6	184.28.90.27
Sep 29, 2024 01:44:09.241581917 CEST	49748	443	192.168.2.6	184.28.90.27
Sep 29, 2024 01:44:09.241590023 CEST	443	49748	184.28.90.27	192.168.2.6
Sep 29, 2024 01:44:09.241933107 CEST	443	49748	184.28.90.27	192.168.2.6
Sep 29, 2024 01:44:09.244863033 CEST	49748	443	192.168.2.6	184.28.90.27
Sep 29, 2024 01:44:09.273531914 CEST	49744	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.273564100 CEST	49746	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.291436911 CEST	443	49748	184.28.90.27	192.168.2.6
Sep 29, 2024 01:44:09.356659889 CEST	443	49742	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.356713057 CEST	443	49742	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.356777906 CEST	49742	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.356802940 CEST	443	49742	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.356858969 CEST	443	49742	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.357053995 CEST	49742	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.381273031 CEST	443	49746	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.381479025 CEST	443	49746	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.381623030 CEST	49746	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.383558035 CEST	443	49743	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.383578062 CEST	443	49743	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.383630037 CEST	49743	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.383635998 CEST	443	49743	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.383903980 CEST	49743	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.389242887 CEST	443	49744	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.389265060 CEST	443	49744	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.389272928 CEST	443	49744	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.389317989 CEST	443	49744	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.389333963 CEST	443	49744	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.389341116 CEST	443	49744	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.389344931 CEST	49744	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.389358997 CEST	49744	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.389359951 CEST	443	49744	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.389368057 CEST	443	49744	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.389384031 CEST	49744	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.389408112 CEST	443	49744	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.389416933 CEST	49744	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.389451981 CEST	49744	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.407429934 CEST	49746	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.407445908 CEST	443	49746	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.408016920 CEST	49750	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.408051968 CEST	443	49750	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.408113003 CEST	49750	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.409194946 CEST	49750	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.409210920 CEST	443	49750	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.410181046 CEST	49742	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.410195112 CEST	443	49742	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.410515070 CEST	49751	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.410619020 CEST	443	49751	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.410696983 CEST	49751	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.411814928 CEST	49751	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.411854029 CEST	443	49751	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.412698984 CEST	49743	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.412729025 CEST	443	49743	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.413158894 CEST	49752	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.413175106 CEST	443	49752	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.413238049 CEST	49752	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.424232006 CEST	49752	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.424247980 CEST	443	49752	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.456881046 CEST	443	49747	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.456940889 CEST	443	49747	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.456963062 CEST	443	49747	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.456980944 CEST	443	49747	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.456995010 CEST	49747	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.457014084 CEST	443	49747	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.457030058 CEST	443	49747	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.457037926 CEST	49747	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.457047939 CEST	443	49747	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.457078934 CEST	49747	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.457084894 CEST	443	49747	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.457108021 CEST	49747	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.457115889 CEST	49747	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.458048105 CEST	443	49747	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.458065987 CEST	443	49747	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.458105087 CEST	443	49747	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.458139896 CEST	49747	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.458179951 CEST	49747	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.458184004 CEST	443	49747	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.458256006 CEST	49747	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.468748093 CEST	443	49745	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.468770981 CEST	443	49745	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.468777895 CEST	443	49745	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.468786955 CEST	443	49745	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.468795061 CEST	443	49745	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.468796968 CEST	443	49745	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.468869925 CEST	49745	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.468869925 CEST	49745	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.468894958 CEST	443	49745	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.468947887 CEST	49745	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.470434904 CEST	443	49745	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.470443964 CEST	443	49745	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.470477104 CEST	443	49745	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.470501900 CEST	49745	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.470511913 CEST	443	49745	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.470536947 CEST	49745	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.470550060 CEST	49745	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.496789932 CEST	49744	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.496810913 CEST	443	49744	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.497174025 CEST	49753	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.497208118 CEST	443	49753	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.497257948 CEST	49753	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.498286963 CEST	49753	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.498298883 CEST	443	49753	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.517872095 CEST	443	49748	184.28.90.27	192.168.2.6
Sep 29, 2024 01:44:09.517951965 CEST	443	49748	184.28.90.27	192.168.2.6
Sep 29, 2024 01:44:09.517992973 CEST	49748	443	192.168.2.6	184.28.90.27
Sep 29, 2024 01:44:09.567857027 CEST	443	49747	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.567919016 CEST	443	49747	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.567945004 CEST	49747	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.567956924 CEST	443	49747	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.568002939 CEST	49747	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.569096088 CEST	443	49747	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.569147110 CEST	443	49747	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.569171906 CEST	49747	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.569178104 CEST	443	49747	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.569202900 CEST	49747	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.569228888 CEST	49747	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.570099115 CEST	443	49747	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.570143938 CEST	443	49747	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.570173025 CEST	49747	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.570178032 CEST	443	49747	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.570215940 CEST	49747	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.570228100 CEST	49747	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.570979118 CEST	443	49747	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.571070910 CEST	49747	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.571075916 CEST	443	49747	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.571118116 CEST	49747	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.571157932 CEST	443	49747	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.571202993 CEST	49747	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.579737902 CEST	443	49745	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.579758883 CEST	443	49745	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.579848051 CEST	49745	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.579874039 CEST	443	49745	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.579942942 CEST	49745	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.581123114 CEST	443	49745	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.581144094 CEST	443	49745	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.581223965 CEST	49745	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.581228971 CEST	443	49745	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.581299067 CEST	49745	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.581871033 CEST	443	49745	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.581886053 CEST	443	49745	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.581954002 CEST	49745	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.581959963 CEST	443	49745	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.581969976 CEST	49745	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.583169937 CEST	49745	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.583724976 CEST	443	49745	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.583748102 CEST	443	49745	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.583792925 CEST	49745	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.583797932 CEST	443	49745	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.583823919 CEST	49745	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.583858013 CEST	49745	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.669748068 CEST	49745	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.670609951 CEST	49747	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.670648098 CEST	443	49747	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.690900087 CEST	443	49745	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.690931082 CEST	443	49745	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.690989971 CEST	49745	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.691016912 CEST	443	49745	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.691042900 CEST	49745	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.691054106 CEST	49745	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.691745996 CEST	443	49745	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.691768885 CEST	443	49745	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.691854954 CEST	49745	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.691854954 CEST	49745	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.691869974 CEST	443	49745	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.691906929 CEST	49745	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.692733049 CEST	443	49745	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.692749977 CEST	443	49745	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.692786932 CEST	49745	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.692794085 CEST	443	49745	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.692837954 CEST	49745	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.692837954 CEST	49745	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.693471909 CEST	443	49745	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.693495989 CEST	443	49745	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.693610907 CEST	443	49745	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.693622112 CEST	49745	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.693627119 CEST	443	49745	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.693640947 CEST	49745	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.693689108 CEST	443	49745	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.693726063 CEST	49745	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.693736076 CEST	49745	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.700265884 CEST	49745	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.700282097 CEST	443	49745	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.745497942 CEST	49748	443	192.168.2.6	184.28.90.27
Sep 29, 2024 01:44:09.745526075 CEST	443	49748	184.28.90.27	192.168.2.6
Sep 29, 2024 01:44:09.745538950 CEST	49748	443	192.168.2.6	184.28.90.27
Sep 29, 2024 01:44:09.745546103 CEST	443	49748	184.28.90.27	192.168.2.6
Sep 29, 2024 01:44:09.842307091 CEST	443	49749	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.842700958 CEST	49749	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.842731953 CEST	443	49749	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.843739033 CEST	443	49749	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.844060898 CEST	49749	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.844126940 CEST	443	49749	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:09.844398022 CEST	49749	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:09.891408920 CEST	443	49749	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:10.084928036 CEST	443	49751	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:10.085526943 CEST	49751	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:10.085616112 CEST	443	49751	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:10.085963964 CEST	443	49751	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:10.086606026 CEST	49751	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:10.086678028 CEST	443	49751	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:10.086822033 CEST	49751	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:10.091991901 CEST	443	49750	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:10.092272043 CEST	49750	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:10.092295885 CEST	443	49750	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:10.092772961 CEST	443	49750	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:10.093899965 CEST	49750	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:10.093977928 CEST	443	49750	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:10.094060898 CEST	49750	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:10.094856977 CEST	443	49752	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:10.095237017 CEST	49752	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:10.095263958 CEST	443	49752	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:10.096318007 CEST	443	49752	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:10.096385956 CEST	49752	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:10.096847057 CEST	49752	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:10.096908092 CEST	443	49752	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:10.097094059 CEST	49752	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:10.097106934 CEST	443	49752	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:10.127408981 CEST	443	49751	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:10.138309002 CEST	49750	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:10.138317108 CEST	443	49750	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:10.149430037 CEST	49751	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:10.149447918 CEST	49752	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:10.170243025 CEST	443	49753	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:10.170479059 CEST	49753	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:10.170497894 CEST	443	49753	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:10.171509027 CEST	443	49753	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:10.171569109 CEST	49753	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:10.171992064 CEST	49753	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:10.172051907 CEST	443	49753	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:10.172183037 CEST	49753	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:10.172193050 CEST	443	49753	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:10.204473019 CEST	443	49749	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:10.204646111 CEST	443	49749	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:10.206919909 CEST	49749	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:10.218987942 CEST	49753	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:10.230125904 CEST	49749	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:10.230143070 CEST	443	49749	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:10.235861063 CEST	49759	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:10.235903978 CEST	443	49759	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:10.235972881 CEST	49759	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:10.236191034 CEST	49759	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:10.236205101 CEST	443	49759	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:10.411961079 CEST	443	49751	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:10.412028074 CEST	443	49751	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:10.412369967 CEST	49751	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:10.412967920 CEST	49751	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:10.412991047 CEST	443	49751	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:10.418442011 CEST	443	49752	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:10.418462992 CEST	443	49752	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:10.418472052 CEST	443	49752	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:10.418515921 CEST	49752	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:10.418524981 CEST	443	49752	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:10.418565989 CEST	49752	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:10.419496059 CEST	49752	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:10.419514894 CEST	443	49752	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:10.420355082 CEST	443	49750	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:10.420382977 CEST	443	49750	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:10.420444965 CEST	443	49750	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:10.420471907 CEST	49750	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:10.420506954 CEST	49750	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:10.421618938 CEST	49750	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:10.421628952 CEST	443	49750	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:10.494729042 CEST	443	49753	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:10.494750977 CEST	443	49753	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:10.494800091 CEST	443	49753	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:10.494807005 CEST	49753	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:10.494853973 CEST	49753	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:10.495882988 CEST	49753	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:10.495903015 CEST	443	49753	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:10.928129911 CEST	443	49759	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:10.928916931 CEST	49759	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:10.928939104 CEST	443	49759	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:10.929424047 CEST	443	49759	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:10.930234909 CEST	49759	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:10.930316925 CEST	443	49759	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:10.930393934 CEST	49759	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:10.975404024 CEST	443	49759	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:10.981223106 CEST	49759	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:11.254669905 CEST	443	49759	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:11.254770994 CEST	443	49759	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:11.254946947 CEST	49759	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:11.526555061 CEST	49759	443	192.168.2.6	185.112.144.235
Sep 29, 2024 01:44:11.526582956 CEST	443	49759	185.112.144.235	192.168.2.6
Sep 29, 2024 01:44:12.101269960 CEST	49760	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:44:12.101336002 CEST	443	49760	40.113.110.67	192.168.2.6
Sep 29, 2024 01:44:12.101397038 CEST	49760	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:44:12.102844954 CEST	49760	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:44:12.102861881 CEST	443	49760	40.113.110.67	192.168.2.6
Sep 29, 2024 01:44:12.890558004 CEST	443	49760	40.113.110.67	192.168.2.6
Sep 29, 2024 01:44:12.890645981 CEST	49760	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:44:12.893688917 CEST	49760	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:44:12.893704891 CEST	443	49760	40.113.110.67	192.168.2.6
Sep 29, 2024 01:44:12.894097090 CEST	443	49760	40.113.110.67	192.168.2.6
Sep 29, 2024 01:44:12.896209002 CEST	49760	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:44:12.896275043 CEST	49760	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:44:12.896282911 CEST	443	49760	40.113.110.67	192.168.2.6
Sep 29, 2024 01:44:12.896478891 CEST	49760	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:44:12.943408012 CEST	443	49760	40.113.110.67	192.168.2.6
Sep 29, 2024 01:44:13.076273918 CEST	443	49760	40.113.110.67	192.168.2.6
Sep 29, 2024 01:44:13.076435089 CEST	443	49760	40.113.110.67	192.168.2.6
Sep 29, 2024 01:44:13.076494932 CEST	49760	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:44:13.076647043 CEST	49760	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:44:13.076667070 CEST	443	49760	40.113.110.67	192.168.2.6
Sep 29, 2024 01:44:13.220365047 CEST	49761	443	192.168.2.6	4.245.163.56
Sep 29, 2024 01:44:13.220400095 CEST	443	49761	4.245.163.56	192.168.2.6
Sep 29, 2024 01:44:13.220470905 CEST	49761	443	192.168.2.6	4.245.163.56
Sep 29, 2024 01:44:13.221755028 CEST	49761	443	192.168.2.6	4.245.163.56
Sep 29, 2024 01:44:13.221788883 CEST	443	49761	4.245.163.56	192.168.2.6
Sep 29, 2024 01:44:13.994524956 CEST	443	49761	4.245.163.56	192.168.2.6
Sep 29, 2024 01:44:13.994618893 CEST	49761	443	192.168.2.6	4.245.163.56
Sep 29, 2024 01:44:13.996572018 CEST	49761	443	192.168.2.6	4.245.163.56
Sep 29, 2024 01:44:13.996582031 CEST	443	49761	4.245.163.56	192.168.2.6
Sep 29, 2024 01:44:13.996969938 CEST	443	49761	4.245.163.56	192.168.2.6
Sep 29, 2024 01:44:14.044399977 CEST	49761	443	192.168.2.6	4.245.163.56
Sep 29, 2024 01:44:14.118890047 CEST	49761	443	192.168.2.6	4.245.163.56
Sep 29, 2024 01:44:14.163403988 CEST	443	49761	4.245.163.56	192.168.2.6
Sep 29, 2024 01:44:14.370584011 CEST	443	49761	4.245.163.56	192.168.2.6
Sep 29, 2024 01:44:14.370644093 CEST	443	49761	4.245.163.56	192.168.2.6
Sep 29, 2024 01:44:14.370654106 CEST	443	49761	4.245.163.56	192.168.2.6
Sep 29, 2024 01:44:14.370670080 CEST	443	49761	4.245.163.56	192.168.2.6
Sep 29, 2024 01:44:14.370709896 CEST	49761	443	192.168.2.6	4.245.163.56
Sep 29, 2024 01:44:14.370733976 CEST	443	49761	4.245.163.56	192.168.2.6
Sep 29, 2024 01:44:14.370778084 CEST	443	49761	4.245.163.56	192.168.2.6
Sep 29, 2024 01:44:14.370789051 CEST	49761	443	192.168.2.6	4.245.163.56
Sep 29, 2024 01:44:14.370789051 CEST	49761	443	192.168.2.6	4.245.163.56
Sep 29, 2024 01:44:14.370814085 CEST	49761	443	192.168.2.6	4.245.163.56
Sep 29, 2024 01:44:14.371186972 CEST	443	49761	4.245.163.56	192.168.2.6
Sep 29, 2024 01:44:14.371236086 CEST	49761	443	192.168.2.6	4.245.163.56
Sep 29, 2024 01:44:14.371244907 CEST	443	49761	4.245.163.56	192.168.2.6
Sep 29, 2024 01:44:14.371279955 CEST	443	49761	4.245.163.56	192.168.2.6
Sep 29, 2024 01:44:14.371315002 CEST	49761	443	192.168.2.6	4.245.163.56
Sep 29, 2024 01:44:14.380135059 CEST	49761	443	192.168.2.6	4.245.163.56
Sep 29, 2024 01:44:14.380153894 CEST	443	49761	4.245.163.56	192.168.2.6
Sep 29, 2024 01:44:14.380166054 CEST	49761	443	192.168.2.6	4.245.163.56
Sep 29, 2024 01:44:14.380171061 CEST	443	49761	4.245.163.56	192.168.2.6
Sep 29, 2024 01:44:15.034584045 CEST	443	49727	142.250.186.100	192.168.2.6
Sep 29, 2024 01:44:15.034643888 CEST	443	49727	142.250.186.100	192.168.2.6
Sep 29, 2024 01:44:15.034758091 CEST	49727	443	192.168.2.6	142.250.186.100
Sep 29, 2024 01:44:15.534466982 CEST	49727	443	192.168.2.6	142.250.186.100
Sep 29, 2024 01:44:15.534509897 CEST	443	49727	142.250.186.100	192.168.2.6
Sep 29, 2024 01:44:30.723189116 CEST	49764	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:44:30.723261118 CEST	443	49764	40.113.110.67	192.168.2.6
Sep 29, 2024 01:44:30.723438978 CEST	49764	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:44:30.724014997 CEST	49764	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:44:30.724050999 CEST	443	49764	40.113.110.67	192.168.2.6
Sep 29, 2024 01:44:31.592125893 CEST	443	49764	40.113.110.67	192.168.2.6
Sep 29, 2024 01:44:31.592207909 CEST	49764	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:44:31.597193956 CEST	49764	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:44:31.597230911 CEST	443	49764	40.113.110.67	192.168.2.6
Sep 29, 2024 01:44:31.597579002 CEST	443	49764	40.113.110.67	192.168.2.6
Sep 29, 2024 01:44:31.599442005 CEST	49764	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:44:31.599504948 CEST	49764	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:44:31.599519014 CEST	443	49764	40.113.110.67	192.168.2.6
Sep 29, 2024 01:44:31.599709988 CEST	49764	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:44:31.647418022 CEST	443	49764	40.113.110.67	192.168.2.6
Sep 29, 2024 01:44:31.769054890 CEST	443	49764	40.113.110.67	192.168.2.6
Sep 29, 2024 01:44:31.769613028 CEST	49764	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:44:31.769653082 CEST	443	49764	40.113.110.67	192.168.2.6
Sep 29, 2024 01:44:31.769678116 CEST	49764	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:44:31.769736052 CEST	49764	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:44:50.901324987 CEST	49765	443	192.168.2.6	4.175.87.197
Sep 29, 2024 01:44:50.901352882 CEST	443	49765	4.175.87.197	192.168.2.6
Sep 29, 2024 01:44:50.901609898 CEST	49765	443	192.168.2.6	4.175.87.197
Sep 29, 2024 01:44:50.902648926 CEST	49765	443	192.168.2.6	4.175.87.197
Sep 29, 2024 01:44:50.902662992 CEST	443	49765	4.175.87.197	192.168.2.6
Sep 29, 2024 01:44:51.679976940 CEST	443	49765	4.175.87.197	192.168.2.6
Sep 29, 2024 01:44:51.680164099 CEST	49765	443	192.168.2.6	4.175.87.197
Sep 29, 2024 01:44:51.682271957 CEST	49765	443	192.168.2.6	4.175.87.197
Sep 29, 2024 01:44:51.682281971 CEST	443	49765	4.175.87.197	192.168.2.6
Sep 29, 2024 01:44:51.682511091 CEST	443	49765	4.175.87.197	192.168.2.6
Sep 29, 2024 01:44:51.693011999 CEST	49765	443	192.168.2.6	4.175.87.197
Sep 29, 2024 01:44:51.739392042 CEST	443	49765	4.175.87.197	192.168.2.6
Sep 29, 2024 01:44:52.014918089 CEST	443	49765	4.175.87.197	192.168.2.6
Sep 29, 2024 01:44:52.014940977 CEST	443	49765	4.175.87.197	192.168.2.6
Sep 29, 2024 01:44:52.014957905 CEST	443	49765	4.175.87.197	192.168.2.6
Sep 29, 2024 01:44:52.015309095 CEST	49765	443	192.168.2.6	4.175.87.197
Sep 29, 2024 01:44:52.015331030 CEST	443	49765	4.175.87.197	192.168.2.6
Sep 29, 2024 01:44:52.015475035 CEST	49765	443	192.168.2.6	4.175.87.197
Sep 29, 2024 01:44:52.016014099 CEST	443	49765	4.175.87.197	192.168.2.6
Sep 29, 2024 01:44:52.016051054 CEST	443	49765	4.175.87.197	192.168.2.6
Sep 29, 2024 01:44:52.016086102 CEST	49765	443	192.168.2.6	4.175.87.197
Sep 29, 2024 01:44:52.016092062 CEST	443	49765	4.175.87.197	192.168.2.6
Sep 29, 2024 01:44:52.016108036 CEST	443	49765	4.175.87.197	192.168.2.6
Sep 29, 2024 01:44:52.016115904 CEST	49765	443	192.168.2.6	4.175.87.197
Sep 29, 2024 01:44:52.016206026 CEST	49765	443	192.168.2.6	4.175.87.197
Sep 29, 2024 01:44:52.020982981 CEST	49765	443	192.168.2.6	4.175.87.197
Sep 29, 2024 01:44:52.020997047 CEST	443	49765	4.175.87.197	192.168.2.6
Sep 29, 2024 01:44:52.021030903 CEST	49765	443	192.168.2.6	4.175.87.197
Sep 29, 2024 01:44:52.021037102 CEST	443	49765	4.175.87.197	192.168.2.6
Sep 29, 2024 01:44:56.691121101 CEST	49766	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:44:56.691169024 CEST	443	49766	40.113.110.67	192.168.2.6
Sep 29, 2024 01:44:56.691236973 CEST	49766	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:44:56.691857100 CEST	49766	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:44:56.691870928 CEST	443	49766	40.113.110.67	192.168.2.6
Sep 29, 2024 01:44:57.470776081 CEST	443	49766	40.113.110.67	192.168.2.6
Sep 29, 2024 01:44:57.470861912 CEST	49766	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:44:57.473380089 CEST	49766	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:44:57.473392963 CEST	443	49766	40.113.110.67	192.168.2.6
Sep 29, 2024 01:44:57.473628998 CEST	443	49766	40.113.110.67	192.168.2.6
Sep 29, 2024 01:44:57.477076054 CEST	49766	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:44:57.477531910 CEST	49766	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:44:57.477536917 CEST	443	49766	40.113.110.67	192.168.2.6
Sep 29, 2024 01:44:57.477829933 CEST	49766	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:44:57.523396015 CEST	443	49766	40.113.110.67	192.168.2.6
Sep 29, 2024 01:44:57.664491892 CEST	443	49766	40.113.110.67	192.168.2.6
Sep 29, 2024 01:44:57.664849997 CEST	443	49766	40.113.110.67	192.168.2.6
Sep 29, 2024 01:44:57.664918900 CEST	49766	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:44:57.688962936 CEST	49766	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:44:57.688990116 CEST	443	49766	40.113.110.67	192.168.2.6
Sep 29, 2024 01:45:04.519800901 CEST	49768	443	192.168.2.6	142.250.186.100
Sep 29, 2024 01:45:04.519862890 CEST	443	49768	142.250.186.100	192.168.2.6
Sep 29, 2024 01:45:04.520032883 CEST	49768	443	192.168.2.6	142.250.186.100
Sep 29, 2024 01:45:04.520450115 CEST	49768	443	192.168.2.6	142.250.186.100
Sep 29, 2024 01:45:04.520468950 CEST	443	49768	142.250.186.100	192.168.2.6
Sep 29, 2024 01:45:05.173219919 CEST	443	49768	142.250.186.100	192.168.2.6
Sep 29, 2024 01:45:05.175637960 CEST	49768	443	192.168.2.6	142.250.186.100
Sep 29, 2024 01:45:05.175679922 CEST	443	49768	142.250.186.100	192.168.2.6
Sep 29, 2024 01:45:05.175997972 CEST	443	49768	142.250.186.100	192.168.2.6
Sep 29, 2024 01:45:05.176461935 CEST	49768	443	192.168.2.6	142.250.186.100
Sep 29, 2024 01:45:05.176542997 CEST	443	49768	142.250.186.100	192.168.2.6
Sep 29, 2024 01:45:05.230329037 CEST	49768	443	192.168.2.6	142.250.186.100
Sep 29, 2024 01:45:15.076527119 CEST	443	49768	142.250.186.100	192.168.2.6
Sep 29, 2024 01:45:15.076612949 CEST	443	49768	142.250.186.100	192.168.2.6
Sep 29, 2024 01:45:15.076966047 CEST	49768	443	192.168.2.6	142.250.186.100
Sep 29, 2024 01:45:15.544713974 CEST	49768	443	192.168.2.6	142.250.186.100
Sep 29, 2024 01:45:15.544759035 CEST	443	49768	142.250.186.100	192.168.2.6
Sep 29, 2024 01:45:25.816134930 CEST	49769	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:45:25.816174030 CEST	443	49769	40.113.110.67	192.168.2.6
Sep 29, 2024 01:45:25.816246033 CEST	49769	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:45:25.816926956 CEST	49769	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:45:25.816936970 CEST	443	49769	40.113.110.67	192.168.2.6
Sep 29, 2024 01:45:27.532365084 CEST	443	49769	40.113.110.67	192.168.2.6
Sep 29, 2024 01:45:27.532435894 CEST	49769	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:45:27.537832975 CEST	49769	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:45:27.537841082 CEST	443	49769	40.113.110.67	192.168.2.6
Sep 29, 2024 01:45:27.538077116 CEST	443	49769	40.113.110.67	192.168.2.6
Sep 29, 2024 01:45:27.541369915 CEST	49769	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:45:27.541369915 CEST	49769	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:45:27.541383028 CEST	443	49769	40.113.110.67	192.168.2.6
Sep 29, 2024 01:45:27.541594982 CEST	49769	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:45:27.587390900 CEST	443	49769	40.113.110.67	192.168.2.6
Sep 29, 2024 01:45:27.715857029 CEST	443	49769	40.113.110.67	192.168.2.6
Sep 29, 2024 01:45:27.715936899 CEST	443	49769	40.113.110.67	192.168.2.6
Sep 29, 2024 01:45:27.715976000 CEST	49769	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:45:27.719021082 CEST	49769	443	192.168.2.6	40.113.110.67
Sep 29, 2024 01:45:27.719042063 CEST	443	49769	40.113.110.67	192.168.2.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 29, 2024 01:44:01.338367939 CEST	53	63004	1.1.1.1	192.168.2.6
Sep 29, 2024 01:44:01.348572969 CEST	53	53388	1.1.1.1	192.168.2.6
Sep 29, 2024 01:44:01.350323915 CEST	53	59877	1.1.1.1	192.168.2.6
Sep 29, 2024 01:44:02.832720995 CEST	65469	53	192.168.2.6	1.1.1.1
Sep 29, 2024 01:44:02.832860947 CEST	50247	53	192.168.2.6	1.1.1.1
Sep 29, 2024 01:44:02.868899107 CEST	53	65469	1.1.1.1	192.168.2.6
Sep 29, 2024 01:44:02.892199993 CEST	53	50247	1.1.1.1	192.168.2.6
Sep 29, 2024 01:44:03.078883886 CEST	53	60812	1.1.1.1	192.168.2.6
Sep 29, 2024 01:44:04.463344097 CEST	62021	53	192.168.2.6	1.1.1.1
Sep 29, 2024 01:44:04.464297056 CEST	64631	53	192.168.2.6	1.1.1.1
Sep 29, 2024 01:44:04.470406055 CEST	53	62021	1.1.1.1	192.168.2.6
Sep 29, 2024 01:44:04.471036911 CEST	53	64631	1.1.1.1	192.168.2.6
Sep 29, 2024 01:44:06.403784037 CEST	53	58402	1.1.1.1	192.168.2.6
Sep 29, 2024 01:44:08.260479927 CEST	54911	53	192.168.2.6	1.1.1.1
Sep 29, 2024 01:44:08.260937929 CEST	64724	53	192.168.2.6	1.1.1.1
Sep 29, 2024 01:44:08.323436022 CEST	53	64724	1.1.1.1	192.168.2.6
Sep 29, 2024 01:44:08.345392942 CEST	53	54911	1.1.1.1	192.168.2.6
Sep 29, 2024 01:44:20.225568056 CEST	53	58090	1.1.1.1	192.168.2.6
Sep 29, 2024 01:44:38.941001892 CEST	53	62225	1.1.1.1	192.168.2.6
Sep 29, 2024 01:44:59.830833912 CEST	53	53308	1.1.1.1	192.168.2.6
Sep 29, 2024 01:45:01.906021118 CEST	53	54602	1.1.1.1	192.168.2.6

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Sep 29, 2024 01:44:02.892344952 CEST	192.168.2.6	1.1.1.1	c21e	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 29, 2024 01:44:02.832720995 CEST	192.168.2.6	1.1.1.1	0xaf33	Standard query (0)	svfs.is	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:44:02.832860947 CEST	192.168.2.6	1.1.1.1	0xc494	Standard query (0)	svfs.is	65	IN (0x0001)	false
Sep 29, 2024 01:44:04.463344097 CEST	192.168.2.6	1.1.1.1	0xcf54	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:44:04.464297056 CEST	192.168.2.6	1.1.1.1	0xdf8c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 29, 2024 01:44:08.260479927 CEST	192.168.2.6	1.1.1.1	0xbf59	Standard query (0)	svfs.is	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:44:08.260937929 CEST	192.168.2.6	1.1.1.1	0x878a	Standard query (0)	svfs.is	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 29, 2024 01:44:02.868899107 CEST	1.1.1.1	192.168.2.6	0xaf33	No error (0)	svfs.is		185.112.144.235	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:44:04.470406055 CEST	1.1.1.1	192.168.2.6	0xcf54	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:44:04.471036911 CEST	1.1.1.1	192.168.2.6	0xdf8c	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 29, 2024 01:44:08.345392942 CEST	1.1.1.1	192.168.2.6	0xbf59	No error (0)	svfs.is		185.112.144.235	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:44:14.179359913 CEST	1.1.1.1	192.168.2.6	0x2787	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 01:44:14.179359913 CEST	1.1.1.1	192.168.2.6	0x2787	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:44:15.200366974 CEST	1.1.1.1	192.168.2.6	0x7bcb	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:44:15.200366974 CEST	1.1.1.1	192.168.2.6	0x7bcb	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:44:35.314196110 CEST	1.1.1.1	192.168.2.6	0xe974	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:44:35.314196110 CEST	1.1.1.1	192.168.2.6	0xe974	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

svfs.is

https:

fs.microsoft.com

slscr.update.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49714	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:44:02 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 76 6d 34 61 67 52 58 30 37 45 32 64 45 38 44 51 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 61 62 64 32 66 30 34 64 34 37 66 64 30 36 65 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: vm4agRX07E2dE8DQ.1Context: babd2f04d47fd06e
2024-09-28 23:44:02 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-28 23:44:02 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 76 6d 34 61 67 52 58 30 37 45 32 64 45 38 44 51 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 61 62 64 32 66 30 34 64 34 37 66 64 30 36 65 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 66 63 61 32 56 37 69 4a 54 53 6c 50 67 47 5a 36 6b 53 49 47 69 6c 37 78 78 7a 56 51 75 4e 6f 44 73 78 44 62 2f 6f 36 34 42 56 63 2b 6d 4f 6f 4e 58 33 4e 6e 47 51 4f 6c 5a 59 58 72 4f 69 52 6b 78 44 73 45 34 65 48 54 5a 34 69 39 47 38 71 64 39 31 36 34 6e 55 52 66 6f 44 38 70 74 31 51 67 43 6c 78 46 39 71 6d 46 74 78 4c 4f 47 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: vm4agRX07E2dE8DQ.2Context: babd2f04d47fd06e<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAfca2V7iJTSlPgGZ6kSIGil7xxzVQuNoDsxDb/o64BVc+mOoNX3NnGQOlZYXrOiRkxDsE4eHTZ4i9G8qd9164nURfoD8pt1QgClxF9qmFtxLOG
2024-09-28 23:44:02 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 76 6d 34 61 67 52 58 30 37 45 32 64 45 38 44 51 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 61 62 64 32 66 30 34 64 34 37 66 64 30 36 65 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: vm4agRX07E2dE8DQ.3Context: babd2f04d47fd06e<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-28 23:44:03 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-28 23:44:03 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 46 30 77 65 4a 2f 4b 54 51 6b 69 6f 36 41 43 6a 49 67 47 45 30 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: F0weJ/KTQkio6ACjIgGE0A.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49718	185.112.144.235	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:44:03 UTC	655	OUT	GET /TMPS/ HTTP/1.1 Host: svfs.is Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:44:03 UTC	200	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 28 Sep 2024 23:44:03 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 57 Connection: close X-Powered-By: PHP/8.2.23 X-Powered-By: PleskLin
2024-09-28 23:44:03 UTC	57	IN	Data Raw: 20 3c 73 63 72 69 70 74 3e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 73 76 66 73 2e 69 73 2f 64 6e 6b 64 6c 2f 27 3b 3c 2f 73 63 72 69 70 74 3e Data Ascii: <script>location.href='https://svfs.is/dnkdl/';</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49717	185.112.144.235	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:44:03 UTC	675	OUT	GET /dnkdl/ HTTP/1.1 Host: svfs.is Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://svfs.is/TMPS/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:44:04 UTC	394	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 28 Sep 2024 23:44:04 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 20390 Connection: close X-Powered-By: PHP/8.2.23 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf; path=/ Vary: Accept-Encoding X-Powered-By: PleskLin
2024-09-28 23:44:04 UTC	14966	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 62 61 73 65 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 69 73 2d 64 65 73 6b 74 6f 70 20 6a 73 2d 67 6c 6f 62 61 6c 2d 6e 65 77 73 66 6c 61 73 68 2d 76 69 73 69 62 6c 65 22 20 73 74 79 6c 65 3d 22 2d 2d 76 68 3a 20 30 2e 37 30 33 30 30 30 30 30 30 30 30 30 30 30 30 31 72 65 6d 3b 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 61 73 73 65 74 73 2f 6a 71 75 65 72 79 2f 64 69 73 74 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 Data Ascii: <!DOCTYPE html><html dir="ltr" base="en" class="is-desktop js-global-newsflash-visible" style="--vh: 0.7030000000000001rem;" lang="en"> <head> <script type="text/javascript" src="assets/jquery/dist/jquery.min.js"></script> <script type="te
2024-09-28 23:44:04 UTC	5424	IN	Data Raw: 74 65 72 2d 2d 73 69 74 65 6d 61 70 2d 73 65 63 74 69 6f 6e 20 6c 2d 67 72 69 64 2d 2d 77 2d 31 30 30 70 63 2d 73 20 6c 2d 67 72 69 64 2d 2d 77 2d 35 30 70 63 2d 73 2d 6d 20 6c 2d 67 72 69 64 2d 2d 77 2d 35 30 70 63 2d 73 2d 6c 20 6c 2d 67 72 69 64 2d 2d 77 2d 35 30 70 63 2d 6d 2d 73 20 6c 2d 67 72 69 64 2d 2d 77 2d 32 35 70 63 2d 6d 2d 6d 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 67 72 6f 75 70 2d 68 65 61 64 69 6e 67 22 3e 4c 69 6e 65 20 6f 66 20 49 6e 64 75 73 74 72 69 65 73 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 6a 61 76 61 73 63 72 69 70 74 3a 76 6f 69 64 28 30 29 3b 22 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 20 Data Ascii: ter--sitemap-section l-grid--w-100pc-s l-grid--w-50pc-s-m l-grid--w-50pc-s-l l-grid--w-50pc-m-s l-grid--w-25pc-m-m"> <li class="group-heading">Line of Industries</li> <li><a href="javascript:void(0);" class="link

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49721	185.112.144.235	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:44:04 UTC	615	OUT	GET /dnkdl/assets/font-awesome/css/font-awesome.min.css HTTP/1.1 Host: svfs.is Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://svfs.is/dnkdl/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
2024-09-28 23:44:05 UTC	252	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 28 Sep 2024 23:44:04 GMT Content-Type: text/css Content-Length: 31000 Connection: close Last-Modified: Sun, 09 Apr 2017 12:29:24 GMT ETag: "58ea2924-7918" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-28 23:44:05 UTC	15108	IN	Data Raw: 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 37 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 34 2e 37 2e 30 27 29 3b 73 Data Ascii: /! Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7.0');s
2024-09-28 23:44:05 UTC	15892	IN	Data Raw: 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 30 22 7d 2e 66 61 2d 74 6f 67 67 6c 65 2d 75 70 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 63 61 72 65 74 2d 73 71 75 61 72 65 2d 6f 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 31 22 7d 2e 66 61 2d 74 6f 67 67 6c 65 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 63 61 72 65 74 2d 73 71 75 61 72 65 2d 6f 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 32 22 7d 2e 66 61 2d 65 75 72 6f 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 65 75 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 33 22 7d 2e 66 61 2d 67 62 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 34 22 7d 2e 66 61 2d 64 6f 6c 6c 61 72 3a 62 65 66 6f 72 Data Ascii: before{content:"\f150"}.fa-toggle-up:before,.fa-caret-square-o-up:before{content:"\f151"}.fa-toggle-right:before,.fa-caret-square-o-right:before{content:"\f152"}.fa-euro:before,.fa-eur:before{content:"\f153"}.fa-gbp:before{content:"\f154"}.fa-dollar:befor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49726	185.112.144.235	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:44:05 UTC	591	OUT	GET /dnkdl/assets/core_form.css HTTP/1.1 Host: svfs.is Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://svfs.is/dnkdl/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
2024-09-28 23:44:05 UTC	251	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 28 Sep 2024 23:44:05 GMT Content-Type: text/css Content-Length: 4601 Connection: close Last-Modified: Sat, 23 May 2020 03:38:50 GMT ETag: "5ec89aca-11f9" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-28 23:44:05 UTC	4601	IN	Data Raw: 2e 66 6f 72 6d 2d 67 72 6f 75 70 2e 68 61 73 5f 65 72 72 20 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 20 7b 7d 0a 0a 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2e 68 61 73 5f 65 72 72 20 7b 7d 0a 0a 2e 66 6f 72 6d 2d 67 72 6f 75 70 2e 68 61 73 5f 65 72 72 20 6c 61 62 65 6c 20 7b 7d 0a 0a 2e 66 6f 72 6d 2d 67 72 6f 75 70 2e 68 61 73 5f 65 72 72 20 2e 65 72 72 5f 73 70 61 6e 20 7b 7d 0a 0a 0a 0a 0a 2e 73 63 75 6d 5f 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 2f 2a 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 20 2a 2f 0a 7d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 73 63 75 6d 73 5f 68 69 64 65 20 7b 0a 20 20 20 20 30 25 20 7b Data Ascii: .form-group.has_err .form-control {}.form-control.has_err {}.form-group.has_err label {}.form-group.has_err .err_span {}.scum_container { position: relative; /* overflow: hidden; */}@-webkit-keyframes scums_hide { 0% {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49723	185.112.144.235	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:44:05 UTC	588	OUT	GET /dnkdl/assets/bundle.css HTTP/1.1 Host: svfs.is Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://svfs.is/dnkdl/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
2024-09-28 23:44:05 UTC	254	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 28 Sep 2024 23:44:05 GMT Content-Type: text/css Content-Length: 879286 Connection: close Last-Modified: Sat, 08 Jul 2023 03:09:30 GMT ETag: "64a8d36a-d6ab6" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-28 23:44:05 UTC	15106	IN	Data Raw: 0d 0a 2a 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 6d 61 72 67 69 6e 2d 62 65 66 6f 72 65 3a 20 30 3b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 6d 61 72 67 69 6e 2d 61 66 74 65 72 3a 20 30 3b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 6d 61 72 67 69 6e 2d 73 74 61 72 74 3a 20 30 3b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 6d 61 72 67 69 6e 2d 65 6e 64 3a 20 30 3b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 70 61 64 64 69 6e 67 2d 73 74 61 72 74 3a 20 30 3b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0d 0a 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 20 20 6f 75 Data Ascii: * { -webkit-margin-before: 0; -webkit-margin-after: 0; -webkit-margin-start: 0; -webkit-margin-end: 0; -webkit-padding-start: 0; -webkit-tap-highlight-color: transparent; box-sizing: border-box; margin: 0; ou
2024-09-28 23:44:05 UTC	16384	IN	Data Raw: 0d 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 61 75 74 6f 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 2e 6c 2d 67 72 69 64 2d 2d 77 2d 61 75 74 6f 2d 6d 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 6c 65 78 2d 62 61 73 69 73 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 66 6c 65 78 2d 67 72 6f 77 3a 20 31 3b 0d 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 2e 6c 2d 67 72 69 64 2d 2d 77 2d 31 30 70 63 2d 6d 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 6c 65 78 2d 62 61 73 69 73 3a 20 31 30 25 3b 0d 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 25 3b 0d 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 Data Ascii: max-width: none; width: auto; } .l-grid--w-auto-m { flex-basis: 0; flex-grow: 1; max-width: 100%; } .l-grid--w-10pc-m { flex-basis: 10%; max-width: 10%; width: 10
2024-09-28 23:44:05 UTC	16384	IN	Data Raw: 20 20 7d 0d 0a 20 20 20 20 2e 63 6f 6d 70 6f 6e 65 6e 74 2d 6d 61 72 67 69 6e 2d 2d 63 61 6d 70 61 69 67 6e 2c 0d 0a 20 20 20 20 2e 6c 65 66 74 2d 61 6c 69 67 6e 65 64 2d 67 72 69 64 20 2e 63 6f 6d 70 6f 6e 65 6e 74 2d 6d 61 72 67 69 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 37 72 65 6d 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 2e 6c 65 66 74 2d 61 6c 69 67 6e 65 64 2d 67 72 69 64 20 2e 63 6f 6d 70 6f 6e 65 6e 74 2d 74 6f 70 2d 6d 61 72 67 69 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 37 72 65 6d 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 2e 63 6f 6d 70 6f 6e 65 6e 74 2d 6d 61 72 67 69 6e 2d 2d 63 61 6d 70 61 69 67 6e 2e 63 6f 6d 70 6f 6e 65 6e 74 2d 6d 61 72 67 69 6e 20 7b 0d 0a 20 Data Ascii: } .component-margin--campaign, .left-aligned-grid .component-margin { margin-bottom: 7rem; } .left-aligned-grid .component-top-margin { margin-top: 7rem; } .component-margin--campaign.component-margin {
2024-09-28 23:44:05 UTC	16384	IN	Data Raw: 64 43 6f 6c 75 6d 6e 2d 2d 64 65 66 61 75 6c 74 2d 2d 31 20 7b 0d 0a 20 20 20 20 63 6c 65 61 72 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 32 2e 35 25 3b 0d 0a 7d 0d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 38 20 3e 20 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 64 65 66 61 75 6c 74 2d 2d 32 20 7b 0d 0a 20 20 20 20 63 6c 65 61 72 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 32 35 25 3b 0d 0a 7d 0d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 38 20 3e 20 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 Data Ascii: dColumn--default--1 { clear: none; float: left; width: 12.5%;}.aem-Grid.aem-Grid--8 > .aem-GridColumn.aem-GridColumn--default--2 { clear: none; float: left; width: 25%;}.aem-Grid.aem-Grid--8 > .aem-GridColumn.aem-Grid
2024-09-28 23:44:05 UTC	16384	IN	Data Raw: 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 31 31 20 3e 20 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 64 65 66 61 75 6c 74 2d 2d 39 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 31 2e 38 31 38 31 38 31 38 32 25 3b 0d 0a 7d 0d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 31 31 20 3e 20 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 64 65 66 61 75 6c 74 2d 2d 31 30 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 39 30 2e 39 30 39 30 39 30 39 31 25 3b 0d 0a 7d 0d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 31 31 20 3e 20 2e 61 65 6d 2d 47 Data Ascii: Grid.aem-Grid--11 > .aem-GridColumn.aem-GridColumn--offset--default--9 { margin-left: 81.81818182%;}.aem-Grid.aem-Grid--11 > .aem-GridColumn.aem-GridColumn--offset--default--10 { margin-left: 90.90909091%;}.aem-Grid.aem-Grid--11 > .aem-G
2024-09-28 23:44:05 UTC	16384	IN	Data Raw: 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 74 61 62 6c 65 74 2d 2d 34 20 7b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 35 20 3e 20 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 74 61 62 6c 65 74 2d 2d 31 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6c 65 61 72 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0d 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 32 30 25 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 35 20 3e 20 2e 61 65 6d 2d 47 72 69 64 Data Ascii: .aem-GridColumn--offset--tablet--4 { margin-left: 100%; } .aem-Grid.aem-Grid--5 > .aem-GridColumn.aem-GridColumn--tablet--1 { clear: none; float: left; width: 20%; } .aem-Grid.aem-Grid--5 > .aem-Grid
2024-09-28 23:44:05 UTC	16384	IN	Data Raw: 74 3a 20 6c 65 66 74 3b 0d 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 37 37 2e 37 37 37 37 37 37 37 38 25 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 39 20 3e 20 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 74 61 62 6c 65 74 2d 2d 38 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6c 65 61 72 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0d 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 38 38 2e 38 38 38 38 38 38 38 39 25 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 39 20 3e 20 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f Data Ascii: t: left; width: 77.77777778%; } .aem-Grid.aem-Grid--9 > .aem-GridColumn.aem-GridColumn--tablet--8 { clear: none; float: left; width: 88.88888889%; } .aem-Grid.aem-Grid--9 > .aem-GridColumn.aem-GridCo
2024-09-28 23:44:05 UTC	16384	IN	Data Raw: 20 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 74 61 62 6c 65 74 2d 2d 31 31 20 3e 20 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 74 61 62 6c 65 74 2d 2d 31 31 20 7b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 31 32 20 3e 20 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 74 61 62 6c 65 74 2d 2d 31 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6c 65 61 72 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0d 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a Data Ascii: .aem-Grid.aem-Grid--tablet--11 > .aem-GridColumn.aem-GridColumn--offset--tablet--11 { margin-left: 100%; } .aem-Grid.aem-Grid--12 > .aem-GridColumn.aem-GridColumn--tablet--1 { clear: none; float: left; width:
2024-09-28 23:44:05 UTC	16384	IN	Data Raw: 74 3a 20 34 30 25 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 70 68 6f 6e 65 2d 2d 35 20 3e 20 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 70 68 6f 6e 65 2d 2d 33 20 7b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 36 30 25 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 70 68 6f 6e 65 2d 2d 35 20 3e 20 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 70 68 6f 6e 65 2d 2d 34 20 7b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 30 25 3b 0d 0a 20 20 20 20 Data Ascii: t: 40%; } .aem-Grid.aem-Grid--phone--5 > .aem-GridColumn.aem-GridColumn--offset--phone--3 { margin-left: 60%; } .aem-Grid.aem-Grid--phone--5 > .aem-GridColumn.aem-GridColumn--offset--phone--4 { margin-left: 80%;
2024-09-28 23:44:05 UTC	16384	IN	Data Raw: 0d 0a 20 20 20 20 20 20 20 20 63 6c 65 61 72 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0d 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 38 38 2e 38 38 38 38 38 38 38 39 25 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 70 68 6f 6e 65 2d 2d 39 20 3e 20 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 70 68 6f 6e 65 2d 2d 39 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6c 65 61 72 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0d 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 Data Ascii: clear: none; float: left; width: 88.88888889%; } .aem-Grid.aem-Grid--phone--9 > .aem-GridColumn.aem-GridColumn--phone--9 { clear: none; float: left; width: 100%; } .aem-Grid.aem-Gr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49725	185.112.144.235	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:44:05 UTC	589	OUT	GET /dnkdl/assets/jquery/dist/jquery.min.js HTTP/1.1 Host: svfs.is Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://svfs.is/dnkdl/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
2024-09-28 23:44:05 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 28 Sep 2024 23:44:05 GMT Content-Type: application/javascript Content-Length: 86659 Connection: close Last-Modified: Mon, 05 Jun 2017 11:55:06 GMT ETag: "5935469a-15283" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-28 23:44:05 UTC	15093	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 Data Ascii: /! jQuery v3.2.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery
2024-09-28 23:44:05 UTC	16384	IN	Data Raw: 65 74 41 74 74 72 69 62 75 74 65 26 26 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 29 7c 7c 22 22 29 7d 29 7d 2c 41 54 54 52 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 64 29 7b 76 61 72 20 65 3d 67 61 2e 61 74 74 72 28 64 2c 61 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 22 21 3d 22 3d 3d 3d 62 3a 21 62 7c 7c 28 65 2b 3d 22 22 2c 22 3d 22 3d 3d 3d 62 3f 65 3d 3d 3d 63 3a 22 21 3d 22 3d 3d 3d 62 3f 65 21 3d 3d 63 3a 22 5e 3d 22 3d 3d 3d 62 3f 63 26 26 30 3d 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 63 29 3a 22 2a 3d 22 3d 3d 3d 62 3f 63 26 26 65 2e 69 6e 64 65 78 4f 66 28 63 29 3e 2d 31 3a 22 24 3d 22 3d 3d 3d 62 3f 63 26 26 65 2e 73 6c 69 63 65 28 2d 63 2e 6c 65 6e 67 74 68 29 Data Ascii: etAttribute&&a.getAttribute("class")\|\|"")})},ATTR:function(a,b,c){return function(d){var e=ga.attr(d,a);return null==e?"!="===b:!b\|\|(e+="","="===b?e===c:"!="===b?e!==c:"^="===b?c&&0===e.indexOf(c):"*="===b?c&&e.indexOf(c)>-1:"$="===b?c&&e.slice(-c.length)
2024-09-28 23:44:05 UTC	16384	IN	Data Raw: 6a 65 63 74 29 3b 72 65 74 75 72 6e 20 67 2e 70 72 6f 6d 69 73 65 28 29 7d 7d 29 3b 76 61 72 20 51 3d 2f 5e 28 45 76 61 6c 7c 49 6e 74 65 72 6e 61 6c 7c 52 61 6e 67 65 7c 52 65 66 65 72 65 6e 63 65 7c 53 79 6e 74 61 78 7c 54 79 70 65 7c 55 52 49 29 45 72 72 6f 72 24 2f 3b 72 2e 44 65 66 65 72 72 65 64 2e 65 78 63 65 70 74 69 6f 6e 48 6f 6f 6b 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 2e 63 6f 6e 73 6f 6c 65 26 26 61 2e 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 26 26 62 26 26 51 2e 74 65 73 74 28 62 2e 6e 61 6d 65 29 26 26 61 2e 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 6a 51 75 65 72 79 2e 44 65 66 65 72 72 65 64 20 65 78 63 65 70 74 69 6f 6e 3a 20 22 2b 62 2e 6d 65 73 73 61 67 65 2c 62 2e 73 74 61 63 6b 2c 63 29 7d 2c 72 2e 72 65 61 64 79 45 78 63 65 70 Data Ascii: ject);return g.promise()}});var Q=/^(Eval\|Internal\|Range\|Reference\|Syntax\|Type\|URI)Error$/;r.Deferred.exceptionHook=function(b,c){a.console&&a.console.warn&&b&&Q.test(b.name)&&a.console.warn("jQuery.Deferred exception: "+b.message,b.stack,c)},r.readyExcep
2024-09-28 23:44:05 UTC	16384	IN	Data Raw: 22 22 29 26 26 21 57 2e 61 63 63 65 73 73 28 6a 2c 22 67 6c 6f 62 61 6c 45 76 61 6c 22 29 26 26 72 2e 63 6f 6e 74 61 69 6e 73 28 6b 2c 6a 29 26 26 28 6a 2e 73 72 63 3f 72 2e 5f 65 76 61 6c 55 72 6c 26 26 72 2e 5f 65 76 61 6c 55 72 6c 28 6a 2e 73 72 63 29 3a 70 28 6a 2e 74 65 78 74 43 6f 6e 74 65 6e 74 2e 72 65 70 6c 61 63 65 28 44 61 2c 22 22 29 2c 6b 29 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 4b 61 28 61 2c 62 2c 63 29 7b 66 6f 72 28 76 61 72 20 64 2c 65 3d 62 3f 72 2e 66 69 6c 74 65 72 28 62 2c 61 29 3a 61 2c 66 3d 30 3b 6e 75 6c 6c 21 3d 28 64 3d 65 5b 66 5d 29 3b 66 2b 2b 29 63 7c 7c 31 21 3d 3d 64 2e 6e 6f 64 65 54 79 70 65 7c 7c 72 2e 63 6c 65 61 6e 44 61 74 61 28 6e 61 28 64 29 29 2c 64 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 28 Data Ascii: "")&&!W.access(j,"globalEval")&&r.contains(k,j)&&(j.src?r._evalUrl&&r._evalUrl(j.src):p(j.textContent.replace(Da,""),k))}return a}function Ka(a,b,c){for(var d,e=b?r.filter(b,a):a,f=0;null!=(d=e[f]);f++)c\|\|1!==d.nodeType\|\|r.cleanData(na(d)),d.parentNode&&(
2024-09-28 23:44:05 UTC	16384	IN	Data Raw: 61 6c 75 65 26 26 22 72 61 64 69 6f 22 3d 3d 3d 62 26 26 42 28 61 2c 22 69 6e 70 75 74 22 29 29 7b 76 61 72 20 63 3d 61 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 62 29 2c 63 26 26 28 61 2e 76 61 6c 75 65 3d 63 29 2c 62 7d 7d 7d 7d 2c 72 65 6d 6f 76 65 41 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 30 2c 65 3d 62 26 26 62 2e 6d 61 74 63 68 28 4c 29 3b 69 66 28 65 26 26 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 77 68 69 6c 65 28 63 3d 65 5b 64 2b 2b 5d 29 61 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 63 29 7d 7d 29 2c 6c 62 3d 7b 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 62 3d 3d 3d 21 31 3f 72 2e 72 65 6d 6f Data Ascii: alue&&"radio"===b&&B(a,"input")){var c=a.value;return a.setAttribute("type",b),c&&(a.value=c),b}}}},removeAttr:function(a,b){var c,d=0,e=b&&b.match(L);if(e&&1===a.nodeType)while(c=e[d++])a.removeAttribute(c)}}),lb={set:function(a,b,c){return b===!1?r.remo
2024-09-28 23:44:05 UTC	6030	IN	Data Raw: 74 3a 68 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 7d 2c 68 2e 67 65 74 41 6c 6c 52 65 73 70 6f 6e 73 65 48 65 61 64 65 72 73 28 29 29 29 7d 7d 2c 68 2e 6f 6e 6c 6f 61 64 3d 63 28 29 2c 64 3d 68 2e 6f 6e 65 72 72 6f 72 3d 63 28 22 65 72 72 6f 72 22 29 2c 76 6f 69 64 20 30 21 3d 3d 68 2e 6f 6e 61 62 6f 72 74 3f 68 2e 6f 6e 61 62 6f 72 74 3d 64 3a 68 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 34 3d 3d 3d 68 2e 72 65 61 64 79 53 74 61 74 65 26 26 61 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 26 26 64 28 29 7d 29 7d 2c 63 3d 63 28 22 61 62 6f 72 74 22 29 3b 74 72 79 7b 68 2e 73 65 6e 64 28 62 2e 68 61 73 43 6f 6e 74 65 6e 74 26 26 62 2e 64 61 74 61 7c 7c 6e 75 6c 6c 29 7d 63 61 74 63 Data Ascii: t:h.responseText},h.getAllResponseHeaders()))}},h.onload=c(),d=h.onerror=c("error"),void 0!==h.onabort?h.onabort=d:h.onreadystatechange=function(){4===h.readyState&&a.setTimeout(function(){c&&d()})},c=c("abort");try{h.send(b.hasContent&&b.data\|\|null)}catc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49722	185.112.144.235	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:44:05 UTC	598	OUT	GET /dnkdl/assets/ua-parser-js/dist/ua-parser.min.js HTTP/1.1 Host: svfs.is Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://svfs.is/dnkdl/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
2024-09-28 23:44:05 UTC	266	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 28 Sep 2024 23:44:05 GMT Content-Type: application/javascript Content-Length: 17048 Connection: close Last-Modified: Thu, 12 Oct 2017 16:16:24 GMT ETag: "59df9558-4298" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-28 23:44:05 UTC	15094	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 55 41 50 61 72 73 65 72 2e 6a 73 20 76 30 2e 37 2e 31 37 0a 20 2a 20 4c 69 67 68 74 77 65 69 67 68 74 20 4a 61 76 61 53 63 72 69 70 74 2d 62 61 73 65 64 20 55 73 65 72 2d 41 67 65 6e 74 20 73 74 72 69 6e 67 20 70 61 72 73 65 72 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 66 61 69 73 61 6c 6d 61 6e 2f 75 61 2d 70 61 72 73 65 72 2d 6a 73 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 c2 a9 20 32 30 31 32 2d 32 30 31 36 20 46 61 69 73 61 6c 20 53 61 6c 6d 61 6e 20 3c 66 79 7a 6c 6d 61 6e 40 67 6d 61 69 6c 2e 63 6f 6d 3e 0a 20 2a 20 44 75 61 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 20 26 20 4d 49 54 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 77 69 6e 64 6f 77 2c 75 6e 64 65 66 69 6e Data Ascii: /** * UAParser.js v0.7.17 * Lightweight JavaScript-based User-Agent string parser * https://github.com/faisalman/ua-parser-js * * Copyright 2012-2016 Faisal Salman <fyzlman@gmail.com> * Dual licensed under GPLv2 & MIT */(function(window,undefin
2024-09-28 23:44:05 UTC	1954	IN	Data Raw: 6f 72 2e 75 73 65 72 41 67 65 6e 74 3a 45 4d 50 54 59 29 3b 76 61 72 20 72 67 78 6d 61 70 3d 65 78 74 65 6e 73 69 6f 6e 73 3f 75 74 69 6c 2e 65 78 74 65 6e 64 28 72 65 67 65 78 65 73 2c 65 78 74 65 6e 73 69 6f 6e 73 29 3a 72 65 67 65 78 65 73 3b 74 68 69 73 2e 67 65 74 42 72 6f 77 73 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 72 6f 77 73 65 72 3d 7b 6e 61 6d 65 3a 75 6e 64 65 66 69 6e 65 64 2c 76 65 72 73 69 6f 6e 3a 75 6e 64 65 66 69 6e 65 64 7d 3b 6d 61 70 70 65 72 2e 72 67 78 2e 63 61 6c 6c 28 62 72 6f 77 73 65 72 2c 75 61 2c 72 67 78 6d 61 70 2e 62 72 6f 77 73 65 72 29 3b 62 72 6f 77 73 65 72 2e 6d 61 6a 6f 72 3d 75 74 69 6c 2e 6d 61 6a 6f 72 28 62 72 6f 77 73 65 72 2e 76 65 72 73 69 6f 6e 29 3b 72 65 74 75 72 6e 20 62 72 6f 77 73 65 72 Data Ascii: or.userAgent:EMPTY);var rgxmap=extensions?util.extend(regexes,extensions):regexes;this.getBrowser=function(){var browser={name:undefined,version:undefined};mapper.rgx.call(browser,ua,rgxmap.browser);browser.major=util.major(browser.version);return browser

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49724	185.112.144.235	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:44:05 UTC	586	OUT	GET /dnkdl/assets/angular/angular.min.js HTTP/1.1 Host: svfs.is Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://svfs.is/dnkdl/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
2024-09-28 23:44:05 UTC	268	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 28 Sep 2024 23:44:05 GMT Content-Type: application/javascript Content-Length: 168828 Connection: close Last-Modified: Fri, 18 Aug 2017 22:37:28 GMT ETag: "59976c28-2937c" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-28 23:44:05 UTC	15092	IN	Data Raw: 2f 2a 0a 20 41 6e 67 75 6c 61 72 4a 53 20 76 31 2e 36 2e 36 0a 20 28 63 29 20 32 30 31 30 2d 32 30 31 37 20 47 6f 6f 67 6c 65 2c 20 49 6e 63 2e 20 68 74 74 70 3a 2f 2f 61 6e 67 75 6c 61 72 6a 73 2e 6f 72 67 0a 20 4c 69 63 65 6e 73 65 3a 20 4d 49 54 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 75 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 66 75 6e 63 74 69 6f 6e 20 6f 65 28 61 29 7b 69 66 28 45 28 61 29 29 74 28 61 2e 6f 62 6a 65 63 74 4d 61 78 44 65 70 74 68 29 26 26 28 4c 63 2e 6f 62 6a 65 63 74 4d 61 78 44 65 70 74 68 3d 55 62 28 61 2e 6f 62 6a 65 63 74 4d 61 78 44 65 70 74 68 29 3f 61 2e 6f 62 6a 65 63 74 4d 61 78 44 65 70 74 68 3a 4e 61 4e 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 4c 63 7d 66 75 6e 63 74 69 6f 6e 20 55 62 28 61 29 7b 72 65 74 75 72 6e Data Ascii: /* AngularJS v1.6.6 (c) 2010-2017 Google, Inc. http://angularjs.org License: MIT*/(function(u){'use strict';function oe(a){if(E(a))t(a.objectMaxDepth)&&(Lc.objectMaxDepth=Ub(a.objectMaxDepth)?a.objectMaxDepth:NaN);else return Lc}function Ub(a){return
2024-09-28 23:44:05 UTC	16384	IN	Data Raw: 2c 62 29 7b 76 61 72 20 64 3d 61 2e 6e 67 33 33 39 2c 64 3d 64 26 26 6b 62 5b 64 5d 3b 62 26 26 21 64 26 26 28 61 2e 6e 67 33 33 39 3d 64 3d 2b 2b 67 67 2c 64 3d 6b 62 5b 64 5d 3d 7b 65 76 65 6e 74 73 3a 7b 7d 2c 64 61 74 61 3a 7b 7d 2c 68 61 6e 64 6c 65 3a 76 6f 69 64 20 30 7d 29 3b 72 65 74 75 72 6e 20 64 7d 66 75 6e 63 74 69 6f 6e 20 6c 63 28 61 2c 62 2c 64 29 7b 69 66 28 66 63 28 61 29 29 7b 76 61 72 20 63 2c 65 3d 74 28 64 29 2c 66 3d 21 65 26 26 62 26 26 21 45 28 62 29 2c 67 3d 21 62 3b 61 3d 28 61 3d 41 62 28 61 2c 21 66 29 29 26 26 61 2e 64 61 74 61 3b 69 66 28 65 29 61 5b 79 62 28 62 29 5d 3d 64 3b 65 6c 73 65 7b 69 66 28 67 29 72 65 74 75 72 6e 20 61 3b 69 66 28 66 29 72 65 74 75 72 6e 20 61 26 26 61 5b 79 62 28 62 29 5d 3b 66 6f 72 28 63 20 69 Data Ascii: ,b){var d=a.ng339,d=d&&kb[d];b&&!d&&(a.ng339=d=++gg,d=kb[d]={events:{},data:{},handle:void 0});return d}function lc(a,b,d){if(fc(a)){var c,e=t(d),f=!e&&b&&!E(b),g=!b;a=(a=Ab(a,!f))&&a.data;if(e)a[yb(b)]=d;else{if(g)return a;if(f)return a&&a[yb(b)];for(c i
2024-09-28 23:44:05 UTC	16384	IN	Data Raw: 75 69 72 65 3b 61 2e 64 69 72 65 63 74 69 76 65 4e 61 6d 65 3d 57 3b 69 66 28 4b 3d 3d 3d 78 7c 7c 78 2e 24 24 69 73 6f 6c 61 74 65 53 63 6f 70 65 29 61 3d 75 61 28 61 2c 7b 69 73 6f 6c 61 74 65 53 63 6f 70 65 3a 21 30 7d 29 3b 68 2e 70 75 73 68 28 61 29 7d 69 66 28 62 29 7b 63 26 26 28 62 3d 55 28 62 2c 63 2c 64 29 29 3b 62 2e 72 65 71 75 69 72 65 3d 78 2e 72 65 71 75 69 72 65 3b 62 2e 64 69 72 65 63 74 69 76 65 4e 61 6d 65 3d 57 3b 69 66 28 4b 3d 3d 3d 78 7c 7c 78 2e 24 24 69 73 6f 6c 61 74 65 53 63 6f 70 65 29 62 3d 75 61 28 62 2c 7b 69 73 6f 6c 61 74 65 53 63 6f 70 65 3a 21 30 7d 29 3b 6b 2e 70 75 73 68 28 62 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 71 28 61 2c 65 2c 67 2c 66 2c 6c 29 7b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 Data Ascii: uire;a.directiveName=W;if(K===x\|\|x.$$isolateScope)a=ua(a,{isolateScope:!0});h.push(a)}if(b){c&&(b=U(b,c,d));b.require=x.require;b.directiveName=W;if(K===x\|\|x.$$isolateScope)b=ua(b,{isolateScope:!0});k.push(b)}}function q(a,e,g,f,l){function m(a,b,c,d){var
2024-09-28 23:44:05 UTC	16384	IN	Data Raw: 6f 72 22 2c 22 24 73 63 65 22 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 65 2c 66 2c 67 2c 6b 2c 68 2c 6c 2c 6d 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 62 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 30 2c 65 3d 62 2e 6c 65 6e 67 74 68 3b 63 3c 65 3b 29 7b 76 61 72 20 67 3d 62 5b 63 2b 2b 5d 2c 66 3d 62 5b 63 2b 2b 5d 3b 61 3d 61 2e 74 68 65 6e 28 67 2c 66 29 7d 62 2e 6c 65 6e 67 74 68 3d 30 3b 72 65 74 75 72 6e 20 61 7d 0a 66 75 6e 63 74 69 6f 6e 20 65 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 7b 7d 3b 70 28 61 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 65 29 7b 41 28 61 29 3f 28 63 3d 61 28 62 29 2c 6e 75 6c 6c 21 3d 63 26 26 28 64 5b 65 5d 3d 63 29 29 3a 64 5b 65 5d 3d 61 7d 29 3b 72 65 74 75 72 6e 20 64 7d 66 75 6e 63 74 69 6f Data Ascii: or","$sce",function(c,e,f,g,k,h,l,m){function n(b){function d(a,b){for(var c=0,e=b.length;c<e;){var g=b[c++],f=b[c++];a=a.then(g,f)}b.length=0;return a}function e(a,b){var c,d={};p(a,function(a,e){A(a)?(c=a(b),null!=c&&(d[e]=c)):d[e]=a});return d}functio
2024-09-28 23:44:05 UTC	16384	IN	Data Raw: 6b 2c 6c 5b 63 5d 3d 6b 26 26 79 63 28 6b 29 7d 62 26 26 28 68 3d 64 28 61 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 6d 29 29 3b 72 65 74 75 72 6e 20 68 7d 2c 62 2c 63 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 66 28 61 29 7b 72 65 74 75 72 6e 20 64 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 61 2c 0a 63 2c 64 29 7b 6c 3d 61 3b 41 28 62 29 26 26 62 28 61 2c 63 2c 64 29 3b 74 28 61 29 26 26 64 2e 24 24 70 6f 73 74 44 69 67 65 73 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 6c 29 26 26 6b 28 29 7d 29 7d 76 61 72 20 6b 2c 6c 3b 72 65 74 75 72 6e 20 6b 3d 64 2e 69 6e 70 75 74 73 3f 67 28 61 2c 68 2c 63 2c 64 2c 65 29 3a 61 2e 24 77 61 74 63 68 28 66 2c 68 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: k,l[c]=k&&yc(k)}b&&(h=d(a,void 0,void 0,m));return h},b,c,e)}function k(a,b,c,d,e){function f(a){return d(a)}function h(a,c,d){l=a;A(b)&&b(a,c,d);t(a)&&d.$$postDigest(function(){t(l)&&k()})}var k,l;return k=d.inputs?g(a,h,c,d,e):a.$watch(f,h,c)}function
2024-09-28 23:44:05 UTC	16384	IN	Data Raw: 73 6f 6c 76 65 28 66 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 6d 29 29 7d 63 61 74 63 68 28 62 29 7b 71 2e 72 65 6a 65 63 74 28 62 29 2c 65 28 62 29 7d 66 69 6e 61 6c 6c 79 7b 64 65 6c 65 74 65 20 67 5b 70 2e 24 24 74 69 6d 65 6f 75 74 49 64 5d 7d 6e 7c 7c 0a 61 2e 24 61 70 70 6c 79 28 29 7d 2c 68 29 3b 70 2e 24 24 74 69 6d 65 6f 75 74 49 64 3d 72 3b 67 5b 72 5d 3d 71 3b 72 65 74 75 72 6e 20 70 7d 76 61 72 20 67 3d 7b 7d 3b 66 2e 63 61 6e 63 65 6c 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 61 2e 24 24 74 69 6d 65 6f 75 74 49 64 20 69 6e 20 67 3f 28 67 5b 61 2e 24 24 74 69 6d 65 6f 75 74 49 64 5d 2e 70 72 6f 6d 69 73 65 2e 24 24 73 74 61 74 65 2e 70 75 72 3d 21 30 2c 67 5b 61 2e 24 24 74 69 6d 65 6f 75 74 49 64 5d 2e 72 65 6a 65 63 74 Data Ascii: solve(f.apply(null,m))}catch(b){q.reject(b),e(b)}finally{delete g[p.$$timeoutId]}n\|\|a.$apply()},h);p.$$timeoutId=r;g[r]=q;return p}var g={};f.cancel=function(a){return a&&a.$$timeoutId in g?(g[a.$$timeoutId].promise.$$state.pur=!0,g[a.$$timeoutId].reject
2024-09-28 23:44:05 UTC	16384	IN	Data Raw: 65 7d 2c 75 65 3d 2f 3a 2f 67 2c 0a 48 61 3d 5b 22 6e 67 2d 22 2c 22 64 61 74 61 2d 6e 67 2d 22 2c 22 6e 67 3a 22 2c 22 78 2d 6e 67 2d 22 5d 2c 78 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 69 66 28 21 62 29 72 65 74 75 72 6e 21 30 3b 69 66 28 21 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 75 2e 48 54 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 7c 7c 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 75 2e 53 56 47 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 29 29 72 65 74 75 72 6e 21 31 3b 62 3d 62 2e 61 74 74 72 69 62 75 74 65 73 3b 72 65 74 75 72 6e 5b 62 2e 67 65 74 4e 61 6d 65 64 49 74 65 6d 28 22 73 72 63 22 29 2c 62 2e 67 65 74 4e 61 6d 65 64 49 74 65 6d 28 22 68 72 65 66 22 29 2c 62 2e 67 65 74 4e 61 Data Ascii: e},ue=/:/g,Ha=["ng-","data-ng-","ng:","x-ng-"],xe=function(a){var b=a.currentScript;if(!b)return!0;if(!(b instanceof u.HTMLScriptElement\|\|b instanceof u.SVGScriptElement))return!1;b=b.attributes;return[b.getNamedItem("src"),b.getNamedItem("href"),b.getNa
2024-09-28 23:44:05 UTC	16384	IN	Data Raw: 68 2d 31 29 29 61 2b 3d 64 3b 65 6c 73 65 20 69 66 28 21 74 68 69 73 2e 69 73 45 78 70 4f 70 65 72 61 74 6f 72 28 64 29 7c 7c 0a 63 26 26 74 68 69 73 2e 69 73 4e 75 6d 62 65 72 28 63 29 7c 7c 22 65 22 21 3d 3d 61 2e 63 68 61 72 41 74 28 61 2e 6c 65 6e 67 74 68 2d 31 29 29 62 72 65 61 6b 3b 65 6c 73 65 20 74 68 69 73 2e 74 68 72 6f 77 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 65 78 70 6f 6e 65 6e 74 22 29 7d 74 68 69 73 2e 69 6e 64 65 78 2b 2b 7d 74 68 69 73 2e 74 6f 6b 65 6e 73 2e 70 75 73 68 28 7b 69 6e 64 65 78 3a 62 2c 74 65 78 74 3a 61 2c 63 6f 6e 73 74 61 6e 74 3a 21 30 2c 76 61 6c 75 65 3a 4e 75 6d 62 65 72 28 61 29 7d 29 7d 2c 72 65 61 64 49 64 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 69 6e 64 65 78 3b 66 6f Data Ascii: h-1))a+=d;else if(!this.isExpOperator(d)\|\|c&&this.isNumber(c)\|\|"e"!==a.charAt(a.length-1))break;else this.throwError("Invalid exponent")}this.index++}this.tokens.push({index:b,text:a,constant:!0,value:Number(a)})},readIdent:function(){var a=this.index;fo
2024-09-28 23:44:05 UTC	16384	IN	Data Raw: 66 7d 3a 66 7d 3b 63 61 73 65 20 72 2e 4f 62 6a 65 63 74 45 78 70 72 65 73 73 69 6f 6e 3a 72 65 74 75 72 6e 20 67 3d 5b 5d 2c 70 28 61 2e 70 72 6f 70 65 72 74 69 65 73 2c 0a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 63 6f 6d 70 75 74 65 64 3f 67 2e 70 75 73 68 28 7b 6b 65 79 3a 66 2e 72 65 63 75 72 73 65 28 61 2e 6b 65 79 29 2c 63 6f 6d 70 75 74 65 64 3a 21 30 2c 76 61 6c 75 65 3a 66 2e 72 65 63 75 72 73 65 28 61 2e 76 61 6c 75 65 29 7d 29 3a 67 2e 70 75 73 68 28 7b 6b 65 79 3a 61 2e 6b 65 79 2e 74 79 70 65 3d 3d 3d 72 2e 49 64 65 6e 74 69 66 69 65 72 3f 61 2e 6b 65 79 2e 6e 61 6d 65 3a 22 22 2b 61 2e 6b 65 79 2e 76 61 6c 75 65 2c 63 6f 6d 70 75 74 65 64 3a 21 31 2c 76 61 6c 75 65 3a 66 2e 72 65 63 75 72 73 65 28 61 2e 76 61 6c 75 65 29 7d 29 7d 29 2c 66 Data Ascii: f}:f};case r.ObjectExpression:return g=[],p(a.properties,function(a){a.computed?g.push({key:f.recurse(a.key),computed:!0,value:f.recurse(a.value)}):g.push({key:a.key.type===r.Identifier?a.key.name:""+a.key.value,computed:!1,value:f.recurse(a.value)})}),f
2024-09-28 23:44:05 UTC	16384	IN	Data Raw: 6a 65 63 74 3d 22 24 73 63 6f 70 65 20 24 65 78 63 65 70 74 69 6f 6e 48 61 6e 64 6c 65 72 20 24 61 74 74 72 73 20 24 65 6c 65 6d 65 6e 74 20 24 70 61 72 73 65 20 24 61 6e 69 6d 61 74 65 20 24 74 69 6d 65 6f 75 74 20 24 71 20 24 69 6e 74 65 72 70 6f 6c 61 74 65 22 2e 73 70 6c 69 74 28 22 20 22 29 3b 0a 51 62 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 24 24 69 6e 69 74 47 65 74 74 65 72 53 65 74 74 65 72 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 24 6f 70 74 69 6f 6e 73 2e 67 65 74 4f 70 74 69 6f 6e 28 22 67 65 74 74 65 72 53 65 74 74 65 72 22 29 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 24 24 70 61 72 73 65 28 74 68 69 73 2e 24 24 61 74 74 72 2e 6e 67 4d 6f 64 65 6c 2b 22 28 29 22 29 2c 62 3d 74 68 69 73 2e 24 24 70 61 72 73 65 28 74 68 69 73 2e Data Ascii: ject="$scope $exceptionHandler $attrs $element $parse $animate $timeout $q $interpolate".split(" ");Qb.prototype={$$initGetterSetters:function(){if(this.$options.getOption("getterSetter")){var a=this.$$parse(this.$$attr.ngModel+"()"),b=this.$$parse(this.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49728	185.112.144.235	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:44:05 UTC	576	OUT	GET /dnkdl/assets/core_form.js HTTP/1.1 Host: svfs.is Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://svfs.is/dnkdl/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
2024-09-28 23:44:06 UTC	264	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 28 Sep 2024 23:44:06 GMT Content-Type: application/javascript Content-Length: 2307 Connection: close Last-Modified: Thu, 06 Jul 2023 21:10:36 GMT ETag: "64a72dcc-903" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-28 23:44:06 UTC	2307	IN	Data Raw: 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 0a 2f 2f 20 20 20 20 20 24 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 6f 61 64 65 72 5f 5f 20 77 61 69 74 65 72 5f 5f 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 3e 5c 0a 2f 2f 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 6f 61 64 65 72 2d 62 6f 78 22 3e 5c 0a 2f 2f 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 63 6c 61 73 73 3d 22 77 61 69 74 65 72 5f 68 32 22 3e 50 6c 65 61 73 65 20 77 61 69 74 2e 2e 2e 3c 2f 68 32 3e 5c 0a 2f 2f 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 6f 61 64 65 72 2d 69 6d 61 67 65 73 2d 62 6f 78 22 3e 5c 0a 2f 2f 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: $(document).ready(function() {// $('<div class="loader__ waiter__" style="display:none">\// <div class="loader-box">\// <h2 class="waiter_h2">Please wait...</h2>\// <div class="loader-images-box">\//

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49730	185.112.144.235	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:44:07 UTC	633	OUT	GET /dnkdl/img/dhl-logo.svg HTTP/1.1 Host: svfs.is Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://svfs.is/dnkdl/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
2024-09-28 23:44:07 UTC	255	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 28 Sep 2024 23:44:07 GMT Content-Type: image/svg+xml Content-Length: 1603 Connection: close Last-Modified: Tue, 24 May 2022 02:35:28 GMT ETag: "628c4470-643" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-28 23:44:07 UTC	1603	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 32 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 45 62 65 6e 65 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Ebene_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49729	185.112.144.235	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:44:07 UTC	636	OUT	GET /dnkdl/img/youtube-new.svg HTTP/1.1 Host: svfs.is Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://svfs.is/dnkdl/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
2024-09-28 23:44:07 UTC	255	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 28 Sep 2024 23:44:07 GMT Content-Type: image/svg+xml Content-Length: 1412 Connection: close Last-Modified: Tue, 24 May 2022 02:35:28 GMT ETag: "628c4470-584" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-28 23:44:07 UTC	1412	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 34 32 70 78 22 20 68 65 69 67 68 74 3d 22 34 32 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 32 20 34 32 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 35 34 2e 31 20 28 37 36 34 39 30 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 61 70 70 2e 63 6f 6d 20 2d 2d 3e 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="42px" height="42px" viewBox="0 0 42 42" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 54.1 (76490) - https://sketchapp.com -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49732	185.112.144.235	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:44:07 UTC	637	OUT	GET /dnkdl/img/facebook-new.svg HTTP/1.1 Host: svfs.is Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://svfs.is/dnkdl/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
2024-09-28 23:44:07 UTC	255	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 28 Sep 2024 23:44:07 GMT Content-Type: image/svg+xml Content-Length: 1406 Connection: close Last-Modified: Tue, 24 May 2022 02:35:28 GMT ETag: "628c4470-57e" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-28 23:44:07 UTC	1406	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 34 32 70 78 22 20 68 65 69 67 68 74 3d 22 34 32 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 32 20 34 32 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 35 34 2e 31 20 28 37 36 34 39 30 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 61 70 70 2e 63 6f 6d 20 2d 2d 3e 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="42px" height="42px" viewBox="0 0 42 42" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 54.1 (76490) - https://sketchapp.com -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49731	185.112.144.235	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:44:07 UTC	637	OUT	GET /dnkdl/img/linkedIn-new.svg HTTP/1.1 Host: svfs.is Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://svfs.is/dnkdl/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
2024-09-28 23:44:07 UTC	255	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 28 Sep 2024 23:44:07 GMT Content-Type: image/svg+xml Content-Length: 1647 Connection: close Last-Modified: Tue, 24 May 2022 02:35:28 GMT ETag: "628c4470-66f" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-28 23:44:07 UTC	1647	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 34 32 70 78 22 20 68 65 69 67 68 74 3d 22 34 32 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 32 20 34 32 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 35 34 2e 31 20 28 37 36 34 39 30 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 61 70 70 2e 63 6f 6d 20 2d 2d 3e 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="42px" height="42px" viewBox="0 0 42 42" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 54.1 (76490) - https://sketchapp.com -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49733	185.112.144.235	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:44:07 UTC	638	OUT	GET /dnkdl/img/instagram-new.svg HTTP/1.1 Host: svfs.is Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://svfs.is/dnkdl/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
2024-09-28 23:44:07 UTC	256	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 28 Sep 2024 23:44:07 GMT Content-Type: image/svg+xml Content-Length: 4508 Connection: close Last-Modified: Tue, 24 May 2022 02:35:28 GMT ETag: "628c4470-119c" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-28 23:44:07 UTC	4508	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 34 32 70 78 22 20 68 65 69 67 68 74 3d 22 34 32 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 32 20 34 32 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 35 34 2e 31 20 28 37 36 34 39 30 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 61 70 70 2e 63 6f 6d 20 2d 2d 3e 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="42px" height="42px" viewBox="0 0 42 42" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 54.1 (76490) - https://sketchapp.com -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49735	185.112.144.235	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:44:07 UTC	662	OUT	GET /dnkdl/img/7f0d3a9b32ad319a9dd1.svg HTTP/1.1 Host: svfs.is Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://svfs.is/dnkdl/assets/bundle.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
2024-09-28 23:44:07 UTC	255	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 28 Sep 2024 23:44:07 GMT Content-Type: image/svg+xml Content-Length: 1693 Connection: close Last-Modified: Tue, 24 May 2022 03:54:08 GMT ETag: "628c56e0-69d" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-28 23:44:07 UTC	1693	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 20 31 32 22 20 73 74 79 6c 65 3d 22 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 65 77 20 30 20 30 20 31 32 20 31 32 22 20 78 6d 6c 3a 73 70 61 63 65 3d 22 70 72 65 73 65 72 76 65 22 3e 3c 70 61 74 68 20 64 3d 22 4d 35 20 31 30 2e 36 63 2d 2e 31 20 30 2d 2e 31 20 30 20 30 20 30 2d 2e 34 2d 31 2e 32 2d 2e 37 2d 32 2e 34 2d 31 2d 33 2e 35 4c 33 2e 39 20 37 63 2d 2e 33 20 30 2d 2e 36 2e 31 2d 2e 38 2e 31 2d 2e 36 2e 32 2d 31 2e 32 2e 35 2d 31 2e 37 2e 39 2d 2e 36 2e 35 2d 2e 39 20 31 2e 32 2d 31 2e 32 20 32 2d 2e 31 2e 36 2d 2e 32 20 31 2e 33 2d 2e 32 20 31 2e 39 20 30 20 2e 31 20 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 12 12" style="enable-background:new 0 0 12 12" xml:space="preserve"><path d="M5 10.6c-.1 0-.1 0 0 0-.4-1.2-.7-2.4-1-3.5L3.9 7c-.3 0-.6.1-.8.1-.6.2-1.2.5-1.7.9-.6.5-.9 1.2-1.2 2-.1.6-.2 1.3-.2 1.9 0 .1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49736	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:44:08 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-28 23:44:08 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=147654 Date: Sat, 28 Sep 2024 23:44:08 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49737	185.112.144.235	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:44:08 UTC	634	OUT	GET /dnkdl/fonts/iconfont-36e40d8b4a0a369beacf.woff HTTP/1.1 Host: svfs.is Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://svfs.is sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://svfs.is/dnkdl/assets/bundle.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
2024-09-28 23:44:08 UTC	238	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sat, 28 Sep 2024 23:44:08 GMT Content-Type: text/html Content-Length: 808 Connection: close Last-Modified: Sun, 12 Mar 2023 17:15:32 GMT ETag: "328-5f6b724586ded" Accept-Ranges: bytes
2024-09-28 23:44:08 UTC	808	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta http-equiv="x-ua-compatible" content="ie=edge"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <title>404 Not Found</title> <link rel="s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49741	185.112.144.235	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:44:08 UTC	633	OUT	GET /dnkdl/fonts/default-274a65bae9742377aaf0.woff HTTP/1.1 Host: svfs.is Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://svfs.is sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://svfs.is/dnkdl/assets/bundle.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
2024-09-28 23:44:08 UTC	238	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sat, 28 Sep 2024 23:44:08 GMT Content-Type: text/html Content-Length: 808 Connection: close Last-Modified: Sun, 12 Mar 2023 17:15:32 GMT ETag: "328-5f6b724586ded" Accept-Ranges: bytes
2024-09-28 23:44:08 UTC	808	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta http-equiv="x-ua-compatible" content="ie=edge"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <title>404 Not Found</title> <link rel="s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49739	185.112.144.235	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:44:08 UTC	633	OUT	GET /dnkdl/fonts/default-815fcbb4d2c579017011.woff HTTP/1.1 Host: svfs.is Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://svfs.is sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://svfs.is/dnkdl/assets/bundle.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
2024-09-28 23:44:08 UTC	238	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sat, 28 Sep 2024 23:44:08 GMT Content-Type: text/html Content-Length: 808 Connection: close Last-Modified: Sun, 12 Mar 2023 17:15:32 GMT ETag: "328-5f6b724586ded" Accept-Ranges: bytes
2024-09-28 23:44:08 UTC	808	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta http-equiv="x-ua-compatible" content="ie=edge"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <title>404 Not Found</title> <link rel="s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49738	185.112.144.235	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:44:08 UTC	633	OUT	GET /dnkdl/fonts/default-5a6dd86f272b304a8b83.woff HTTP/1.1 Host: svfs.is Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://svfs.is sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://svfs.is/dnkdl/assets/bundle.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
2024-09-28 23:44:08 UTC	238	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sat, 28 Sep 2024 23:44:08 GMT Content-Type: text/html Content-Length: 808 Connection: close Last-Modified: Sun, 12 Mar 2023 17:15:32 GMT ETag: "328-5f6b724586ded" Accept-Ranges: bytes
2024-09-28 23:44:08 UTC	808	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta http-equiv="x-ua-compatible" content="ie=edge"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <title>404 Not Found</title> <link rel="s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49740	185.112.144.235	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:44:08 UTC	633	OUT	GET /dnkdl/fonts/default-3e828e80f6e985c352eb.woff HTTP/1.1 Host: svfs.is Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://svfs.is sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://svfs.is/dnkdl/assets/bundle.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
2024-09-28 23:44:08 UTC	238	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sat, 28 Sep 2024 23:44:08 GMT Content-Type: text/html Content-Length: 808 Connection: close Last-Modified: Sun, 12 Mar 2023 17:15:32 GMT ETag: "328-5f6b724586ded" Accept-Ranges: bytes
2024-09-28 23:44:08 UTC	808	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta http-equiv="x-ua-compatible" content="ie=edge"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <title>404 Not Found</title> <link rel="s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	49744	185.112.144.235	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:44:09 UTC	424	OUT	GET /dnkdl/assets/ua-parser-js/dist/ua-parser.min.js HTTP/1.1 Host: svfs.is Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
2024-09-28 23:44:09 UTC	266	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 28 Sep 2024 23:44:09 GMT Content-Type: application/javascript Content-Length: 17048 Connection: close Last-Modified: Thu, 12 Oct 2017 16:16:24 GMT ETag: "59df9558-4298" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-28 23:44:09 UTC	15094	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 55 41 50 61 72 73 65 72 2e 6a 73 20 76 30 2e 37 2e 31 37 0a 20 2a 20 4c 69 67 68 74 77 65 69 67 68 74 20 4a 61 76 61 53 63 72 69 70 74 2d 62 61 73 65 64 20 55 73 65 72 2d 41 67 65 6e 74 20 73 74 72 69 6e 67 20 70 61 72 73 65 72 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 66 61 69 73 61 6c 6d 61 6e 2f 75 61 2d 70 61 72 73 65 72 2d 6a 73 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 c2 a9 20 32 30 31 32 2d 32 30 31 36 20 46 61 69 73 61 6c 20 53 61 6c 6d 61 6e 20 3c 66 79 7a 6c 6d 61 6e 40 67 6d 61 69 6c 2e 63 6f 6d 3e 0a 20 2a 20 44 75 61 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 20 26 20 4d 49 54 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 77 69 6e 64 6f 77 2c 75 6e 64 65 66 69 6e Data Ascii: /** * UAParser.js v0.7.17 * Lightweight JavaScript-based User-Agent string parser * https://github.com/faisalman/ua-parser-js * * Copyright 2012-2016 Faisal Salman <fyzlman@gmail.com> * Dual licensed under GPLv2 & MIT */(function(window,undefin
2024-09-28 23:44:09 UTC	1954	IN	Data Raw: 6f 72 2e 75 73 65 72 41 67 65 6e 74 3a 45 4d 50 54 59 29 3b 76 61 72 20 72 67 78 6d 61 70 3d 65 78 74 65 6e 73 69 6f 6e 73 3f 75 74 69 6c 2e 65 78 74 65 6e 64 28 72 65 67 65 78 65 73 2c 65 78 74 65 6e 73 69 6f 6e 73 29 3a 72 65 67 65 78 65 73 3b 74 68 69 73 2e 67 65 74 42 72 6f 77 73 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 72 6f 77 73 65 72 3d 7b 6e 61 6d 65 3a 75 6e 64 65 66 69 6e 65 64 2c 76 65 72 73 69 6f 6e 3a 75 6e 64 65 66 69 6e 65 64 7d 3b 6d 61 70 70 65 72 2e 72 67 78 2e 63 61 6c 6c 28 62 72 6f 77 73 65 72 2c 75 61 2c 72 67 78 6d 61 70 2e 62 72 6f 77 73 65 72 29 3b 62 72 6f 77 73 65 72 2e 6d 61 6a 6f 72 3d 75 74 69 6c 2e 6d 61 6a 6f 72 28 62 72 6f 77 73 65 72 2e 76 65 72 73 69 6f 6e 29 3b 72 65 74 75 72 6e 20 62 72 6f 77 73 65 72 Data Ascii: or.userAgent:EMPTY);var rgxmap=extensions?util.extend(regexes,extensions):regexes;this.getBrowser=function(){var browser={name:undefined,version:undefined};mapper.rgx.call(browser,ua,rgxmap.browser);browser.major=util.major(browser.version);return browser

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	49747	185.112.144.235	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:44:09 UTC	415	OUT	GET /dnkdl/assets/jquery/dist/jquery.min.js HTTP/1.1 Host: svfs.is Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
2024-09-28 23:44:09 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 28 Sep 2024 23:44:09 GMT Content-Type: application/javascript Content-Length: 86659 Connection: close Last-Modified: Mon, 05 Jun 2017 11:55:06 GMT ETag: "5935469a-15283" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-28 23:44:09 UTC	15093	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 Data Ascii: /! jQuery v3.2.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery
2024-09-28 23:44:09 UTC	16384	IN	Data Raw: 65 74 41 74 74 72 69 62 75 74 65 26 26 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 29 7c 7c 22 22 29 7d 29 7d 2c 41 54 54 52 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 64 29 7b 76 61 72 20 65 3d 67 61 2e 61 74 74 72 28 64 2c 61 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 22 21 3d 22 3d 3d 3d 62 3a 21 62 7c 7c 28 65 2b 3d 22 22 2c 22 3d 22 3d 3d 3d 62 3f 65 3d 3d 3d 63 3a 22 21 3d 22 3d 3d 3d 62 3f 65 21 3d 3d 63 3a 22 5e 3d 22 3d 3d 3d 62 3f 63 26 26 30 3d 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 63 29 3a 22 2a 3d 22 3d 3d 3d 62 3f 63 26 26 65 2e 69 6e 64 65 78 4f 66 28 63 29 3e 2d 31 3a 22 24 3d 22 3d 3d 3d 62 3f 63 26 26 65 2e 73 6c 69 63 65 28 2d 63 2e 6c 65 6e 67 74 68 29 Data Ascii: etAttribute&&a.getAttribute("class")\|\|"")})},ATTR:function(a,b,c){return function(d){var e=ga.attr(d,a);return null==e?"!="===b:!b\|\|(e+="","="===b?e===c:"!="===b?e!==c:"^="===b?c&&0===e.indexOf(c):"*="===b?c&&e.indexOf(c)>-1:"$="===b?c&&e.slice(-c.length)
2024-09-28 23:44:09 UTC	16384	IN	Data Raw: 6a 65 63 74 29 3b 72 65 74 75 72 6e 20 67 2e 70 72 6f 6d 69 73 65 28 29 7d 7d 29 3b 76 61 72 20 51 3d 2f 5e 28 45 76 61 6c 7c 49 6e 74 65 72 6e 61 6c 7c 52 61 6e 67 65 7c 52 65 66 65 72 65 6e 63 65 7c 53 79 6e 74 61 78 7c 54 79 70 65 7c 55 52 49 29 45 72 72 6f 72 24 2f 3b 72 2e 44 65 66 65 72 72 65 64 2e 65 78 63 65 70 74 69 6f 6e 48 6f 6f 6b 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 2e 63 6f 6e 73 6f 6c 65 26 26 61 2e 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 26 26 62 26 26 51 2e 74 65 73 74 28 62 2e 6e 61 6d 65 29 26 26 61 2e 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 6a 51 75 65 72 79 2e 44 65 66 65 72 72 65 64 20 65 78 63 65 70 74 69 6f 6e 3a 20 22 2b 62 2e 6d 65 73 73 61 67 65 2c 62 2e 73 74 61 63 6b 2c 63 29 7d 2c 72 2e 72 65 61 64 79 45 78 63 65 70 Data Ascii: ject);return g.promise()}});var Q=/^(Eval\|Internal\|Range\|Reference\|Syntax\|Type\|URI)Error$/;r.Deferred.exceptionHook=function(b,c){a.console&&a.console.warn&&b&&Q.test(b.name)&&a.console.warn("jQuery.Deferred exception: "+b.message,b.stack,c)},r.readyExcep
2024-09-28 23:44:09 UTC	16384	IN	Data Raw: 22 22 29 26 26 21 57 2e 61 63 63 65 73 73 28 6a 2c 22 67 6c 6f 62 61 6c 45 76 61 6c 22 29 26 26 72 2e 63 6f 6e 74 61 69 6e 73 28 6b 2c 6a 29 26 26 28 6a 2e 73 72 63 3f 72 2e 5f 65 76 61 6c 55 72 6c 26 26 72 2e 5f 65 76 61 6c 55 72 6c 28 6a 2e 73 72 63 29 3a 70 28 6a 2e 74 65 78 74 43 6f 6e 74 65 6e 74 2e 72 65 70 6c 61 63 65 28 44 61 2c 22 22 29 2c 6b 29 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 4b 61 28 61 2c 62 2c 63 29 7b 66 6f 72 28 76 61 72 20 64 2c 65 3d 62 3f 72 2e 66 69 6c 74 65 72 28 62 2c 61 29 3a 61 2c 66 3d 30 3b 6e 75 6c 6c 21 3d 28 64 3d 65 5b 66 5d 29 3b 66 2b 2b 29 63 7c 7c 31 21 3d 3d 64 2e 6e 6f 64 65 54 79 70 65 7c 7c 72 2e 63 6c 65 61 6e 44 61 74 61 28 6e 61 28 64 29 29 2c 64 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 28 Data Ascii: "")&&!W.access(j,"globalEval")&&r.contains(k,j)&&(j.src?r._evalUrl&&r._evalUrl(j.src):p(j.textContent.replace(Da,""),k))}return a}function Ka(a,b,c){for(var d,e=b?r.filter(b,a):a,f=0;null!=(d=e[f]);f++)c\|\|1!==d.nodeType\|\|r.cleanData(na(d)),d.parentNode&&(
2024-09-28 23:44:09 UTC	16384	IN	Data Raw: 61 6c 75 65 26 26 22 72 61 64 69 6f 22 3d 3d 3d 62 26 26 42 28 61 2c 22 69 6e 70 75 74 22 29 29 7b 76 61 72 20 63 3d 61 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 62 29 2c 63 26 26 28 61 2e 76 61 6c 75 65 3d 63 29 2c 62 7d 7d 7d 7d 2c 72 65 6d 6f 76 65 41 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 30 2c 65 3d 62 26 26 62 2e 6d 61 74 63 68 28 4c 29 3b 69 66 28 65 26 26 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 77 68 69 6c 65 28 63 3d 65 5b 64 2b 2b 5d 29 61 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 63 29 7d 7d 29 2c 6c 62 3d 7b 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 62 3d 3d 3d 21 31 3f 72 2e 72 65 6d 6f Data Ascii: alue&&"radio"===b&&B(a,"input")){var c=a.value;return a.setAttribute("type",b),c&&(a.value=c),b}}}},removeAttr:function(a,b){var c,d=0,e=b&&b.match(L);if(e&&1===a.nodeType)while(c=e[d++])a.removeAttribute(c)}}),lb={set:function(a,b,c){return b===!1?r.remo
2024-09-28 23:44:09 UTC	6030	IN	Data Raw: 74 3a 68 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 7d 2c 68 2e 67 65 74 41 6c 6c 52 65 73 70 6f 6e 73 65 48 65 61 64 65 72 73 28 29 29 29 7d 7d 2c 68 2e 6f 6e 6c 6f 61 64 3d 63 28 29 2c 64 3d 68 2e 6f 6e 65 72 72 6f 72 3d 63 28 22 65 72 72 6f 72 22 29 2c 76 6f 69 64 20 30 21 3d 3d 68 2e 6f 6e 61 62 6f 72 74 3f 68 2e 6f 6e 61 62 6f 72 74 3d 64 3a 68 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 34 3d 3d 3d 68 2e 72 65 61 64 79 53 74 61 74 65 26 26 61 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 26 26 64 28 29 7d 29 7d 2c 63 3d 63 28 22 61 62 6f 72 74 22 29 3b 74 72 79 7b 68 2e 73 65 6e 64 28 62 2e 68 61 73 43 6f 6e 74 65 6e 74 26 26 62 2e 64 61 74 61 7c 7c 6e 75 6c 6c 29 7d 63 61 74 63 Data Ascii: t:h.responseText},h.getAllResponseHeaders()))}},h.onload=c(),d=h.onerror=c("error"),void 0!==h.onabort?h.onabort=d:h.onreadystatechange=function(){4===h.readyState&&a.setTimeout(function(){c&&d()})},c=c("abort");try{h.send(b.hasContent&&b.data\|\|null)}catc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	49745	185.112.144.235	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:44:09 UTC	412	OUT	GET /dnkdl/assets/angular/angular.min.js HTTP/1.1 Host: svfs.is Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
2024-09-28 23:44:09 UTC	268	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 28 Sep 2024 23:44:09 GMT Content-Type: application/javascript Content-Length: 168828 Connection: close Last-Modified: Fri, 18 Aug 2017 22:37:28 GMT ETag: "59976c28-2937c" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-28 23:44:09 UTC	15092	IN	Data Raw: 2f 2a 0a 20 41 6e 67 75 6c 61 72 4a 53 20 76 31 2e 36 2e 36 0a 20 28 63 29 20 32 30 31 30 2d 32 30 31 37 20 47 6f 6f 67 6c 65 2c 20 49 6e 63 2e 20 68 74 74 70 3a 2f 2f 61 6e 67 75 6c 61 72 6a 73 2e 6f 72 67 0a 20 4c 69 63 65 6e 73 65 3a 20 4d 49 54 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 75 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 66 75 6e 63 74 69 6f 6e 20 6f 65 28 61 29 7b 69 66 28 45 28 61 29 29 74 28 61 2e 6f 62 6a 65 63 74 4d 61 78 44 65 70 74 68 29 26 26 28 4c 63 2e 6f 62 6a 65 63 74 4d 61 78 44 65 70 74 68 3d 55 62 28 61 2e 6f 62 6a 65 63 74 4d 61 78 44 65 70 74 68 29 3f 61 2e 6f 62 6a 65 63 74 4d 61 78 44 65 70 74 68 3a 4e 61 4e 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 4c 63 7d 66 75 6e 63 74 69 6f 6e 20 55 62 28 61 29 7b 72 65 74 75 72 6e Data Ascii: /* AngularJS v1.6.6 (c) 2010-2017 Google, Inc. http://angularjs.org License: MIT*/(function(u){'use strict';function oe(a){if(E(a))t(a.objectMaxDepth)&&(Lc.objectMaxDepth=Ub(a.objectMaxDepth)?a.objectMaxDepth:NaN);else return Lc}function Ub(a){return
2024-09-28 23:44:09 UTC	16384	IN	Data Raw: 2c 62 29 7b 76 61 72 20 64 3d 61 2e 6e 67 33 33 39 2c 64 3d 64 26 26 6b 62 5b 64 5d 3b 62 26 26 21 64 26 26 28 61 2e 6e 67 33 33 39 3d 64 3d 2b 2b 67 67 2c 64 3d 6b 62 5b 64 5d 3d 7b 65 76 65 6e 74 73 3a 7b 7d 2c 64 61 74 61 3a 7b 7d 2c 68 61 6e 64 6c 65 3a 76 6f 69 64 20 30 7d 29 3b 72 65 74 75 72 6e 20 64 7d 66 75 6e 63 74 69 6f 6e 20 6c 63 28 61 2c 62 2c 64 29 7b 69 66 28 66 63 28 61 29 29 7b 76 61 72 20 63 2c 65 3d 74 28 64 29 2c 66 3d 21 65 26 26 62 26 26 21 45 28 62 29 2c 67 3d 21 62 3b 61 3d 28 61 3d 41 62 28 61 2c 21 66 29 29 26 26 61 2e 64 61 74 61 3b 69 66 28 65 29 61 5b 79 62 28 62 29 5d 3d 64 3b 65 6c 73 65 7b 69 66 28 67 29 72 65 74 75 72 6e 20 61 3b 69 66 28 66 29 72 65 74 75 72 6e 20 61 26 26 61 5b 79 62 28 62 29 5d 3b 66 6f 72 28 63 20 69 Data Ascii: ,b){var d=a.ng339,d=d&&kb[d];b&&!d&&(a.ng339=d=++gg,d=kb[d]={events:{},data:{},handle:void 0});return d}function lc(a,b,d){if(fc(a)){var c,e=t(d),f=!e&&b&&!E(b),g=!b;a=(a=Ab(a,!f))&&a.data;if(e)a[yb(b)]=d;else{if(g)return a;if(f)return a&&a[yb(b)];for(c i
2024-09-28 23:44:09 UTC	16384	IN	Data Raw: 75 69 72 65 3b 61 2e 64 69 72 65 63 74 69 76 65 4e 61 6d 65 3d 57 3b 69 66 28 4b 3d 3d 3d 78 7c 7c 78 2e 24 24 69 73 6f 6c 61 74 65 53 63 6f 70 65 29 61 3d 75 61 28 61 2c 7b 69 73 6f 6c 61 74 65 53 63 6f 70 65 3a 21 30 7d 29 3b 68 2e 70 75 73 68 28 61 29 7d 69 66 28 62 29 7b 63 26 26 28 62 3d 55 28 62 2c 63 2c 64 29 29 3b 62 2e 72 65 71 75 69 72 65 3d 78 2e 72 65 71 75 69 72 65 3b 62 2e 64 69 72 65 63 74 69 76 65 4e 61 6d 65 3d 57 3b 69 66 28 4b 3d 3d 3d 78 7c 7c 78 2e 24 24 69 73 6f 6c 61 74 65 53 63 6f 70 65 29 62 3d 75 61 28 62 2c 7b 69 73 6f 6c 61 74 65 53 63 6f 70 65 3a 21 30 7d 29 3b 6b 2e 70 75 73 68 28 62 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 71 28 61 2c 65 2c 67 2c 66 2c 6c 29 7b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 Data Ascii: uire;a.directiveName=W;if(K===x\|\|x.$$isolateScope)a=ua(a,{isolateScope:!0});h.push(a)}if(b){c&&(b=U(b,c,d));b.require=x.require;b.directiveName=W;if(K===x\|\|x.$$isolateScope)b=ua(b,{isolateScope:!0});k.push(b)}}function q(a,e,g,f,l){function m(a,b,c,d){var
2024-09-28 23:44:09 UTC	16384	IN	Data Raw: 6f 72 22 2c 22 24 73 63 65 22 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 65 2c 66 2c 67 2c 6b 2c 68 2c 6c 2c 6d 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 62 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 30 2c 65 3d 62 2e 6c 65 6e 67 74 68 3b 63 3c 65 3b 29 7b 76 61 72 20 67 3d 62 5b 63 2b 2b 5d 2c 66 3d 62 5b 63 2b 2b 5d 3b 61 3d 61 2e 74 68 65 6e 28 67 2c 66 29 7d 62 2e 6c 65 6e 67 74 68 3d 30 3b 72 65 74 75 72 6e 20 61 7d 0a 66 75 6e 63 74 69 6f 6e 20 65 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 7b 7d 3b 70 28 61 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 65 29 7b 41 28 61 29 3f 28 63 3d 61 28 62 29 2c 6e 75 6c 6c 21 3d 63 26 26 28 64 5b 65 5d 3d 63 29 29 3a 64 5b 65 5d 3d 61 7d 29 3b 72 65 74 75 72 6e 20 64 7d 66 75 6e 63 74 69 6f Data Ascii: or","$sce",function(c,e,f,g,k,h,l,m){function n(b){function d(a,b){for(var c=0,e=b.length;c<e;){var g=b[c++],f=b[c++];a=a.then(g,f)}b.length=0;return a}function e(a,b){var c,d={};p(a,function(a,e){A(a)?(c=a(b),null!=c&&(d[e]=c)):d[e]=a});return d}functio
2024-09-28 23:44:09 UTC	16384	IN	Data Raw: 6b 2c 6c 5b 63 5d 3d 6b 26 26 79 63 28 6b 29 7d 62 26 26 28 68 3d 64 28 61 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 6d 29 29 3b 72 65 74 75 72 6e 20 68 7d 2c 62 2c 63 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 66 28 61 29 7b 72 65 74 75 72 6e 20 64 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 61 2c 0a 63 2c 64 29 7b 6c 3d 61 3b 41 28 62 29 26 26 62 28 61 2c 63 2c 64 29 3b 74 28 61 29 26 26 64 2e 24 24 70 6f 73 74 44 69 67 65 73 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 6c 29 26 26 6b 28 29 7d 29 7d 76 61 72 20 6b 2c 6c 3b 72 65 74 75 72 6e 20 6b 3d 64 2e 69 6e 70 75 74 73 3f 67 28 61 2c 68 2c 63 2c 64 2c 65 29 3a 61 2e 24 77 61 74 63 68 28 66 2c 68 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: k,l[c]=k&&yc(k)}b&&(h=d(a,void 0,void 0,m));return h},b,c,e)}function k(a,b,c,d,e){function f(a){return d(a)}function h(a,c,d){l=a;A(b)&&b(a,c,d);t(a)&&d.$$postDigest(function(){t(l)&&k()})}var k,l;return k=d.inputs?g(a,h,c,d,e):a.$watch(f,h,c)}function
2024-09-28 23:44:09 UTC	16384	IN	Data Raw: 73 6f 6c 76 65 28 66 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 6d 29 29 7d 63 61 74 63 68 28 62 29 7b 71 2e 72 65 6a 65 63 74 28 62 29 2c 65 28 62 29 7d 66 69 6e 61 6c 6c 79 7b 64 65 6c 65 74 65 20 67 5b 70 2e 24 24 74 69 6d 65 6f 75 74 49 64 5d 7d 6e 7c 7c 0a 61 2e 24 61 70 70 6c 79 28 29 7d 2c 68 29 3b 70 2e 24 24 74 69 6d 65 6f 75 74 49 64 3d 72 3b 67 5b 72 5d 3d 71 3b 72 65 74 75 72 6e 20 70 7d 76 61 72 20 67 3d 7b 7d 3b 66 2e 63 61 6e 63 65 6c 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 61 2e 24 24 74 69 6d 65 6f 75 74 49 64 20 69 6e 20 67 3f 28 67 5b 61 2e 24 24 74 69 6d 65 6f 75 74 49 64 5d 2e 70 72 6f 6d 69 73 65 2e 24 24 73 74 61 74 65 2e 70 75 72 3d 21 30 2c 67 5b 61 2e 24 24 74 69 6d 65 6f 75 74 49 64 5d 2e 72 65 6a 65 63 74 Data Ascii: solve(f.apply(null,m))}catch(b){q.reject(b),e(b)}finally{delete g[p.$$timeoutId]}n\|\|a.$apply()},h);p.$$timeoutId=r;g[r]=q;return p}var g={};f.cancel=function(a){return a&&a.$$timeoutId in g?(g[a.$$timeoutId].promise.$$state.pur=!0,g[a.$$timeoutId].reject
2024-09-28 23:44:09 UTC	16384	IN	Data Raw: 65 7d 2c 75 65 3d 2f 3a 2f 67 2c 0a 48 61 3d 5b 22 6e 67 2d 22 2c 22 64 61 74 61 2d 6e 67 2d 22 2c 22 6e 67 3a 22 2c 22 78 2d 6e 67 2d 22 5d 2c 78 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 69 66 28 21 62 29 72 65 74 75 72 6e 21 30 3b 69 66 28 21 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 75 2e 48 54 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 7c 7c 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 75 2e 53 56 47 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 29 29 72 65 74 75 72 6e 21 31 3b 62 3d 62 2e 61 74 74 72 69 62 75 74 65 73 3b 72 65 74 75 72 6e 5b 62 2e 67 65 74 4e 61 6d 65 64 49 74 65 6d 28 22 73 72 63 22 29 2c 62 2e 67 65 74 4e 61 6d 65 64 49 74 65 6d 28 22 68 72 65 66 22 29 2c 62 2e 67 65 74 4e 61 Data Ascii: e},ue=/:/g,Ha=["ng-","data-ng-","ng:","x-ng-"],xe=function(a){var b=a.currentScript;if(!b)return!0;if(!(b instanceof u.HTMLScriptElement\|\|b instanceof u.SVGScriptElement))return!1;b=b.attributes;return[b.getNamedItem("src"),b.getNamedItem("href"),b.getNa
2024-09-28 23:44:09 UTC	16384	IN	Data Raw: 68 2d 31 29 29 61 2b 3d 64 3b 65 6c 73 65 20 69 66 28 21 74 68 69 73 2e 69 73 45 78 70 4f 70 65 72 61 74 6f 72 28 64 29 7c 7c 0a 63 26 26 74 68 69 73 2e 69 73 4e 75 6d 62 65 72 28 63 29 7c 7c 22 65 22 21 3d 3d 61 2e 63 68 61 72 41 74 28 61 2e 6c 65 6e 67 74 68 2d 31 29 29 62 72 65 61 6b 3b 65 6c 73 65 20 74 68 69 73 2e 74 68 72 6f 77 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 65 78 70 6f 6e 65 6e 74 22 29 7d 74 68 69 73 2e 69 6e 64 65 78 2b 2b 7d 74 68 69 73 2e 74 6f 6b 65 6e 73 2e 70 75 73 68 28 7b 69 6e 64 65 78 3a 62 2c 74 65 78 74 3a 61 2c 63 6f 6e 73 74 61 6e 74 3a 21 30 2c 76 61 6c 75 65 3a 4e 75 6d 62 65 72 28 61 29 7d 29 7d 2c 72 65 61 64 49 64 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 69 6e 64 65 78 3b 66 6f Data Ascii: h-1))a+=d;else if(!this.isExpOperator(d)\|\|c&&this.isNumber(c)\|\|"e"!==a.charAt(a.length-1))break;else this.throwError("Invalid exponent")}this.index++}this.tokens.push({index:b,text:a,constant:!0,value:Number(a)})},readIdent:function(){var a=this.index;fo
2024-09-28 23:44:09 UTC	16384	IN	Data Raw: 66 7d 3a 66 7d 3b 63 61 73 65 20 72 2e 4f 62 6a 65 63 74 45 78 70 72 65 73 73 69 6f 6e 3a 72 65 74 75 72 6e 20 67 3d 5b 5d 2c 70 28 61 2e 70 72 6f 70 65 72 74 69 65 73 2c 0a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 63 6f 6d 70 75 74 65 64 3f 67 2e 70 75 73 68 28 7b 6b 65 79 3a 66 2e 72 65 63 75 72 73 65 28 61 2e 6b 65 79 29 2c 63 6f 6d 70 75 74 65 64 3a 21 30 2c 76 61 6c 75 65 3a 66 2e 72 65 63 75 72 73 65 28 61 2e 76 61 6c 75 65 29 7d 29 3a 67 2e 70 75 73 68 28 7b 6b 65 79 3a 61 2e 6b 65 79 2e 74 79 70 65 3d 3d 3d 72 2e 49 64 65 6e 74 69 66 69 65 72 3f 61 2e 6b 65 79 2e 6e 61 6d 65 3a 22 22 2b 61 2e 6b 65 79 2e 76 61 6c 75 65 2c 63 6f 6d 70 75 74 65 64 3a 21 31 2c 76 61 6c 75 65 3a 66 2e 72 65 63 75 72 73 65 28 61 2e 76 61 6c 75 65 29 7d 29 7d 29 2c 66 Data Ascii: f}:f};case r.ObjectExpression:return g=[],p(a.properties,function(a){a.computed?g.push({key:f.recurse(a.key),computed:!0,value:f.recurse(a.value)}):g.push({key:a.key.type===r.Identifier?a.key.name:""+a.key.value,computed:!1,value:f.recurse(a.value)})}),f
2024-09-28 23:44:09 UTC	16384	IN	Data Raw: 6a 65 63 74 3d 22 24 73 63 6f 70 65 20 24 65 78 63 65 70 74 69 6f 6e 48 61 6e 64 6c 65 72 20 24 61 74 74 72 73 20 24 65 6c 65 6d 65 6e 74 20 24 70 61 72 73 65 20 24 61 6e 69 6d 61 74 65 20 24 74 69 6d 65 6f 75 74 20 24 71 20 24 69 6e 74 65 72 70 6f 6c 61 74 65 22 2e 73 70 6c 69 74 28 22 20 22 29 3b 0a 51 62 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 24 24 69 6e 69 74 47 65 74 74 65 72 53 65 74 74 65 72 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 24 6f 70 74 69 6f 6e 73 2e 67 65 74 4f 70 74 69 6f 6e 28 22 67 65 74 74 65 72 53 65 74 74 65 72 22 29 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 24 24 70 61 72 73 65 28 74 68 69 73 2e 24 24 61 74 74 72 2e 6e 67 4d 6f 64 65 6c 2b 22 28 29 22 29 2c 62 3d 74 68 69 73 2e 24 24 70 61 72 73 65 28 74 68 69 73 2e Data Ascii: ject="$scope $exceptionHandler $attrs $element $parse $animate $timeout $q $interpolate".split(" ");Qb.prototype={$$initGetterSetters:function(){if(this.$options.getOption("getterSetter")){var a=this.$$parse(this.$$attr.ngModel+"()"),b=this.$$parse(this.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	49742	185.112.144.235	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:44:09 UTC	402	OUT	GET /dnkdl/assets/core_form.js HTTP/1.1 Host: svfs.is Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
2024-09-28 23:44:09 UTC	264	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 28 Sep 2024 23:44:09 GMT Content-Type: application/javascript Content-Length: 2307 Connection: close Last-Modified: Thu, 06 Jul 2023 21:10:36 GMT ETag: "64a72dcc-903" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-28 23:44:09 UTC	2307	IN	Data Raw: 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 0a 2f 2f 20 20 20 20 20 24 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 6f 61 64 65 72 5f 5f 20 77 61 69 74 65 72 5f 5f 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 3e 5c 0a 2f 2f 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 6f 61 64 65 72 2d 62 6f 78 22 3e 5c 0a 2f 2f 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 63 6c 61 73 73 3d 22 77 61 69 74 65 72 5f 68 32 22 3e 50 6c 65 61 73 65 20 77 61 69 74 2e 2e 2e 3c 2f 68 32 3e 5c 0a 2f 2f 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 6f 61 64 65 72 2d 69 6d 61 67 65 73 2d 62 6f 78 22 3e 5c 0a 2f 2f 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: $(document).ready(function() {// $('<div class="loader__ waiter__" style="display:none">\// <div class="loader-box">\// <h2 class="waiter_h2">Please wait...</h2>\// <div class="loader-images-box">\//

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	49743	185.112.144.235	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:44:09 UTC	399	OUT	GET /dnkdl/img/dhl-logo.svg HTTP/1.1 Host: svfs.is Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
2024-09-28 23:44:09 UTC	255	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 28 Sep 2024 23:44:09 GMT Content-Type: image/svg+xml Content-Length: 1603 Connection: close Last-Modified: Tue, 24 May 2022 02:35:28 GMT ETag: "628c4470-643" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-28 23:44:09 UTC	1603	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 32 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 45 62 65 6e 65 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Ebene_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	49746	185.112.144.235	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:44:09 UTC	402	OUT	GET /dnkdl/img/youtube-new.svg HTTP/1.1 Host: svfs.is Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
2024-09-28 23:44:09 UTC	255	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 28 Sep 2024 23:44:09 GMT Content-Type: image/svg+xml Content-Length: 1412 Connection: close Last-Modified: Tue, 24 May 2022 02:35:28 GMT ETag: "628c4470-584" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-28 23:44:09 UTC	1412	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 34 32 70 78 22 20 68 65 69 67 68 74 3d 22 34 32 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 32 20 34 32 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 35 34 2e 31 20 28 37 36 34 39 30 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 61 70 70 2e 63 6f 6d 20 2d 2d 3e 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="42px" height="42px" viewBox="0 0 42 42" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 54.1 (76490) - https://sketchapp.com -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	49748	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:44:09 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-28 23:44:09 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=147683 Date: Sat, 28 Sep 2024 23:44:09 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-28 23:44:09 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	49749	185.112.144.235	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:44:09 UTC	632	OUT	GET /dnkdl/img/favicon.ico HTTP/1.1 Host: svfs.is Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://svfs.is/dnkdl/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
2024-09-28 23:44:10 UTC	266	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 28 Sep 2024 23:44:10 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 1150 Connection: close Last-Modified: Tue, 24 May 2022 02:40:14 GMT ETag: "628c458e-47e" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-28 23:44:10 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 12 0b 00 00 12 0b 00 00 00 00 00 00 00 00 00 00 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 Data Ascii: h(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	49751	185.112.144.235	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:44:10 UTC	403	OUT	GET /dnkdl/img/facebook-new.svg HTTP/1.1 Host: svfs.is Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
2024-09-28 23:44:10 UTC	255	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 28 Sep 2024 23:44:10 GMT Content-Type: image/svg+xml Content-Length: 1406 Connection: close Last-Modified: Tue, 24 May 2022 02:35:28 GMT ETag: "628c4470-57e" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-28 23:44:10 UTC	1406	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 34 32 70 78 22 20 68 65 69 67 68 74 3d 22 34 32 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 32 20 34 32 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 35 34 2e 31 20 28 37 36 34 39 30 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 61 70 70 2e 63 6f 6d 20 2d 2d 3e 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="42px" height="42px" viewBox="0 0 42 42" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 54.1 (76490) - https://sketchapp.com -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	49750	185.112.144.235	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:44:10 UTC	403	OUT	GET /dnkdl/img/linkedIn-new.svg HTTP/1.1 Host: svfs.is Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
2024-09-28 23:44:10 UTC	255	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 28 Sep 2024 23:44:10 GMT Content-Type: image/svg+xml Content-Length: 1647 Connection: close Last-Modified: Tue, 24 May 2022 02:35:28 GMT ETag: "628c4470-66f" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-28 23:44:10 UTC	1647	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 34 32 70 78 22 20 68 65 69 67 68 74 3d 22 34 32 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 32 20 34 32 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 35 34 2e 31 20 28 37 36 34 39 30 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 61 70 70 2e 63 6f 6d 20 2d 2d 3e 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="42px" height="42px" viewBox="0 0 42 42" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 54.1 (76490) - https://sketchapp.com -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	49752	185.112.144.235	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:44:10 UTC	404	OUT	GET /dnkdl/img/instagram-new.svg HTTP/1.1 Host: svfs.is Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
2024-09-28 23:44:10 UTC	256	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 28 Sep 2024 23:44:10 GMT Content-Type: image/svg+xml Content-Length: 4508 Connection: close Last-Modified: Tue, 24 May 2022 02:35:28 GMT ETag: "628c4470-119c" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-28 23:44:10 UTC	4508	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 34 32 70 78 22 20 68 65 69 67 68 74 3d 22 34 32 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 32 20 34 32 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 35 34 2e 31 20 28 37 36 34 39 30 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 61 70 70 2e 63 6f 6d 20 2d 2d 3e 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="42px" height="42px" viewBox="0 0 42 42" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 54.1 (76490) - https://sketchapp.com -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	49753	185.112.144.235	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:44:10 UTC	411	OUT	GET /dnkdl/img/7f0d3a9b32ad319a9dd1.svg HTTP/1.1 Host: svfs.is Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
2024-09-28 23:44:10 UTC	255	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 28 Sep 2024 23:44:10 GMT Content-Type: image/svg+xml Content-Length: 1693 Connection: close Last-Modified: Tue, 24 May 2022 03:54:08 GMT ETag: "628c56e0-69d" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-28 23:44:10 UTC	1693	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 20 31 32 22 20 73 74 79 6c 65 3d 22 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 65 77 20 30 20 30 20 31 32 20 31 32 22 20 78 6d 6c 3a 73 70 61 63 65 3d 22 70 72 65 73 65 72 76 65 22 3e 3c 70 61 74 68 20 64 3d 22 4d 35 20 31 30 2e 36 63 2d 2e 31 20 30 2d 2e 31 20 30 20 30 20 30 2d 2e 34 2d 31 2e 32 2d 2e 37 2d 32 2e 34 2d 31 2d 33 2e 35 4c 33 2e 39 20 37 63 2d 2e 33 20 30 2d 2e 36 2e 31 2d 2e 38 2e 31 2d 2e 36 2e 32 2d 31 2e 32 2e 35 2d 31 2e 37 2e 39 2d 2e 36 2e 35 2d 2e 39 20 31 2e 32 2d 31 2e 32 20 32 2d 2e 31 2e 36 2d 2e 32 20 31 2e 33 2d 2e 32 20 31 2e 39 20 30 20 2e 31 20 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 12 12" style="enable-background:new 0 0 12 12" xml:space="preserve"><path d="M5 10.6c-.1 0-.1 0 0 0-.4-1.2-.7-2.4-1-3.5L3.9 7c-.3 0-.6.1-.8.1-.6.2-1.2.5-1.7.9-.6.5-.9 1.2-1.2 2-.1.6-.2 1.3-.2 1.9 0 .1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.6	49759	185.112.144.235	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:44:10 UTC	398	OUT	GET /dnkdl/img/favicon.ico HTTP/1.1 Host: svfs.is Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=49kd0dqsegurgd3e5qbpvsnkaf
2024-09-28 23:44:11 UTC	266	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 28 Sep 2024 23:44:11 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 1150 Connection: close Last-Modified: Tue, 24 May 2022 02:40:14 GMT ETag: "628c458e-47e" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-28 23:44:11 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 12 0b 00 00 12 0b 00 00 00 00 00 00 00 00 00 00 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 Data Ascii: h(

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.6	49760	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:44:12 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 41 44 39 33 59 6f 64 2b 4a 30 71 31 37 75 31 7a 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 64 37 38 64 38 34 31 35 65 63 30 36 31 63 30 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: AD93Yod+J0q17u1z.1Context: 4d78d8415ec061c0
2024-09-28 23:44:12 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-28 23:44:12 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 41 44 39 33 59 6f 64 2b 4a 30 71 31 37 75 31 7a 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 64 37 38 64 38 34 31 35 65 63 30 36 31 63 30 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 66 63 61 32 56 37 69 4a 54 53 6c 50 67 47 5a 36 6b 53 49 47 69 6c 37 78 78 7a 56 51 75 4e 6f 44 73 78 44 62 2f 6f 36 34 42 56 63 2b 6d 4f 6f 4e 58 33 4e 6e 47 51 4f 6c 5a 59 58 72 4f 69 52 6b 78 44 73 45 34 65 48 54 5a 34 69 39 47 38 71 64 39 31 36 34 6e 55 52 66 6f 44 38 70 74 31 51 67 43 6c 78 46 39 71 6d 46 74 78 4c 4f 47 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: AD93Yod+J0q17u1z.2Context: 4d78d8415ec061c0<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAfca2V7iJTSlPgGZ6kSIGil7xxzVQuNoDsxDb/o64BVc+mOoNX3NnGQOlZYXrOiRkxDsE4eHTZ4i9G8qd9164nURfoD8pt1QgClxF9qmFtxLOG
2024-09-28 23:44:12 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 41 44 39 33 59 6f 64 2b 4a 30 71 31 37 75 31 7a 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 64 37 38 64 38 34 31 35 65 63 30 36 31 63 30 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: AD93Yod+J0q17u1z.3Context: 4d78d8415ec061c0<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-28 23:44:13 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-28 23:44:13 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 41 4a 4f 43 6e 53 2f 70 34 30 4b 6d 44 77 41 64 74 30 63 32 4a 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: AJOCnS/p40KmDwAdt0c2Jw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.6	49761	4.245.163.56	443

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:44:14 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=78dSHgUMl3K4rbg&MD=yeNl4vB5 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-09-28 23:44:14 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 92962478-9eb1-4713-aeeb-28968ca63bc1 MS-RequestId: eede8960-fb37-4237-b310-9c88fc4f7329 MS-CV: uWtNoFWiqEao+AIX.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sat, 28 Sep 2024 23:44:14 GMT Connection: close Content-Length: 24490
2024-09-28 23:44:14 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-09-28 23:44:14 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.6	49764	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:44:31 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 2b 77 72 49 43 69 48 37 44 30 61 49 30 57 4c 43 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 36 36 65 61 34 35 37 31 31 35 37 35 63 36 30 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: +wrICiH7D0aI0WLC.1Context: a66ea45711575c60
2024-09-28 23:44:31 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-28 23:44:31 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 2b 77 72 49 43 69 48 37 44 30 61 49 30 57 4c 43 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 36 36 65 61 34 35 37 31 31 35 37 35 63 36 30 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 66 63 61 32 56 37 69 4a 54 53 6c 50 67 47 5a 36 6b 53 49 47 69 6c 37 78 78 7a 56 51 75 4e 6f 44 73 78 44 62 2f 6f 36 34 42 56 63 2b 6d 4f 6f 4e 58 33 4e 6e 47 51 4f 6c 5a 59 58 72 4f 69 52 6b 78 44 73 45 34 65 48 54 5a 34 69 39 47 38 71 64 39 31 36 34 6e 55 52 66 6f 44 38 70 74 31 51 67 43 6c 78 46 39 71 6d 46 74 78 4c 4f 47 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: +wrICiH7D0aI0WLC.2Context: a66ea45711575c60<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAfca2V7iJTSlPgGZ6kSIGil7xxzVQuNoDsxDb/o64BVc+mOoNX3NnGQOlZYXrOiRkxDsE4eHTZ4i9G8qd9164nURfoD8pt1QgClxF9qmFtxLOG
2024-09-28 23:44:31 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 2b 77 72 49 43 69 48 37 44 30 61 49 30 57 4c 43 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 36 36 65 61 34 35 37 31 31 35 37 35 63 36 30 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: +wrICiH7D0aI0WLC.3Context: a66ea45711575c60<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-28 23:44:31 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-28 23:44:31 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 45 61 53 56 39 69 41 78 6c 6b 2b 6f 79 49 6e 66 73 4c 32 42 6b 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: EaSV9iAxlk+oyInfsL2Bkg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.6	49765	4.175.87.197	443

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:44:51 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=78dSHgUMl3K4rbg&MD=yeNl4vB5 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-09-28 23:44:52 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 6e7412b5-e113-41d2-9d00-8ec4600cd49e MS-RequestId: 715c7036-d16e-4991-b2f8-6098b12e3838 MS-CV: z/VEXkU8M06X3ar6.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sat, 28 Sep 2024 23:44:51 GMT Connection: close Content-Length: 30005
2024-09-28 23:44:52 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-09-28 23:44:52 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.6	49766	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:44:57 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 43 6a 78 4d 6b 36 4a 56 62 55 47 65 36 55 49 5a 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 63 61 39 38 62 31 33 64 31 32 33 31 32 38 63 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: CjxMk6JVbUGe6UIZ.1Context: eca98b13d123128c
2024-09-28 23:44:57 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-28 23:44:57 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 43 6a 78 4d 6b 36 4a 56 62 55 47 65 36 55 49 5a 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 63 61 39 38 62 31 33 64 31 32 33 31 32 38 63 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 66 63 61 32 56 37 69 4a 54 53 6c 50 67 47 5a 36 6b 53 49 47 69 6c 37 78 78 7a 56 51 75 4e 6f 44 73 78 44 62 2f 6f 36 34 42 56 63 2b 6d 4f 6f 4e 58 33 4e 6e 47 51 4f 6c 5a 59 58 72 4f 69 52 6b 78 44 73 45 34 65 48 54 5a 34 69 39 47 38 71 64 39 31 36 34 6e 55 52 66 6f 44 38 70 74 31 51 67 43 6c 78 46 39 71 6d 46 74 78 4c 4f 47 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: CjxMk6JVbUGe6UIZ.2Context: eca98b13d123128c<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAfca2V7iJTSlPgGZ6kSIGil7xxzVQuNoDsxDb/o64BVc+mOoNX3NnGQOlZYXrOiRkxDsE4eHTZ4i9G8qd9164nURfoD8pt1QgClxF9qmFtxLOG
2024-09-28 23:44:57 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 43 6a 78 4d 6b 36 4a 56 62 55 47 65 36 55 49 5a 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 63 61 39 38 62 31 33 64 31 32 33 31 32 38 63 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: CjxMk6JVbUGe6UIZ.3Context: eca98b13d123128c<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-28 23:44:57 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-28 23:44:57 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 4e 77 6c 53 6d 5a 71 34 52 45 69 5a 47 65 61 73 41 34 54 78 2f 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: NwlSmZq4REiZGeasA4Tx/w.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.6	49769	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:45:27 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 73 6e 78 39 30 39 66 70 74 45 79 65 4f 34 77 7a 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 65 63 66 32 39 34 32 39 39 34 39 32 62 62 39 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: snx909fptEyeO4wz.1Context: decf294299492bb9
2024-09-28 23:45:27 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-28 23:45:27 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 73 6e 78 39 30 39 66 70 74 45 79 65 4f 34 77 7a 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 65 63 66 32 39 34 32 39 39 34 39 32 62 62 39 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 66 63 61 32 56 37 69 4a 54 53 6c 50 67 47 5a 36 6b 53 49 47 69 6c 37 78 78 7a 56 51 75 4e 6f 44 73 78 44 62 2f 6f 36 34 42 56 63 2b 6d 4f 6f 4e 58 33 4e 6e 47 51 4f 6c 5a 59 58 72 4f 69 52 6b 78 44 73 45 34 65 48 54 5a 34 69 39 47 38 71 64 39 31 36 34 6e 55 52 66 6f 44 38 70 74 31 51 67 43 6c 78 46 39 71 6d 46 74 78 4c 4f 47 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: snx909fptEyeO4wz.2Context: decf294299492bb9<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAfca2V7iJTSlPgGZ6kSIGil7xxzVQuNoDsxDb/o64BVc+mOoNX3NnGQOlZYXrOiRkxDsE4eHTZ4i9G8qd9164nURfoD8pt1QgClxF9qmFtxLOG
2024-09-28 23:45:27 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 73 6e 78 39 30 39 66 70 74 45 79 65 4f 34 77 7a 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 65 63 66 32 39 34 32 39 39 34 39 32 62 62 39 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: snx909fptEyeO4wz.3Context: decf294299492bb9<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-28 23:45:27 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-28 23:45:27 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 71 57 44 79 50 73 62 72 35 45 4b 4d 35 38 49 57 32 68 6a 52 34 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: qWDyPsbr5EKM58IW2hjR4Q.0Payload parsing failed.

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 3088, Parent PID: 5636

General

Target ID:	0
Start time:	19:43:56
Start date:	28/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 4784, Parent PID: 3088

General

Target ID:	2
Start time:	19:43:58
Start date:	28/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2240 --field-trial-handle=2164,i,3080895685432291650,9581872052856105846,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 1936, Parent PID: 5636

General

Target ID:	3
Start time:	19:44:01
Start date:	28/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://svfs.is/TMPS/"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://svfs.is/TMPS/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 48

Chrome Cache Entry: 49

Chrome Cache Entry: 50

Chrome Cache Entry: 51

Chrome Cache Entry: 52

Chrome Cache Entry: 53

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Windows Analysis Report
https://svfs.is/TMPS/